{"id":891,"name":"tar","ecosystem":"npm","repository_url":"https://github.com/isaacs/node-tar","issues_count":16013,"created_at":"2025-06-06T15:01:38.578Z","updated_at":"2025-06-06T15:01:38.578Z","purl":"pkg:npm/tar","metadata":{"id":2430871,"name":"tar","ecosystem":"npm","description":"tar for node","homepage":"https://github.com/isaacs/node-tar#readme","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/isaacs/node-tar","keywords_array":[],"namespace":null,"versions_count":129,"first_release_published_at":"2011-11-20T07:11:18.109Z","latest_release_published_at":"2024-07-26T04:33:46.030Z","latest_release_number":"7.4.3","last_synced_at":"2025-06-06T01:01:17.836Z","created_at":"2022-04-10T01:41:02.596Z","updated_at":"2025-06-06T01:01:17.836Z","registry_url":"https://www.npmjs.com/package/tar","install_command":"npm install tar","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"v3-legacy":"3.2.3","v5-legacy":"5.0.11","v4-legacy":"4.4.19","latest":"7.4.3"}},"repo_metadata":{"id":1420877,"uuid":"1534331","full_name":"isaacs/node-tar","owner":"isaacs","description":"tar for node","archived":false,"fork":false,"pushed_at":"2024-08-14T16:04:55.000Z","size":10002,"stargazers_count":842,"open_issues_count":13,"forks_count":184,"subscribers_count":38,"default_branch":"main","last_synced_at":"2024-10-29T21:02:05.340Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"ebayopensource/turmeric-runtime","license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/isaacs.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":["isaacs"]}},"created_at":"2011-03-27T22:17:23.000Z","updated_at":"2024-10-17T10:30:09.000Z","dependencies_parsed_at":"2024-02-12T19:55:13.413Z","dependency_job_id":"8fb678c5-1359-49b1-b4f1-6e98963a1e30","html_url":"https://github.com/isaacs/node-tar","commit_stats":{"total_commits":675,"total_committers":38,"mean_commits":"17.763157894736842","dds":0.1333333333333333,"last_synced_commit":"75d3081ccf91853e13b7e0e28a077347b5a1fe3e"},"previous_names":["npm/node-tar"],"tags_count":121,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/isaacs","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":222132619,"owners_count":16936615,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"isaacs","name":"isaacs","uuid":"9287","kind":"user","description":"npm inventor, founder npm, Inc.\r\nFormer Node BDFL.\r\nAll opinions are my own. Literally all of them. I own them all.","email":"","website":"http://blog.izs.me","location":"Oakland CA","twitter":null,"company":"vlt.sh","icon_url":"https://avatars.githubusercontent.com/u/9287?u=55c7d6ddb9f37d0ad9785c313b50d737d58bf79b\u0026v=4","repositories_count":464,"last_synced_at":"2024-05-20T14:46:38.194Z","metadata":{"has_sponsors_listing":true,"funding":{"github":["isaacs"]}},"html_url":"https://github.com/isaacs","funding_links":["https://github.com/sponsors/isaacs"],"total_stars":36530,"followers":14685,"following":4,"created_at":"2022-11-02T16:19:00.493Z","updated_at":"2024-05-20T14:46:52.353Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/isaacs","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/isaacs/repositories"},"tags":[{"name":"v7.1.0","sha":"ce612d0aa818f93a133a5f76e14fe6eef2abb12f","kind":"tag","published_at":"2024-05-04T02:06:39.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v7.1.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v7.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v7.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v7.1.0/manifests"},{"name":"v7.0.1","sha":"d99fce38ebf5175cce4c6623c53f4b17d6d31157","kind":"tag","published_at":"2024-04-14T21:45:09.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v7.0.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v7.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v7.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v7.0.1/manifests"},{"name":"v7.0.0","sha":"b0fbdea4631f9f65f15786fb5333695a9164a536","kind":"tag","published_at":"2024-04-10T20:07:08.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v7.0.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v7.0.0/manifests"},{"name":"v6.2.1","sha":"bef7b1e4ffab822681fea2a9b22187192ed14717","kind":"tag","published_at":"2024-03-21T21:17:13.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.2.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.2.1/manifests"},{"name":"v6.2.0","sha":"5bc9d404e88c39870e0fbb55655a53de6fbf0a04","kind":"tag","published_at":"2023-09-05T05:33:21.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.2.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.2.0/manifests"},{"name":"v6.1.15","sha":"3302cf7330052982ad7d7e9f85e823fa1bb945a4","kind":"tag","published_at":"2023-05-17T05:38:25.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.15","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.15","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.15/manifests"},{"name":"v6.1.14","sha":"4aaffc862f4e991f7965ecf6527072c4423ecb49","kind":"tag","published_at":"2023-05-02T22:45:51.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.14","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.14","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.14/manifests"},{"name":"v6.1.13","sha":"a044a87c6c7fb3ace4ea9bf903c63f0f15965398","kind":"commit","published_at":"2022-12-07T20:32:30.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.13","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.13","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.13/manifests"},{"name":"v6.1.12","sha":"001eafbfe77b10aa41c06081d7d3c9a3a7913240","kind":"commit","published_at":"2022-11-01T16:33:33.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.12","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.12","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.12/manifests"},{"name":"v6.1.11","sha":"e573aeea19d4d650908b7f6bf0a1ad8dce9f1736","kind":"tag","published_at":"2021-08-26T16:16:04.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.11","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.11","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.11/manifests"},{"name":"v4.4.19","sha":"9a6faa017ca90538840f3ae2ccdb4550ac3f4dcf","kind":"tag","published_at":"2021-08-19T02:36:43.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.19","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.19","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.19","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.19/manifests"},{"name":"v5.0.11","sha":"c01354990a450c5903919efeaa9e332976e074a3","kind":"tag","published_at":"2021-08-19T02:36:14.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v5.0.11","html_url":"https://github.com/isaacs/node-tar/releases/tag/v5.0.11","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.11/manifests"},{"name":"v6.1.10","sha":"188baddc1d0e6ef5140c7a788f03fc2a6c3df2ea","kind":"tag","published_at":"2021-08-19T02:35:48.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.10","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.10","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.10/manifests"},{"name":"v4.4.18","sha":"3e35515c09da615ac268254bed85fe43ee71e2f0","kind":"tag","published_at":"2021-08-19T02:27:56.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.18","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.18","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.18","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.18/manifests"},{"name":"v5.0.10","sha":"df64c4d5d80292e1e043f590de34da237a2ea12c","kind":"tag","published_at":"2021-08-19T02:25:42.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v5.0.10","html_url":"https://github.com/isaacs/node-tar/releases/tag/v5.0.10","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.10/manifests"},{"name":"v6.1.9","sha":"4f1f4a21fca64f3089da0e83ceea775c66b55052","kind":"tag","published_at":"2021-08-19T02:16:07.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.9","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.9/manifests"},{"name":"v5.0.9","sha":"173800ddb104f5c74f241da0967b5992af9d45d7","kind":"tag","published_at":"2021-08-11T19:25:02.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v5.0.9","html_url":"https://github.com/isaacs/node-tar/releases/tag/v5.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.9/manifests"},{"name":"v4.4.17","sha":"9bf70a8cf725c3af5fe2270f1e5d2e06d1559b93","kind":"tag","published_at":"2021-08-11T19:24:37.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.17","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.17","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.17","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.17/manifests"},{"name":"v6.1.8","sha":"6a9c51da31a2c9b67d266d8ce7119e1e2c0d1e5d","kind":"tag","published_at":"2021-08-11T19:23:38.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.8","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.8/manifests"},{"name":"v4.4.16","sha":"fd6accba697070560f301604b8f5f7e2995a2a8b","kind":"tag","published_at":"2021-08-09T23:17:01.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.16","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.16","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.16","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.16/manifests"},{"name":"v5.0.8","sha":"8d2a3168021d12c3a48dbe74b4add954269d16a5","kind":"tag","published_at":"2021-08-09T23:15:27.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v5.0.8","html_url":"https://github.com/isaacs/node-tar/releases/tag/v5.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.8/manifests"},{"name":"v6.1.7","sha":"d61628cb40381d89f119431a16a4aab2fbecb056","kind":"tag","published_at":"2021-08-09T23:15:02.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.7","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.7/manifests"},{"name":"v6.1.6","sha":"9bc1729939eec1c822b528385b1cc513b9888835","kind":"tag","published_at":"2021-08-04T07:23:33.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.6","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.6/manifests"},{"name":"v6.1.5","sha":"bd4691c90478f41b2649a97048199e34927dc046","kind":"tag","published_at":"2021-08-04T01:06:22.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.5","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.5/manifests"},{"name":"v6.1.4","sha":"bf693837b3dcfeb76878b212310302dc5dc3d3dc","kind":"tag","published_at":"2021-08-03T21:37:04.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.4","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.4/manifests"},{"name":"v6.1.3","sha":"0b78386c53b00dce422742e19de94f2a4d9389f3","kind":"tag","published_at":"2021-08-02T17:20:09.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.3","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.3/manifests"},{"name":"v3.2.3","sha":"0532554701454050693bad82fe0470637715b400","kind":"tag","published_at":"2021-07-26T23:22:42.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.2.3","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.2.3/manifests"},{"name":"v4.4.15","sha":"843c897e6844f70a34bb115df6c8a9b60112aaf5","kind":"tag","published_at":"2021-07-26T23:22:32.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.15","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.15","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.15/manifests"},{"name":"v5.0.7","sha":"b10856c79362289c483b6bc9c8ced6bd04c2d1b1","kind":"tag","published_at":"2021-07-26T23:22:03.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v5.0.7","html_url":"https://github.com/isaacs/node-tar/releases/tag/v5.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.7/manifests"},{"name":"v6.1.2","sha":"3f7b20097e0daba10441507becbf5b87c6b83b8b","kind":"tag","published_at":"2021-07-26T23:11:13.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.2","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.2/manifests"},{"name":"v6.1.1","sha":"1e33534e1e96ca6385b3a4749876aea2cda61cea","kind":"tag","published_at":"2021-07-23T22:50:40.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.1/manifests"},{"name":"v3.2.2","sha":"9c393bb04023e58e3445127ab770ed7b0e9e6135","kind":"tag","published_at":"2021-07-23T22:46:49.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.2.2","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.2.2/manifests"},{"name":"v4.4.14","sha":"df3aa4d10253a886be82519acb901b446ca3feeb","kind":"tag","published_at":"2021-07-23T22:45:27.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.14","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.14","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.14/manifests"},{"name":"v5.0.6","sha":"fea868401c2860f4c84e17ff070d2317a6f8d349","kind":"tag","published_at":"2021-07-23T22:44:32.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v5.0.6","html_url":"https://github.com/isaacs/node-tar/releases/tag/v5.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.6/manifests"},{"name":"v6.1.0","sha":"259e6494b73936a68dd2b279ad16e2286bdb9344","kind":"tag","published_at":"2021-01-07T19:22:09.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.1.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.1.0/manifests"},{"name":"v6.0.5","sha":"7028aeb3f5bb843bf80af8f5af09c47c3d97503f","kind":"tag","published_at":"2020-08-14T22:43:50.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.0.5","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.0.5/manifests"},{"name":"v6.0.4","sha":"e8fcd639697e07e6ff27d72ceaf542443c5f5434","kind":"tag","published_at":"2020-08-14T22:33:57.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.0.4","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.0.4/manifests"},{"name":"v6.0.3","sha":"f5e6cf6d930b32af698f3b10346fb9c60b1058fd","kind":"tag","published_at":"2020-08-14T22:32:43.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.0.3","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.0.3/manifests"},{"name":"v6.0.2","sha":"0a55ace9898e8456799a0b4a8448fde670d79fa8","kind":"tag","published_at":"2020-04-27T21:02:49.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.0.2","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.0.2/manifests"},{"name":"v6.0.1","sha":"97a74cde1ee7c3d55ee296ed063630e071e38b57","kind":"tag","published_at":"2020-01-29T04:37:28.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.0.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.0.1/manifests"},{"name":"v6.0.0","sha":"a069020b2af38f3fddc57e49a870c27beb363fa0","kind":"tag","published_at":"2020-01-28T01:46:16.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v6.0.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v6.0.0/manifests"},{"name":"v5.0.5","sha":"114efef625f3fe82f7afec838b50982867619130","kind":"tag","published_at":"2019-10-05T06:54:56.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v5.0.5","html_url":"https://github.com/isaacs/node-tar/releases/tag/v5.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.5/manifests"},{"name":"v5.0.4","sha":"58668c6490e840e59b8d45d62299e6ba14ec2d00","kind":"tag","published_at":"2019-10-05T02:07:34.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v5.0.4","html_url":"https://github.com/isaacs/node-tar/releases/tag/v5.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.4/manifests"},{"name":"v5.0.3","sha":"16d07b240b1ee4bdaadf1501a2bd63ca1ca53d47","kind":"tag","published_at":"2019-10-05T02:05:43.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v5.0.3","html_url":"https://github.com/isaacs/node-tar/releases/tag/v5.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.3/manifests"},{"name":"v5.0.2","sha":"a2f8899feb46830cf71e4876eb88ab56d288d61e","kind":"tag","published_at":"2019-09-30T21:07:14.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v5.0.2","html_url":"https://github.com/isaacs/node-tar/releases/tag/v5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.2/manifests"},{"name":"v5.0.1","sha":"14dc6f48af4c5476d7613761adc7100c2f8d2a2d","kind":"tag","published_at":"2019-09-26T00:42:14.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v5.0.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.1/manifests"},{"name":"v5.0.0","sha":"7bc7c20521154f26529b9ef8ae74c62a7fea0433","kind":"tag","published_at":"2019-09-25T06:00:05.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v5.0.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v5.0.0/manifests"},{"name":"v4.4.13","sha":"65edb39114ad5956c06f8d7893365e942042ede1","kind":"tag","published_at":"2019-09-25T04:56:29.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.13","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.13","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.13/manifests"},{"name":"v4.4.12","sha":"dbd6f52ba9cdfbce2a28d8cd28a016bc3435946a","kind":"tag","published_at":"2019-09-24T16:24:14.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.12","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.12","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.12/manifests"},{"name":"v4.4.11","sha":"9232b3d7da934c142e3d0ab97ef35ec0ba3917fc","kind":"tag","published_at":"2019-09-17T17:43:04.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.11","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.11","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.11/manifests"},{"name":"v4.4.10","sha":"84ab44d8201e04139f3635685ce7ea2c2e20710a","kind":"tag","published_at":"2019-06-02T22:16:35.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.10","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.10","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.10/manifests"},{"name":"v4.4.9","sha":"8f85cab6b71483397fabac1b2aaa2276e3e37a11","kind":"tag","published_at":"2019-06-01T04:48:14.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.9","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.9/manifests"},{"name":"v2.2.2","sha":"523c5c7fef48b10811fccd12b42803c61b6aead8","kind":"tag","published_at":"2019-05-15T00:43:37.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v2.2.2","html_url":"https://github.com/isaacs/node-tar/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v2.2.2/manifests"},{"name":"v4.4.8","sha":"074c89b1e639485468706af3c141a68ef8826728","kind":"tag","published_at":"2018-11-08T23:53:16.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.8","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.8/manifests"},{"name":"v4.4.7","sha":"88d6071c248042e29258f6f72c1b71721904cf22","kind":"tag","published_at":"2018-11-05T21:13:45.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.7","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.7/manifests"},{"name":"v4.4.6","sha":"8a34ca860e79f4c6d6b38ebd9ec44d95ed8d6df4","kind":"tag","published_at":"2018-08-02T00:15:14.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.6","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.6/manifests"},{"name":"v4.4.5","sha":"b40376a9894bf12265e7a0f76a28dabf823bd771","kind":"tag","published_at":"2018-08-02T00:13:51.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.5","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.5/manifests"},{"name":"v4.4.4","sha":"362bbc528c15e2d8e454699f8c3964f6b8bed560","kind":"tag","published_at":"2018-05-25T00:53:01.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.4","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.4/manifests"},{"name":"v4.4.3","sha":"2131b0f6a2f672fe17a0ca4bd2f61c831184a7b3","kind":"tag","published_at":"2018-05-23T23:54:58.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.3","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.3/manifests"},{"name":"v4.4.2","sha":"a5f77792dd158603b93cb00e230ef957bc3ce55b","kind":"tag","published_at":"2018-04-30T18:57:09.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.2","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.2/manifests"},{"name":"v4.4.1","sha":"58a8d437abccd6dc884541b8bf6554901ec592cc","kind":"tag","published_at":"2018-03-20T16:59:49.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.1/manifests"},{"name":"v4.4.0","sha":"c1f5de5a621bf03474e546aa5efad5ea7b2cd2ac","kind":"tag","published_at":"2018-02-20T19:36:28.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.4.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.4.0/manifests"},{"name":"v4.3.3","sha":"9e92533a0724585c695e775d38fc1f64baf8f6ab","kind":"tag","published_at":"2018-02-06T20:16:43.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.3.3","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.3.3/manifests"},{"name":"v4.3.2","sha":"5e3dff6e238c6ba74274dda018e9413d504a9249","kind":"tag","published_at":"2018-02-01T16:36:15.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.3.2","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.3.2/manifests"},{"name":"v4.3.1","sha":"5afba25d097657916abd57cf580657cff818c8c6","kind":"tag","published_at":"2018-02-01T04:22:11.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.3.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.3.1/manifests"},{"name":"v4.3.0","sha":"51b6e83761dedcce661404819571779cefd35d04","kind":"tag","published_at":"2018-01-18T01:16:32.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.3.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.3.0/manifests"},{"name":"v4.2.0","sha":"13bd921a8b4022d518d663fecab63d15c043c8a0","kind":"tag","published_at":"2017-12-21T04:26:47.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.2.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.2.0/manifests"},{"name":"v4.1.2","sha":"a4d8246ab22bd6c00d4d31c67363ac2e4244daa5","kind":"tag","published_at":"2017-12-21T03:16:20.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.1.2","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.1.2/manifests"},{"name":"v4.1.1","sha":"1bfffcfd65df2b4254d85e34f4121b53d11fa4a5","kind":"tag","published_at":"2017-11-28T19:39:59.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.1.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"61908e63aec9eb437b15d34a81e7baa956d13a7e","kind":"tag","published_at":"2017-11-28T01:07:11.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.1.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.1.0/manifests"},{"name":"v4.0.2","sha":"ec864233e717a978553be174dc352f9ca411a8e4","kind":"tag","published_at":"2017-10-18T19:29:45.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.0.2","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.0.2/manifests"},{"name":"v3.2.1","sha":"1dea1df937846192453b8dfd02982c02c556c1d1","kind":"tag","published_at":"2017-08-21T01:12:27.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.2.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.2.1/manifests"},{"name":"v4.0.1","sha":"89a14aa4d681ee4745d5038517c031154c2c8546","kind":"tag","published_at":"2017-08-21T01:10:18.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.0.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"90ac1e8464b819131f8dbe69374e879f16998253","kind":"tag","published_at":"2017-08-18T22:24:27.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v4.0.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v4.0.0/manifests"},{"name":"v3.2.0","sha":"6a86ec4963d081e8362081a3a431f5b75a91984a","kind":"tag","published_at":"2017-08-17T00:55:43.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.2.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.2.0/manifests"},{"name":"v3.1.15","sha":"ef33670d429409558879ce616d4347fe4ae0a52d","kind":"tag","published_at":"2017-08-17T00:50:30.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.15","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.15","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.15/manifests"},{"name":"v3.1.14","sha":"0594dcf3c8c2d79bf71261f7cd1e462a7af65cf8","kind":"tag","published_at":"2017-08-16T23:29:35.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.14","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.14","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.14/manifests"},{"name":"v3.1.13","sha":"2176335779cc0c7fcd28c778eeaf0b1d8963c254","kind":"tag","published_at":"2017-08-16T00:31:59.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.13","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.13","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.13/manifests"},{"name":"v3.1.12","sha":"587a459ce7c72cfd50239188a1d7f6d095c44cb0","kind":"tag","published_at":"2017-08-15T23:43:24.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.12","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.12","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.12/manifests"},{"name":"v3.1.11","sha":"474686b31782ae009ac0761b74ec07f91084aefc","kind":"tag","published_at":"2017-08-15T16:27:06.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.11","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.11","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.11/manifests"},{"name":"v3.1.10","sha":"9780dc159e080607f24a6bee81277db2ceb0892c","kind":"tag","published_at":"2017-08-15T07:40:36.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.10","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.10","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.10/manifests"},{"name":"v3.1.9","sha":"747bd164449a20689cba13001922375ffde4223b","kind":"tag","published_at":"2017-08-02T22:17:18.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.9","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.9/manifests"},{"name":"v3.1.8","sha":"4b5fe3469c0280bacfa740a757da88c1ffabcd26","kind":"tag","published_at":"2017-08-01T22:44:05.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.8","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.8/manifests"},{"name":"v3.1.7","sha":"18af12da7b639d6ffc3845f910f5e27a5d681ab0","kind":"tag","published_at":"2017-07-26T18:03:01.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.7","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.7/manifests"},{"name":"v3.1.6","sha":"edc4a0c4644c1378b9aa9dbc259d69d77ab733a4","kind":"tag","published_at":"2017-07-25T23:03:14.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.6","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.6/manifests"},{"name":"v3.1.5","sha":"fce07b25fae8b42d0f8e594f7d4d52e7077a2596","kind":"tag","published_at":"2017-06-03T00:16:51.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.5","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.5/manifests"},{"name":"v3.1.4","sha":"0baac1f2274db222d7615c98bec9317947ee69e8","kind":"tag","published_at":"2017-06-02T23:41:08.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.4","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.4/manifests"},{"name":"v3.1.3","sha":"a570fadc432ad91f3627ca09cc69c7e38ae39bed","kind":"tag","published_at":"2017-05-16T00:55:26.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.3","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.3/manifests"},{"name":"v3.1.2","sha":"0525639c2d512791752ae9c4bf0f23eccd7e6833","kind":"tag","published_at":"2017-05-12T22:54:27.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.2","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.2/manifests"},{"name":"v3.1.1","sha":"51f0d2ea7162c2e9f02c0e6845b82cfa94c71cbd","kind":"tag","published_at":"2017-05-12T17:02:05.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.1/manifests"},{"name":"v3.1.0","sha":"2ba07e56f7f712cd90c20db9a7d1a99b1fc7aeed","kind":"tag","published_at":"2017-05-12T16:43:05.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.1.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.1.0/manifests"},{"name":"v3.0.1","sha":"c3251a725663d014ed84f3a820d5e9e3167996b7","kind":"tag","published_at":"2017-05-10T17:49:02.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.0.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"1098f4b91d2f51aab7301279fdfa104b12eb45e8","kind":"tag","published_at":"2017-05-10T01:24:19.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v3.0.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v3.0.0/manifests"},{"name":"v2.2.1","sha":"52237e39d2eb68d22a32d9a98f1d762189fe6a3d","kind":"tag","published_at":"2015-09-10T01:49:28.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v2.2.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v2.2.1/manifests"},{"name":"v2.1.1","sha":"2cbe6c805fc5d87ce099183ed13c43faba962224","kind":"tag","published_at":"2015-05-08T00:37:15.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v2.1.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"b4c03a8e922fa522a3ddadaf2764bc1ab38d484e","kind":"tag","published_at":"2015-04-17T07:02:39.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v2.1.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v2.1.0/manifests"},{"name":"v2.0.1","sha":"ce405d0b96f0fe186dd4cc68d666fabb0c59818d","kind":"tag","published_at":"2015-04-09T00:56:06.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v2.0.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"9bde260b9ebe6808837a85bedf9c6f7bb04e004f","kind":"tag","published_at":"2015-03-27T01:44:50.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v2.0.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v2.0.0/manifests"},{"name":"v1.0.3","sha":"f4151128c585da236c6b1e278b762ecaedc20c15","kind":"tag","published_at":"2014-11-28T01:48:54.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v1.0.3","html_url":"https://github.com/isaacs/node-tar/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"f31811bfa4ed1d1a89c380c65595ac92474dd84d","kind":"tag","published_at":"2014-10-28T06:48:51.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v1.0.2","html_url":"https://github.com/isaacs/node-tar/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"476bf6f5882b9c33d1cbf66f175d0f25e3981044","kind":"tag","published_at":"2014-08-19T19:27:39.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v1.0.1","html_url":"https://github.com/isaacs/node-tar/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"49979621a55c73c3f668d8e01830eba1ea9df862","kind":"tag","published_at":"2014-07-31T22:29:34.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v1.0.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v1.0.0/manifests"},{"name":"v0.1.20","sha":"b5931010907cd1ef5a186bc947954391050cbcce","kind":"tag","published_at":"2014-06-24T20:51:59.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v0.1.20","html_url":"https://github.com/isaacs/node-tar/releases/tag/v0.1.20","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.20","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.20/manifests"},{"name":"v0.1.19","sha":"52ac1201ac60bff17c044b69917f301001c9eee1","kind":"tag","published_at":"2013-12-09T17:26:14.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v0.1.19","html_url":"https://github.com/isaacs/node-tar/releases/tag/v0.1.19","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.19","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.19/manifests"},{"name":"v0.1.18","sha":"c23e4a43acf25617527b712fa65393851980dba4","kind":"tag","published_at":"2013-07-24T03:34:07.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v0.1.18","html_url":"https://github.com/isaacs/node-tar/releases/tag/v0.1.18","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.18","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.18/manifests"},{"name":"v0.1.17","sha":"338ed35bf0fab98e842a2e0d51e3e912f7412a8c","kind":"tag","published_at":"2013-03-20T06:22:29.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v0.1.17","html_url":"https://github.com/isaacs/node-tar/releases/tag/v0.1.17","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.17","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.17/manifests"},{"name":"v0.1.16","sha":"4e211d31adc10f8e7d7b88fae8b366b5da4da46b","kind":"tag","published_at":"2013-02-02T19:20:29.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v0.1.16","html_url":"https://github.com/isaacs/node-tar/releases/tag/v0.1.16","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.16","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.16/manifests"},{"name":"v0.1.15","sha":"d796ad8dcffe66adcbf7949f9cd77921d271d207","kind":"tag","published_at":"2013-02-02T02:40:18.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v0.1.15","html_url":"https://github.com/isaacs/node-tar/releases/tag/v0.1.15","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.15/manifests"},{"name":"v0.1.14","sha":"94659884d8800ca827ad5b9163f6cf24f97c9f75","kind":"tag","published_at":"2012-12-03T04:10:26.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/v0.1.14","html_url":"https://github.com/isaacs/node-tar/releases/tag/v0.1.14","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/v0.1.14/manifests"},{"name":"0.1.13","sha":"30b902b79977d3608503834d075b505d295c95f0","kind":"tag","published_at":"2012-03-13T00:07:25.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/0.1.13","html_url":"https://github.com/isaacs/node-tar/releases/tag/0.1.13","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.13/manifests"},{"name":"0.1.12","sha":"a34291974c45a4f710bfac8e815163a8398d2298","kind":"tag","published_at":"2012-01-13T18:05:27.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/0.1.12","html_url":"https://github.com/isaacs/node-tar/releases/tag/0.1.12","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.12/manifests"},{"name":"0.1.11","sha":"f467930a3728a89e6420e8bc4ff54e0e3bb4b0a0","kind":"tag","published_at":"2012-01-06T01:47:19.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/0.1.11","html_url":"https://github.com/isaacs/node-tar/releases/tag/0.1.11","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.11/manifests"},{"name":"0.1.10","sha":"66b867137c5dfaf367aaf638de8c57565f2a96b0","kind":"tag","published_at":"2012-01-05T00:46:33.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/0.1.10","html_url":"https://github.com/isaacs/node-tar/releases/tag/0.1.10","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.10/manifests"},{"name":"0.1.9","sha":"d1d737f505d7c1e714c43cc3aadcff2312906353","kind":"tag","published_at":"2011-12-09T02:01:17.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/0.1.9","html_url":"https://github.com/isaacs/node-tar/releases/tag/0.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.9/manifests"},{"name":"0.1.8","sha":"d956ecc741940358b885a5009cb8b57733356610","kind":"tag","published_at":"2011-12-03T02:29:11.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/0.1.8","html_url":"https://github.com/isaacs/node-tar/releases/tag/0.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.8/manifests"},{"name":"0.1.7","sha":"8dc9d3aebc3acb01e4b92f62a642e2dc3c413aa1","kind":"tag","published_at":"2011-12-01T03:02:59.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/0.1.7","html_url":"https://github.com/isaacs/node-tar/releases/tag/0.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.7/manifests"},{"name":"0.1.6","sha":"b1cb2ac674887a89cf09cd133fc07aeb09972da8","kind":"tag","published_at":"2011-11-30T20:49:59.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/0.1.6","html_url":"https://github.com/isaacs/node-tar/releases/tag/0.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.6/manifests"},{"name":"0.1.5","sha":"2071bc5f340cd9bf959aa2864e5381fcaf7da813","kind":"tag","published_at":"2011-11-30T18:54:25.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/0.1.5","html_url":"https://github.com/isaacs/node-tar/releases/tag/0.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.5/manifests"},{"name":"0.1.3","sha":"8608877618d82780ab0a2228b1006e68540d2527","kind":"tag","published_at":"2011-11-23T00:21:23.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/0.1.3","html_url":"https://github.com/isaacs/node-tar/releases/tag/0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.3/manifests"},{"name":"0.1.2","sha":"d31e8864daf6014586772e7814935ac77b1bda26","kind":"tag","published_at":"2011-11-21T22:31:07.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/0.1.2","html_url":"https://github.com/isaacs/node-tar/releases/tag/0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.2/manifests"},{"name":"0.1.0","sha":"0920eafe2fba40ab7fffabfb8b596bb65ca83ce4","kind":"tag","published_at":"2011-11-20T07:48:49.000Z","download_url":"https://codeload.github.com/isaacs/node-tar/tar.gz/0.1.0","html_url":"https://github.com/isaacs/node-tar/releases/tag/0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/isaacs%2Fnode-tar/tags/0.1.0/manifests"}]},"repo_metadata_updated_at":"2024-10-29T23:42:12.975Z","dependent_packages_count":5040,"downloads":170210137,"downloads_period":"last-month","dependent_repos_count":3179743,"rankings":{"downloads":0.012594720512199904,"dependent_repos_count":0.005092647859280831,"dependent_packages_count":0.017577849062678993,"stargazers_count":2.531757861569784,"forks_count":2.469003297626388,"docker_downloads_count":0.0017796887680282473,"average":0.83963434423306},"purl":"pkg:npm/tar","advisories":[{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI2MjgtbWhtaC1xamh3","url":"https://github.com/advisories/GHSA-r628-mhmh-qjhw","title":"Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning","description":"### Impact\n\nArbitrary File Creation, Arbitrary File Overwrite, Arbitrary Code Execution\n\n`node-tar` aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks.  Additionally, in order to prevent unnecessary `stat` calls to determine whether a given path is a directory, paths are cached when directories are created.\n\nThis logic was insufficient when extracting tar files that contained both a directory and a symlink with the same name as the directory. This order of operations resulted in the directory being created and added to the `node-tar` directory cache. When a directory is present in the directory cache, subsequent calls to mkdir for that directory are skipped. However, this is also where `node-tar` checks for symlinks occur.\n\nBy first creating a directory, and then replacing that directory with a symlink, it was thus possible to bypass `node-tar` symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite.\n\nThis issue was addressed in releases 3.2.3, 4.4.15, 5.0.7 and 6.1.2.\n\n### Patches\n\n3.2.3 || 4.4.15 || 5.0.7 || 6.1.2\n\n### Workarounds\n\nUsers may work around this vulnerability without upgrading by creating a custom `filter` method which prevents the extraction of symbolic links.\n\n```js\nconst tar = require('tar')\n\ntar.x({\n  file: 'archive.tgz',\n  filter: (file, entry) =\u003e {\n    if (entry.type === 'SymbolicLink') {\n      return false\n    } else {\n      return true\n    }\n  }\n})\n```\n\nUsers are encouraged to upgrade to the latest patch versions, rather than attempt to sanitize tar input themselves.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-08-03T19:00:40.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/npm/node-tar/security/advisories/GHSA-r628-mhmh-qjhw","https://github.com/npm/node-tar/commit/9dbdeb6df8e9dbd96fa9e84341b9d74734be6c20","https://www.npmjs.com/advisories/1771","https://nvd.nist.gov/vuln/detail/CVE-2021-32803","https://www.npmjs.com/package/tar","https://www.oracle.com/security-alerts/cpuoct2021.html","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://github.com/isaacs/node-tar/commit/46fe35083e2676e31c4e0a81639dce6da7aaa356","https://github.com/isaacs/node-tar/commit/5987d9a41f6bfbf1ddab1098e1fdcf1a5618f571","https://github.com/isaacs/node-tar/commit/85d3a942b4064e4ff171f91696fced7975167349","https://github.com/isaacs/node-tar/commit/9dbdeb6df8e9dbd96fa9e84341b9d74734be6c20","https://github.com/advisories/GHSA-r628-mhmh-qjhw"],"source_kind":"github","identifiers":["GHSA-r628-mhmh-qjhw","CVE-2021-32803"],"repository_url":"https://github.com/npm/node-tar","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"3.2.3","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.3"},{"first_patched_version":"6.1.2","vulnerable_version_range":"\u003e= 6.0.0, \u003c 6.1.2"},{"first_patched_version":"5.0.7","vulnerable_version_range":"\u003e= 5.0.0, \u003c 5.0.7"},{"first_patched_version":"4.4.15","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.4.15"}],"ecosystem":"npm","package_name":"tar"}],"created_at":"2022-12-21T16:12:56.832Z","updated_at":"2024-01-26T20:00:13.000Z","epss_percentage":0.00208,"epss_percentile":0.43493},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo0NG0tcW02cC1ocDdt","url":"https://github.com/advisories/GHSA-j44m-qm6p-hp7m","title":"Arbitrary File Overwrite in tar","description":"Versions of `tar` prior to 4.4.2 for 4.x and 2.2.2 for 2.x are vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink will overwrite the system's file with the contents of the extracted file.\n\n\n## Recommendation\n\nFor tar 4.x, upgrade to version 4.4.2 or later.\nFor tar 2.x, upgrade to version 2.2.2 or later.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2019-05-01T18:37:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2018-20834","https://github.com/npm/node-tar/commit/b0c58433c22f5e7fe8b1c76373f27e3f81dcd4c8","https://hackerone.com/reports/344595","https://github.com/npm/node-tar/compare/58a8d43...a5f7779","https://github.com/npm/node-tar/commit/7ecef07da6a9e72cc0c4d0c9c6a8e85b6b52395d","https://access.redhat.com/errata/RHSA-2019:1821","https://github.com/npm/node-tar/commits/v2.2.2","https://github.com/advisories/GHSA-j44m-qm6p-hp7m"],"source_kind":"github","identifiers":["GHSA-j44m-qm6p-hp7m","CVE-2018-20834"],"repository_url":"https://github.com/npm/node-tar","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"4.4.2","vulnerable_version_range":"\u003e= 3.0.0, \u003c 4.4.2"},{"first_patched_version":"2.2.2","vulnerable_version_range":"\u003c 2.2.2"}],"ecosystem":"npm","package_name":"tar"}],"created_at":"2022-12-21T16:13:30.063Z","updated_at":"2025-04-30T01:10:16.566Z","epss_percentage":0.01192,"epss_percentile":0.77691},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU5NTUtOXdwci0zN2po","url":"https://github.com/advisories/GHSA-5955-9wpr-37jh","title":"Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization","description":"### Impact\n\nArbitrary File Creation, Arbitrary File Overwrite, Arbitrary Code Execution\n\nnode-tar aims to guarantee that any file whose location would be outside of the extraction target directory is not extracted. This is, in part, accomplished by sanitizing absolute paths of entries within the archive, skipping archive entries that contain `..` path portions, and resolving the sanitized paths against the extraction target directory.\n\nThis logic was insufficient on Windows systems when extracting tar files that contained a path that was not an absolute path, but specified a drive letter different from the extraction target, such as `C:some\\path`.  If the drive letter does not match the extraction target, for example `D:\\extraction\\dir`, then the result of `path.resolve(extractionDirectory, entryPath)` would resolve against the current working directory on the `C:` drive, rather than the extraction target directory.\n\nAdditionally, a `..` portion of the path could occur immediately after the drive letter, such as `C:../foo`, and was not properly sanitized by the logic that checked for `..` within the normalized and split portions of the path.\n\nThis only affects users of `node-tar` on Windows systems.\n\n### Patches\n\n4.4.18 || 5.0.10 || 6.1.9\n\n### Workarounds\n\nThere is no reasonable way to work around this issue without performing the same path normalization procedures that node-tar now does.\n\nUsers are encouraged to upgrade to the latest patched versions of node-tar, rather than attempt to sanitize paths themselves.\n\n### Fix\n\nThe fixed versions strip path roots from all paths prior to being resolved against the extraction target folder, even if such paths are not \"absolute\".\n\nAdditionally, a path starting with a drive letter and then two dots, like `c:../`, would bypass the check for `..` path portions.  This is checked properly in the patched versions.\n\nFinally, a defense in depth check is added, such that if the `entry.absolute` is outside of the extraction taret, and we are not in preservePaths:true mode, a warning is raised on that entry, and it is skipped.  Currently, it is believed that this check is redundant, but it did catch some oversights in development.\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-08-31T16:05:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/npm/node-tar/security/advisories/GHSA-5955-9wpr-37jh","https://www.npmjs.com/package/tar","https://nvd.nist.gov/vuln/detail/CVE-2021-37713","https://www.oracle.com/security-alerts/cpuoct2021.html","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://github.com/isaacs/node-tar/commit/52b09e309bcae0c741a7eb79a17ef36e7828b946","https://github.com/isaacs/node-tar/commit/82eac952f7c10765969ed464e549375854b26edc","https://github.com/isaacs/node-tar/commit/875a37e3ec031186fc6599f6807341f56c584598","https://github.com/advisories/GHSA-5955-9wpr-37jh"],"source_kind":"github","identifiers":["GHSA-5955-9wpr-37jh","CVE-2021-37713"],"repository_url":"https://github.com/npm/node-tar","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"6.1.9","vulnerable_version_range":"\u003e= 6.0.0, \u003c 6.1.9"},{"first_patched_version":"5.0.10","vulnerable_version_range":"\u003e= 5.0.0, \u003c 5.0.10"},{"first_patched_version":"4.4.18","vulnerable_version_range":"\u003c 4.4.18"}],"ecosystem":"npm","package_name":"tar"}],"created_at":"2022-12-21T16:12:48.222Z","updated_at":"2023-11-29T22:26:30.000Z","epss_percentage":0.00938,"epss_percentile":0.74902},{"uuid":"GSA_kwCzR0hTQS1mNXgzLTMyZzYteHEzNs4AA6O0","url":"https://github.com/advisories/GHSA-f5x3-32g6-xq36","title":"Denial of service while parsing a tar file due to lack of folders count validation","description":"## Description: \nDuring some analysis today on npm's `node-tar` package I came across the folder creation process, Basicly if you provide node-tar with a path like this `./a/b/c/foo.txt` it would create every folder and sub-folder here a, b and c until it reaches the last folder to create `foo.txt`, In-this case I noticed that there's no validation at all on the amount of folders being created, that said we're actually able to CPU and memory consume the system running node-tar and even crash the nodejs client within few seconds of running it using a path with too many sub-folders inside\n\n## Steps To Reproduce:\nYou can reproduce this issue by downloading the tar file I provided in the resources and using node-tar to extract it, you should get the same behavior as the video\n\n## Proof Of Concept:\nHere's a [video](https://hackerone-us-west-2-production-attachments.s3.us-west-2.amazonaws.com/3i7uojw8s52psar6pg8zkdo4h9io?response-content-disposition=attachment%3B%20filename%3D%22tar-dos-poc.webm%22%3B%20filename%2A%3DUTF-8%27%27tar-dos-poc.webm\u0026response-content-type=video%2Fwebm\u0026X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=ASIAQGK6FURQSWWGDXHA%2F20240312%2Fus-west-2%2Fs3%2Faws4_request\u0026X-Amz-Date=20240312T080103Z\u0026X-Amz-Expires=3600\u0026X-Amz-Security-Token=IQoJb3JpZ2luX2VjEDcaCXVzLXdlc3QtMiJHMEUCID3xYDc6emXVPOg8iVR5dVk0u3gguTPIDJ0OIE%2BKxj17AiEAi%2BGiay1gGMWhH%2F031fvMYnSsa8U7CnpZpxvFAYqNRwgqsQUIQBADGgwwMTM2MTkyNzQ4NDkiDAaj6OgUL3gg4hhLLCqOBUUrOgWSqaK%2FmxN6nKRvB4Who3LIyzswFKm9LV94GiSVFP3zXYA480voCmAHTg7eBL7%2BrYgV2RtXbhF4aCFMCN3qu7GeXkIdH7xwVMi9zXHkekviSKZ%2FsZtVVjn7RFqOCKhJl%2FCoiLQJuDuju%2FtfdTGZbEbGsPgKHoILYbRp81K51zeRL21okjsOehmypkZzq%2BoGrXIX0ynPOKujxw27uqdF4T%2BF9ynodq01vGgwgVBEjHojc4OKOfr1oW5b%2FtGVV59%2BOBVI1hqIKHRG0Ed4SWmp%2BLd1hazGuZPvp52szmegnOj5qr3ubppnKL242bX%2FuAnQKzKK0HpwolqXjsuEeFeM85lxhqHV%2B1BJqaqSHHDa0HUMLZistMRshRlntuchcFQCR6HBa2c8PSnhpVC31zMzvYMfKsI12h4HB6l%2FudrmNrvmH4LmNpi4dZFcio21DzKj%2FRjWmxjH7l8egDyG%2FIgPMY6Ls4IiN7aR1jijYTrBCgPUUHets3BFvqLzHtPFnG3B7%2FYRPnhCLu%2FgzvKN3F8l38KqeTNMHJaxkuhCvEjpFB2SJbi2QZqZZbLj3xASqXoogzbsyPp0Tzp0tH7EKDhPA7H6wwiZukXfFhhlYzP8on9fO2Ajz%2F%2BTDkDjbfWw4KNJ0cFeDsGrUspqQZb5TAKlUge7iOZEc2TZ5uagatSy9Mg08E4nImBSE5QUHDc7Daya1gyqrETMDZBBUHH2RFkGA9qMpEtNrtJ9G%2BPedz%2FpPY1hh9OCp9Pg1BrX97l3SfVzlAMRfNibhywq6qnE35rVnZi%2BEQ1UgBjs9jD%2FQrW49%2FaD0oUDojVeuFFryzRnQxDbKtYgonRcItTvLT5Y0xaK9P0u6H1197%2FMk3XxmjD9%2Fb%2BvBjqxAQWWkKiIxpC1oHEWK9Jt8UdJ39xszDBGpBqjB6Tvt5ePAXSyX8np%2FrBi%2BAPx06O0%2Ba7pU4NmH800EVXxxhgfj9nMw3CeoUIdxorVKtU2Mxw%2FLaAiPgxPS4rqkt65NF7eQYfegcSYDTm2Z%2BHPbz9HfCaVZ28Zqeko6sR%2F29ML4bguqVvHAM4mWPLNDXH33mjG%2BuzLi8e1BF7tNveg2X9G%2FRdcMkojwKYbu6xN3M6aX2alQg%3D%3D\u0026X-Amz-SignedHeaders=host\u0026X-Amz-Signature=1e8235d885f1d61529b7d6b23ea3a0780c300c91d86e925dd8310d5b661ddbe2) show-casing the exploit: \n\n## Impact\n\nDenial of service by crashing the nodejs client when attempting to parse a tar archive, make it run out of heap memory and consuming server CPU and memory resources\n\n## Report resources\n[payload.txt](https://hackerone-us-west-2-production-attachments.s3.us-west-2.amazonaws.com/1e83ayb5dd3350fvj3gst0mqixwk?response-content-disposition=attachment%3B%20filename%3D%22payload.txt%22%3B%20filename%2A%3DUTF-8%27%27payload.txt\u0026response-content-type=text%2Fplain\u0026X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=ASIAQGK6FURQSWWGDXHA%2F20240312%2Fus-west-2%2Fs3%2Faws4_request\u0026X-Amz-Date=20240312T080103Z\u0026X-Amz-Expires=3600\u0026X-Amz-Security-Token=IQoJb3JpZ2luX2VjEDcaCXVzLXdlc3QtMiJHMEUCID3xYDc6emXVPOg8iVR5dVk0u3gguTPIDJ0OIE%2BKxj17AiEAi%2BGiay1gGMWhH%2F031fvMYnSsa8U7CnpZpxvFAYqNRwgqsQUIQBADGgwwMTM2MTkyNzQ4NDkiDAaj6OgUL3gg4hhLLCqOBUUrOgWSqaK%2FmxN6nKRvB4Who3LIyzswFKm9LV94GiSVFP3zXYA480voCmAHTg7eBL7%2BrYgV2RtXbhF4aCFMCN3qu7GeXkIdH7xwVMi9zXHkekviSKZ%2FsZtVVjn7RFqOCKhJl%2FCoiLQJuDuju%2FtfdTGZbEbGsPgKHoILYbRp81K51zeRL21okjsOehmypkZzq%2BoGrXIX0ynPOKujxw27uqdF4T%2BF9ynodq01vGgwgVBEjHojc4OKOfr1oW5b%2FtGVV59%2BOBVI1hqIKHRG0Ed4SWmp%2BLd1hazGuZPvp52szmegnOj5qr3ubppnKL242bX%2FuAnQKzKK0HpwolqXjsuEeFeM85lxhqHV%2B1BJqaqSHHDa0HUMLZistMRshRlntuchcFQCR6HBa2c8PSnhpVC31zMzvYMfKsI12h4HB6l%2FudrmNrvmH4LmNpi4dZFcio21DzKj%2FRjWmxjH7l8egDyG%2FIgPMY6Ls4IiN7aR1jijYTrBCgPUUHets3BFvqLzHtPFnG3B7%2FYRPnhCLu%2FgzvKN3F8l38KqeTNMHJaxkuhCvEjpFB2SJbi2QZqZZbLj3xASqXoogzbsyPp0Tzp0tH7EKDhPA7H6wwiZukXfFhhlYzP8on9fO2Ajz%2F%2BTDkDjbfWw4KNJ0cFeDsGrUspqQZb5TAKlUge7iOZEc2TZ5uagatSy9Mg08E4nImBSE5QUHDc7Daya1gyqrETMDZBBUHH2RFkGA9qMpEtNrtJ9G%2BPedz%2FpPY1hh9OCp9Pg1BrX97l3SfVzlAMRfNibhywq6qnE35rVnZi%2BEQ1UgBjs9jD%2FQrW49%2FaD0oUDojVeuFFryzRnQxDbKtYgonRcItTvLT5Y0xaK9P0u6H1197%2FMk3XxmjD9%2Fb%2BvBjqxAQWWkKiIxpC1oHEWK9Jt8UdJ39xszDBGpBqjB6Tvt5ePAXSyX8np%2FrBi%2BAPx06O0%2Ba7pU4NmH800EVXxxhgfj9nMw3CeoUIdxorVKtU2Mxw%2FLaAiPgxPS4rqkt65NF7eQYfegcSYDTm2Z%2BHPbz9HfCaVZ28Zqeko6sR%2F29ML4bguqVvHAM4mWPLNDXH33mjG%2BuzLi8e1BF7tNveg2X9G%2FRdcMkojwKYbu6xN3M6aX2alQg%3D%3D\u0026X-Amz-SignedHeaders=host\u0026X-Amz-Signature=bad9fe731f05a63a950f99828125653a8c1254750fe0ca7be882e89ecdd449ae)\n[archeive.tar.gz](https://hackerone-us-west-2-production-attachments.s3.us-west-2.amazonaws.com/ymkuh4xnfdcf1soeyi7jc2x4yt2i?response-content-disposition=attachment%3B%20filename%3D%22archive.tar.gz%22%3B%20filename%2A%3DUTF-8%27%27archive.tar.gz\u0026response-content-type=application%2Fx-tar\u0026X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=ASIAQGK6FURQSWWGDXHA%2F20240312%2Fus-west-2%2Fs3%2Faws4_request\u0026X-Amz-Date=20240312T080103Z\u0026X-Amz-Expires=3600\u0026X-Amz-Security-Token=IQoJb3JpZ2luX2VjEDcaCXVzLXdlc3QtMiJHMEUCID3xYDc6emXVPOg8iVR5dVk0u3gguTPIDJ0OIE%2BKxj17AiEAi%2BGiay1gGMWhH%2F031fvMYnSsa8U7CnpZpxvFAYqNRwgqsQUIQBADGgwwMTM2MTkyNzQ4NDkiDAaj6OgUL3gg4hhLLCqOBUUrOgWSqaK%2FmxN6nKRvB4Who3LIyzswFKm9LV94GiSVFP3zXYA480voCmAHTg7eBL7%2BrYgV2RtXbhF4aCFMCN3qu7GeXkIdH7xwVMi9zXHkekviSKZ%2FsZtVVjn7RFqOCKhJl%2FCoiLQJuDuju%2FtfdTGZbEbGsPgKHoILYbRp81K51zeRL21okjsOehmypkZzq%2BoGrXIX0ynPOKujxw27uqdF4T%2BF9ynodq01vGgwgVBEjHojc4OKOfr1oW5b%2FtGVV59%2BOBVI1hqIKHRG0Ed4SWmp%2BLd1hazGuZPvp52szmegnOj5qr3ubppnKL242bX%2FuAnQKzKK0HpwolqXjsuEeFeM85lxhqHV%2B1BJqaqSHHDa0HUMLZistMRshRlntuchcFQCR6HBa2c8PSnhpVC31zMzvYMfKsI12h4HB6l%2FudrmNrvmH4LmNpi4dZFcio21DzKj%2FRjWmxjH7l8egDyG%2FIgPMY6Ls4IiN7aR1jijYTrBCgPUUHets3BFvqLzHtPFnG3B7%2FYRPnhCLu%2FgzvKN3F8l38KqeTNMHJaxkuhCvEjpFB2SJbi2QZqZZbLj3xASqXoogzbsyPp0Tzp0tH7EKDhPA7H6wwiZukXfFhhlYzP8on9fO2Ajz%2F%2BTDkDjbfWw4KNJ0cFeDsGrUspqQZb5TAKlUge7iOZEc2TZ5uagatSy9Mg08E4nImBSE5QUHDc7Daya1gyqrETMDZBBUHH2RFkGA9qMpEtNrtJ9G%2BPedz%2FpPY1hh9OCp9Pg1BrX97l3SfVzlAMRfNibhywq6qnE35rVnZi%2BEQ1UgBjs9jD%2FQrW49%2FaD0oUDojVeuFFryzRnQxDbKtYgonRcItTvLT5Y0xaK9P0u6H1197%2FMk3XxmjD9%2Fb%2BvBjqxAQWWkKiIxpC1oHEWK9Jt8UdJ39xszDBGpBqjB6Tvt5ePAXSyX8np%2FrBi%2BAPx06O0%2Ba7pU4NmH800EVXxxhgfj9nMw3CeoUIdxorVKtU2Mxw%2FLaAiPgxPS4rqkt65NF7eQYfegcSYDTm2Z%2BHPbz9HfCaVZ28Zqeko6sR%2F29ML4bguqVvHAM4mWPLNDXH33mjG%2BuzLi8e1BF7tNveg2X9G%2FRdcMkojwKYbu6xN3M6aX2alQg%3D%3D\u0026X-Amz-SignedHeaders=host\u0026X-Amz-Signature=5e2c0d4b4de40373ac0fe91908c2659141a6dd4ab850271cc26042a3885c82ea)\n\n## Note\nThis report was originally reported to GitHub bug bounty program, they asked me to report it to you a month ago","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-03-22T16:57:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36","https://nvd.nist.gov/vuln/detail/CVE-2024-28863","https://github.com/isaacs/node-tar/commit/fe8cd57da5686f8695415414bda49206a545f7f7","https://security.netapp.com/advisory/ntap-20240524-0005","https://github.com/advisories/GHSA-f5x3-32g6-xq36"],"source_kind":"github","identifiers":["GHSA-f5x3-32g6-xq36","CVE-2024-28863"],"repository_url":"https://github.com/isaacs/node-tar","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"6.2.1","vulnerable_version_range":"\u003c 6.2.1"}],"ecosystem":"npm","package_name":"tar"},{"versions":[{"first_patched_version":"6.2.1","vulnerable_version_range":"\u003c 6.2.1"}],"ecosystem":"npm","package_name":"node-tar"}],"created_at":"2024-03-22T17:04:53.360Z","updated_at":"2025-04-30T01:09:33.102Z","epss_percentage":0.00121,"epss_percentile":0.3245},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFxODktaHEzZi0zOTNw","url":"https://github.com/advisories/GHSA-qq89-hq3f-393p","title":"Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links","description":"### Impact\nArbitrary File Creation, Arbitrary File Overwrite, Arbitrary Code Execution\n\nnode-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary stat calls to determine whether a given path is a directory, paths are cached when directories are created.\n\nThis logic was insufficient when extracting tar files that contained two directories and a symlink with names containing unicode values that normalized to the same value. Additionally, on Windows systems, long path portions would resolve to the same file system entities as their 8.3 \"short path\" counterparts. A specially crafted tar archive could thus include directories with two forms of the path that resolve to the same file system entity, followed by a symbolic link with a name in the first form, lastly followed by a file using the second form. It led to bypassing node-tar symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite.\n\nThe v3 branch of `node-tar` has been deprecated and did not receive patches for these issues. If you are still using a v3 release we recommend you update to a more recent version of `node-tar`. If this is not possible, a workaround is available below.\n\n### Patches\n\n6.1.9 || 5.0.10 || 4.4.18\n\n### Workarounds\n\nUsers may work around this vulnerability without upgrading by creating a custom filter method which prevents the extraction of symbolic links.\n\n```js\nconst tar = require('tar')\n\ntar.x({\n  file: 'archive.tgz',\n  filter: (file, entry) =\u003e {\n    if (entry.type === 'SymbolicLink') {\n      return false\n    } else {\n      return true\n    }\n  }\n})\n```\n\nUsers are encouraged to upgrade to the latest patched versions, rather than attempt to sanitize tar input themselves.\n\n#### Fix\n\nThe problem is addressed in the following ways, when comparing paths in the directory cache and path reservation systems:\n\n1. The `String.normalize('NFKD')` method is used to first normalize all unicode to its maximally compatible and multi-code-point form.\n2. All slashes are normalized to `/` on Windows systems (on posix systems, `\\` is a valid filename character, and thus left intact).\n3. When a symbolic link is encountered on Windows systems, the entire directory cache is cleared.  Collisions related to use of 8.3 short names to replace directories with other (non-symlink) types of entries may make archives fail to extract properly, but will not result in arbitrary file writes.\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-08-31T16:05:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/npm/node-tar/security/advisories/GHSA-qq89-hq3f-393p","https://www.npmjs.com/package/tar","https://nvd.nist.gov/vuln/detail/CVE-2021-37712","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.debian.org/security/2021/dsa-5008","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://lists.debian.org/debian-lts-announce/2022/12/msg00023.html","https://github.com/isaacs/node-tar/commit/1739408d3122af897caefd09662bce2ea477533b","https://github.com/isaacs/node-tar/commit/b6162c7fafe797f856564ef37f4b82747f051455","https://github.com/isaacs/node-tar/commit/bb93ba243746f705092905da1955ac3b0509ba1e","https://github.com/isaacs/node-tar/commit/2f1bca027286c23e110b8dfc7efc10756fa3db5a","https://github.com/isaacs/node-tar/commit/3aaf19b2501bbddb145d92b3322c80dcaed3c35f","https://github.com/isaacs/node-tar/commit/d56f790bda9fea807dd80c5083f24771dbdd6eb1","https://github.com/advisories/GHSA-qq89-hq3f-393p"],"source_kind":"github","identifiers":["GHSA-qq89-hq3f-393p","CVE-2021-37712"],"repository_url":"https://github.com/npm/node-tar","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"4.4.18","vulnerable_version_range":"\u003e= 3.0.0, \u003c 4.4.18"},{"first_patched_version":"6.1.9","vulnerable_version_range":"\u003e= 6.0.0, \u003c 6.1.9"},{"first_patched_version":"5.0.10","vulnerable_version_range":"\u003e= 5.0.0, \u003c 5.0.10"}],"ecosystem":"npm","package_name":"tar"}],"created_at":"2022-12-21T16:12:48.232Z","updated_at":"2024-02-07T18:41:26.000Z","epss_percentage":0.00022,"epss_percentile":0.04239},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNqZnEtZzQ1OC03cW05","url":"https://github.com/advisories/GHSA-3jfq-g458-7qm9","title":"Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization","description":"### Impact\n\nArbitrary File Creation, Arbitrary File Overwrite, Arbitrary Code Execution\n\n`node-tar` aims to prevent extraction of absolute file paths by turning absolute paths into relative paths when the `preservePaths` flag is not set to `true`. This is achieved by stripping the absolute path root from any absolute file paths contained in a tar file. For example `/home/user/.bashrc` would turn into `home/user/.bashrc`. \n\nThis logic was insufficient when file paths contained repeated path roots such as `////home/user/.bashrc`. `node-tar` would only strip a single path root from such paths. When given an absolute file path with repeating path roots, the resulting path (e.g. `///home/user/.bashrc`) would still resolve to an absolute path, thus allowing arbitrary file creation and overwrite. \n\n### Patches\n\n3.2.2 || 4.4.14 || 5.0.6 || 6.1.1\n\nNOTE: an adjacent issue [CVE-2021-32803](https://github.com/npm/node-tar/security/advisories/GHSA-r628-mhmh-qjhw) affects this release level. Please ensure you update to the latest patch levels that address CVE-2021-32803 as well if this adjacent issue affects your `node-tar` use case.\n\n### Workarounds\n\nUsers may work around this vulnerability without upgrading by creating a custom `onentry` method which sanitizes the `entry.path` or a `filter` method which removes entries with absolute paths.\n\n```js\nconst path = require('path')\nconst tar = require('tar')\n\ntar.x({\n  file: 'archive.tgz',\n  // either add this function...\n  onentry: (entry) =\u003e {\n    if (path.isAbsolute(entry.path)) {\n      entry.path = sanitizeAbsolutePathSomehow(entry.path)\n      entry.absolute = path.resolve(entry.path)\n    }\n  },\n\n  // or this one\n  filter: (file, entry) =\u003e {\n    if (path.isAbsolute(entry.path)) {\n      return false\n    } else {\n      return true\n    }\n  }\n})\n```\n\nUsers are encouraged to upgrade to the latest patch versions, rather than attempt to sanitize tar input themselves.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-08-03T19:06:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/npm/node-tar/security/advisories/GHSA-3jfq-g458-7qm9","https://github.com/npm/node-tar/commit/1f036ca23f64a547bdd6c79c1a44bc62e8115da4","https://www.npmjs.com/advisories/1770","https://www.npmjs.com/package/tar","https://nvd.nist.gov/vuln/detail/CVE-2021-32804","https://www.oracle.com/security-alerts/cpuoct2021.html","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://github.com/advisories/GHSA-3jfq-g458-7qm9"],"source_kind":"github","identifiers":["GHSA-3jfq-g458-7qm9","CVE-2021-32804"],"repository_url":"https://github.com/npm/node-tar","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"6.1.1","vulnerable_version_range":"\u003e= 6.0.0, \u003c 6.1.1"},{"first_patched_version":"5.0.6","vulnerable_version_range":"\u003e= 5.0.0, \u003c 5.0.6"},{"first_patched_version":"4.4.14","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.4.14"},{"first_patched_version":"3.2.2","vulnerable_version_range":"\u003c 3.2.2"}],"ecosystem":"npm","package_name":"tar"}],"created_at":"2022-12-21T16:12:56.824Z","updated_at":"2023-02-01T05:05:55.000Z","epss_percentage":0.87712,"epss_percentile":0.9944},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdmanItM2ptbS00Zzl2","url":"https://github.com/advisories/GHSA-gfjr-3jmm-4g9v","title":"Symlink Arbitrary File Overwrite in tar","description":"Versions of `tar` prior to 2.0.0 are affected by an arbitrary file write vulnerability. The vulnerability occurs because `tar` does not verify that extracted symbolic links to not resolve to targets outside of the extraction root directory.\n\n\n\n## Recommendation\n\nUpdate to version 2.0.0 or later","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2017-10-24T18:33:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2015-8860","https://github.com/advisories/GHSA-gfjr-3jmm-4g9v","https://github.com/npm/npm/releases/tag/v2.7.5","https://www.npmjs.com/advisories/57","http://www.openwall.com/lists/oss-security/2016/04/20/11"],"source_kind":"github","identifiers":["GHSA-gfjr-3jmm-4g9v","CVE-2015-8860"],"repository_url":"https://github.com/npm/npm","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"2.0.0","vulnerable_version_range":"\u003c 2.0.0"}],"ecosystem":"npm","package_name":"tar"}],"created_at":"2022-12-21T16:13:39.262Z","updated_at":"2023-01-09T05:02:54.000Z","epss_percentage":0.00365,"epss_percentile":0.57511},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlyMnctMzk0di01M3Fj","url":"https://github.com/advisories/GHSA-9r2w-394v-53qc","title":"Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links","description":"### Impact\n\nArbitrary File Creation, Arbitrary File Overwrite, Arbitrary Code Execution\n\n`node-tar` aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary stat calls to determine whether a given path is a directory, paths are cached when directories are created.\n\nThis logic was insufficient when extracting tar files that contained both a directory and a symlink with the same name as the directory, where the symlink and directory names in the archive entry used backslashes as a path separator on posix systems. The cache checking logic used both `\\` and `/` characters as path separators, however `\\` is a valid filename character on posix systems.\n\nBy first creating a directory, and then replacing that directory with a symlink, it was thus possible to bypass node-tar symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite.\n\nAdditionally, a similar confusion could arise on case-insensitive filesystems.  If a tar archive contained a directory at `FOO`, followed by a symbolic link named `foo`, then on case-insensitive file systems, the creation of the symbolic link would remove the directory from the filesystem, but _not_ from the internal directory cache, as it would not be treated as a cache hit.  A subsequent file entry within the `FOO` directory would then be placed in the target of the symbolic link, thinking that the directory had already been created. \n\nThese issues were addressed in releases 4.4.16, 5.0.8 and 6.1.7.\n\nThe v3 branch of `node-tar` has been deprecated and did not receive patches for these issues. If you are still using a v3 release we recommend you update to a more recent version of `node-tar`. If this is not possible, a workaround is available below.\n\n### Patches\n\n4.4.16 || 5.0.8 || 6.1.7\n\n### Workarounds\n\nUsers may work around this vulnerability without upgrading by creating a custom filter method which prevents the extraction of symbolic links.\n\n```js\nconst tar = require('tar')\n\ntar.x({\n  file: 'archive.tgz',\n  filter: (file, entry) =\u003e {\n    if (entry.type === 'SymbolicLink') {\n      return false\n    } else {\n      return true\n    }\n  }\n})\n```\n\nUsers are encouraged to upgrade to the latest patched versions, rather than attempt to sanitize tar input themselves.\n\n### Fix\n\nThe problem is addressed in the following ways:\n\n1. All paths are normalized to use `/` as a path separator, replacing `\\` with `/` on Windows systems, and leaving `\\` intact in the path on posix systems.  This is performed in depth, at every level of the program where paths are consumed.\n2. Directory cache pruning is performed case-insensitively.  This _may_ result in undue cache misses on case-sensitive file systems, but the performance impact is negligible.\n\n#### Caveat\n\nNote that this means that the `entry` objects exposed in various parts of tar's API will now always use `/` as a path separator, even on Windows systems.  This is not expected to cause problems, as `/` is a valid path separator on Windows systems, but _may_ result in issues if `entry.path` is compared against a path string coming from some other API such as `fs.realpath()` or `path.resolve()`.\n\nUsers are encouraged to always normalize paths using a well-tested method such as `path.resolve()` before comparing paths to one another.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-08-31T16:05:27.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/npm/node-tar/security/advisories/GHSA-9r2w-394v-53qc","https://www.npmjs.com/package/tar","https://nvd.nist.gov/vuln/detail/CVE-2021-37701","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.debian.org/security/2021/dsa-5008","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://lists.debian.org/debian-lts-announce/2022/12/msg00023.html","https://github.com/advisories/GHSA-9r2w-394v-53qc"],"source_kind":"github","identifiers":["GHSA-9r2w-394v-53qc","CVE-2021-37701"],"repository_url":"https://github.com/npm/node-tar","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"4.4.16","vulnerable_version_range":"\u003e= 3.0.0, \u003c 4.4.16"},{"first_patched_version":"6.1.7","vulnerable_version_range":"\u003e= 6.0.0, \u003c 6.1.7"},{"first_patched_version":"5.0.8","vulnerable_version_range":"\u003e= 5.0.0, \u003c 5.0.8"}],"ecosystem":"npm","package_name":"tar"}],"created_at":"2022-12-21T16:12:48.243Z","updated_at":"2024-02-02T23:30:44.000Z","epss_percentage":0.00016,"epss_percentile":0.01649}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/tar","docker_dependents_count":67795,"docker_downloads_count":15768112213,"usage_url":"https://repos.ecosyste.ms/usage/npm/tar","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/tar/dependencies","status":null,"funding_links":["https://github.com/sponsors/isaacs"],"critical":true,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/tar/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/tar/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/tar/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/tar/related_packages","maintainers":[{"uuid":"isaacs","login":"isaacs","name":null,"email":"i@izs.me","url":null,"packages_count":488,"html_url":"https://www.npmjs.com/~isaacs","role":null,"created_at":"2024-04-20T07:10:11.832Z","updated_at":"2024-04-20T07:10:11.832Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/isaacs/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5006534,"maintainers_count":1012930,"namespaces_count":295512,"keywords_count":700181,"github":"npm","metadata":{"funded_packages_count":150239},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2025-06-06T05:58:05.971Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},"unique_repositories_count":11575,"unique_repositories_count_past_30_days":48,"recent_issues":[{"uuid":"4955288675","node_id":"PR_kwDOQ098fM71L5Op","number":145,"state":"open","title":"chore(deps): bump tar from 7.5.8 to 7.5.19 in /packages/cli","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":7,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-23T04:00:02.000Z","updated_at":"2026-07-23T04:00:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"tar","old_version":"7.5.8","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":"/packages/cli","ecosystem":"npm"},"body":"Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.8 to 7.5.19.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.8...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar\u0026package-manager=npm_and_yarn\u0026previous-version=7.5.8\u0026new-version=7.5.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Dustin4444/gemini-cli/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- Reviewable:start --\u003e\n- - -\nThis change is [\u003cimg src=\"https://reviewable.io/review_button.svg\" height=\"34\" align=\"absmiddle\" alt=\"Reviewable\"/\u003e](https://reviewable.io/reviews/Dustin4444/gemini-cli/145)\n\u003c!-- Reviewable:end --\u003e\n","html_url":"https://github.com/Dustin4444/gemini-cli/pull/145","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Dustin4444%2Fgemini-cli/issues/145","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/145/packages"},{"uuid":"4948531775","node_id":"PR_kwDOOHv4H87016d1","number":35,"state":"open","title":"Bump tar from 7.4.3 to 7.5.21","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":5,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-22T11:43:57.000Z","updated_at":"2026-07-22T11:44:12.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"tar","old_version":"7.4.3","new_version":"7.5.21","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps [tar](https://github.com/isaacs/node-tar) from 7.4.3 to 7.5.21.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/0cd9cc3c5814446d3c0cbea6a31d6c00c2c8a9d9\"\u003e\u003ccode\u003e0cd9cc3\u003c/code\u003e\u003c/a\u003e 7.5.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a\"\u003e\u003ccode\u003e631ae59\u003c/code\u003e\u003c/a\u003e list: prevent unbounded recursion\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/ebbb72094159d003f428dcd1cb28255d37ea4873\"\u003e\u003ccode\u003eebbb720\u003c/code\u003e\u003c/a\u003e 7.5.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2f271963a7fe5a5960aee5dd6adf9647a1e266fd\"\u003e\u003ccode\u003e2f27196\u003c/code\u003e\u003c/a\u003e fix: fully disable and dispose of unzip when aborting parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~isaacs\"\u003eisaacs\u003c/a\u003e, a new releaser for tar since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar\u0026package-manager=npm_and_yarn\u0026previous-version=7.4.3\u0026new-version=7.5.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Dustin4444/aria-practices/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- Reviewable:start --\u003e\n- - -\nThis change is [\u003cimg src=\"https://reviewable.io/review_button.svg\" height=\"34\" align=\"absmiddle\" alt=\"Reviewable\"/\u003e](https://reviewable.io/reviews/Dustin4444/aria-practices/35)\n\u003c!-- Reviewable:end --\u003e\n","html_url":"https://github.com/Dustin4444/aria-practices/pull/35","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Dustin4444%2Faria-practices/issues/35","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/35/packages"},{"uuid":"4944385468","node_id":"PR_kwDODUDwxc70olZ7","number":141,"state":"closed","title":"Bump tar from 7.5.20 to 7.5.21","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-07-22T01:03:49.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-22T01:02:43.000Z","updated_at":"2026-07-22T01:03:56.000Z","time_to_close":66,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"tar","old_version":"7.5.20","new_version":"7.5.21","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.20 to 7.5.21.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/0cd9cc3c5814446d3c0cbea6a31d6c00c2c8a9d9\"\u003e\u003ccode\u003e0cd9cc3\u003c/code\u003e\u003c/a\u003e 7.5.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a\"\u003e\u003ccode\u003e631ae59\u003c/code\u003e\u003c/a\u003e list: prevent unbounded recursion\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.20...v7.5.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar\u0026package-manager=npm_and_yarn\u0026previous-version=7.5.20\u0026new-version=7.5.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/lightspeedwp/lsx-login/pull/141","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/lightspeedwp%2Flsx-login/issues/141","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/141/packages"},{"uuid":"4935278477","node_id":"PR_kwDOMWbvD870KvTI","number":1465,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-21T04:04:37.000Z","updated_at":"2026-07-21T04:23:56.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":3,"packages":[{"name":"shell-quote","old_version":"1.8.4","new_version":"1.10.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"tar","old_version":"7.5.16","new_version":"7.5.20","repository_url":"https://github.com/isaacs/node-tar"},{"name":"webpack-dev-server","old_version":"5.2.5","new_version":"5.2.6","repository_url":"https://github.com/webpack/webpack-dev-server"}],"path":null,"ecosystem":"npm"},"body":"[//]: # (dependabot-start)\n⚠️  **Dependabot is rebasing this PR** ⚠️ \n\nRebasing might not happen immediately, so don't worry if this takes some time.\n\nNote: if you make any changes to this PR yourself, they will take precedence over the rebase.\n\n---\n\n[//]: # (dependabot-end)\n\nBumps the npm_and_yarn group with 3 updates in the / directory: [shell-quote](https://github.com/ljharb/shell-quote), [tar](https://github.com/isaacs/node-tar) and [webpack-dev-server](https://github.com/webpack/webpack-dev-server).\n\nUpdates `shell-quote` from 1.8.4 to 1.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0\"\u003ev1.10.0\u003c/a\u003e - 2026-07-10\u003c/h2\u003e\n\u003ch3\u003eMerged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add opt-in \u003ccode\u003esplitUnquoted\u003c/code\u003e option for shell field-splitting of unquoted expansions \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/pull/1\"\u003e\u003ccode\u003e[#1](https://github.com/ljharb/shell-quote/issues/1)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: match nested \u003ccode\u003e${...}\u003c/code\u003e braces so nested parameter expansion is consumed as one substitution \u003ca href=\"https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c\"\u003e\u003ccode\u003ec0842c8\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: pin single-quote literalness and unmatched-quote handling \u003ca href=\"https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62\"\u003e\u003ccode\u003ea0d03e3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[readme] remove the space in js code fences so evalmd evaluates them \u003ca href=\"https://github.com/ljharb/shell-quote/commit/2116fa36aeea77fe8d561b0db46b1f9b26b8cf1b\"\u003e\u003ccode\u003e2116fa3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003equote\u003c/code\u003e: pin conservative escaping of \u003ccode\u003e=\u003c/code\u003e, \u003ccode\u003e@\u003c/code\u003e, \u003ccode\u003e^\u003c/code\u003e, \u003ccode\u003e,\u003c/code\u003e, \u003ccode\u003e:\u003c/code\u003e, \u003ccode\u003e!\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/11\"\u003e#11\u003c/a\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e\"\u003e\u003ccode\u003e1c36f3f\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[readme] document that \u003ccode\u003equote\u003c/code\u003e outputs POSIX quoting, not \u003ccode\u003ecmd.exe\u003c/code\u003e/PowerShell \u003ca href=\"https://github.com/ljharb/shell-quote/commit/100e96e0ffadcca97d63dda15651c70b9f83507c\"\u003e\u003ccode\u003e100e96e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[readme] document \u003ccode\u003eparse\u003c/code\u003e's supported parameter-expansion subset \u003ca href=\"https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb\"\u003e\u003ccode\u003ee1c75cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: a backslash inside single quotes must not escape the closing quote \u003ca href=\"https://github.com/ljharb/shell-quote/commit/5d460a332b54b83153297fe7d1964330b28fa491\"\u003e\u003ccode\u003e5d460a3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[readme] fix stale example outputs \u003ca href=\"https://github.com/ljharb/shell-quote/commit/2de86f5d44f44d3ac9df36413d8a05f3534cdec6\"\u003e\u003ccode\u003e2de86f5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003equote\u003c/code\u003e: pin that a backslash with whitespace is not doubled in single quotes (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/14\"\u003e#14\u003c/a\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71\"\u003e\u003ccode\u003e190e236\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[readme] \u003ccode\u003equote\u003c/code\u003e: use output verbatim; do not re-quote it (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/11\"\u003e#11\u003c/a\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5\"\u003e\u003ccode\u003e1b36468\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003eparse\u003c/code\u003e: fix swapped \u003ccode\u003eSINGLE_QUOTE\u003c/code\u003e/\u003ccode\u003eDOUBLE_QUOTE\u003c/code\u003e variable names \u003ca href=\"https://github.com/ljharb/shell-quote/commit/801af5c935b27d6dcda63b3975d5e92a7b6f887f\"\u003e\u003ccode\u003e801af5c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[types] fix an error TS v6 ignores but v7 fails on \u003ca href=\"https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba\"\u003e\u003ccode\u003e59bbf8b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@arethetypeswrong/cli\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc\"\u003e\u003ccode\u003ea04d475\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@arethetypeswrong/ci\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d390f9a92b97a04b1f799298634e90dc581021e6\"\u003e\u003ccode\u003ed390f9a\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003equote\u003c/code\u003e: the tilde test escapes every \u003ccode\u003e~\u003c/code\u003e, not just a leading one (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/9\"\u003e#9\u003c/a\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c\"\u003e\u003ccode\u003e617d119\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.9.0\"\u003ev1.9.0\u003c/a\u003e - 2026-06-24\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] add types \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dca6e21a02df4cc1a83ed1b5baa4d82df134170a\"\u003e\u003ccode\u003edca6e21\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/9aa9e8f60991f8c4053a29e476795d891ff851ad\"\u003e\u003ccode\u003e9aa9e8f\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: finalize tokens in linear time (GHSA-395f-4hp3-45gv) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7ff5488599d01c323514f02f5efb74088dd134ec\"\u003e\u003ccode\u003e7ff5488\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] update workflows \u003ca href=\"https://github.com/ljharb/shell-quote/commit/75e849741ffaf2d3aa53ae0e18ef6bf9929ef478\"\u003e\u003ccode\u003e75e8497\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] Windows + node 4/6/7: pin eslint to 9 before install, since npm 2/3 cannot stage eslint 10\u003ccode\u003e@types/esrecurse\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3fb739de44b81c69431947d54fbfc18998dd6d72\"\u003e\u003ccode\u003e3fb739d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] retry \u003ccode\u003enpm install\u003c/code\u003e on Windows to survive npm 2/3 staging-rename flake \u003ca href=\"https://github.com/ljharb/shell-quote/commit/abe0163293c82963fa8a16cfaa87181846d5aced\"\u003e\u003ccode\u003eabe0163\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] Windows + node 5/7: install deps with a modern node \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b4bafa2e7e58d53d9839b1c24976f61e54b43326\"\u003e\u003ccode\u003eb4bafa2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape leading \u003ccode\u003e~\u003c/code\u003e to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7a76c1a12d8461c2234a1c655b943cee84cbff91\"\u003e\u003ccode\u003e7a76c1a\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7184b4458b65c17b931e126d8cb5f586c6717dc8\"\u003e\u003ccode\u003e7184b44\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] apparently \u003ccode\u003ejackspeak\u003c/code\u003e is no longer in the graph \u003ca href=\"https://github.com/ljharb/shell-quote/commit/9ba368a4057b9f498b0fef23b5b15543ef81b98c\"\u003e\u003ccode\u003e9ba368a\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/64988d9a0e73a2ae710488952e3614958ef289d4\"\u003e\u003ccode\u003e64988d9\u003c/code\u003e\u003c/a\u003e v1.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c\"\u003e\u003ccode\u003e617d119\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003equote\u003c/code\u003e: the tilde test escapes every \u003ccode\u003e~\u003c/code\u003e, not just a leading one (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/9\"\u003e#9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba\"\u003e\u003ccode\u003e59bbf8b\u003c/code\u003e\u003c/a\u003e [types] fix an error TS v6 ignores but v7 fails on\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71\"\u003e\u003ccode\u003e190e236\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003equote\u003c/code\u003e: pin that a backslash with whitespace is not doubled in singl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc\"\u003e\u003ccode\u003ea04d475\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@arethetypeswrong/cli\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b9545b39f4de17aa169410823c98acf58387e474\"\u003e\u003ccode\u003eb9545b3\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: add opt-in \u003ccode\u003esplitUnquoted\u003c/code\u003e option for shell field-splitting of...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5\"\u003e\u003ccode\u003e1b36468\u003c/code\u003e\u003c/a\u003e [readme] \u003ccode\u003equote\u003c/code\u003e: use output verbatim; do not re-quote it (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/11\"\u003e#11\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e\"\u003e\u003ccode\u003e1c36f3f\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003equote\u003c/code\u003e: pin conservative escaping of \u003ccode\u003e=\u003c/code\u003e, \u003ccode\u003e@\u003c/code\u003e, \u003ccode\u003e^\u003c/code\u003e, \u003ccode\u003e,\u003c/code\u003e, \u003ccode\u003e:\u003c/code\u003e, \u003ccode\u003e!\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/11\"\u003e#11\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb\"\u003e\u003ccode\u003ee1c75cd\u003c/code\u003e\u003c/a\u003e [readme] document \u003ccode\u003eparse\u003c/code\u003e's supported parameter-expansion subset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c\"\u003e\u003ccode\u003ec0842c8\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eparse\u003c/code\u003e: match nested \u003ccode\u003e${...}\u003c/code\u003e braces so nested parameter expansion is ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.5.16 to 7.5.20\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/ebbb72094159d003f428dcd1cb28255d37ea4873\"\u003e\u003ccode\u003eebbb720\u003c/code\u003e\u003c/a\u003e 7.5.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2f271963a7fe5a5960aee5dd6adf9647a1e266fd\"\u003e\u003ccode\u003e2f27196\u003c/code\u003e\u003c/a\u003e fix: fully disable and dispose of unzip when aborting parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.16...v7.5.20\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `webpack-dev-server` from 5.2.5 to 5.2.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/webpack/webpack-dev-server/releases\"\u003ewebpack-dev-server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003efix: allow \u003ccode\u003eundefined\u003c/code\u003e as the \u003ccode\u003eServer\u003c/code\u003e constructor \u003ccode\u003eoptions\u003c/code\u003e argument again (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5695\"\u003e#5695\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eRestores accepting \u003ccode\u003eundefined\u003c/code\u003e (defaulting it to \u003ccode\u003e{}\u003c/code\u003e) for the \u003ccode\u003eoptions\u003c/code\u003e\nargument, so passing a webpack config's optional \u003ccode\u003edevServer\u003c/code\u003e field type-checks and works as before.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProtect the built-in state-changing routes (\u003ccode\u003e/webpack-dev-server/invalidate\u003c/code\u003e and \u003ccode\u003e/webpack-dev-server/open-editor\u003c/code\u003e) against cross-site request forgery. Requests are now checked with \u003ccode\u003eSec-Fetch-Site\u003c/code\u003e (falling back to an \u003ccode\u003eOrigin\u003c/code\u003e/\u003ccode\u003eHost\u003c/code\u003e comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5698\"\u003e#5698\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHandle malformed \u003ccode\u003eHost\u003c/code\u003e and \u003ccode\u003eOrigin\u003c/code\u003e header values gracefully when validating requests. (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5699\"\u003e#5699\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/webpack/webpack-dev-server/blob/v5.2.6/CHANGELOG.md\"\u003ewebpack-dev-server's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.2.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003efix: allow \u003ccode\u003eundefined\u003c/code\u003e as the \u003ccode\u003eServer\u003c/code\u003e constructor \u003ccode\u003eoptions\u003c/code\u003e argument again (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5695\"\u003e#5695\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eRestores accepting \u003ccode\u003eundefined\u003c/code\u003e (defaulting it to \u003ccode\u003e{}\u003c/code\u003e) for the \u003ccode\u003eoptions\u003c/code\u003e\nargument, so passing a webpack config's optional \u003ccode\u003edevServer\u003c/code\u003e field type-checks and works as before.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProtect the built-in state-changing routes (\u003ccode\u003e/webpack-dev-server/invalidate\u003c/code\u003e and \u003ccode\u003e/webpack-dev-server/open-editor\u003c/code\u003e) against cross-site request forgery. Requests are now checked with \u003ccode\u003eSec-Fetch-Site\u003c/code\u003e (falling back to an \u003ccode\u003eOrigin\u003c/code\u003e/\u003ccode\u003eHost\u003c/code\u003e comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5698\"\u003e#5698\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHandle malformed \u003ccode\u003eHost\u003c/code\u003e and \u003ccode\u003eOrigin\u003c/code\u003e header values gracefully when validating requests. (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5699\"\u003e#5699\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/8a37b0ed89d07ca81532188fe19f080a2ee51475\"\u003e\u003ccode\u003e8a37b0e\u003c/code\u003e\u003c/a\u003e chore(release): new release (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5697\"\u003e#5697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/f21ed0f44aceb6132abb591ee8b60d770b6e489f\"\u003e\u003ccode\u003ef21ed0f\u003c/code\u003e\u003c/a\u003e fix: handle malformed Host and Origin headers (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5699\"\u003e#5699\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/80cd9eea54975fe632a518d8bd902a260f374e7c\"\u003e\u003ccode\u003e80cd9ee\u003c/code\u003e\u003c/a\u003e fix: reject cross-site requests to open-editor and invalidate endpoints (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5698\"\u003e#5698\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/308e853808fc8f5d0722276e1a87aa73c91859a5\"\u003e\u003ccode\u003e308e853\u003c/code\u003e\u003c/a\u003e fix: handle undefined options in Server constructor (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5695\"\u003e#5695\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/8b2b9151f41e0d6157c8bd051cf5f16bce5dba17\"\u003e\u003ccode\u003e8b2b915\u003c/code\u003e\u003c/a\u003e chore: update branch references from v4 to v5 in workflow configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/870ed2258dda612c8feeaf8d971afd08233696ad\"\u003e\u003ccode\u003e870ed22\u003c/code\u003e\u003c/a\u003e chore: add v5 branch to release workflow triggers\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.5...v5.2.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/EelcoLos/nx-tinkering/pull/1465","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/EelcoLos%2Fnx-tinkering/issues/1465","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1465/packages"},{"uuid":"4919857184","node_id":"PR_kwDOTcsI0M7zZnKk","number":1,"state":"open","title":"chore(deps): bump the npm-dependencies group with 120 updates","user":"dependabot[bot]","labels":["size/XL"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-18T20:05:36.000Z","updated_at":"2026-07-18T20:07:09.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm-dependencies","update_count":120,"packages":[{"name":"simple-git","old_version":"3.28.0","new_version":"3.36.0","repository_url":"https://github.com/steveukx/git-js"},{"name":"@agentclientprotocol/sdk","old_version":"0.16.1","new_version":"1.2.1","repository_url":"https://github.com/agentclientprotocol/typescript-sdk"},{"name":"read-package-up","old_version":"11.0.0","new_version":"12.0.0","repository_url":"https://github.com/sindresorhus/read-package-up"},{"name":"@octokit/rest","old_version":"22.0.0","new_version":"22.0.1","repository_url":"https://github.com/octokit/rest.js"},{"name":"@types/minimatch","old_version":"5.1.2","new_version":"6.0.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@vitest/coverage-v8","old_version":"3.2.4","new_version":"4.1.10","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"@vitest/eslint-plugin","old_version":"1.3.4","new_version":"1.6.23","repository_url":"https://github.com/vitest-dev/eslint-plugin-vitest"},{"name":"cross-env","old_version":"7.0.3","new_version":"10.1.0","repository_url":"https://github.com/kentcdodds/cross-env"},{"name":"esbuild","old_version":"0.25.0","new_version":"0.28.1","repository_url":"https://github.com/evanw/esbuild"},{"name":"eslint","old_version":"9.24.0","new_version":"10.7.0","repository_url":"https://github.com/eslint/eslint"},{"name":"eslint-config-prettier","old_version":"10.1.2","new_version":"10.1.8","repository_url":"https://github.com/prettier/eslint-config-prettier"},{"name":"eslint-plugin-headers","old_version":"1.3.3","new_version":"1.3.4","repository_url":"https://github.com/robmisasi/eslint-plugin-headers"},{"name":"eslint-plugin-react-hooks","old_version":"5.2.0","new_version":"7.1.1","repository_url":"https://github.com/facebook/react"},{"name":"glob","old_version":"12.0.0","new_version":"13.0.6","repository_url":"https://github.com/isaacs/node-glob"},{"name":"globals","old_version":"16.0.0","new_version":"17.7.0","repository_url":"https://github.com/sindresorhus/globals"},{"name":"google-artifactregistry-auth","old_version":"3.4.0","new_version":"3.5.0","repository_url":"https://github.com/GoogleCloudPlatform/artifact-registry-npm-tools"},{"name":"lint-staged","old_version":"16.1.6","new_version":"17.1.0","repository_url":"https://github.com/lint-staged/lint-staged"},{"name":"memfs","old_version":"4.42.0","new_version":"4.64.0","repository_url":"https://github.com/streamich/memfs"},{"name":"mnemonist","old_version":"0.40.3","new_version":"0.40.4","repository_url":"https://github.com/yomguithereal/mnemonist"},{"name":"msw","old_version":"2.3.4","new_version":"2.15.0","repository_url":"https://github.com/mswjs/msw"},{"name":"prettier","old_version":"3.5.3","new_version":"3.9.5","repository_url":"https://github.com/prettier/prettier"},{"name":"react-devtools-core","old_version":"6.1.2","new_version":"7.0.1","repository_url":"https://github.com/facebook/react"},{"name":"react-dom","old_version":"19.2.4","new_version":"19.2.7","repository_url":"https://github.com/facebook/react"},{"name":"@types/react-dom","old_version":"19.2.0","new_version":"19.2.3","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"semver","old_version":"7.7.2","new_version":"7.8.5","repository_url":"https://github.com/npm/node-semver"},{"name":"@types/semver","old_version":"7.7.0","new_version":"7.7.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"strip-ansi","old_version":"7.1.0","new_version":"7.2.0","repository_url":"https://github.com/chalk/strip-ansi"},{"name":"tsx","old_version":"4.20.3","new_version":"4.23.1","repository_url":"https://github.com/privatenumber/tsx"},{"name":"typescript","old_version":"5.8.3","new_version":"7.0.2","repository_url":"https://github.com/microsoft/TypeScript"},{"name":"typescript-eslint","old_version":"8.30.1","new_version":"8.64.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"vitest","old_version":"3.1.1","new_version":"4.1.10","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"yargs","old_version":"17.7.2","new_version":"18.0.0","repository_url":"https://github.com/yargs/yargs"},{"name":"node-pty","old_version":"1.0.0","new_version":"1.1.0","repository_url":"https://github.com/microsoft/node-pty"},{"name":"@a2a-js/sdk","old_version":"0.3.11","new_version":"0.3.14","repository_url":"https://github.com/a2aproject/a2a-js"},{"name":"@google-cloud/storage","old_version":"7.19.0","new_version":"7.21.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"express","old_version":"5.1.0","new_version":"5.2.1","repository_url":"https://github.com/expressjs/express"},{"name":"@types/express","old_version":"5.0.3","new_version":"5.0.6","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"fs-extra","old_version":"11.3.0","new_version":"11.3.6","repository_url":"https://github.com/jprichardson/node-fs-extra"},{"name":"strip-json-comments","old_version":"3.1.1","new_version":"5.0.3","repository_url":"https://github.com/sindresorhus/strip-json-comments"},{"name":"tar","old_version":"7.5.11","new_version":"7.5.20","repository_url":"https://github.com/isaacs/node-tar"},{"name":"@types/tar","old_version":"6.1.13","new_version":"7.0.87","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"uuid","old_version":"13.0.0","new_version":"14.0.1","repository_url":"https://github.com/uuidjs/uuid"},{"name":"winston","old_version":"3.17.0","new_version":"3.19.0","repository_url":"https://github.com/winstonjs/winston"},{"name":"@google/genai","old_version":"1.30.0","new_version":"2.12.0","repository_url":"https://github.com/googleapis/js-genai"},{"name":"dotenv","old_version":"16.4.5","new_version":"17.4.2","repository_url":"https://github.com/motdotla/dotenv"},{"name":"supertest","old_version":"7.1.4","new_version":"7.2.2","repository_url":"https://github.com/ladjs/supertest"},{"name":"@types/supertest","old_version":"6.0.3","new_version":"7.2.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@modelcontextprotocol/sdk","old_version":"1.23.0","new_version":"1.29.0","repository_url":"https://github.com/modelcontextprotocol/typescript-sdk"},{"name":"chalk","old_version":"4.1.2","new_version":"5.6.2","repository_url":"https://github.com/chalk/chalk"},{"name":"cli-spinners","old_version":"2.9.2","new_version":"3.4.0","repository_url":"https://github.com/sindresorhus/cli-spinners"},{"name":"clipboardy","old_version":"5.2.1","new_version":"5.3.1","repository_url":"https://github.com/sindresorhus/clipboardy"},{"name":"color-convert","old_version":"2.0.1","new_version":"3.1.3","repository_url":"https://github.com/Qix-/color-convert"},{"name":"comment-json","old_version":"4.2.5","new_version":"5.0.0","repository_url":"https://github.com/kaelzhang/node-comment-json"},{"name":"diff","old_version":"8.0.3","new_version":"9.0.0","repository_url":"https://github.com/kpdecker/jsdiff"},{"name":"ink-gradient","old_version":"3.0.0","new_version":"4.0.1","repository_url":"https://github.com/sindresorhus/ink-gradient"},{"name":"open","old_version":"10.1.2","new_version":"11.0.0","repository_url":"https://github.com/sindresorhus/open"},{"name":"react","old_version":"19.2.4","new_version":"19.2.7","repository_url":"https://github.com/facebook/react"},{"name":"@types/react","old_version":"19.2.0","new_version":"19.2.17","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.10.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"string-width","old_version":"8.1.0","new_version":"8.2.2","repository_url":"https://github.com/sindresorhus/string-width"},{"name":"tinygradient","old_version":"1.1.5","new_version":"2.0.1","repository_url":"https://github.com/mistic100/tinygradient"},{"name":"undici","old_version":"7.10.0","new_version":"8.7.0","repository_url":"https://github.com/nodejs/undici"},{"name":"ws","old_version":"8.16.0","new_version":"8.21.1","repository_url":"https://github.com/websockets/ws"},{"name":"@types/ws","old_version":"8.5.10","new_version":"8.18.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"zod","old_version":"3.25.76","new_version":"4.4.3","repository_url":"https://github.com/colinhacks/zod"},{"name":"@types/hast","old_version":"3.0.4","new_version":"3.0.5","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/node","old_version":"20.11.24","new_version":"26.1.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/yargs","old_version":"17.0.32","new_version":"17.0.35","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@xterm/headless","old_version":"5.5.0","new_version":"6.0.0","repository_url":"https://github.com/xtermjs/xterm.js"},{"name":"@bufbuild/protobuf","old_version":"2.11.0","new_version":"2.12.1","repository_url":"https://github.com/bufbuild/protobuf-es"},{"name":"@google-cloud/logging","old_version":"11.2.1","new_version":"11.3.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"@grpc/grpc-js","old_version":"1.14.3","new_version":"1.14.4","repository_url":"https://github.com/grpc/grpc-node"},{"name":"@opentelemetry/api","old_version":"1.9.0","new_version":"1.9.1","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/api-logs","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/core","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/exporter-logs-otlp-grpc","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/exporter-logs-otlp-http","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/exporter-metrics-otlp-grpc","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/exporter-metrics-otlp-http","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/exporter-trace-otlp-grpc","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/exporter-trace-otlp-http","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/instrumentation-http","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/otlp-exporter-base","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/resources","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-logs","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-metrics","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-node","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-trace-base","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-trace-node","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/semantic-conventions","old_version":"1.39.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"ajv","old_version":"8.17.1","new_version":"8.20.0","repository_url":"https://github.com/ajv-validator/ajv"},{"name":"dotenv-expand","old_version":"12.0.3","new_version":"13.0.0","repository_url":"https://github.com/motdotla/dotenv-expand"},{"name":"execa","old_version":"9.6.1","new_version":"10.0.0","repository_url":"https://github.com/sindresorhus/execa"},{"name":"fast-levenshtein","old_version":"2.0.6","new_version":"3.0.0","repository_url":"https://github.com/hiddentao/fast-levenshtein"},{"name":"fdir","old_version":"6.4.6","new_version":"6.5.0","repository_url":"https://github.com/thecodrr/fdir"},{"name":"google-auth-library","old_version":"9.11.0","new_version":"10.9.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"html-to-text","old_version":"9.0.5","new_version":"10.0.0","repository_url":"https://github.com/html-to-text/node-html-to-text"},{"name":"http-proxy-agent","old_version":"7.0.2","new_version":"9.1.0","repository_url":"https://github.com/TooTallNate/proxy-agents"},{"name":"https-proxy-agent","old_version":"7.0.6","new_version":"9.1.0","repository_url":"https://github.com/TooTallNate/proxy-agents"},{"name":"ignore","old_version":"7.0.0","new_version":"7.0.6","repository_url":"https://github.com/kaelzhang/node-ignore"},{"name":"ipaddr.js","old_version":"1.9.1","new_version":"2.4.0","repository_url":"https://github.com/whitequark/ipaddr.js"},{"name":"isbinaryfile","old_version":"5.0.7","new_version":"6.0.0","repository_url":"https://github.com/gjtorikian/isBinaryFile"},{"name":"js-yaml","old_version":"4.1.1","new_version":"5.2.1","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"marked","old_version":"15.0.12","new_version":"18.0.6","repository_url":"https://github.com/markedjs/marked"},{"name":"mime","old_version":"4.0.7","new_version":"4.1.0","repository_url":"https://github.com/broofa/mime"},{"name":"picomatch","old_version":"4.0.1","new_version":"4.0.5","repository_url":"https://github.com/micromatch/picomatch"},{"name":"@types/picomatch","old_version":"4.0.1","new_version":"4.0.3","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"puppeteer-core","old_version":"24.0.0","new_version":"25.3.0","repository_url":"https://github.com/puppeteer/puppeteer"},{"name":"systeminformation","old_version":"5.25.11","new_version":"5.31.17","repository_url":"https://github.com/sebhildebrandt/systeminformation"},{"name":"tree-sitter-bash","old_version":"0.25.0","new_version":"0.25.1","repository_url":"https://github.com/tree-sitter/tree-sitter-bash"},{"name":"web-tree-sitter","old_version":"0.25.10","new_version":"0.26.11","repository_url":"https://github.com/tree-sitter/tree-sitter"},{"name":"zod-to-json-schema","old_version":"3.25.1","new_version":"3.25.2","repository_url":"https://github.com/StefanTerdell/zod-to-json-schema"},{"name":"@types/json-stable-stringify","old_version":"1.1.0","new_version":"1.2.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"chrome-devtools-mcp","old_version":"0.19.0","new_version":"1.6.0","repository_url":"https://github.com/ChromeDevTools/chrome-devtools-mcp"},{"name":"cors","old_version":"2.8.5","new_version":"2.8.6","repository_url":"https://github.com/expressjs/cors"},{"name":"@types/vscode","old_version":"1.99.0","new_version":"1.125.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@typescript-eslint/eslint-plugin","old_version":"8.31.1","new_version":"8.64.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/parser","old_version":"8.31.1","new_version":"8.64.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@vscode/vsce","old_version":"3.6.0","new_version":"3.9.2","repository_url":"https://github.com/Microsoft/vsce"},{"name":"npm-run-all2","old_version":"8.0.2","new_version":"9.0.2","repository_url":"https://github.com/bcomnes/npm-run-all2"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-dependencies group with 120 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.28.0` | `3.36.0` |\n| [@agentclientprotocol/sdk](https://github.com/agentclientprotocol/typescript-sdk) | `0.16.1` | `1.2.1` |\n| [read-package-up](https://github.com/sindresorhus/read-package-up) | `11.0.0` | `12.0.0` |\n| [@octokit/rest](https://github.com/octokit/rest.js) | `22.0.0` | `22.0.1` |\n| [@types/minimatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/minimatch) | `5.1.2` | `6.0.0` |\n| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `3.2.4` | `4.1.10` |\n| [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.3.4` | `1.6.23` |\n| [cross-env](https://github.com/kentcdodds/cross-env) | `7.0.3` | `10.1.0` |\n| [esbuild](https://github.com/evanw/esbuild) | `0.25.0` | `0.28.1` |\n| [eslint](https://github.com/eslint/eslint) | `9.24.0` | `10.7.0` |\n| [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) | `10.1.2` | `10.1.8` |\n| [eslint-plugin-headers](https://github.com/robmisasi/eslint-plugin-headers) | `1.3.3` | `1.3.4` |\n| [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `5.2.0` | `7.1.1` |\n| [glob](https://github.com/isaacs/node-glob) | `12.0.0` | `13.0.6` |\n| [globals](https://github.com/sindresorhus/globals) | `16.0.0` | `17.7.0` |\n| [google-artifactregistry-auth](https://github.com/GoogleCloudPlatform/artifact-registry-npm-tools) | `3.4.0` | `3.5.0` |\n| [lint-staged](https://github.com/lint-staged/lint-staged) | `16.1.6` | `17.1.0` |\n| [memfs](https://github.com/streamich/memfs) | `4.42.0` | `4.64.0` |\n| [mnemonist](https://github.com/yomguithereal/mnemonist) | `0.40.3` | `0.40.4` |\n| [msw](https://github.com/mswjs/msw) | `2.3.4` | `2.15.0` |\n| [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.9.5` |\n| [react-devtools-core](https://github.com/facebook/react/tree/HEAD/packages/react-devtools-core) | `6.1.2` | `7.0.1` |\n| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.7` |\n| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.0` | `19.2.3` |\n| [semver](https://github.com/npm/node-semver) | `7.7.2` | `7.8.5` |\n| [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.0` | `7.7.1` |\n| [strip-ansi](https://github.com/chalk/strip-ansi) | `7.1.0` | `7.2.0` |\n| [tsx](https://github.com/privatenumber/tsx) | `4.20.3` | `4.23.1` |\n| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `7.0.2` |\n| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.30.1` | `8.64.0` |\n| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.1.1` | `4.1.10` |\n| [yargs](https://github.com/yargs/yargs) | `17.7.2` | `18.0.0` |\n| [node-pty](https://github.com/microsoft/node-pty) | `1.0.0` | `1.1.0` |\n| [@a2a-js/sdk](https://github.com/a2aproject/a2a-js) | `0.3.11` | `0.3.14` |\n| [@google-cloud/storage](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/storage) | `7.19.0` | `7.21.0` |\n| [express](https://github.com/expressjs/express) | `5.1.0` | `5.2.1` |\n| [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `5.0.3` | `5.0.6` |\n| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.0` | `11.3.6` |\n| [strip-json-comments](https://github.com/sindresorhus/strip-json-comments) | `3.1.1` | `5.0.3` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.11` | `7.5.20` |\n| [@types/tar](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/tar) | `6.1.13` | `7.0.87` |\n| [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.1` |\n| [winston](https://github.com/winstonjs/winston) | `3.17.0` | `3.19.0` |\n| [@google/genai](https://github.com/googleapis/js-genai) | `1.30.0` | `2.12.0` |\n| [dotenv](https://github.com/motdotla/dotenv) | `16.4.5` | `17.4.2` |\n| [supertest](https://github.com/ladjs/supertest) | `7.1.4` | `7.2.2` |\n| [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest) | `6.0.3` | `7.2.1` |\n| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.23.0` | `1.29.0` |\n| [chalk](https://github.com/chalk/chalk) | `4.1.2` | `5.6.2` |\n| [cli-spinners](https://github.com/sindresorhus/cli-spinners) | `2.9.2` | `3.4.0` |\n| [clipboardy](https://github.com/sindresorhus/clipboardy) | `5.2.1` | `5.3.1` |\n| [color-convert](https://github.com/Qix-/color-convert) | `2.0.1` | `3.1.3` |\n| [comment-json](https://github.com/kaelzhang/node-comment-json) | `4.2.5` | `5.0.0` |\n| [diff](https://github.com/kpdecker/jsdiff) | `8.0.3` | `9.0.0` |\n| [ink-gradient](https://github.com/sindresorhus/ink-gradient) | `3.0.0` | `4.0.1` |\n| [open](https://github.com/sindresorhus/open) | `10.1.2` | `11.0.0` |\n| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.7` |\n| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.0` | `19.2.17` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.10.0` |\n| [string-width](https://github.com/sindresorhus/string-width) | `8.1.0` | `8.2.2` |\n| [tinygradient](https://github.com/mistic100/tinygradient) | `1.1.5` | `2.0.1` |\n| [undici](https://github.com/nodejs/undici) | `7.10.0` | `8.7.0` |\n| [ws](https://github.com/websockets/ws) | `8.16.0` | `8.21.1` |\n| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.5.10` | `8.18.1` |\n| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.3` |\n| [@types/hast](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/hast) | `3.0.4` | `3.0.5` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.11.24` | `26.1.1` |\n| [@types/yargs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/yargs) | `17.0.32` | `17.0.35` |\n| [@xterm/headless](https://github.com/xtermjs/xterm.js) | `5.5.0` | `6.0.0` |\n| [@bufbuild/protobuf](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protobuf) | `2.11.0` | `2.12.1` |\n| [@google-cloud/logging](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/logging) | `11.2.1` | `11.3.0` |\n| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.14.3` | `1.14.4` |\n| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` |\n| [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/exporter-logs-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/exporter-logs-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/exporter-metrics-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/otlp-exporter-base](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.39.0` | `1.43.0` |\n| [ajv](https://github.com/ajv-validator/ajv) | `8.17.1` | `8.20.0` |\n| [dotenv-expand](https://github.com/motdotla/dotenv-expand) | `12.0.3` | `13.0.0` |\n| [execa](https://github.com/sindresorhus/execa) | `9.6.1` | `10.0.0` |\n| [fast-levenshtein](https://github.com/hiddentao/fast-levenshtein) | `2.0.6` | `3.0.0` |\n| [fdir](https://github.com/thecodrr/fdir) | `6.4.6` | `6.5.0` |\n| [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `9.11.0` | `10.9.0` |\n| [html-to-text](https://github.com/html-to-text/node-html-to-text) | `9.0.5` | `10.0.0` |\n| [http-proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/http-proxy-agent) | `7.0.2` | `9.1.0` |\n| [https-proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/https-proxy-agent) | `7.0.6` | `9.1.0` |\n| [ignore](https://github.com/kaelzhang/node-ignore) | `7.0.0` | `7.0.6` |\n| [ipaddr.js](https://github.com/whitequark/ipaddr.js) | `1.9.1` | `2.4.0` |\n| [isbinaryfile](https://github.com/gjtorikian/isBinaryFile) | `5.0.7` | `6.0.0` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `5.2.1` |\n| [marked](https://github.com/markedjs/marked) | `15.0.12` | `18.0.6` |\n| [mime](https://github.com/broofa/mime) | `4.0.7` | `4.1.0` |\n| [picomatch](https://github.com/micromatch/picomatch) | `4.0.1` | `4.0.5` |\n| [@types/picomatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/picomatch) | `4.0.1` | `4.0.3` |\n| [puppeteer-core](https://github.com/puppeteer/puppeteer) | `24.0.0` | `25.3.0` |\n| [systeminformation](https://github.com/sebhildebrandt/systeminformation) | `5.25.11` | `5.31.17` |\n| [tree-sitter-bash](https://github.com/tree-sitter/tree-sitter-bash) | `0.25.0` | `0.25.1` |\n| [web-tree-sitter](https://github.com/tree-sitter/tree-sitter/tree/HEAD/lib/binding_web) | `0.25.10` | `0.26.11` |\n| [zod-to-json-schema](https://github.com/StefanTerdell/zod-to-json-schema) | `3.25.1` | `3.25.2` |\n| [@types/json-stable-stringify](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/json-stable-stringify) | `1.1.0` | `1.2.0` |\n| [chrome-devtools-mcp](https://github.com/ChromeDevTools/chrome-devtools-mcp) | `0.19.0` | `1.6.0` |\n| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |\n| [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) | `1.99.0` | `1.125.0` |\n| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.31.1` | `8.64.0` |\n| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.31.1` | `8.64.0` |\n| [@vscode/vsce](https://github.com/Microsoft/vsce) | `3.6.0` | `3.9.2` |\n| [npm-run-all2](https://github.com/bcomnes/npm-run-all2) | `8.0.2` | `9.0.2` |\n\nUpdates `simple-git` from 3.28.0 to 3.36.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/steveukx/git-js/releases\"\u003esimple-git's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esimple-git@3.36.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e89a2294: Extend known exploitable configuration keys and per-task environment variables.\u003c/p\u003e\n\u003cp\u003eNote - \u003ccode\u003eParsedVulnerabilities\u003c/code\u003e from \u003ccode\u003eargv-parser\u003c/code\u003e is removed in favour of a readonly array of \u003ccode\u003eVulnerability\u003c/code\u003e to match usage in \u003ccode\u003esimple-git\u003c/code\u003e, rolled into the new \u003ccode\u003evulnerabilityCheck\u003c/code\u003e for simpler access to the identified issues.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/zebbern\"\u003e\u003ccode\u003e@​zebbern\u003c/code\u003e\u003c/a\u003e for identifying the need to block \u003ccode\u003ecore.fsmonitor\u003c/code\u003e.\nThanks to \u003ca href=\"https://github.com/kodareef5\"\u003e\u003ccode\u003e@​kodareef5\u003c/code\u003e\u003c/a\u003e for identifying the need to block \u003ccode\u003eGIT_CONFIG_COUNT\u003c/code\u003e environment variables and \u003ccode\u003e--template\u003c/code\u003e / \u003ccode\u003emerge\u003c/code\u003e related config.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e1ad57e8: Remove conflicting node:buffer import\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [89a2294]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [675570a]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.1.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/args-pathspec\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esimple-git@3.35.2\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e0cf9d8c: Improvements for mono-repo publishing pipeline\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [0cf9d8c]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/args-pathspec\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.2\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esimple-git@3.35.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e0de400e: Update monorepo version handling during publish\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [0de400e]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esimple-git@3.33.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ea263635: Use \u003ccode\u003epathspec\u003c/code\u003e wrappers for remote and local paths when running either \u003ccode\u003egit.clone\u003c/code\u003e or \u003ccode\u003egit.mirror\u003c/code\u003e to\navoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ee253a0d: Enhanced \u003ccode\u003egit -c\u003c/code\u003e checks in \u003ccode\u003eunsafe\u003c/code\u003e plugin.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/JohannesLks\"\u003e\u003ccode\u003e@​JohannesLks\u003c/code\u003e\u003c/a\u003e for identifying the issue\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esimple-git@3.32.3\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ef704208: Enhanced \u003ccode\u003eprotocol.allow\u003c/code\u003e checks in \u003ccode\u003eallowUnsafeExtProtocol\u003c/code\u003e handling.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md\"\u003esimple-git's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.36.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e89a2294: Extend known exploitable configuration keys and per-task environment variables.\u003c/p\u003e\n\u003cp\u003eNote - \u003ccode\u003eParsedVulnerabilities\u003c/code\u003e from \u003ccode\u003eargv-parser\u003c/code\u003e is removed in favour of a readonly array of \u003ccode\u003eVulnerability\u003c/code\u003e to match usage in \u003ccode\u003esimple-git\u003c/code\u003e, rolled into the new \u003ccode\u003evulnerabilityCheck\u003c/code\u003e for simpler access to the identified issues.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/zebbern\"\u003e\u003ccode\u003e@​zebbern\u003c/code\u003e\u003c/a\u003e for identifying the need to block \u003ccode\u003ecore.fsmonitor\u003c/code\u003e.\nThanks to \u003ca href=\"https://github.com/kodareef5\"\u003e\u003ccode\u003e@​kodareef5\u003c/code\u003e\u003c/a\u003e for identifying the need to block \u003ccode\u003eGIT_CONFIG_COUNT\u003c/code\u003e environment variables and \u003ccode\u003e--template\u003c/code\u003e / \u003ccode\u003emerge\u003c/code\u003e related config.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e1ad57e8: Remove conflicting node:buffer import\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [89a2294]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [675570a]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.1.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/args-pathspec\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.35.2\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e0cf9d8c: Improvements for mono-repo publishing pipeline\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [0cf9d8c]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/args-pathspec\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.2\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.35.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e0de400e: Update monorepo version handling during publish\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [0de400e]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.35.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e3d8708b: Updating publish config\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [3d8708b]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/args-pathspec\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.34.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/7dc1a532a9ec92fb08c93202954be73175b07d83\"\u003e\u003ccode\u003e7dc1a53\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/76f5376bd418cb8baf5ec32757af442d47128e22\"\u003e\u003ccode\u003e76f5376\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1061\"\u003e#1061\u003c/a\u003e from Vinzent03/fix/buffer-import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/89a2294febed5dfe737c4c735d936bb6018746a8\"\u003e\u003ccode\u003e89a2294\u003c/code\u003e\u003c/a\u003e Environment Parsing (\u003ca href=\"https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1156\"\u003e#1156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/1b91b762f047777ca6686f34ac3f7b8a543a4780\"\u003e\u003ccode\u003e1b91b76\u003c/code\u003e\u003c/a\u003e fix: remove explicit node:buffer import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/e390685960a3461875dce89d87ab80e3143d79fe\"\u003e\u003ccode\u003ee390685\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/3c9e4b8309667d0cb4102cda770f92075fc781dd\"\u003e\u003ccode\u003e3c9e4b8\u003c/code\u003e\u003c/a\u003e Pin version of \u003ccode\u003e@​simple-git/args-pathspec\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/94ee21fd5a2a6182fbf0f218a5efca2057b567cd\"\u003e\u003ccode\u003e94ee21f\u003c/code\u003e\u003c/a\u003e Export \u003ccode\u003epathspec\u003c/code\u003e types through \u003ccode\u003esimple-git\u003c/code\u003e for backward compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/6d7cb5174273aa33d131172d3770cb386e795171\"\u003e\u003ccode\u003e6d7cb51\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/0de400e7b014a48113acf673b3409a95b9c87a15\"\u003e\u003ccode\u003e0de400e\u003c/code\u003e\u003c/a\u003e Switch to semver from workspace revisions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/2264722abcb637042dd4cc50d903d69e4ee14b38\"\u003e\u003ccode\u003e2264722\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/steveukx/git-js/commits/simple-git@3.36.0/simple-git\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for simple-git since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@agentclientprotocol/sdk` from 0.16.1 to 1.2.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/releases\"\u003e@​agentclientprotocol/sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v1.2.0...v1.2.1\"\u003e1.2.1\u003c/a\u003e (2026-07-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehttp:\u003c/strong\u003e make SSE close and response delivery deterministic (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/209\"\u003e#209\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/2adee0f5071bd1201c84b7d8a2836cfe011d4c9a\"\u003e2adee0f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve extensible union semantics in TS schemas (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/215\"\u003e#215\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/e3232216ac172283e4f77f9d75c12f820952b5e9\"\u003ee323221\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v1.1.0...v1.2.0\"\u003e1.2.0\u003c/a\u003e (2026-07-06)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate schema to 1.17.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/204\"\u003e#204\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/fa8b5bd426fec07a85203d6a6e4b83d173243cf1\"\u003efa8b5bd\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate schema to 1.19.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/213\"\u003e#213\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/6599433640feb8e36372a767554869fd5097fdd3\"\u003e6599433\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake ndJsonStream receive path linear in message size (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/210\"\u003e#210\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/2fc41d2822579f754042db4d4f8c53b7c9b9ad2f\"\u003e2fc41d2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eunify JSON-RPC message validation policy across transports (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/212\"\u003e#212\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/5e01eb2ac2cd72c8c6ebff1015874366c781eaa5\"\u003e5e01eb2\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/211\"\u003e#211\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v1.0.0...v1.1.0\"\u003e1.1.0\u003c/a\u003e (2026-06-29)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eExpose request ids in handler contexts (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/202\"\u003e#202\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/eda849ca7894f32e4ed11df81eb5b024e5512e5b\"\u003eeda849c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v0.29.0...v1.0.0\"\u003e1.0.0\u003c/a\u003e (2026-06-24)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eschema:\u003c/strong\u003e Update to v1.16.0 of the schema (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/199\"\u003e#199\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/de5879100c1bb5e2fdaebc957c1ca01364eb33cc\"\u003ede58791\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erelease 1.0.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/201\"\u003e#201\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/008fc2861adc3f87edc4daa12eb78b81a6fd7161\"\u003e008fc28\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.29.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v0.28.1...v0.29.0\"\u003e0.29.0\u003c/a\u003e (2026-06-22)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/blob/main/CHANGELOG.md\"\u003e@​agentclientprotocol/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v1.2.0...v1.2.1\"\u003e1.2.1\u003c/a\u003e (2026-07-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehttp:\u003c/strong\u003e make SSE close and response delivery deterministic (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/209\"\u003e#209\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/2adee0f5071bd1201c84b7d8a2836cfe011d4c9a\"\u003e2adee0f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve extensible union semantics in TS schemas (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/215\"\u003e#215\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/e3232216ac172283e4f77f9d75c12f820952b5e9\"\u003ee323221\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v1.1.0...v1.2.0\"\u003e1.2.0\u003c/a\u003e (2026-07-06)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate schema to 1.17.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/204\"\u003e#204\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/fa8b5bd426fec07a85203d6a6e4b83d173243cf1\"\u003efa8b5bd\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate schema to 1.19.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/213\"\u003e#213\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/6599433640feb8e36372a767554869fd5097fdd3\"\u003e6599433\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake ndJsonStream receive path linear in message size (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/210\"\u003e#210\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/2fc41d2822579f754042db4d4f8c53b7c9b9ad2f\"\u003e2fc41d2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eunify JSON-RPC message validation policy across transports (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/212\"\u003e#212\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/5e01eb2ac2cd72c8c6ebff1015874366c781eaa5\"\u003e5e01eb2\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/211\"\u003e#211\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v1.0.0...v1.1.0\"\u003e1.1.0\u003c/a\u003e (2026-06-29)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eExpose request ids in handler contexts (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/202\"\u003e#202\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/eda849ca7894f32e4ed11df81eb5b024e5512e5b\"\u003eeda849c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v0.29.0...v1.0.0\"\u003e1.0.0\u003c/a\u003e (2026-06-24)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eschema:\u003c/strong\u003e Update to v1.16.0 of the schema (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/199\"\u003e#199\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/de5879100c1bb5e2fdaebc957c1ca01364eb33cc\"\u003ede58791\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erelease 1.0.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/201\"\u003e#201\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/008fc2861adc3f87edc4daa12eb78b81a6fd7161\"\u003e008fc28\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v0.28.1...v0.29.0\"\u003e0.29.0\u003c/a\u003e (2026-06-22)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eunstable:\u003c/strong\u003e Add support for request cancellation (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/195\"\u003e#195\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/d5197f9f6346a4b57084552e0bdf3c71ccf64412\"\u003ed5197f9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v0.28.0...v0.28.1\"\u003e0.28.1\u003c/a\u003e (2026-06-19)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/26da1ae7ab66fae0f5e77272dee3e5d562d24aee\"\u003e\u003ccode\u003e26da1ae\u003c/code\u003e\u003c/a\u003e chore(main): release 1.2.1 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/214\"\u003e#214\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/e3232216ac172283e4f77f9d75c12f820952b5e9\"\u003e\u003ccode\u003ee323221\u003c/code\u003e\u003c/a\u003e fix: Preserve extensible union semantics in TS schemas (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/215\"\u003e#215\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/2adee0f5071bd1201c84b7d8a2836cfe011d4c9a\"\u003e\u003ccode\u003e2adee0f\u003c/code\u003e\u003c/a\u003e fix(http): make SSE close and response delivery deterministic (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/f587c0be568b0ca6f4cd3d4973f28f2860efb21e\"\u003e\u003ccode\u003ef587c0b\u003c/code\u003e\u003c/a\u003e chore(main): release 1.2.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/6599433640feb8e36372a767554869fd5097fdd3\"\u003e\u003ccode\u003e6599433\u003c/code\u003e\u003c/a\u003e feat: Update schema to 1.19.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/5e01eb2ac2cd72c8c6ebff1015874366c781eaa5\"\u003e\u003ccode\u003e5e01eb2\u003c/code\u003e\u003c/a\u003e fix: unify JSON-RPC message validation policy across transports (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/212\"\u003e#212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/2fc41d2822579f754042db4d4f8c53b7c9b9ad2f\"\u003e\u003ccode\u003e2fc41d2\u003c/code\u003e\u003c/a\u003e fix: make ndJsonStream receive path linear in message size (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/e73e42af1fa3223437a2bc7772d051313820e3ae\"\u003e\u003ccode\u003ee73e42a\u003c/code\u003e\u003c/a\u003e chore(deps): bump crate-ci/typos from 1.47.2 to 1.48.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/207\"\u003e#207\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/f733390ebecadf4cc00e20bdcb590f58b4dabc95\"\u003e\u003ccode\u003ef733390\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the minor group with 8 updates (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/fa8b5bd426fec07a85203d6a6e4b83d173243cf1\"\u003e\u003ccode\u003efa8b5bd\u003c/code\u003e\u003c/a\u003e feat: Update schema to 1.17.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v0.16.1...v1.2.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `read-package-up` from 11.0.0 to 12.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sindresorhus/read-package-up/releases\"\u003eread-package-up's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev12.0.0\u003c/h2\u003e\n\u003ch3\u003eBreaking\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Node.js 20  7b5b52a\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate dependencies  7b5b52a\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/read-package-up/compare/v11.0.0...v12.0.0\"\u003ehttps://github.com/sindresorhus/read-package-up/compare/v11.0.0...v12.0.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/read-package-up/commit/a9236d35b77d34d22a33e5efeec823ff305e5e3c\"\u003e\u003ccode\u003ea9236d3\u003c/code\u003e\u003c/a\u003e 12.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/read-package-up/commit/7b5b52a4cfebc19484c13f8fcffb5fb568ad74be\"\u003e\u003ccode\u003e7b5b52a\u003c/code\u003e\u003c/a\u003e Require Node.js 20\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sindresorhus/read-package-up/compare/v11.0.0...v12.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@octokit/rest` from 22.0.0 to 22.0.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/octokit/rest.js/releases\"\u003e@​octokit/rest's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev22.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/octokit/rest.js/compare/v22.0.0...v22.0.1\"\u003e22.0.1\u003c/a\u003e (2025-10-31)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update octokit monorepo (major) (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/538\"\u003e#538\u003c/a\u003e) (\u003ca href=\"https://github.com/octokit/rest.js/commit/ded2f177625fc1ac6b42a85b36930b46f47012ee\"\u003eded2f17\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/daa3ec945e9f1bb77e7ee14ea80d3e823b6d31ca\"\u003e\u003ccode\u003edaa3ec9\u003c/code\u003e\u003c/a\u003e ci(action): update actions/setup-node action to v6 (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/534\"\u003e#534\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/1dec0c790a4fd2906fb8b52d6eed1be497de1783\"\u003e\u003ccode\u003e1dec0c7\u003c/code\u003e\u003c/a\u003e ci(action): update peter-evans/create-or-update-comment action to v5 (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/531\"\u003e#531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/ded2f177625fc1ac6b42a85b36930b46f47012ee\"\u003e\u003ccode\u003eded2f17\u003c/code\u003e\u003c/a\u003e fix(deps): update octokit monorepo (major) (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/538\"\u003e#538\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/0e0eaea0f259a9b9b5145457f7f8457dae08521b\"\u003e\u003ccode\u003e0e0eaea\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency \u003ccode\u003e@​types/node\u003c/code\u003e to v24 (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/537\"\u003e#537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/c04acc897f017c2a37ee75f1a193c35903b465f1\"\u003e\u003ccode\u003ec04acc8\u003c/code\u003e\u003c/a\u003e chore(deps): update vitest monorepo to v4 (major) (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/536\"\u003e#536\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/e6dd3063e552cd884b0c86e40ba6cfdc374304e7\"\u003e\u003ccode\u003ee6dd306\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency undici to v7 (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/474\"\u003e#474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/5f380d04bbb71a9c2d3d241438378e6ebffe2597\"\u003e\u003ccode\u003e5f380d0\u003c/code\u003e\u003c/a\u003e build(deps-dev): Bump form-data from 4.0.2 to 4.0.4 in /docs (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/520\"\u003e#520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/dc6827d06231ae01ba85608b64d0c7e4b9bd6e04\"\u003e\u003ccode\u003edc6827d\u003c/code\u003e\u003c/a\u003e build(deps-dev): Bump tar-fs from 2.1.2 to 2.1.3 in /docs (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/516\"\u003e#516\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/octokit/rest.js/compare/v22.0.0...v22.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@types/minimatch` from 5.1.2 to 6.0.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/minimatch\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@vitest/coverage-v8` from 3.2.4 to 4.1.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003e@​vitest/coverage-v8's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.10\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Check fs access in builtin commands [backport to v4]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eOpenCode (claude-opus-4-8)\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10680\"\u003evitest-dev/vitest#10680\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5c18dd267\"\u003e\u003c!-- raw HTML omitted --\u003e(5c18d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evm\u003c/strong\u003e: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by \u003ca href=\"https://github.com/SveLil\"\u003e\u003ccode\u003e@​SveLil\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10661\"\u003evitest-dev/vitest#10661\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/bae52b511\"\u003e\u003c!-- raw HTML omitted --\u003e(bae52)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.9\u003c/h2\u003e\n\u003ch3\u003e🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eimportOriginal\u003c/code\u003e with optimizer and query import [backport to v4] - by \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e, \u003cstrong\u003eDavid Harris\u003c/strong\u003e, \u003cstrong\u003eCodex\u003c/strong\u003eand \u003cstrong\u003eVladimir\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10546\"\u003evitest-dev/vitest#10546\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a5180190c\"\u003e\u003c!-- raw HTML omitted --\u003e(a5180)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eWait for orchestrator readiness before resolving browser sessions [backport to v4] - by \u003cstrong\u003eVladimir\u003c/strong\u003e and \u003cstrong\u003eSéamus O'Connor\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10555\"\u003evitest-dev/vitest#10555\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/7fb29651a\"\u003e\u003c!-- raw HTML omitted --\u003e(7fb29)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWait for iframe tester readiness before preparing  [backport to v4] - by \u003cstrong\u003eVladimir\u003c/strong\u003e and \u003cstrong\u003eSéamus O'Connor\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10497\"\u003evitest-dev/vitest#10497\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10556\"\u003evitest-dev/vitest#10556\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/fbc626c40\"\u003e\u003c!-- raw HTML omitted --\u003e(fbc62)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emocker\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eHoist vi.mock() for vite-plus/test imports [backport to v4] - by \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e, \u003cstrong\u003eLongYinan\u003c/strong\u003e, \u003cstrong\u003eClaude Opus 4.8\u003c/strong\u003e and \u003cstrong\u003eVladimir\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10548\"\u003evitest-dev/vitest#10548\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/2c9559c02\"\u003e\u003c!-- raw HTML omitted --\u003e(2c955)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epool\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePrevent test run hang on worker crash  [backport to v4] - by \u003cstrong\u003eAri Perkkiö\u003c/strong\u003e and \u003cstrong\u003eJattioui Ismail\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10543\"\u003evitest-dev/vitest#10543\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10564\"\u003evitest-dev/vitest#10564\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/934b0f587\"\u003e\u003c!-- raw HTML omitted --\u003e(934b0)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.8...v4.1.9\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.8\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eDisable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [backport to v4]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCodex\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10450\"\u003evitest-dev/vitest#10450\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e4067b3b1\"\u003e\u003c!-- raw HTML omitted --\u003e(e4067)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by \u003ca href=\"https://github.com/toxik\"\u003e\u003ccode\u003e@​toxik\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Zelys-DFKH\"\u003e\u003ccode\u003e@​Zelys-DFKH\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10474\"\u003evitest-dev/vitest#10474\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/675b4343f\"\u003e\u003c!-- raw HTML omitted --\u003e(675b4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.7...v4.1.8\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.7\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erunner\u003c/strong\u003e: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10384\"\u003evitest-dev/vitest#10384\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4f0f2a1ee\"\u003e\u003c!-- raw HTML omitted --\u003e(4f0f2)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.6...v4.1.7\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.6\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Provide project reference in \u003ccode\u003eToMatchScreenshotResolvePath\u003c/code\u003e  -  by \u003ca href=\"https://github.com/macarie\"\u003e\u003ccode\u003e@​macarie\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10138\"\u003evitest-dev/vitest#10138\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/31882607c\"\u003e\u003c!-- raw HTML omitted --\u003e(31882)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGlobal \u003ccode\u003esequence.concurrent: true\u003c/code\u003e with top-level \u003ccode\u003etest(..., { concurrent: false })\u003c/code\u003e + depreacte \u003ccode\u003esequential\u003c/code\u003e test API and options  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eCodex\u003c/strong\u003e and \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10196\"\u003evitest-dev/vitest#10196\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/2847dfa2a\"\u003e\u003c!-- raw HTML omitted --\u003e(2847d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Simplify orchestrator otel carrier  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10285\"\u003evitest-dev/vitest#10285\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/18af98cee\"\u003e\u003c!-- raw HTML omitted --\u003e(18af9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🏎 Performance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eStringify diff objects only once  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10276\"\u003evitest-dev/vitest#10276\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9f7b1528c\"\u003e\u003c!-- raw HTML omitted --\u003e(9f7b1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.5...v4.1.6\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46\"\u003e\u003ccode\u003edb616d2\u003c/code\u003e\u003c/a\u003e chore: release v4.1.10 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/10718\"\u003e#10718\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a7a61e78c7d0718f00173cff6800a91a344457d4\"\u003e\u003ccode\u003ea7a61e7\u003c/code\u003e\u003c/a\u003e chore: release v4.1.9 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/10598\"\u003e#10598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/e61f2dd2a0ba0a266c1c5e0334aad3799fee527f\"\u003e\u003ccode\u003ee61f2dd\u003c/code\u003e\u003c/a\u003e chore: release v4.1.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/e4067b3b150005fd42cf75f994300119245806b9\"\u003e\u003ccode\u003ee4067b3\u003c/code\u003e\u003c/a\u003e fix(browser): disable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a09d47236e19fd3151351080c667036ca6164dc4\"\u003e\u003ccode\u003ea09d472\u003c/code\u003e\u003c/a\u003e chore: release v4.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a8fd24c1cad2320b19fcc651413c7d928423bdc1\"\u003e\u003ccode\u003ea8fd24c\u003c/code\u003e\u003c/a\u003e chore: release v4.1.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/e399846850fedf10b8228cbe46a419628998acd9\"\u003e\u003ccode\u003ee399846\u003c/code\u003e\u003c/a\u003e chore: release v4.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/ac04bac206f49d793e7277084f707aee718aa936\"\u003e\u003ccode\u003eac04bac\u003c/code\u003e\u003c/a\u003e chore: release v4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/2dc0d62eaf08d8acb1f5042fdb8ac5b4a19fdc73\"\u003e\u003ccode\u003e2dc0d62\u003c/code\u003e\u003c/a\u003e chore: release v4.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/fc6f482f4c54bf6a766a0ff502b9843994af5bf5\"\u003e\u003ccode\u003efc6f482\u003c/code\u003e\u003c/a\u003e chore: release v4.1.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​vitest/coverage-v8\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@vitest/eslint-plugin` from 1.3.4 to 1.6.23\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/releases\"\u003e@​vitest/eslint-plugin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.6.23\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eprefer-expect-assertions\u003c/strong\u003e: Add disallowHasAssertions option  -  by \u003ca href=\"https://github.com/ssssota\"\u003e\u003ccode\u003e@​ssssota\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/929\"\u003evitest-dev/eslint-plugin-vitest#929\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/5e1e140\"\u003e\u003c!-- raw HTML omitted --\u003e(5e1e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e8 warnings for unexpected node version input  -  by \u003ca href=\"https://github.com/hirehamir\"\u003e\u003ccode\u003e@​hirehamir\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/928\"\u003evitest-dev/eslint-plugin-vitest#928\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/394ddb6\"\u003e\u003c!-- raw HTML omitted --\u003e(394dd)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evalid-expect\u003c/strong\u003e: Handle static expect APIs  -  by \u003ca href=\"https://github.com/w3lld1\"\u003e\u003ccode\u003e@​w3lld1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/930\"\u003evitest-dev/eslint-plugin-vitest#930\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/792320a\"\u003e\u003c!-- raw HTML omitted --\u003e(79232)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.6.22...v1.6.23\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev1.6.22\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eHandle expect.any separately from Chai any flag  -  by \u003ca href=\"https://github.com/nami8824\"\u003e\u003ccode\u003e@​nami8824\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/925\"\u003evitest-dev/eslint-plugin-vitest#925\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/3415709\"\u003e\u003c!-- raw HTML omitted --\u003e(34157)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.6.21...v1.6.22\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev1.6.21\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport Chai-style expect chains  -  by \u003ca href=\"https://github.com/nami8824\"\u003e\u003ccode\u003e@​nami8824\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/920\"\u003evitest-dev/eslint-plugin-vitest#920\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/52692a4\"\u003e\u003c!-- raw HTML omitted --\u003e(52692)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eprefer-called-with\u003c/strong\u003e: Map calledOnce matcher to exact once with  -  by \u003ca href=\"https://github.com/nami8824\"\u003e\u003ccode\u003e@​nami8824\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/918\"\u003evitest-dev/eslint-plugin-vitest#918\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/8f671ac\"\u003e\u003c!-- raw HTML omitted --\u003e(8f671)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.6.20...v1.6.21\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev1.6.20\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehoisted-apis-on-top\u003c/strong\u003e: Detect vitest.mock and aliased vi/vitest mock calls  -  by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/909\"\u003evitest-dev/eslint-plugin-vitest#909\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/8fff969\"\u003e\u003c!-- raw HTML omitted --\u003e(8fff9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003erequire-test-timeout\u003c/strong\u003e: Treat imported bindings as explicit timeouts  -  by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/906\"\u003evitest-dev/eslint-plugin-vitest#906\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/bd82c7d\"\u003e\u003c!-- raw HTML omitted --\u003e(bd82c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evalid-expect\u003c/strong\u003e: Treat .finally() as part of async assertion promise chains  -  by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/908\"\u003evitest-dev/eslint-plugin-vitest#908\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/7c697f8\"\u003e\u003c!-- raw HTML omitted --\u003e(7c697)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.6.19...v1.6.20\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev1.6.19\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eNo significant changes\u003c/em\u003e\u003c/p\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.6.18...v1.6.19\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev1.6.18\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect \u003ccode\u003erequiresTypeChecking\u003c/code\u003e metadata for four rules  -  by \u003ca href=\"https://github.com/inglec-arista\"\u003e\u003ccode\u003e@​inglec-arista\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/905\"\u003evitest-dev/eslint-plugin-vitest#905\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/e06a3dc\"\u003e\u003c!-- raw HTML omitted --\u003e(e06a3)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.6.17...v1.6.18\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev1.6.17\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/8ce98573b45c2ddd6d1f6302bf51417649862cce\"\u003e\u003ccode\u003e8ce9857\u003c/code\u003e\u003c/a\u003e chore: release v1.6.23\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/5e1e140db75417a983cd694261872b620f2a3652\"\u003e\u003ccode\u003e5e1e140\u003c/code\u003e\u003c/a\u003e feat(prefer-expect-assertions): add disallowHasAssertions option (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/929\"\u003e#929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/792320aa7c811cef52e682802e3f27ab32822dbf\"\u003e\u003ccode\u003e792320a\u003c/code\u003e\u003c/a\u003e fix(valid-expect): handle static expect APIs (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/930\"\u003e#930\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/394ddb6c9afb1e99fcf791027fb550c7e665b0a9\"\u003e\u003ccode\u003e394ddb6\u003c/code\u003e\u003c/a\u003e fix: 8 warnings for unexpected node version input (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/928\"\u003e#928\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/61bc715e893742f6030e325c6b647530305b3012\"\u003e\u003ccode\u003e61bc715\u003c/code\u003e\u003c/a\u003e chore: release v1.6.22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/34157096f6a1aafee152ac88bd4e2ba845a9d377\"\u003e\u003ccode\u003e3415709\u003c/code\u003e\u003c/a\u003e fix: handle expect.any separately from Chai any flag (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/925\"\u003e#925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/ffe3299c5073878b18765c97c858417f3bbf7ca9\"\u003e\u003ccode\u003effe3299\u003c/code\u003e\u003c/a\u003e chore: release v1.6.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/af7ac0c0ab0d48a7165e8517fdd9cbc241dc3019\"\u003e\u003ccode\u003eaf7ac0c\u003c/code\u003e\u003c/a\u003e Initial support for aroundEach  and aroundAll hooks (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/923\"\u003e#923\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/52692a40e27129e36f6bbbb1327c12f21581355d\"\u003e\u003ccode\u003e52692a4\u003c/code\u003e\u003c/a\u003e fix: support Chai-style expect chains (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/920\"\u003e#920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/8f671acaad21a9cdc0b254c977cbb849eb46c451\"\u003e\u003ccode\u003e8f671ac\u003c/code\u003e\u003c/a\u003e fix(prefer-called-with): map calledOnce matcher to exact once with (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/918\"\u003e#918\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.3.4...v1.6.23\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `cross-env` from 7.0.3 to 10.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/kentcdodds/cross-env/releases\"\u003ecross-env's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.1.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/compare/v10.0.0...v10.1.0\"\u003e10.1.0\u003c/a\u003e (2025-09-29)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd support for default value syntax (\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/152ae6a85b5725ac3c725a8a3e471aee79acc712\"\u003e152ae6a\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFor example:\u003c/p\u003e\n\u003cpre lang=\"json\"\u003e\u003ccode\u003e\u0026quot;dev:server\u0026quot;: \u0026quot;cross-env wrangler dev --port ${PORT:-8787}\u0026quot;,\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eIf \u003ccode\u003ePORT\u003c/code\u003e is already set, use that value, otherwise fallback to \u003ccode\u003e8787\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eLearn more about \u003ca href=\"https://www.gnu.org/software/bash/manual/html_node/Shell-Parameter-Expansion.html\"\u003eShell Parameter Expansion\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.0.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/compare/v9.0.0...v10.0.0\"\u003e10.0.0\u003c/a\u003e (2025-07-25)\u003c/h1\u003e\n\u003cp\u003eTL;DR: You should probably not have to change anything if:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eYou're using a modern maintained version of Node.js (v20+ is tested)\u003c/li\u003e\n\u003cli\u003eYou're only using the CLI (most of you are as that's the intended purpose)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn this release (which should have been v8 except I had some issues with automated releases 🙈), I've updated all the things and modernized the package. This happened in \u003ca href=\"https://redirect.github.com/kentcdodds/cross-env/issues/261\"\u003e#261\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWas this needed? Not really, but I just thought it'd be fun to modernize this package.\u003c/p\u003e\n\u003cp\u003eHere's the highlights of what was done.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eReplace Jest with Vitest for testing\u003c/li\u003e\n\u003cli\u003eConvert all source files from .js to .ts with proper TypeScript types\u003c/li\u003e\n\u003cli\u003eUse zshy for ESM-only builds (removes CJS support)\u003c/li\u003e\n\u003cli\u003eAdopt \u003ccode\u003e@​epic-web/config\u003c/code\u003e for TypeScript, ESLint, and Prettier\u003c/li\u003e\n\u003cli\u003eUpdate to Node.js \u0026gt;=20 requirement\u003c/li\u003e\n\u003cli\u003eRemove kcd-scripts dependency\u003c/li\u003e\n\u003cli\u003eAdd comprehensive e2e tests with GitHub Actions matrix testing\u003c/li\u003e\n\u003cli\u003eUpdate GitHub workflow with caching and cross-platform testing\u003c/li\u003e\n\u003cli\u003eModernize documentation and remove outdated sections\u003c/li\u003e\n\u003cli\u003eUpdate all dependencies to latest versions\u003c/li\u003e\n\u003cli\u003eAdd proper TypeScript declarations and exports\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe tool maintains its original functionality while being completely modernized with the latest tooling and best practices\u003c/p\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThis is a major rewrite that changes the module format from CommonJS to ESM-only. The package now requires Node.js \u0026gt;=20 and only exports ESM modules (not relevant in most cases).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/152ae6a85b5725ac3c725a8a3e471aee79acc712\"\u003e\u003ccode\u003e152ae6a\u003c/code\u003e\u003c/a\u003e feat: add support ofr default value syntax\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/bd70d1ab25b0e0b9b2926b048bf8ca52668a393c\"\u003e\u003ccode\u003ebd70d1a\u003c/code\u003e\u003c/a\u003e chore: upgrade zshy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/8e0b190df9f90266c720aafe6f24d43eee93fa1b\"\u003e\u003ccode\u003e8e0b190\u003c/code\u003e\u003c/a\u003e chore(ci): get coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/8635e80e81080f3e8f83b514565dc6bfecf6760c\"\u003e\u003ccode\u003e8635e80\u003c/code\u003e\u003c/a\u003e fix(release): manually release a major version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/3a58f2236009b2f52479f2927c7790129450ec63\"\u003e\u003ccode\u003e3a58f22\u003c/code\u003e\u003c/a\u003e chore: fix npmrc registry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/b70bfff5ecff5c92f2462cd6334378ef5bd84db0\"\u003e\u003ccode\u003eb70bfff\u003c/code\u003e\u003c/a\u003e chore(ci): add names to steps and workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/cc5759dc36012c4b13b3d3b1af5e0a645d3c55f6\"\u003e\u003ccode\u003ecc5759d\u003c/code\u003e\u003c/a\u003e fix(release): manually release a major version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/080a8591909665f42592d73e1149d0a061164045\"\u003e\u003ccode\u003e080a859\u003c/code\u003e\u003c/a\u003e chore: remove publish script\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/31e5bc70e726dee8e453dd64d54ad02eeb66e23a\"\u003e\u003ccode\u003e31e5bc7\u003c/code\u003e\u003c/a\u003e chore(ci): restore built files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/81e9c34f55c483dc1f568696db36267748b3740d\"\u003e\u003ccode\u003e81e9c34\u003c/code\u003e\u003c/a\u003e chore(ci): add back semantic-release\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kentcdodds/cross-env/compare/v7.0.3...v10.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `esbuild` from 0.25.0 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evanw/esbuild/releases\"\u003eesbuild's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDisallow \u003ccode\u003e\\\u003c/code\u003e in local development server HTTP requests (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr\"\u003eGHSA-g7r4-m6w7-qqqr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThis release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \u003ccode\u003e\\\u003c/code\u003e backslash character. It happened due to the use of Go's \u003ccode\u003epath.Clean()\u003c/code\u003e function, which only handles Unix-style \u003ccode\u003e/\u003c/code\u003e characters. HTTP requests with paths containing \u003ccode\u003e\\\u003c/code\u003e are no longer allowed.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/dellalibera\"\u003e\u003ccode\u003e@​dellalibera\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd integrity checks to the Deno API (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr\"\u003eGHSA-gv7w-rqvm-qjhr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.\u003c/p\u003e\n\u003cp\u003eNote that esbuild's Deno API installs from \u003ccode\u003eregistry.npmjs.org\u003c/code\u003e by default, but allows the \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e environment variable to override this with a custom package registry. This change means that the esbuild executable served by \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e must now match the expected content.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/sondt99\"\u003e\u003ccode\u003e@​sondt99\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAvoid inlining \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild's minifier sometimes incorrectly inlined \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for \u003ccode\u003elet\u003c/code\u003e and \u003ccode\u003econst\u003c/code\u003e declarations by avoiding doing it for \u003ccode\u003evar\u003c/code\u003e declarations, which no longer worked when more declaration types were added. Here's an example:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\r\n{\r\n  using x = new Resource()\r\n  x.activate()\r\n}\r\n\u003cp\u003e// Old output (with --minify)\u003cbr /\u003e\nnew Resource().activate();\u003c/p\u003e\n\u003cp\u003e// New output (with --minify)\u003cbr /\u003e\n{using e=new Resource;e.activate()}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix module evaluation when an error is thrown (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4461\"\u003e#4461\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/pull/4467\"\u003e#4467\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eIf an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e is used to import a module multiple times. The thrown error is supposed to be thrown by every call to \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e, not just the first. With this release, esbuild will now throw the same error every time you call \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e on a module that throws during its evaluation.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix some edge cases around the \u003ccode\u003enew\u003c/code\u003e operator (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4477\"\u003e#4477\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a \u003ccode\u003enew\u003c/code\u003e expression (specifically an optional chain and/or a tagged template literal). The generated code for the \u003ccode\u003enew\u003c/code\u003e target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the \u003ccode\u003enew\u003c/code\u003e target in parentheses. Here is an example of some affected code:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\r\nnew (foo()`bar`)()\r\nnew (foo()?.bar)()\r\n\u003cp\u003e// Old output\u003cbr /\u003e\nnew foo()\u003ccode\u003ebar\u003c/code\u003e();\u003cbr /\u003e\nnew (foo())?.bar();\u003c/p\u003e\n\u003cp\u003e\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md\"\u003eesbuild's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog: 2025\u003c/h1\u003e\n\u003cp\u003eThis changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).\u003c/p\u003e\n\u003ch2\u003e0.27.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAllow import path specifiers starting with \u003ccode\u003e#/\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/evanw/esbuild/pull/4361\"\u003e#4361\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously the specification for \u003ccode\u003epackage.json\u003c/code\u003e disallowed import path specifiers starting with \u003ccode\u003e#/\u003c/code\u003e, but this restriction \u003ca href=\"https://redirect.github.com/nodejs/node/pull/60864\"\u003ehas recently been relaxed\u003c/a\u003e and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping \u003ccode\u003e#/*\u003c/code\u003e to \u003ccode\u003e./src/*\u003c/code\u003e (previously you had to use another character such as \u003ccode\u003e#_*\u003c/code\u003e instead, which was more confusing). There is some more context in \u003ca href=\"https://redirect.github.com/nodejs/node/issues/49182\"\u003enodejs/node#49182\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThis change was contributed by \u003ca href=\"https://github.com/hybrist\"\u003e\u003ccode\u003e@​hybrist\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAutomatically add the \u003ccode\u003e-webkit-mask\u003c/code\u003e prefix (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4357\"\u003e#4357\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4358\"\u003e#4358\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThis release automatically adds the \u003ccode\u003e-webkit-\u003c/code\u003e vendor prefix for the \u003ca href=\"https://developer.mozilla.org/en-US/docs/Web/CSS/Reference/Properties/mask\"\u003e\u003ccode\u003emask\u003c/code\u003e\u003c/a\u003e CSS shorthand property:\u003c/p\u003e\n\u003cpre lang=\"css\"\u003e\u003ccode\u003e/* Original code */\nmain {\n  mask: url(x.png) center/5rem no-repeat\n}\n\u003cp\u003e/* Old output (with --target=chrome110) */\u003cbr /\u003e\nmain {\u003cbr /\u003e\nmask: url(x.png) center/5rem no-repeat;\u003cbr /\u003e\n}\u003c/p\u003e\n\u003cp\u003e/* New output (with --target=chrome110) */\u003cbr /\u003e\nmain {\u003cbr /\u003e\n-webkit-mask: url(x.png) center/5rem no-repeat;\u003cbr /\u003e\nmask: url(x.png) center/5rem no-repeat;\u003cbr /\u003e\n}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eThis change was contributed by \u003ca href=\"https://github.com/BPJEnnova\"\u003e\u003ccode\u003e@​BPJEnnova\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdditional minification of \u003ccode\u003eswitch\u003c/code\u003e statements (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4176\"\u003e#4176\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4359\"\u003e#4359\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThis release contains additional minification patterns for reducing \u003ccode\u003eswitch\u003c/code\u003e statements. Here is an example:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\nswitch (x) {\n  case 0:\n    foo()\n    break\n  case 1:\n  default:\n    bar()\n}\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/bb9db84c02433fbe37b3509f53f9f3e3cc48725e\"\u003e\u003ccode\u003ebb9db84\u003c/code\u003e\u003c/a\u003e publish 0.28.1 to npm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/9ff053e53b8eeb990f59355dbea365277ac45ee2\"\u003e\u003ccode\u003e9ff053e\u003c/code\u003e\u003c/a\u003e security: add integrity checks to the Deno API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/0a9bf2135b67c7e28989a5ba19f0f000805a5ab5\"\u003e\u003ccode\u003e0a9bf21\u003c/code\u003e\u003c/a\u003e enforce non-negative size in gzip parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/e2a1a7132058ee067fe736eac15f695861b8654e\"\u003e\u003ccode\u003ee2a1a71\u003c/code\u003e\u003c/a\u003e security: forbid \u003ccode\u003e\\\\\u003c/code\u003e in local dev server requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/83a2cbfc35809f4fd5152da59572d7bed7739d78\"\u003e\u003ccode\u003e83a2cbf\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e: don't inline \u003ccode\u003eusing\u003c/code\u003e declarations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/308ad745d824c77bc607603451b257d0f2fd9a38\"\u003e\u003ccode\u003e308ad74\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4471\"\u003e#4471\u003c/a\u003e: renaming of nested \u003ccode\u003evar\u003c/code\u003e declarations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.c...\n\n_Description has been truncated_","html_url":"https://github.com/helis-d/waylou/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/helis-d%2Fwaylou/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"},{"uuid":"4916648607","node_id":"PR_kwDOFRr9wM7zP0Id","number":1596,"state":"closed","title":"build(deps): bump the all-monorepo-security group across 3 directories with 20 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-07-18T04:14:56.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-18T04:13:19.000Z","updated_at":"2026-07-18T04:15:54.000Z","time_to_close":97,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"all-monorepo-security","update_count":20,"packages":[{"name":"@angular/common","old_version":"20.3.16","new_version":"20.3.25","repository_url":"https://github.com/angular/angular"},{"name":"@angular/compiler","old_version":"20.3.16","new_version":"20.3.25","repository_url":"https://github.com/angular/angular"},{"name":"@angular/core","old_version":"20.3.16","new_version":"22.0.7","repository_url":"https://github.com/angular/angular"},{"name":"hono","old_version":"4.11.7","new_version":"4.12.30","repository_url":"https://github.com/honojs/hono"},{"name":"qs","old_version":"6.14.2","new_version":"6.15.3","repository_url":"https://github.com/ljharb/qs"},{"name":"tar","old_version":"7.5.9","new_version":"7.5.20","repository_url":"https://github.com/isaacs/node-tar"},{"name":"tmp","old_version":"0.2.5","new_version":"0.2.7","repository_url":"https://github.com/raszi/node-tmp"},{"name":"ws","old_version":"8.18.3","new_version":"8.21.1","repository_url":"https://github.com/websockets/ws"}],"path":null,"ecosystem":"npm"},"body":"Bumps the all-monorepo-security group with 8 updates in the /angular directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `20.3.16` | `20.3.25` |\n| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `20.3.16` | `20.3.25` |\n| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `20.3.16` | `22.0.7` |\n| [hono](https://github.com/honojs/hono) | `4.11.7` | `4.12.30` |\n| [qs](https://github.com/ljharb/qs) | `6.14.2` | `6.15.3` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.9` | `7.5.20` |\n| [tmp](https://github.com/raszi/node-tmp) | `0.2.5` | `0.2.7` |\n| [ws](https://github.com/websockets/ws) | `8.18.3` | `8.21.1` |\n\nBumps the all-monorepo-security group with 5 updates in the /express directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.0.0` | `4.3.0` |\n| [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.15.3` |\n| [axios](https://github.com/axios/axios) | `1.13.5` | `1.16.0` |\n| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.0.1` | `2.9.0` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n\nBumps the all-monorepo-security group with 12 updates in the /next directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.24.7` | `7.29.7` |\n| [hono](https://github.com/honojs/hono) | `4.11.7` | `4.12.30` |\n| [qs](https://github.com/ljharb/qs) | `6.14.1` | `6.15.3` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.1` | `1.10.0` |\n| [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.19` |\n| [ws](https://github.com/websockets/ws) | `8.18.0` | `8.21.1` |\n| [ws](https://github.com/websockets/ws) | `7.5.10` | `7.5.13` |\n| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.5.0` | `2.9.0` |\n| [form-data](https://github.com/form-data/form-data) | `3.0.1` | `3.0.5` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.2.4` | `3.4.11` |\n| [js-cookie](https://github.com/js-cookie/js-cookie) | `3.0.5` | `3.0.7` |\n| [next](https://github.com/vercel/next.js) | `15.5.12` | `15.5.18` |\n| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `6.30.3` | `7.18.1` |\n\n\nUpdates `@angular/common` from 20.3.16 to 20.3.25\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/releases\"\u003e@​angular/common's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.3.25\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e\u003cimg src=\"https://img.shields.io/badge/9f443bc24c-fix-green\" alt=\"fix - 9f443bc24c\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003cimg src=\"https://img.shields.io/badge/566ad05f20-fix-green\" alt=\"fix - 566ad05f20\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003cimg src=\"https://img.shields.io/badge/1a62130a6b-fix-green\" alt=\"fix - 1a62130a6b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003e\u003cimg src=\"https://img.shields.io/badge/a68ec702a0-fix-green\" alt=\"fix - a68ec702a0\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e\u003cimg src=\"https://img.shields.io/badge/768a349e6e-fix-green\" alt=\"fix - 768a349e6e\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003e\u003cimg src=\"https://img.shields.io/badge/ca48b4728d-fix-green\" alt=\"fix - ca48b4728d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/common/issues/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e\u003cimg src=\"https://img.shields.io/badge/06be298267-fix-green\" alt=\"fix - 06be298267\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003e\u003cimg src=\"https://img.shields.io/badge/fa940e1f4d-fix-green\" alt=\"fix - fa940e1f4d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003e\u003cimg src=\"https://img.shields.io/badge/e2ef1ce72a-fix-green\" alt=\"fix - e2ef1ce72a\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e\u003cimg src=\"https://img.shields.io/badge/49368c1859-fix-green\" alt=\"fix - 49368c1859\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003e\u003cimg src=\"https://img.shields.io/badge/d55c94ad81-refactor-yellow\" alt=\"refactor - d55c94ad81\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/common/issues/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d65a5f457b-fix-green\" alt=\"fix - d65a5f457b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e20.3.24\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/6ca433e56bcf74fdb6ad01d3afdf59628fba69b6\"\u003e\u003cimg src=\"https://img.shields.io/badge/6ca433e56b-fix-green\" alt=\"fix - 6ca433e56b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003ethrow on suspicious URLs and restrict protocol-relative URLs\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/8680b5152fe58ebde81e331b74ba806fc86514cc\"\u003e\u003cimg src=\"https://img.shields.io/badge/8680b5152f-fix-green\" alt=\"fix - 8680b5152f\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eupdate domino to latest version\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.23\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d40acc6431997b304ec54c951e55d2e52ed6f6dc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d40acc6431-fix-green\" alt=\"fix - d40acc6431\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent namespaced SVG \u003c!-- raw HTML omitted --\u003e elements from being stripped\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.22\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/blob/main/CHANGELOG.md\"\u003e@​angular/common's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e20.3.25 (2026-06-10)\u003c/h1\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e9f443bc24c\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e566ad05f20\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e1a62130a6b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003ea68ec702a0\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e768a349e6e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003eca48b4728d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e06be298267\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003efa940e1f4d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003ee2ef1ce72a\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e49368c1859\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003ed55c94ad81\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003erefactor\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003ed65a5f457b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e22.0.0 (2026-06-03)\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://goo.gle/angular-v22-blog\"\u003eBlog post \u0026quot;Announcing Angular v22\u0026quot;\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eBreaking Changes\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThis change will trigger the \u003ccode\u003enullishCoalescingNotNullable\u003c/code\u003e and \u003ccode\u003eoptionalChainNotNullable\u003c/code\u003e diagnostics on exisiting projects.\nYou might want to disable those 2 diagnotiscs in your \u003ccode\u003etsconfig\u003c/code\u003e temporarily.\u003c/li\u003e\n\u003cli\u003edata prefixed attribute no-longer bind inputs nor outputs.\u003c/li\u003e\n\u003cli\u003eThe compiler will throw when there a when inputs, outputs or model are binding to the same input/outputs.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ein\u003c/code\u003e variables will throw in template expressions.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e\u003ccode\u003e06be298\u003c/code\u003e\u003c/a\u003e fix(http): preserve empty referrer option in HttpRequest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e\u003ccode\u003e9f443bc\u003c/code\u003e\u003c/a\u003e fix(common): Limits date format string length\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003e\u003ccode\u003efa940e1\u003c/code\u003e\u003c/a\u003e fix(http): Rejects non-HTTP(S) URLs in JSONP requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003ccode\u003e1a62130\u003c/code\u003e\u003c/a\u003e fix(common): use cryptographically secure SHA-256 for transfer cache key gene...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003ccode\u003e566ad05\u003c/code\u003e\u003c/a\u003e fix(common): skip transfer cache for uncacheable HTTP traffic\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003e\u003ccode\u003ee2ef1ce\u003c/code\u003e\u003c/a\u003e fix(http): skip transfer cache for fetch credentialed requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/3d135ce59bbf7426825bc493bc681f266846ac79\"\u003e\u003ccode\u003e3d135ce\u003c/code\u003e\u003c/a\u003e fix(common): add upper bounds for digitsInfo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/39a4b4cc8e8d101a566a70658707bc9f53dd5883\"\u003e\u003ccode\u003e39a4b4c\u003c/code\u003e\u003c/a\u003e fix(common): sanitize placeholder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/de7b2a62e7eded747c2a520c177cd41f60a96dcd\"\u003e\u003ccode\u003ede7b2a6\u003c/code\u003e\u003c/a\u003e fix(http): exclude withCredentials requests from transfer cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/4233188d8e70283190ea87dbaa5a872269291b4a\"\u003e\u003ccode\u003e4233188\u003c/code\u003e\u003c/a\u003e fix(http): skip TransferCache for cookie-bearing requests by default\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/angular/angular/commits/v20.3.25/packages/common\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@angular/compiler` from 20.3.16 to 20.3.25\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/releases\"\u003e@​angular/compiler's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.3.25\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e\u003cimg src=\"https://img.shields.io/badge/9f443bc24c-fix-green\" alt=\"fix - 9f443bc24c\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003cimg src=\"https://img.shields.io/badge/566ad05f20-fix-green\" alt=\"fix - 566ad05f20\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003cimg src=\"https://img.shields.io/badge/1a62130a6b-fix-green\" alt=\"fix - 1a62130a6b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003e\u003cimg src=\"https://img.shields.io/badge/a68ec702a0-fix-green\" alt=\"fix - a68ec702a0\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e\u003cimg src=\"https://img.shields.io/badge/768a349e6e-fix-green\" alt=\"fix - 768a349e6e\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003e\u003cimg src=\"https://img.shields.io/badge/ca48b4728d-fix-green\" alt=\"fix - ca48b4728d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e\u003cimg src=\"https://img.shields.io/badge/06be298267-fix-green\" alt=\"fix - 06be298267\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003e\u003cimg src=\"https://img.shields.io/badge/fa940e1f4d-fix-green\" alt=\"fix - fa940e1f4d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003e\u003cimg src=\"https://img.shields.io/badge/e2ef1ce72a-fix-green\" alt=\"fix - e2ef1ce72a\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e\u003cimg src=\"https://img.shields.io/badge/49368c1859-fix-green\" alt=\"fix - 49368c1859\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003e\u003cimg src=\"https://img.shields.io/badge/d55c94ad81-refactor-yellow\" alt=\"refactor - d55c94ad81\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d65a5f457b-fix-green\" alt=\"fix - d65a5f457b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e20.3.24\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/6ca433e56bcf74fdb6ad01d3afdf59628fba69b6\"\u003e\u003cimg src=\"https://img.shields.io/badge/6ca433e56b-fix-green\" alt=\"fix - 6ca433e56b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003ethrow on suspicious URLs and restrict protocol-relative URLs\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/8680b5152fe58ebde81e331b74ba806fc86514cc\"\u003e\u003cimg src=\"https://img.shields.io/badge/8680b5152f-fix-green\" alt=\"fix - 8680b5152f\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eupdate domino to latest version\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.23\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d40acc6431997b304ec54c951e55d2e52ed6f6dc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d40acc6431-fix-green\" alt=\"fix - d40acc6431\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent namespaced SVG \u003c!-- raw HTML omitted --\u003e elements from being stripped\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.22\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/blob/main/CHANGELOG.md\"\u003e@​angular/compiler's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e20.3.25 (2026-06-10)\u003c/h1\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e9f443bc24c\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e566ad05f20\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e1a62130a6b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003ea68ec702a0\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e768a349e6e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003eca48b4728d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e06be298267\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003efa940e1f4d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003ee2ef1ce72a\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e49368c1859\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003ed55c94ad81\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003erefactor\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003ed65a5f457b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e22.0.0 (2026-06-03)\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://goo.gle/angular-v22-blog\"\u003eBlog post \u0026quot;Announcing Angular v22\u0026quot;\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eBreaking Changes\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThis change will trigger the \u003ccode\u003enullishCoalescingNotNullable\u003c/code\u003e and \u003ccode\u003eoptionalChainNotNullable\u003c/code\u003e diagnostics on exisiting projects.\nYou might want to disable those 2 diagnotiscs in your \u003ccode\u003etsconfig\u003c/code\u003e temporarily.\u003c/li\u003e\n\u003cli\u003edata prefixed attribute no-longer bind inputs nor outputs.\u003c/li\u003e\n\u003cli\u003eThe compiler will throw when there a when inputs, outputs or model are binding to the same input/outputs.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ein\u003c/code\u003e variables will throw in template expressions.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003e\u003ccode\u003ea68ec70\u003c/code\u003e\u003c/a\u003e fix(compiler): sanitize two-way properties\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/d40acc6431997b304ec54c951e55d2e52ed6f6dc\"\u003e\u003ccode\u003ed40acc6\u003c/code\u003e\u003c/a\u003e fix(compiler): prevent namespaced SVG \u0026lt;style\u0026gt; elements from being stripped\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/7ae6381a4845ad4b13a7a5574c5433b077c93c5c\"\u003e\u003ccode\u003e7ae6381\u003c/code\u003e\u003c/a\u003e test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/36200bd81a3420d8222dfe10767437c383a20fe8\"\u003e\u003ccode\u003e36200bd\u003c/code\u003e\u003c/a\u003e test(core): update spec files to match 20.3.x limits and actual contexts (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68\"\u003e#68\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/823b37f0468f7c8b38637ce93e26fc8db791b282\"\u003e\u003ccode\u003e823b37f\u003c/code\u003e\u003c/a\u003e test(compiler): remove obsolete schema_extractor import (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68926\"\u003e#68926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/e345a58069ede97250af449f5b7e9b94f828d30c\"\u003e\u003ccode\u003ee345a58\u003c/code\u003e\u003c/a\u003e fix(core): normalize tag names in runtime i18n attribute security context loo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/8f35b182b1479ed80d652f185c2c3ee5a82ea34c\"\u003e\u003ccode\u003e8f35b18\u003c/code\u003e\u003c/a\u003e fix(compiler): normalize tag names with custom namespaces in DomElementSchema...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/64a89e917a0794a3d74713bdb4c9c63d703b317b\"\u003e\u003ccode\u003e64a89e9\u003c/code\u003e\u003c/a\u003e fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/6404edfe0af3f27cb96737e72907553fb924d88a\"\u003e\u003ccode\u003e6404edf\u003c/code\u003e\u003c/a\u003e fix(compiler): strip namespaced SVG script elements during template compilati...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/dc631efa96e787bee1277f324208f21c36c1fa71\"\u003e\u003ccode\u003edc631ef\u003c/code\u003e\u003c/a\u003e fix(core): support prefix-insensitive DOM schema lookups and compile-time i18...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/angular/angular/commits/v20.3.25/packages/compiler\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@angular/core` from 20.3.16 to 22.0.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/releases\"\u003e@​angular/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e22.0.7\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d\"\u003e\u003cimg src=\"https://img.shields.io/badge/91e33aa1de-fix-green\" alt=\"fix - 91e33aa1de\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eavoid prototype lookups in date format caches\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1\"\u003e\u003cimg src=\"https://img.shields.io/badge/5b516e3a58-fix-green\" alt=\"fix - 5b516e3a58\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eparsing of an empty template literal interpolation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58\"\u003e\u003cimg src=\"https://img.shields.io/badge/c88ddde1c9-fix-green\" alt=\"fix - c88ddde1c9\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003ere-tag SourceFiles after TsCreateProgramDriver.updateFiles()\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81\"\u003e\u003cimg src=\"https://img.shields.io/badge/94d9591b51-fix-green\" alt=\"fix - 94d9591b51\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eallow static attributes for explicit input transforms\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb\"\u003e\u003cimg src=\"https://img.shields.io/badge/c89f71a74c-fix-green\" alt=\"fix - c89f71a74c\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eignore processing instruction syntax in templates\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397\"\u003e\u003cimg src=\"https://img.shields.io/badge/70500e4067-fix-green\" alt=\"fix - 70500e4067\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003epreserve explicit input transform write type\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eforms\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae\"\u003e\u003cimg src=\"https://img.shields.io/badge/1b9964675f-fix-green\" alt=\"fix - 1b9964675f\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eallow multiple async validators\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4\"\u003e\u003cimg src=\"https://img.shields.io/badge/64d6d47a0c-fix-green\" alt=\"fix - 64d6d47a0c\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003epreserve intermediate number values in signal forms\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157\"\u003e\u003cimg src=\"https://img.shields.io/badge/6cf7446afa-fix-green\" alt=\"fix - 6cf7446afa\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent stale CVA writeback during debounce\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/20b7dc3023df9ccde232cf9fef1d2b1d3ae68b23\"\u003e\u003cimg src=\"https://img.shields.io/badge/20b7dc3023-fix-green\" alt=\"fix - 20b7dc3023\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent interceptor signal reads from leaking into calling reactive contexts\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003elocalize\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/22d5a091d10ac70ece469a4bf69b03c51805614b\"\u003e\u003cimg src=\"https://img.shields.io/badge/22d5a091d1-fix-green\" alt=\"fix - 22d5a091d1\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003ebuild runtime translations map with a null prototype\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/8ce1fcf7faef3ef4b3612e0faeac2701a82c5434\"\u003e\u003cimg src=\"https://img.shields.io/badge/8ce1fcf7fa-fix-green\" alt=\"fix - 8ce1fcf7fa\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003euse Object.hasOwn for placeholder lookup in translate\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-browser\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/b34bf0dce855bca3c6dfcf7e19d38b3b39288a16\"\u003e\u003cimg src=\"https://img.shields.io/badge/b34bf0dce8-fix-green\" alt=\"fix - b34bf0dce8\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent ReDoS in SOURCEMAP_URL_REGEXP\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e22.0.6\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fd4ddcafed340dbc116df9718f03ee9e16c41c18\"\u003e\u003cimg src=\"https://img.shields.io/badge/fd4ddcafed-fix-green\" alt=\"fix - fd4ddcafed\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003euse regular optional chaining expression for safe function calls in TCBs\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/534fe81a8904408f252cbbbd90ca3e46bf5df3c9\"\u003e\u003cimg src=\"https://img.shields.io/badge/534fe81a89-fix-green\" alt=\"fix - 534fe81a89\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eapply debugName transform to required signal queries\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/3b08201bfb63227b9a30e7c40b966412496f115d\"\u003e\u003cimg src=\"https://img.shields.io/badge/3b08201bfb-fix-green\" alt=\"fix - 3b08201bfb\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003edetect uninvoked signals in bound expressions using ternary\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eforms/signals\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/blob/main/CHANGELOG.md\"\u003e@​angular/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e22.0.7 (2026-07-15)\u003c/h1\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d\"\u003e91e33aa1de\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eavoid prototype lookups in date format caches\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1\"\u003e5b516e3a58\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eparsing of an empty template literal interpolation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58\"\u003ec88ddde1c9\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003ere-tag SourceFiles after TsCreateProgramDriver.updateFiles()\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81\"\u003e94d9591b51\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eallow static attributes for explicit input transforms\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb\"\u003ec89f71a74c\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eignore processing instruction syntax in templates\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397\"\u003e70500e4067\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003epreserve explicit input transform write type\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eforms\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae\"\u003e1b9964675f\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eallow multiple async validators\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4\"\u003e64d6d47a0c\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003epreserve intermediate number values in signal forms\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157\"\u003e6cf7446afa\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eprevent stale CVA writeback during debounce\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/20b7dc3023df9ccde232cf9fef1d2b1d3ae68b23\"\u003e20b7dc3023\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eprevent interceptor signal reads from leaking into calling reactive contexts\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003elocalize\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/22d5a091d10ac70ece469a4bf69b03c51805614b\"\u003e22d5a091d1\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003ebuild runtime translations map with a null prototype\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/8ce1fcf7faef3ef4b3612e0faeac2701a82c5434\"\u003e8ce1fcf7fa\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003euse Object.hasOwn for placeholder lookup in translate\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-browser\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/b34bf0dce855bca3c6dfcf7e19d38b3b39288a16\"\u003eb34bf0dce8\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eprevent ReDoS in SOURCEMAP_URL_REGEXP\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e20.3.26 (2026-07-08)\u003c/h1\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/406aaa31e6ac4d3c155f5ab76e315ccd8d0387fe\"\u003e406aaa31e6\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eupdate babel dependencies to latest v7\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/829d98e9ae08b12a2c4a624a64f87660d6dfde26\"\u003e\u003ccode\u003e829d98e\u003c/code\u003e\u003c/a\u003e build: update cross-repo angular dependencies to v22.0.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397\"\u003e\u003ccode\u003e70500e4\u003c/code\u003e\u003c/a\u003e fix(core): preserve explicit input transform write type\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/e881b962cc45ddc7d60da095bac496a7709f25cb\"\u003e\u003ccode\u003ee881b96\u003c/code\u003e\u003c/a\u003e refactor(core): move signal debug graph interfaces to primitives/devtools\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/1046fd9e56b607ddc3f22ffd86af7c3bddec40ce\"\u003e\u003ccode\u003e1046fd9\u003c/code\u003e\u003c/a\u003e refactor(core): remove deprecated \u003ccode\u003eunregisterTool\u003c/code\u003e from \u003ccode\u003eModelContext\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/5936ffb80cf729667951a43b2da479d663fb5c98\"\u003e\u003ccode\u003e5936ffb\u003c/code\u003e\u003c/a\u003e refactor(core): update WebMCP tool registration to be asynchronous\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/c82ae67e3d866daea488c9cb312c45bbb19c7b33\"\u003e\u003ccode\u003ec82ae67\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;fix(core): allow static attributes for explicit input transforms\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/ec9b4793e88828257cae38ac75b8e1c5392022ff\"\u003e\u003ccode\u003eec9b479\u003c/code\u003e\u003c/a\u003e build: update cross-repo angular dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81\"\u003e\u003ccode\u003e94d9591\u003c/code\u003e\u003c/a\u003e fix(core): allow static attributes for explicit input transforms\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae\"\u003e\u003ccode\u003e1b99646\u003c/code\u003e\u003c/a\u003e fix(forms): allow multiple async validators\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/748faa4f95dfdae1570057f7af1bc7031e80a94a\"\u003e\u003ccode\u003e748faa4\u003c/code\u003e\u003c/a\u003e docs(docs-infra): Add build-time validation for API and guide links using rou...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/angular/angular/commits/v22.0.7/packages/core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@babel/plugin-transform-modules-systemjs` from 7.28.5 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/plugin-transform-modules-systemjs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/a458f66074b97d54773db8159af673d23b26079b\"\u003e\u003ccode\u003ea458f66\u003c/code\u003e\u003c/a\u003e v7.29.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/32ebd5aaf2526ddd176fd6a3d1e3dc594abdc8d9\"\u003e\u003ccode\u003e32ebd5a\u003c/code\u003e\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17974\"\u003e#17974\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/aa8394e454337d118ac3d40bfa3ee1a3cb3f3ed2\"\u003e\u003ccode\u003eaa8394e\u003c/code\u003e\u003c/a\u003e v7.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/0053db620c05acf0036f593b5aaf4e372daa79d0\"\u003e\u003ccode\u003e0053db6\u003c/code\u003e\u003c/a\u003e Update polyfill packages (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17727\"\u003e#17727\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/61647ae2397c82c3c71f077b5ab109106a5cac0f\"\u003e\u003ccode\u003e61647ae\u003c/code\u003e\u003c/a\u003e v7.28.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/a177d551adba99773f4ff00ea9bf46550def6132\"\u003e\u003ccode\u003ea177d55\u003c/code\u003e\u003c/a\u003e [Babel 8] Use \u003ccode\u003et.traverseFast\u003c/code\u003e to replace some \u003ccode\u003epath.traverse\u003c/code\u003e (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17518\"\u003e#17518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/eebd3a06021c13d335b5b0bd79734df3abbea678\"\u003e\u003ccode\u003eeebd3a0\u003c/code\u003e\u003c/a\u003e v7.27.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/317e332e650bc04907bc787ab79f930288a3e71e\"\u003e\u003ccode\u003e317e332\u003c/code\u003e\u003c/a\u003e Enforce node protocol import (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17207\"\u003e#17207\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/fdc0fb59e119ee0b38bced63867a344a5b4bc2f3\"\u003e\u003ccode\u003efdc0fb5\u003c/code\u003e\u003c/a\u003e [Babel 8] Bump nodejs requirements to \u003ccode\u003e^20.19.0 || \u0026gt;= 22.12.0\u003c/code\u003e (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17204\"\u003e#17204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-modules-systemjs\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​babel/plugin-transform-modules-systemjs\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `hono` from 4.11.7 to 4.12.30\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/honojs/hono/releases\"\u003ehono's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.12.30\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(benchmark/routers): bump deps in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5107\"\u003ehonojs/hono#5107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(benchmark): remove not used benchmarks in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5108\"\u003ehonojs/hono#5108\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update to ts6 in prep for ts7 in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5104\"\u003ehonojs/hono#5104\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cache): deduplicate Cache-Control directives case-insensitively in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5025\"\u003ehonojs/hono#5025\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compress): do not compress 206 Partial Content responses in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5020\"\u003ehonojs/hono#5020\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(client): replaceUrlParam should not match a param that prefixes another in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5096\"\u003ehonojs/hono#5096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(method-override): set duplex when forwarding a stream body in query mode in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5110\"\u003ehonojs/hono#5110\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.12.29...v4.12.30\"\u003ehttps://github.com/honojs/hono/compare/v4.12.29...v4.12.30\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.12.29\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(client): merge function headers with per-request headers by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5092\"\u003ehonojs/hono#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: fix no-op tsc in test script by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5093\"\u003ehonojs/hono#5093\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(lambda-edge): resolve the handler with the value passed to the callback by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5094\"\u003ehonojs/hono#5094\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(language): add JSDoc \u003ca href=\"https://github.com/example\"\u003e\u003ccode\u003e@​example\u003c/code\u003e\u003c/a\u003e to languageDetector by \u003ca href=\"https://github.com/codebybilal18\"\u003e\u003ccode\u003e@​codebybilal18\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5081\"\u003ehonojs/hono#5081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(workerd): add \u003ccode\u003ecompatibilityDate\u003c/code\u003e by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5100\"\u003ehonojs/hono#5100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(lambda-edge): base64 encode content-encoded response bodies by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5099\"\u003ehonojs/hono#5099\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(aws-lambda): treat any non-identity content-encoding as binary by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5101\"\u003ehonojs/hono#5101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(types): strip extra properties from array types in JSONParsed by \u003ca href=\"https://github.com/Arman-Luthra\"\u003e\u003ccode\u003e@​Arman-Luthra\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5103\"\u003ehonojs/hono#5103\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(trie-router): match empty wildcard remainder after regexp param by \u003ca href=\"https://github.com/usualoma\"\u003e\u003ccode\u003e@​usualoma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5102\"\u003ehonojs/hono#5102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(etag): treat If-None-Match: \u003ccode\u003e*\u003c/code\u003e as a match by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5084\"\u003ehonojs/hono#5084\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/codebybilal18\"\u003e\u003ccode\u003e@​codebybilal18\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5081\"\u003ehonojs/hono#5081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Arman-Luthra\"\u003e\u003ccode\u003e@​Arman-Luthra\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5103\"\u003ehonojs/hono#5103\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.12.28...v4.12.29\"\u003ehttps://github.com/honojs/hono/compare/v4.12.28...v4.12.29\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.12.28\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(serve-static): treat empty string content as found by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5062\"\u003ehonojs/hono#5062\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(MIGRATION): fix req.raw.headers reference (property, not method) by \u003ca href=\"https://github.com/EduardF1\"\u003e\u003ccode\u003e@​EduardF1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5047\"\u003ehonojs/hono#5047\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: don't publish \u003ccode\u003e*.tsbuildinfo\u003c/code\u003e by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5066\"\u003ehonojs/hono#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(utils/body,validator): normalize Content-Type media type for case-insensitive matching by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5067\"\u003ehonojs/hono#5067\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid circular dependency between body.ts and request.ts by \u003ca href=\"https://github.com/usualoma\"\u003e\u003ccode\u003e@​usualoma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5071\"\u003ehonojs/hono#5071\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(bun): report the requested subprotocol on WSContext.protocol by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5059\"\u003ehonojs/hono#5059\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump \u003ccode\u003edevDependencies\u003c/code\u003e by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5085\"\u003ehonojs/hono#5085\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(aws-lambda): detect V2 events by request context, not rawPath alone by \u003ca href=\"https://github.com/VihaanAgarwal\"\u003e\u003ccode\u003e@​VihaanAgarwal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5033\"\u003ehonojs/hono#5033\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(context-storage): fix JSDoc by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5086\"\u003ehonojs/hono#5086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/EduardF1\"\u003e\u003ccode\u003e@​EduardF1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5047\"\u003ehonojs/hono#5047\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5059\"\u003ehonojs/hono#5059\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/VihaanAgarwal\"\u003e\u003ccode\u003e@​VihaanAgarwal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5033\"\u003ehonojs/hono#5033\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.12.27...v4.12.28\"\u003ehttps://github.com/honojs/hono/compare/v4.12.27...v4.12.28\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/b2ae3a2204a48ce15a26448fd746d39745eb1837\"\u003e\u003ccode\u003eb2ae3a2\u003c/code\u003e\u003c/a\u003e 4.12.30\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/e0cdeb0a89e777e6b2d75c59f516962670fb47dc\"\u003e\u003ccode\u003ee0cdeb0\u003c/code\u003e\u003c/a\u003e fix(method-override): set duplex when forwarding a stream body in query mode ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/653025e5c3a5eaf3b0e50d338250f601d7a5e56a\"\u003e\u003ccode\u003e653025e\u003c/code\u003e\u003c/a\u003e fix(client): replaceUrlParam should not match a param that prefixes another (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/67efb27f7bcba7a99cae7779b7eb71c3fcada8d8\"\u003e\u003ccode\u003e67efb27\u003c/code\u003e\u003c/a\u003e fix(compress): do not compress 206 Partial Content responses (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5020\"\u003e#5020\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/a48c8bf248eec5c2ecd468be5054c0d260a0dbfe\"\u003e\u003ccode\u003ea48c8bf\u003c/code\u003e\u003c/a\u003e fix(cache): deduplicate Cache-Control directives case-insensitively (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5025\"\u003e#5025\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/3bb9a0e3a7dc0083061e91e885b2e9308585ee40\"\u003e\u003ccode\u003e3bb9a0e\u003c/code\u003e\u003c/a\u003e chore: update to ts6 in prep for ts7 (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5104\"\u003e#5104\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/d3f97caa29bba1f1ae31a4e023c25224aa2a4261\"\u003e\u003ccode\u003ed3f97ca\u003c/code\u003e\u003c/a\u003e chore(benchmark): remove not used benchmarks (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5108\"\u003e#5108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/29a3f73fd5ebab6c96c08e0607e801efa99bb954\"\u003e\u003ccode\u003e29a3f73\u003c/code\u003e\u003c/a\u003e chore(benchmark/routers): bump deps (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5107\"\u003e#5107\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/cda1af200256fa9a014bbcc2fdf79db201a627b6\"\u003e\u003ccode\u003ecda1af2\u003c/code\u003e\u003c/a\u003e 4.12.29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/2126289c15b0f87fb928645c4ed92d0f81d21cd4\"\u003e\u003ccode\u003e2126289\u003c/code\u003e\u003c/a\u003e fix(etag): treat If-None-Match: \u003ccode\u003e*\u003c/code\u003e as a match (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5084\"\u003e#5084\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/honojs/hono/compare/v4.11.7...v4.12.30\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for hono since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda\"\u003e\u003ccode\u003e33d05b5\u003c/code\u003e\u003c/a\u003e 4.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb\"\u003e\u003ccode\u003e663bfab\u003c/code\u003e\u003c/a\u003e Drop demo publish, to not override new v5 one.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986\"\u003e\u003ccode\u003e1cb8c7b\u003c/code\u003e\u003c/a\u003e Add v4-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157\"\u003e\u003ccode\u003e02f27af\u003c/code\u003e\u003c/a\u003e Restore umd builds back to es5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb\"\u003e\u003ccode\u003e8be84ed\u003c/code\u003e\u003c/a\u003e Fix es5 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4\"\u003e\u003ccode\u003e59423c6\u003c/code\u003e\u003c/a\u003e Replace \u003ccode\u003emaxMergeSeqLength\u003c/code\u003e option with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (more robust). Ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d\"\u003e\u003ccode\u003e6842ef6\u003c/code\u003e\u003c/a\u003e doc polish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/590dbabadd172b099c07654fab2eabec8c7a07b9\"\u003e\u003ccode\u003e590dbab\u003c/code\u003e\u003c/a\u003e 4.2.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f944dc5cd132251752499bdb157f33027d362177\"\u003e\u003ccode\u003ef944dc5\u003c/code\u003e\u003c/a\u003e Add package.json funding field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f6927192223355b64f2a6e19f3071ccc579ee718\"\u003e\u003ccode\u003ef692719\u003c/code\u003e\u003c/a\u003e Changelog update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/4.0.0...4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `piscina` from 5.1.3 to 5.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/piscinajs/piscina/releases\"\u003episcina's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Backport v5] chore(docs): remove duplicated by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/846\"\u003episcinajs/piscina#846\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] refactor: tweaks by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/847\"\u003episcinajs/piscina#847\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] chore: pin actions by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/849\"\u003episcinajs/piscina#849\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] chore(deps): Bump on-headers and compression in /docs by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/855\"\u003episcinajs/piscina#855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] refactor: TaskInfo by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/859\"\u003episcinajs/piscina#859\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] refactor: small adjustments over WorkerInfo by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/865\"\u003episcinajs/piscina#865\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): Bump \u003ccode\u003e@​napi-rs/nice\u003c/code\u003e from 1.0.4 to 1.1.1 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/883\"\u003episcinajs/piscina#883\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: add provenance by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/885\"\u003episcinajs/piscina#885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: fix taskDone duplicate listener by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/896\"\u003episcinajs/piscina#896\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] chore(deps-dev): Bump tsx from 4.20.3 to 4.20.6 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/910\"\u003episcinajs/piscina#910\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] chore(deps): Bump actions/checkout from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/912\"\u003episcinajs/piscina#912\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] chore(deps): Bump actions/stale from 9.1.0 to 10.1.0 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/911\"\u003episcinajs/piscina#911\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add sponsors section by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/917\"\u003episcinajs/piscina#917\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: standardize normalize calculation of stddev by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/924\"\u003episcinajs/piscina#924\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/piscinajs/piscina/compare/v5.1.3...v5.1.4\"\u003ehttps://github.com/piscinajs/piscina/compare/v5.1.3...v5.1.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/piscinajs/piscina/blob/v5.2.0/CHANGELOG.md\"\u003episcina's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/piscinajs/piscina/compare/v5.1.4...v5.2.0\"\u003e5.2.0\u003c/a\u003e (2026-06-12)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd idleThreads getter (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/1059\"\u003e#1059\u003c/a\u003e) (\u003ca href=\"https://github.com/piscinajs/piscina/commit/6beabe0ef395a4d086a81ce8162f7b77c9a6d180\"\u003e6beabe0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eeagerly spawn workers up to maxThreads on cold-pool burst (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/1043\"\u003e#1043\u003c/a\u003e) (\u003ca href=\"https://github.com/piscinajs/piscina/commit/779c6402dc09b8746679fae56843d2898c4607ec\"\u003e779c640\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einclude skipQueue in queueSize calculation (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/1030\"\u003e#1030\u003c/a\u003e) (\u003ca href=\"https://github.com/piscinajs/piscina/commit/b7d4d614450bdaf8a833c9fc5ebe7ccd6d81f6f6\"\u003eb7d4d61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einterface name and add missing curly brace (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/951\"\u003e#9...\n\n_Description has been truncated_","html_url":"https://github.com/sentry-demos/empower/pull/1596","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sentry-demos%2Fempower/issues/1596","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1596/packages"},{"uuid":"4870574785","node_id":"PR_kwDONS7uwc7w6FSH","number":224,"state":"closed","title":"chore(deps): update tar requirement from ^7.5.19 to ^7.5.20 in /backend","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-07-13T05:06:47.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-13T05:06:04.000Z","updated_at":"2026-07-13T05:06:48.000Z","time_to_close":43,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): update","packages":[{"name":"tar","old_version":"^7.5.19","new_version":"^7.5.20","repository_url":"https://github.com/isaacs/node-tar"}],"path":"/backend","ecosystem":"npm"},"body":"Updates the requirements on [tar](https://github.com/isaacs/node-tar) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/ebbb72094159d003f428dcd1cb28255d37ea4873\"\u003e\u003ccode\u003eebbb720\u003c/code\u003e\u003c/a\u003e 7.5.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2f271963a7fe5a5960aee5dd6adf9647a1e266fd\"\u003e\u003ccode\u003e2f27196\u003c/code\u003e\u003c/a\u003e fix: fully disable and dispose of unzip when aborting parser\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.19...v7.5.20\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/mbakgun/DockerFlex/pull/224","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mbakgun%2FDockerFlex/issues/224","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/224/packages"},{"uuid":"4859984495","node_id":"PR_kwDOSS18Gc7waq8D","number":2,"state":"closed","title":"chore(deps): bump the npm-minor-patch group with 401 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-07-18T01:38:20.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-11T01:53:07.000Z","updated_at":"2026-07-18T01:38:22.000Z","time_to_close":603913,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm-minor-patch","update_count":401,"packages":[{"name":"@applemusic-like-lyrics/vue","old_version":"0.3.2","new_version":"0.5.2","repository_url":"https://github.com/amll-dev/applemusic-like-lyrics"},{"name":"@neteasecloudmusicapienhanced/api","old_version":"4.32.0","new_version":"4.36.1","repository_url":"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced"},{"name":"@simplewebauthn/server","old_version":"13.3.0","new_version":"13.3.2","repository_url":"https://github.com/MasterKale/SimpleWebAuthn"},{"name":"axios","old_version":"1.15.2","new_version":"1.18.1","repository_url":"https://github.com/axios/axios"},{"name":"dayjs","old_version":"1.11.20","new_version":"1.11.21","repository_url":"https://github.com/iamkun/dayjs"},{"name":"multer","old_version":"2.1.1","new_version":"2.2.0","repository_url":"https://github.com/expressjs/multer"},{"name":"@types/multer","old_version":"2.1.0","new_version":"2.2.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"nodemailer","old_version":"8.0.6","new_version":"8.0.11","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"@types/nodemailer","old_version":"6.4.23","new_version":"8.0.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"nuxt","old_version":"4.4.2","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"sass","old_version":"1.99.0","new_version":"1.101.0","repository_url":"https://github.com/sass/dart-sass"},{"name":"tsx","old_version":"4.21.0","new_version":"4.23.0","repository_url":"https://github.com/privatenumber/tsx"},{"name":"vue","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"zod","old_version":"4.3.6","new_version":"4.4.3","repository_url":"https://github.com/colinhacks/zod"},{"name":"@nuxt/eslint","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/nuxt/eslint"},{"name":"eslint","old_version":"9.39.4","new_version":"9.39.5","repository_url":"https://github.com/eslint/eslint"},{"name":"prettier","old_version":"3.8.3","new_version":"3.9.5","repository_url":"https://github.com/prettier/prettier"},{"name":"@applemusic-like-lyrics/core","old_version":"0.3.2","new_version":"0.5.2","repository_url":"https://github.com/amll-dev/applemusic-like-lyrics"},{"name":"@babel/code-frame","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/compat-data","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/core","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/generator","old_version":"7.29.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-annotate-as-pure","old_version":"7.27.3","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-compilation-targets","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-create-class-features-plugin","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-create-regexp-features-plugin","old_version":"7.28.5","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-globals","old_version":"7.28.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-member-expression-to-functions","old_version":"7.28.5","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-module-imports","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-module-transforms","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-optimise-call-expression","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-plugin-utils","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-remap-async-to-generator","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-replace-supers","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-skip-transparent-expression-wrappers","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-string-parser","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-validator-identifier","old_version":"7.28.5","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-validator-option","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-wrap-function","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helpers","old_version":"7.29.2","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/parser","old_version":"7.29.2","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-bugfix-firefox-class-in-computed-class-key","old_version":"7.28.5","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-bugfix-safari-class-field-initializer-scope","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-import-assertions","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-import-attributes","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-jsx","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-typescript","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-arrow-functions","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-async-generator-functions","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-async-to-generator","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-block-scoped-functions","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-block-scoping","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-class-properties","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-class-static-block","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-classes","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-computed-properties","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-destructuring","old_version":"7.28.5","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-dotall-regex","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-duplicate-keys","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-duplicate-named-capturing-groups-regex","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-dynamic-import","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-explicit-resource-management","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-exponentiation-operator","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-export-namespace-from","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-for-of","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-function-name","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-json-strings","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-literals","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-logical-assignment-operators","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-member-expression-literals","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-modules-amd","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-modules-commonjs","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-modules-systemjs","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-modules-umd","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-named-capturing-groups-regex","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-new-target","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-nullish-coalescing-operator","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-numeric-separator","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-object-rest-spread","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-object-super","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-optional-catch-binding","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-optional-chaining","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-parameters","old_version":"7.27.7","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-private-methods","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-private-property-in-object","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-property-literals","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-regenerator","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-regexp-modifiers","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-reserved-words","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-shorthand-properties","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-spread","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-sticky-regex","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-template-literals","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-typeof-symbol","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-typescript","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-unicode-escapes","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-unicode-property-regex","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-unicode-regex","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-unicode-sets-regex","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/preset-env","old_version":"7.29.2","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/template","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/traverse","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/types","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@bomb.sh/tab","old_version":"0.0.14","new_version":"0.0.17","repository_url":"https://github.com/bombshell-dev/tab"},{"name":"@clack/core","old_version":"1.2.0","new_version":"1.4.3","repository_url":"https://github.com/bombshell-dev/clack"},{"name":"@clack/prompts","old_version":"1.2.0","new_version":"1.7.0","repository_url":"https://github.com/bombshell-dev/clack"},{"name":"@colordx/core","old_version":"5.4.2","new_version":"5.5.0","repository_url":"https://github.com/dkryaklin/colordx"},{"name":"@es-joy/jsdoccomment","old_version":"0.86.0","new_version":"0.88.0","repository_url":"https://github.com/es-joy/jsdoccomment"},{"name":"@eslint/compat","old_version":"2.0.5","new_version":"2.1.0","repository_url":"https://github.com/eslint/rewrite"},{"name":"@eslint/config-inspector","old_version":"1.5.0","new_version":"3.0.4","repository_url":"https://github.com/eslint/config-inspector"},{"name":"@eslint/eslintrc","old_version":"3.3.5","new_version":"3.3.6","repository_url":"https://github.com/eslint/eslintrc"},{"name":"@eslint/js","old_version":"9.39.4","new_version":"9.39.5","repository_url":"https://github.com/eslint/eslint"},{"name":"@ioredis/commands","old_version":"1.5.1","new_version":"1.10.0","repository_url":"https://github.com/ioredis/commands"},{"name":"@napi-rs/wasm-runtime","old_version":"0.2.12","new_version":"1.1.6","repository_url":"https://github.com/napi-rs/napi-rs"},{"name":"@neteasecloudmusicapienhanced/unblockmusic-utils","old_version":"0.2.4","new_version":"0.3.4"},{"name":"@nuxt/cli","old_version":"3.34.0","new_version":"3.36.1","repository_url":"https://github.com/nuxt/cli"},{"name":"@nuxt/eslint-config","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/nuxt/eslint"},{"name":"@nuxt/eslint-plugin","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/nuxt/eslint"},{"name":"@nuxt/nitro-server","old_version":"4.4.2","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@nuxt/schema","old_version":"4.4.2","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@nuxt/vite-builder","old_version":"4.4.2","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@oxc-minify/binding-android-arm-eabi","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-android-arm64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-darwin-arm64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-darwin-x64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-freebsd-x64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-arm-gnueabihf","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-arm-musleabihf","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-arm64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-arm64-musl","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-ppc64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-riscv64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-riscv64-musl","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-s390x-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-x64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-x64-musl","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-openharmony-arm64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-wasm32-wasi","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-win32-arm64-msvc","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-win32-ia32-msvc","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-win32-x64-msvc","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-android-arm-eabi","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-android-arm64","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-darwin-arm64","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-darwin-x64","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-freebsd-x64","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm-gnueabihf","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm-musleabihf","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm64-gnu","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm64-musl","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-ppc64-gnu","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-riscv64-gnu","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-riscv64-musl","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-s390x-gnu","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-x64-gnu","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-x64-musl","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-openharmony-arm64","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-wasm32-wasi","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-win32-arm64-msvc","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-win32-ia32-msvc","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-win32-x64-msvc","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-project/types","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-android-arm-eabi","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-android-arm64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-darwin-arm64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-darwin-x64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-freebsd-x64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-arm-gnueabihf","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-arm-musleabihf","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-arm64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-arm64-musl","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-ppc64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-riscv64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-riscv64-musl","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-s390x-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-x64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-x64-musl","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-openharmony-arm64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-wasm32-wasi","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-win32-arm64-msvc","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-win32-ia32-msvc","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-win32-x64-msvc","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@peculiar/asn1-android","old_version":"2.6.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-cms","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-csr","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-ecc","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-pfx","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-pkcs8","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-pkcs9","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-rsa","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-schema","old_version":"2.6.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-x509-attr","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-x509","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@rolldown/pluginutils","old_version":"1.0.0-rc.13","new_version":"1.0.1","repository_url":"https://github.com/rolldown/plugins"},{"name":"@rollup/plugin-commonjs","old_version":"29.0.2","new_version":"29.0.3","repository_url":"https://github.com/rollup/plugins"},{"name":"@rollup/rollup-android-arm-eabi","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-android-arm64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-darwin-arm64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-darwin-x64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-freebsd-arm64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-freebsd-x64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm-gnueabihf","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm-musleabihf","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm64-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm64-musl","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-loong64-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-loong64-musl","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-ppc64-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-ppc64-musl","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-riscv64-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-riscv64-musl","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-s390x-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-x64-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-x64-musl","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-openbsd-x64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-openharmony-arm64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-arm64-msvc","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-ia32-msvc","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-x64-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-x64-msvc","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@speed-highlight/core","old_version":"1.2.15","new_version":"1.2.17","repository_url":"https://github.com/speed-highlight/core"},{"name":"@tybys/wasm-util","old_version":"0.10.1","new_version":"0.10.3","repository_url":"https://github.com/toyobayashi/wasm-util"},{"name":"@types/express-serve-static-core","old_version":"5.1.1","new_version":"5.1.2","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/qs","old_version":"6.15.0","new_version":"6.15.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@typescript-eslint/eslint-plugin","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/parser","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/project-service","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/scope-manager","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/tsconfig-utils","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/type-utils","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/types","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/typescript-estree","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/utils","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/visitor-keys","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@unhead/vue","old_version":"2.1.13","new_version":"2.1.15","repository_url":"https://github.com/unjs/unhead"},{"name":"@unrs/resolver-binding-android-arm-eabi","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-android-arm64","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-darwin-arm64","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-darwin-x64","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-freebsd-x64","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-arm-gnueabihf","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-arm-musleabihf","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-arm64-gnu","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-arm64-musl","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-ppc64-gnu","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-riscv64-gnu","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-riscv64-musl","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-s390x-gnu","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-x64-gnu","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-x64-musl","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-wasm32-wasi","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-win32-arm64-msvc","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-win32-ia32-msvc","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-win32-x64-msvc","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@vercel/nft","old_version":"1.5.0","new_version":"1.10.2","repository_url":"https://github.com/vercel/nft"},{"name":"@vitejs/plugin-vue-jsx","old_version":"5.1.5","new_version":"5.1.6","repository_url":"https://github.com/vitejs/vite-plugin-vue"},{"name":"@vitejs/plugin-vue","old_version":"6.0.6","new_version":"6.0.7","repository_url":"https://github.com/vitejs/vite-plugin-vue"},{"name":"@vue/compiler-core","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/compiler-dom","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/compiler-sfc","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/compiler-ssr","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/devtools-core","old_version":"8.1.1","new_version":"8.1.5","repository_url":"https://github.com/vuejs/devtools"},{"name":"@vue/devtools-kit","old_version":"8.1.1","new_version":"8.1.5","repository_url":"https://github.com/vuejs/devtools"},{"name":"@vue/devtools-shared","old_version":"8.1.1","new_version":"8.1.5","repository_url":"https://github.com/vuejs/devtools"},{"name":"@vue/reactivity","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/runtime-core","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/runtime-dom","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/server-renderer","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/shared","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"acorn","old_version":"8.16.0","new_version":"8.17.0","repository_url":"https://github.com/acornjs/acorn"},{"name":"agent-base","old_version":"7.1.4","new_version":"6.0.2","repository_url":"https://github.com/TooTallNate/proxy-agents"},{"name":"ansis","old_version":"4.2.0","new_version":"4.3.1","repository_url":"https://github.com/webdiscus/ansis"},{"name":"ast-walker-scope","old_version":"0.8.3","new_version":"0.9.0","repository_url":"https://github.com/sxzz/ast-walker-scope"},{"name":"b4a","old_version":"1.8.0","new_version":"1.8.1","repository_url":"https://github.com/holepunchto/b4a"},{"name":"bare-events","old_version":"2.8.2","new_version":"2.9.1","repository_url":"https://github.com/holepunchto/bare-events"},{"name":"bare-fs","old_version":"4.7.1","new_version":"4.7.4","repository_url":"https://github.com/holepunchto/bare-fs"},{"name":"bare-path","old_version":"3.0.0","new_version":"3.1.1","repository_url":"https://github.com/holepunchto/bare-path"},{"name":"bare-stream","old_version":"2.13.0","new_version":"2.13.3","repository_url":"https://github.com/holepunchto/bare-stream"},{"name":"bare-url","old_version":"2.4.2","new_version":"2.4.5","repository_url":"https://github.com/holepunchto/bare-url"},{"name":"basic-ftp","old_version":"5.3.0","new_version":"5.3.1","repository_url":"https://github.com/patrickjuchli/basic-ftp"},{"name":"body-parser","old_version":"1.20.5","new_version":"1.20.6","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.14","new_version":"1.1.16","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"builtin-modules","old_version":"5.1.0","new_version":"5.3.0","repository_url":"https://github.com/sindresorhus/builtin-modules"},{"name":"caniuse-api","old_version":"3.0.0","new_version":"4.0.0","repository_url":"https://github.com/MoOx/caniuse-api"},{"name":"cluster-key-slot","old_version":"1.1.2","new_version":"1.1.1","repository_url":"https://github.com/Salakar/cluster-key-slot"},{"name":"comment-parser","old_version":"1.4.6","new_version":"1.4.7","repository_url":"https://github.com/yavorskiy/comment-parser"},{"name":"cssnano-preset-default","old_version":"7.0.15","new_version":"8.0.2","repository_url":"https://github.com/cssnano/cssnano"},{"name":"cssnano-utils","old_version":"5.0.2","new_version":"6.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"cssnano","old_version":"7.1.7","new_version":"8.0.2","repository_url":"https://github.com/cssnano/cssnano"},{"name":"devalue","old_version":"5.7.1","new_version":"5.8.1","repository_url":"https://github.com/sveltejs/devalue"},{"name":"es-module-lexer","old_version":"2.1.0","new_version":"2.3.0","repository_url":"https://github.com/guybedford/es-module-lexer"},{"name":"es-object-atoms","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/ljharb/es-object-atoms"},{"name":"es-to-primitive","old_version":"1.3.0","new_version":"1.3.4","repository_url":"https://github.com/ljharb/es-to-primitive"},{"name":"eslint-flat-config-utils","old_version":"3.1.0","new_version":"3.2.0","repository_url":"https://github.com/antfu/eslint-flat-config-utils"},{"name":"eslint-plugin-import-lite","old_version":"0.5.2","new_version":"0.6.0","repository_url":"https://github.com/9romise/eslint-plugin-import-lite"},{"name":"eslint-plugin-import-x","old_version":"4.16.2","new_version":"4.17.1","repository_url":"https://github.com/un-ts/eslint-plugin-import-x"},{"name":"eslint-plugin-jsdoc","old_version":"62.9.0","new_version":"63.0.13","repository_url":"https://github.com/gajus/eslint-plugin-jsdoc"},{"name":"eslint-plugin-regexp","old_version":"3.1.0","new_version":"3.1.1","repository_url":"https://github.com/ota-meshi/eslint-plugin-regexp"},{"name":"eslint-plugin-unicorn","old_version":"63.0.0","new_version":"65.0.1","repository_url":"https://github.com/sindresorhus/eslint-plugin-unicorn"},{"name":"eslint-plugin-vue","old_version":"10.9.0","new_version":"10.9.2","repository_url":"https://github.com/vuejs/eslint-plugin-vue"},{"name":"express","old_version":"4.22.1","new_version":"4.22.2","repository_url":"https://github.com/expressjs/express"},{"name":"exsolve","old_version":"1.0.8","new_version":"1.1.0","repository_url":"https://github.com/unjs/exsolve"},{"name":"fast-npm-meta","old_version":"1.5.0","new_version":"1.5.1","repository_url":"https://github.com/antfu/fast-npm-meta"},{"name":"fast-string-truncated-width","old_version":"1.2.1","new_version":"3.0.3","repository_url":"https://github.com/fabiospampinato/fast-string-truncated-width"},{"name":"fast-string-width","old_version":"1.1.0","new_version":"3.0.2","repository_url":"https://github.com/fabiospampinato/fast-string-width"},{"name":"fast-uri","old_version":"3.1.0","new_version":"3.1.3","repository_url":"https://github.com/fastify/fast-uri"},{"name":"fast-wrap-ansi","old_version":"0.1.6","new_version":"0.2.2","repository_url":"https://github.com/43081j/fast-wrap-ansi"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"function.prototype.name","old_version":"1.1.8","new_version":"1.2.0","repository_url":"https://github.com/es-shims/Function.prototype.name"},{"name":"fuse.js","old_version":"7.3.0","new_version":"7.4.2","repository_url":"https://github.com/krisk/Fuse"},{"name":"get-east-asian-width","old_version":"1.5.0","new_version":"1.6.0","repository_url":"https://github.com/sindresorhus/get-east-asian-width"},{"name":"globby","old_version":"16.2.0","new_version":"16.2.1","repository_url":"https://github.com/sindresorhus/globby"},{"name":"hasown","old_version":"2.0.3","new_version":"2.0.4","repository_url":"https://github.com/inspect-js/hasOwn"},{"name":"https-proxy-agent","old_version":"7.0.6","new_version":"5.0.1","repository_url":"https://github.com/TooTallNate/proxy-agents"},{"name":"httpxy","old_version":"0.5.1","new_version":"0.5.5","repository_url":"https://github.com/unjs/httpxy"},{"name":"immutable","old_version":"5.1.5","new_version":"5.1.9","repository_url":"https://github.com/immutable-js/immutable-js"},{"name":"ioredis","old_version":"5.10.1","new_version":"5.11.1","repository_url":"https://github.com/luin/ioredis"},{"name":"ip-address","old_version":"10.1.0","new_version":"10.2.0","repository_url":"https://github.com/beaugunderson/ip-address"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"launch-editor","old_version":"2.13.2","new_version":"2.14.1","repository_url":"https://github.com/vitejs/launch-editor"},{"name":"listhen","old_version":"1.9.1","new_version":"1.10.0","repository_url":"https://github.com/unjs/listhen"},{"name":"local-pkg","old_version":"1.1.2","new_version":"1.2.1","repository_url":"https://github.com/antfu-collective/local-pkg"},{"name":"magic-regexp","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/unjs/magic-regexp"},{"name":"magicast","old_version":"0.5.2","new_version":"0.5.3","repository_url":"https://github.com/unjs/magicast"},{"name":"music-metadata","old_version":"11.12.3","new_version":"11.13.0","repository_url":"https://github.com/Borewit/music-metadata"},{"name":"nitropack","old_version":"2.13.3","new_version":"2.13.4","repository_url":"https://github.com/nitrojs/nitro"},{"name":"nypm","old_version":"0.6.6","new_version":"0.6.8","repository_url":"https://github.com/unjs/nypm"},{"name":"object-deep-merge","old_version":"2.0.0","new_version":"2.0.1","repository_url":"https://github.com/forcir/object-deep-merge"},{"name":"obug","old_version":"2.1.1","new_version":"2.1.3","repository_url":"https://github.com/sxzz/obug"},{"name":"oxc-minify","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"oxc-parser","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"oxc-transform","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"oxc-walker","old_version":"0.7.0","new_version":"1.0.0","repository_url":"https://github.com/oxc-project/oxc-walker"},{"name":"package-manager-detector","old_version":"1.6.0","new_version":"1.7.0","repository_url":"https://github.com/antfu-collective/package-manager-detector"},{"name":"postcss-colormin","old_version":"7.0.9","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-convert-values","old_version":"7.0.11","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-comments","old_version":"7.0.7","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-duplicates","old_version":"7.0.3","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-empty","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-overridden","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-merge-longhand","old_version":"7.0.6","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-merge-rules","old_version":"7.0.10","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-font-values","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-gradients","old_version":"7.0.4","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-params","old_version":"7.0.8","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-selectors","old_version":"7.1.0","new_version":"8.0.2","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-charset","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-display-values","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-positions","old_version":"7.0.3","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-repeat-style","old_version":"7.0.3","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-string","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-timing-functions","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-unicode","old_version":"7.0.8","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-url","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-whitespace","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-ordered-values","old_version":"7.0.3","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-reduce-initial","old_version":"7.0.8","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-reduce-transforms","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-svgo","old_version":"7.1.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-unique-selectors","old_version":"7.0.6","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"qs","old_version":"6.14.2","new_version":"6.15.3","repository_url":"https://github.com/ljharb/qs"},{"name":"regjsparser","old_version":"0.13.1","new_version":"0.13.2","repository_url":"https://github.com/jviereck/regjsparser"},{"name":"seroval","old_version":"1.5.2","new_version":"1.5.5","repository_url":"https://github.com/lxsmnsyc/seroval"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.10.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"side-channel","old_version":"1.1.0","new_version":"1.1.1","repository_url":"https://github.com/ljharb/side-channel"},{"name":"signal-exit","old_version":"4.1.0","new_version":"3.0.7","repository_url":"https://github.com/tapjs/signal-exit"},{"name":"smob","old_version":"1.6.1","new_version":"1.6.2","repository_url":"https://github.com/Tada5hi/smob"},{"name":"socks","old_version":"2.8.7","new_version":"2.8.9","repository_url":"https://github.com/JoshGlazebrook/socks"},{"name":"srvx","old_version":"0.11.15","new_version":"0.11.21","repository_url":"https://github.com/h3js/srvx"},{"name":"std-env","old_version":"3.10.0","new_version":"4.2.0","repository_url":"https://github.com/unjs/std-env"},{"name":"streamx","old_version":"2.25.0","new_version":"2.28.0","repository_url":"https://github.com/mafintosh/streamx"},{"name":"string.prototype.trim","old_version":"1.2.10","new_version":"1.2.11","repository_url":"https://github.com/es-shims/String.prototype.trim"},{"name":"string.prototype.trimend","old_version":"1.0.9","new_version":"1.0.10","repository_url":"https://github.com/es-shims/String.prototype.trimEnd"},{"name":"stylehacks","old_version":"7.0.10","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"tar-stream","old_version":"3.1.8","new_version":"3.2.0","repository_url":"https://github.com/mafintosh/tar-stream"},{"name":"tar","old_version":"7.5.13","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"},{"name":"terser","old_version":"5.46.2","new_version":"5.49.0","repository_url":"https://github.com/terser/terser"},{"name":"tinyclip","old_version":"0.1.12","new_version":"0.1.15","repository_url":"https://github.com/tinylibs/tinyclip"},{"name":"tinyexec","old_version":"1.1.1","new_version":"1.2.4","repository_url":"https://github.com/tinylibs/tinyexec"},{"name":"tinyglobby","old_version":"0.2.16","new_version":"0.2.17","repository_url":"https://github.com/SuperchupuDev/tinyglobby"},{"name":"typed-array-length","old_version":"1.0.7","new_version":"1.0.8","repository_url":"https://github.com/inspect-js/typed-array-length"},{"name":"ultrahtml","old_version":"1.6.0","new_version":"1.7.0","repository_url":"https://github.com/natemoo-re/ultrahtml"},{"name":"unhead","old_version":"2.1.13","new_version":"2.1.15","repository_url":"https://github.com/unjs/unhead"},{"name":"unimport","old_version":"5.7.0","new_version":"6.3.0","repository_url":"https://github.com/unjs/unimport"},{"name":"unplugin-utils","old_version":"0.3.1","new_version":"0.3.2","repository_url":"https://github.com/sxzz/unplugin-utils"},{"name":"unrs-resolver","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"vite-dev-rpc","old_version":"1.1.0","new_version":"2.0.0","repository_url":"https://github.com/antfu/vite-dev-rpc"},{"name":"vite-hot-client","old_version":"2.1.0","new_version":"2.2.0","repository_url":"https://github.com/antfu/vite-hot-client"},{"name":"vite-plugin-checker","old_version":"0.12.0","new_version":"0.14.4","repository_url":"https://github.com/fi3ework/vite-plugin-checker"},{"name":"vite-plugin-inspect","old_version":"11.3.3","new_version":"11.4.1","repository_url":"https://github.com/antfu-collective/vite-plugin-inspect"},{"name":"vite-plugin-vue-tracer","old_version":"1.3.0","new_version":"1.4.0","repository_url":"https://github.com/antfu/vite-plugin-vue-tracer"},{"name":"vite","old_version":"7.3.2","new_version":"7.3.6","repository_url":"https://github.com/vitejs/vite"},{"name":"vue-bundle-renderer","old_version":"2.2.0","new_version":"2.3.1","repository_url":"https://github.com/nuxt-contrib/vue-bundle-renderer"},{"name":"vue-eslint-parser","old_version":"10.4.0","new_version":"10.4.1","repository_url":"https://github.com/vuejs/vue-eslint-parser"},{"name":"which-typed-array","old_version":"1.1.20","new_version":"1.1.22","repository_url":"https://github.com/inspect-js/which-typed-array"},{"name":"ws","old_version":"8.20.0","new_version":"8.21.0","repository_url":"https://github.com/websockets/ws"},{"name":"wsl-utils","old_version":"0.1.0","new_version":"0.3.1","repository_url":"https://github.com/sindresorhus/wsl-utils"},{"name":"yaml","old_version":"2.8.3","new_version":"2.9.0","repository_url":"https://github.com/eemeli/yaml"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-minor-patch group with 401 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@applemusic-like-lyrics/vue](https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/vue) | `0.3.2` | `0.5.2` |\n| [@neteasecloudmusicapienhanced/api](https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced) | `4.32.0` | `4.36.1` |\n| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.0` | `13.3.2` |\n| [axios](https://github.com/axios/axios) | `1.15.2` | `1.18.1` |\n| [dayjs](https://github.com/iamkun/dayjs) | `1.11.20` | `1.11.21` |\n| [multer](https://github.com/expressjs/multer) | `2.1.1` | `2.2.0` |\n| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.1.0` | `2.2.0` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.6` | `8.0.11` |\n| [@types/nodemailer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/nodemailer) | `6.4.23` | `8.0.1` |\n| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.4.2` | `4.4.8` |\n| [sass](https://github.com/sass/dart-sass) | `1.99.0` | `1.101.0` |\n| [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.0` |\n| [vue](https://github.com/vuejs/core) | `3.5.33` | `3.5.39` |\n| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` |\n| [@nuxt/eslint](https://github.com/nuxt/eslint/tree/HEAD/packages/module) | `1.15.2` | `1.16.0` |\n| [eslint](https://github.com/eslint/eslint) | `9.39.4` | `9.39.5` |\n| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.5` |\n| [@applemusic-like-lyrics/core](https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/core) | `0.3.2` | `0.5.2` |\n| [@babel/code-frame](https://github.com/babel/babel/tree/HEAD/packages/babel-code-frame) | `7.29.0` | `7.29.7` |\n| [@babel/compat-data](https://github.com/babel/babel/tree/HEAD/packages/babel-compat-data) | `7.29.0` | `7.29.7` |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` |\n| [@babel/generator](https://github.com/babel/babel/tree/HEAD/packages/babel-generator) | `7.29.1` | `7.29.7` |\n| [@babel/helper-annotate-as-pure](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-annotate-as-pure) | `7.27.3` | `7.29.7` |\n| [@babel/helper-compilation-targets](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-compilation-targets) | `7.28.6` | `7.29.7` |\n| [@babel/helper-create-class-features-plugin](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-create-class-features-plugin) | `7.28.6` | `7.29.7` |\n| [@babel/helper-create-regexp-features-plugin](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-create-regexp-features-plugin) | `7.28.5` | `7.29.7` |\n| [@babel/helper-globals](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-globals) | `7.28.0` | `7.29.7` |\n| [@babel/helper-member-expression-to-functions](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-member-expression-to-functions) | `7.28.5` | `7.29.7` |\n| [@babel/helper-module-imports](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-module-imports) | `7.28.6` | `7.29.7` |\n| [@babel/helper-module-transforms](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-module-transforms) | `7.28.6` | `7.29.7` |\n| [@babel/helper-optimise-call-expression](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-optimise-call-expression) | `7.27.1` | `7.29.7` |\n| [@babel/helper-plugin-utils](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-plugin-utils) | `7.28.6` | `7.29.7` |\n| [@babel/helper-remap-async-to-generator](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-remap-async-to-generator) | `7.27.1` | `7.29.7` |\n| [@babel/helper-replace-supers](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-replace-supers) | `7.28.6` | `7.29.7` |\n| [@babel/helper-skip-transparent-expression-wrappers](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-skip-transparent-expression-wrappers) | `7.27.1` | `7.29.7` |\n| [@babel/helper-string-parser](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-string-parser) | `7.27.1` | `7.29.7` |\n| [@babel/helper-validator-identifier](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-validator-identifier) | `7.28.5` | `7.29.7` |\n| [@babel/helper-validator-option](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-validator-option) | `7.27.1` | `7.29.7` |\n| [@babel/helper-wrap-function](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-wrap-function) | `7.28.6` | `7.29.7` |\n| [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) | `7.29.2` | `7.29.7` |\n| [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `7.29.2` | `7.29.7` |\n| [@babel/plugin-bugfix-firefox-class-in-computed-class-key](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-bugfix-firefox-class-in-computed-class-key) | `7.28.5` | `7.29.7` |\n| [@babel/plugin-bugfix-safari-class-field-initializer-scope](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-bugfix-safari-class-field-initializer-scope) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-bugfix-v8-static-class-fields-redefine-readonly) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-syntax-import-assertions](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-import-assertions) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-syntax-import-attributes](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-import-attributes) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-syntax-jsx](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-jsx) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-syntax-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-typescript) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-arrow-functions](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-arrow-functions) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-async-generator-functions](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-async-generator-functions) | `7.29.0` | `7.29.7` |\n| [@babel/plugin-transform-async-to-generator](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-async-to-generator) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-block-scoped-functions](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-block-scoped-functions) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-block-scoping](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-block-scoping) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-class-properties](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-class-properties) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-class-static-block](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-class-static-block) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-classes](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-classes) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-computed-properties](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-computed-properties) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-destructuring](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-destructuring) | `7.28.5` | `7.29.7` |\n| [@babel/plugin-transform-dotall-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-dotall-regex) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-duplicate-keys](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-duplicate-keys) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-duplicate-named-capturing-groups-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-duplicate-named-capturing-groups-regex) | `7.29.0` | `7.29.7` |\n| [@babel/plugin-transform-dynamic-import](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-dynamic-import) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-explicit-resource-management](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-explicit-resource-management) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-exponentiation-operator](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-exponentiation-operator) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-export-namespace-from](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-export-namespace-from) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-for-of](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-for-of) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-function-name](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-function-name) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-json-strings](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-json-strings) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-literals](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-literals) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-logical-assignment-operators](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-logical-assignment-operators) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-member-expression-literals](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-member-expression-literals) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-modules-amd](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-amd) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-modules-commonjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-commonjs) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.29.0` | `7.29.7` |\n| [@babel/plugin-transform-modules-umd](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-umd) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-named-capturing-groups-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-named-capturing-groups-regex) | `7.29.0` | `7.29.7` |\n| [@babel/plugin-transform-new-target](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-new-target) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-nullish-coalescing-operator](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-nullish-coalescing-operator) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-numeric-separator](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-numeric-separator) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-object-rest-spread](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-object-rest-spread) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-object-super](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-object-super) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-optional-catch-binding](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-optional-catch-binding) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-optional-chaining](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-optional-chaining) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-parameters](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-parameters) | `7.27.7` | `7.29.7` |\n| [@babel/plugin-transform-private-methods](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-private-methods) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-private-property-in-object](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-private-property-in-object) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-property-literals](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-property-literals) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-regenerator](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-regenerator) | `7.29.0` | `7.29.7` |\n| [@babel/plugin-transform-regexp-modifiers](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-regexp-modifiers) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-reserved-words](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-reserved-words) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-shorthand-properties](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-shorthand-properties) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-spread](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-spread) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-sticky-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-sticky-regex) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-template-literals](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-template-literals) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-typeof-symbol](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-typeof-symbol) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-typescript) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-unicode-escapes](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-unicode-escapes) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-unicode-property-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-unicode-property-regex) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-unicode-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-unicode-regex) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-unicode-sets-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-unicode-sets-regex) | `7.28.6` | `7.29.7` |\n| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.29.2` | `7.29.7` |\n| [@babel/template](https://github.com/babel/babel/tree/HEAD/packages/babel-template) | `7.28.6` | `7.29.7` |\n| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.29.0` | `7.29.7` |\n| [@babel/types](https://github.com/babel/babel/tree/HEAD/packages/babel-types) | `7.29.0` | `7.29.7` |\n| [@bomb.sh/tab](https://github.com/bombshell-dev/tab) | `0.0.14` | `0.0.17` |\n| [@clack/core](https://github.com/bombshell-dev/clack/tree/HEAD/packages/core) | `1.2.0` | `1.4.3` |\n| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.2.0` | `1.7.0` |\n| [@colordx/core](https://github.com/dkryaklin/colordx) | `5.4.2` | `5.5.0` |\n| [@es-joy/jsdoccomment](https://github.com/es-joy/jsdoccomment) | `0.86.0` | `0.88.0` |\n| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.5` | `2.1.0` |\n| [@eslint/config-inspector](https://github.com/eslint/config-inspector) | `1.5.0` | `3.0.4` |\n| [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.5` | `3.3.6` |\n| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `9.39.5` |\n| [@ioredis/commands](https://github.com/ioredis/commands) | `1.5.1` | `1.10.0` |\n| [@napi-rs/wasm-runtime](https://github.com/napi-rs/napi-rs/tree/HEAD/wasm-runtime) | `0.2.12` | `1.1.6` |\n| @neteasecloudmusicapienhanced/unblockmusic-utils | `0.2.4` | `0.3.4` |\n| [@nuxt/cli](https://github.com/nuxt/cli/tree/HEAD/packages/nuxt-cli) | `3.34.0` | `3.36.1` |\n| [@nuxt/eslint-config](https://github.com/nuxt/eslint/tree/HEAD/packages/eslint-config) | `1.15.2` | `1.16.0` |\n| [@nuxt/eslint-plugin](https://github.com/nuxt/eslint/tree/HEAD/packages/eslint-plugin) | `1.15.2` | `1.16.0` |\n| [@nuxt/nitro-server](https://github.com/nuxt/nuxt/tree/HEAD/packages/nitro-server) | `4.4.2` | `4.4.8` |\n| [@nuxt/schema](https://github.com/nuxt/nuxt/tree/HEAD/packages/schema) | `4.4.2` | `4.4.8` |\n| [@nuxt/vite-builder](https://github.com/nuxt/nuxt/tree/HEAD/packages/vite) | `4.4.2` | `4.4.8` |\n| [@oxc-minify/binding-android-arm-eabi](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-android-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-darwin-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-darwin-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-freebsd-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-arm-gnueabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-arm-musleabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-arm64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-arm64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-ppc64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-riscv64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-riscv64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-s390x-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-x64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-x64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-openharmony-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-wasm32-wasi](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-win32-arm64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-win32-ia32-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-win32-x64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-parser/binding-android-arm-eabi](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-android-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-darwin-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-darwin-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-freebsd-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm-gnueabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm-musleabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-ppc64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-riscv64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-riscv64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-s390x-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-x64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-x64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-openharmony-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-wasm32-wasi](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-win32-arm64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-win32-ia32-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-win32-x64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-project/types](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxc-types) | `0.117.0` | `0.132.0` |\n| [@oxc-transform/binding-android-arm-eabi](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-android-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-darwin-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-darwin-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-freebsd-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-arm-gnueabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-arm-musleabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-arm64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-arm64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-ppc64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-riscv64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-riscv64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-s390x-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-x64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-x64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-openharmony-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-wasm32-wasi](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-win32-arm64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-win32-ia32-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-win32-x64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@peculiar/asn1-android](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/android) | `2.6.0` | `2.8.0` |\n| [@peculiar/asn1-cms](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/cms) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-csr](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/csr) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-ecc](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/ecc) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-pfx](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/pfx) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-pkcs8](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/pkcs8) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-pkcs9](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/pkcs9) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-rsa](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/rsa) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-schema](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/schema) | `2.6.0` | `2.8.0` |\n| [@peculiar/asn1-x509-attr](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/x509-attr) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-x509](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/x509) | `2.6.1` | `2.8.0` |\n| [@rolldown/pluginutils](https://github.com/rolldown/plugins/tree/HEAD/packages/pluginutils) | `1.0.0-rc.13` | `1.0.1` |\n| [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) | `29.0.2` | `29.0.3` |\n| [@rollup/rollup-android-arm-eabi](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-android-arm64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-darwin-arm64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-darwin-x64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-freebsd-arm64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-freebsd-x64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-arm-gnueabihf](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-arm-musleabihf](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-arm64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-arm64-musl](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-loong64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-loong64-musl](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-ppc64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-ppc64-musl](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-riscv64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-riscv64-musl](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-s390x-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-x64-musl](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-openbsd-x64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-openharmony-arm64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-win32-arm64-msvc](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-win32-ia32-msvc](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-win32-x64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-win32-x64-msvc](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@speed-highlight/core](https://github.com/speed-highlight/core) | `1.2.15` | `1.2.17` |\n| [@tybys/wasm-util](https://github.com/toyobayashi/wasm-util) | `0.10.1` | `0.10.3` |\n| [@types/express-serve-static-core](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express-serve-static-core) | `5.1.1` | `5.1.2` |\n| [@types/qs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/qs) | `6.15.0` | `6.15.1` |\n| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/project-service](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/project-service) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/scope-manager](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/scope-manager) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/tsconfig-utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/tsconfig-utils) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/type-utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/type-utils) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/types](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/types) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/typescript-estree](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-estree) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/utils) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/visitor-keys](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/visitor-keys) | `8.59.0` | `8.63.0` |\n| [@unhead/vue](https://github.com/unjs/unhead/tree/HEAD/packages/vue) | `2.1.13` | `2.1.15` |\n| [@unrs/resolver-binding-android-arm-eabi](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-android-arm64](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-darwin-arm64](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-darwin-x64](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-freebsd-x64](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-arm-gnueabihf](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-arm-musleabihf](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-arm64-gnu](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-arm64-musl](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-ppc64-gnu](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-riscv64-gnu](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-riscv64-musl](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-s390x-gnu](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-x64-gnu](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-x64-musl](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-wasm32-wasi](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-win32-arm64-msvc](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-win32-ia32-msvc](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-win32-x64-msvc](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@vercel/nft](https://github.com/vercel/nft) | `1.5.0` | `1.10.2` |\n| [@vitejs/plugin-vue-jsx](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue-jsx) | `5.1.5` | `5.1.6` |\n| [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue) | `6.0.6` | `6.0.7` |\n| [@vue/compiler-core](https://github.com/vuejs/core/tree/HEAD/packages/compiler-core) | `3.5.33` | `3.5.39` |\n| [@vue/compiler-dom](https://github.com/vuejs/core/tree/HEAD/packages/compiler-dom) | `3.5.33` | `3.5.39` |\n| [@vue/compiler-sfc](https://github.com/vuejs/core/tree/HEAD/packages/compiler-sfc) | `3.5.33` | `3.5.39` |\n| [@vue/compiler-ssr](https://github.com/vuejs/core/tree/HEAD/packages/compiler-ssr) | `3.5.33` | `3.5.39` |\n| [@vue/devtools-core](https://github.com/vuejs/devtools/tree/HEAD/packages/core) | `8.1.1` | `8.1.5` |\n| [@vue/devtools-kit](https://github.com/vuejs/devtools/tree/HEAD/packages/devtools-kit) | `8.1.1` | `8.1.5` |\n| [@vue/devtools-shared](https://github.com/vuejs/devtools/tree/HEAD/packages/shared) | `8.1.1` | `8.1.5` |\n| [@vue/reactivity](https://github.com/vuejs/core/tree/HEAD/packages/reactivity) | `3.5.33` | `3.5.39` |\n| [@vue/runtime-core](https://github.com/vuejs/core/tree/HEAD/packages/runtime-core) | `3.5.33` | `3.5.39` |\n| [@vue/runtime-dom](https://github.com/vuejs/core/tree/HEAD/packages/runtime-dom) | `3.5.33` | `3.5.39` |\n| [@vue/server-renderer](https://github.com/vuejs/core/tree/HEAD/packages/server-renderer) | `3.5.33` | `3.5.39` |\n| [@vue/shared](https://github.com/vuejs/core/tree/HEAD/packages/shared) | `3.5.33` | `3.5.39` |\n| [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.17.0` |\n| [agent-base](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/agent-base) | `7.1.4` | `6.0.2` |\n| [ansis](https://github.com/webdiscus/ansis) | `4.2.0` | `4.3.1` |\n| [ast-walker-scope](https://github.com/sxzz/ast-walker-scope) | `0.8.3` | `0.9.0` |\n| [b4a](https://github.com/holepunchto/b4a) | `1.8.0` | `1.8.1` |\n| [bare-events](https://github.com/holepunchto/bare-events) | `2.8.2` | `2.9.1` |\n| [bare-fs](https://github.com/holepunchto/bare-fs) | `4.7.1` | `4.7.4` |\n| [bare-path](https://github.com/holepunchto/bare-path) | `3.0.0` | `3.1.1` |\n| [bare-stream](https://github.com/holepunchto/bare-stream) | `2.13.0` | `2.13.3` |\n| [bare-url](https://github.com/holepunchto/bare-url) | `2.4.2` | `2.4.5` |\n| [basic-ftp](https://github.com/patrickjuchli/basic-ftp) | `5.3.0` | `5.3.1` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.5` | `1.20.6` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.14` | `1.1.16` |\n| [builtin-modules](https://github.com/sindresorhus/builtin-modules) | `5.1.0` | `5.3.0` |\n| [caniuse-api](https://github.com/MoOx/caniuse-api) | `3.0.0` | `4.0.0` |\n| [cluster-key-slot](https://github.com/Salakar/cluster-key-slot) | `1.1.2` | `1.1.1` |\n| [comment-parser](https://github.com/yavorskiy/comment-parser) | `1.4.6` | `1.4.7` |\n| [cssnano-preset-default](https://github.com/cssnano/cssnano) | `7.0.15` | `8.0.2` |\n| [cssnano-utils](https://github.com/cssnano/cssnano) | `5.0.2` | `6.0.1` |\n| [cssnano](https://github.com/cssnano/cssnano) | `7.1.7` | `8.0.2` |\n| [devalue](https://github.com/sveltejs/devalue) | `5.7.1` | `5.8.1` |\n| [es-module-lexer](https://github.com/guybedford/es-module-lexer) | `2.1.0` | `2.3.0` |\n| [es-object-atoms](https://github.com/ljharb/es-object-atoms) | `1.1.1` | `1.1.2` |\n| [es-to-primitive](https://github.com/ljharb/es-to-primitive) | `1.3.0` | `1.3.4` |\n| [eslint-flat-config-utils](https://github.com/antfu/eslint-flat-config-utils) | `3.1.0` | `3.2.0` |\n| [eslint-plugin-import-lite](https://github.com/9romise/eslint-plugin-import-lite) | `0.5.2` | `0.6.0` |\n| [eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x) | `4.16.2` | `4.17.1` |\n| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `62.9.0` | `63.0.13` |\n| [eslint-plugin-regexp](https://github.com/ota-meshi/eslint-plugin-regexp) | `3.1.0` | `3.1.1` |\n| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | `63.0.0` | `65.0.1` |\n| [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue) | `10.9.0` | `10.9.2` |\n| [express](https://github.com/expressjs/express) | `4.22.1` | `4.22.2` |\n| [exsolve](https://github.com/unjs/exsolve) | `1.0.8` | `1.1.0` |\n| [fast-npm-meta](https://github.com/antfu/fast-npm-meta) | `1.5.0` | `1.5.1` |\n| [fast-string-truncated-width](https://github.com/fabiospampinato/fast-string-truncated-width) | `1.2.1` | `3.0.3` |\n| [fast-string-width](https://github.com/fabiospampinato/fast-string-width) | `1.1.0` | `3.0.2` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.3` |\n| [fast-wrap-ansi](https://github.com/43081j/fast-wrap-ansi) | `0.1.6` | `0.2.2` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [function.prototype.name](https://github.com/es-shims/Function.prototype.name) | `1.1.8` | `1.2.0` |\n| [fuse.js](https://github.com/krisk/Fuse) | `7.3.0` | `7.4.2` |\n| [get-east-asian-width](https://github.com/sindresorhus/get-east-asian-width) | `1.5.0` | `1.6.0` |\n| [globby](https://github.com/sindresorhus/globby) | `16.2.0` | `16.2.1` |\n| [hasown](https://github.com/inspect-js/hasOwn) | `2.0.3` | `2.0.4` |\n| [https-proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/https-proxy-agent) | `7.0.6` | `5.0.1` |\n| [httpxy](https://github.com/unjs/httpxy) | `0.5.1` | `0.5.5` |\n| [immutable](https://github.com/immutable-js/immutable-js) | `5.1.5` | `5.1.9` |\n| [ioredis](https://github.com/luin/ioredis) | `5.10.1` | `5.11.1` |\n| [ip-address](https://github.com/beaugunderson/ip-address) | `10.1.0` | `10.2.0` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.3.0` |\n| [launch-editor](https://github.com/vitejs/launch-editor) | `2.13.2` | `2.14.1` |\n| [listhen](https://github.com/unjs/listhen) | `1.9.1` | `1.10.0` |\n| [local-pkg](https://github.com/antfu-collective/local-pkg) | `1.1.2` | `1.2.1` |\n| [magic-regexp](https://github.com/unjs/magic-regexp) | `0.10.0` | `0.11.0` |\n| [magicast](https://github.com/unjs/magicast) | `0.5.2` | `0.5.3` |\n| [music-metadata](https://github.com/Borewit/music-metadata) | `11.12.3` | `11.13.0` |\n| [nitropack](https://github.com/nitrojs/nitro) | `2.13.3` | `2.13.4` |\n| [nypm](https://github.com/unjs/nypm) | `0.6.6` | `0.6.8` |\n| [object-deep-merge](https://github.com/forcir/object-deep-merge) | `2.0.0` | `2.0.1` |\n| [obug](https://github.com/sxzz/obug) | `2.1.1` | `2.1.3` |\n| [oxc-minify](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [oxc-transform](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [oxc-walker](https://github.com/oxc-project/oxc-walker) | `0.7.0` | `1.0.0` |\n| [package-manager-detector](https://github.com/antfu-collective/package-manager-detector) | `1.6.0` | `1.7.0` |\n| [postcss-colormin](https://github.com/cssnano/cssnano) | `7.0.9` | `8.0.1` |\n| [postcss-convert-values](https://github.com/cssnano/cssnano) | `7.0.11` | `8.0.1` |\n| [postcss-discard-comments](https://github.com/cssnano/cssnano) | `7.0.7` | `8.0.1` |\n| [postcss-discard-duplicates](https://github.com/cssnano/cssnano) | `7.0.3` | `8.0.1` |\n| [postcss-discard-empty](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-discard-overridden](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-merge-longhand](https://github.com/cssnano/cssnano) | `7.0.6` | `8.0.1` |\n| [postcss-merge-rules](https://github.com/cssnano/cssnano) | `7.0.10` | `8.0.1` |\n| [postcss-minify-font-values](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-minify-gradients](https://github.com/cssnano/cssnano) | `7.0.4` | `8.0.1` |\n| [postcss-minify-params](https://github.com/cssnano/cssnano) | `7.0.8` | `8.0.1` |\n| [postcss-minify-selectors](https://github.com/cssnano/cssnano) | `7.1.0` | `8.0.2` |\n| [postcss-normalize-charset](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-normalize-display-values](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-normalize-positions](https://github.com/cssnano/cssnano) | `7.0.3` | `8.0.1` |\n| [postcss-normalize-repeat-style](https://github.com/cssnano/cssnano) | `7.0.3` | `8.0.1` |\n| [postcss-normalize-string](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-normalize-timing-functions](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-normalize-unicode](https://github.com/cssnano/cssnano) | `7.0.8` | `8.0.1` |\n| [postcss-normalize-url](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-normalize-whitespace](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-ordered-values](https://github.com/cssnano/cssnano) | `7.0.3` | `8.0.1` |\n| [postcss-reduce-initial](https://github.com/cssnano/cssnano) | `7.0.8` | `8.0.1` |\n| [postcss-reduce-transforms](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-svgo](https://github.com/cssnano/cssnano) | `7.1.2` | `8.0.1` |\n| [postcss-unique-selectors](https://github.com/cssnano/cssnano) | `7.0.6` | `8.0.1` |\n| [qs](https://github.com/ljharb/qs) | `6.14.2` | `6.15.3` |\n| [regjsparser](https://github.com/jviereck/regjsparser) | `0.13.1` | `0.13.2` |\n| [seroval](https://github.com/lxsmnsyc/seroval) | `1.5.2` | `1.5.5` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.10.0` |\n| [side-channel](https://github.com/ljharb/side-channel) | `1.1.0` | `1.1.1` |\n| [signal-exit](https://github.com/tapjs/signal-exit) | `4.1.0` | `3.0.7` |\n| [smob](https://github.com/Tada5hi/smob) | `1.6.1` | `1.6.2` |\n| [socks](https://github.com/JoshGlazebrook/socks) | `2.8.7` | `2.8.9` |\n| [srvx](https://github.com/h3js/srvx) | `0.11.15` | `0.11.21` |\n| [std-env](https://github.com/unjs/std-env) | `3.10.0` | `4.2.0` |\n| [streamx](https://github.com/mafintosh/streamx) | `2.25.0` | `2.28.0` |\n| [string.prototype.trim](https://github.com/es-shims/String.prototype.trim) | `1.2.10` | `1.2.11` |\n| [string.prototype.trimend](https://github.com/es-shims/String.prototype.trimEnd) | `1.0.9` | `1.0.10` |\n| [stylehacks](https://github.com/cssnano/cssnano) | `7.0.10` | `8.0.1` |\n| [tar-stream](https://github.com/mafintosh/tar-stream) | `3.1.8` | `3.2.0` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.13` | `7.5.19` |\n| [terser](https://github.com/terser/terser) | `5.46.2` | `5.49.0` |\n| [tinyclip](https://github.com/tinylibs/tinyclip) | `0.1.12` | `0.1.15` |\n| [tinyexec](https://github.com/tinylibs/tinyexec) | `1.1.1` | `1.2.4` |\n| [tinyglobby](https://github.com/SuperchupuDev/tinyglobby) | `0.2.16` | `0.2.17` |\n| [typed-array-length](https://github.com/inspect-js/typed-array-length) | `1.0.7` | `1.0.8` |\n| [ultrahtml](https://github.com/natemoo-re/ultrahtml) | `1.6.0` | `1.7.0` |\n| [unhead](https://github.com/unjs/unhead/tree/HEAD/packages/unhead) | `2.1.13` | `2.1.15` |\n| [unimport](https://github.com/unjs/unimport) | `5.7.0` | `6.3.0` |\n| [unplugin-utils](https://github.com/sxzz/unplugin-utils) | `0.3.1` | `0.3.2` |\n| [unrs-resolver](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [vite-dev-rpc](https://github.com/antfu/vite-dev-rpc) | `1.1.0` | `2.0.0` |\n| [vite-hot-client](https://github.com/antfu/vite-hot-client) | `2.1.0` | `2.2.0` |\n| [vite-plugin-checker](https://github.com/fi3ework/vite-plugin-checker) | `0.12.0` | `0.14.4` |\n| [vite-plugin-inspect](https://github.com/antfu-collective/vite-plugin-inspect) | `11.3.3` | `11.4.1` |\n| [vite-plugin-vue-tracer](https://github.com/antfu/vite-plugin-vue-tracer) | `1.3.0` | `1.4.0` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.2` | `7.3.6` |\n| [vue-bundle-renderer](https://github.com/nuxt-contrib/vue-bundle-renderer) | `2.2.0` | `2.3.1` |\n| [vue-eslint-parser](https://github.com/vuejs/vue-eslint-parser) | `10.4.0` | `10.4.1` |\n| [which-typed-array](https://github.com/inspect-js/which-typed-array) | `1.1.20` | `1.1.22` |\n| [ws](https://github.com/websockets/ws) | `8.20.0` | `8.21.0` |\n| [wsl-utils](https://github.com/sindresorhus/wsl-utils) | `0.1.0` | `0.3.1` |\n| [yaml](https://github.com/eemeli/yaml) | `2.8.3` | `2.9.0` |\n\nUpdates `@applemusic-like-lyrics/vue` from 0.3.2 to 0.5.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/releases\"\u003e@​applemusic-like-lyrics/vue's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.0 - 兼容 NCM 3.0.0！原生音频可视化！\u003c/h2\u003e\n\u003cp\u003e匆忙做了兼容性支持，有部分功能消失了是因为暂时没找到合适的办法移植，敬请期待！\n当前版本开始会同时兼容 2.9.X 和 3.0.0+ 的网易云，不过未来的某一天可能会中断对 2.9.X 版本的支持，所以请大家尽快升级版本哦！\u003c/p\u003e\n\u003ch2\u003e关于 3.0.0 版本的歌词页面访问方式变化（重要）\u003c/h2\u003e\n\u003cp\u003e（如果你正在使用 2.9.X 版本的网易云，则没有变化）\n从新版开始，打开歌词页面的方法变更为点击右下角的苹果歌词图标：\n\u003cimg src=\"https://github.com/Steve-xmh/applemusic-like-lyrics/assets/39523898/79507c04-d5c3-44fc-8632-9d99d12a0ee1\" alt=\"image\" /\u003e\n且如果需要退出歌词页面，则需要打开菜单并点击底部的“退出歌词页面”：\n\u003cimg src=\"https://github.com/Steve-xmh/applemusic-like-lyrics/assets/39523898/c6c417d9-2c6b-455f-87c1-0d9dde292cc0\" alt=\"image\" /\u003e\u003c/p\u003e\n\u003cp\u003e以下是更新记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e兼容 3.0.0 网易云，有一部分功能由于 3.0.0 架构大改暂时被移除。\u003c/li\u003e\n\u003cli\u003e支持 3.0.0 提供的音频可视化接口实现可视化动画。\u003c/li\u003e\n\u003cli\u003e重构背景渲染中，目前会对性能较差的显卡造成降维打击，还请多多注意！\u003c/li\u003e\n\u003cli\u003e部分细节优化。\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.6.1 (v1.6.0)\u003c/h2\u003e\n\u003ch2\u003e更新\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e基本实现了私人 FM 的歌词显示\u003c/li\u003e\n\u003cli\u003e初步支持和实现和 \u003ca href=\"https://github.com/BetterNCM/LibFrontendPlay\"\u003eLibFrontendPlay\u003c/a\u003e 插件联动的音频可视化效果\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e修正与改进\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e现在会在逐词歌词和默认歌词之间选择合适的原始歌词了\u003c/li\u003e\n\u003cli\u003e缓解了因为回调问题导致歌词无法滚动的问题\u003c/li\u003e\n\u003cli\u003e修正了歌手和专辑标签无法隐藏的问题\u003c/li\u003e\n\u003cli\u003e调优了构建脚本\u003c/li\u003e\n\u003cli\u003e调优了开发重载能力\u003c/li\u003e\n\u003cli\u003e防止搜索函数搜索到自身\u003c/li\u003e\n\u003cli\u003e用 Rome 做了一遍格式化\u003c/li\u003e\n\u003cli\u003e似乎也不再需要 Hook 函数了\u003c/li\u003e\n\u003cli\u003e对工作线程做了一些特判\u003c/li\u003e\n\u003cli\u003e整理了代码结构\u003c/li\u003e\n\u003cli\u003e其他细节修正\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e最新 main 分支开发调试构建\u003c/h2\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e修正工作流 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/4e586361026cd31b79d7d60ce41a6d3c5106d666\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e修正工作流 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/f9fa644e4726d5dec5f661036aa0a22cac58fa22\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e修正工作流 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/f090519d8393abb8fff76ed048e68b432917f214\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e修正顶栏 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/44ada57bc07f57f532bb7289c1dd0d42b7acb542\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e增加文档页面列表 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/6c2115fee0a4a0653c238ec125d13ea5d86e3b00\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e增加代码高亮，修改排版和样式 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/6b1c1f9deabfce77b4b218cf1bae84e24d44c871\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e增加表格和其他样式支持 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/a47b5db16ccf67d31185457188292d9247d45a10\"\u003eSteveXMH\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e优化样式 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/6c91b4b70a75e69635e7ee62b11d45de8caafa3e\"\u003eSteveXMH\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e增加歌词编辑器文档（感谢 \u003ca href=\"https://github.com/Xionghaizi001\"\u003e\u003ccode\u003e@​Xionghaizi001\u003c/code\u003e\u003c/a\u003e ） (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/4cddb8666f83da2d256127ba1fab694e03311216\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eCommits\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e解耦部分模块 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/804a0de7b6626b4982c55a2f0a875e2274423406\"\u003eSteveXMH\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e支持调节背景帧数和渲染精度 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/f4dd4e1eada165482c76fa3d73290118fd3b1c55\"\u003eSteveXMH\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/blob/main/packages/vue/CHANGELOG.md\"\u003e@​applemusic-like-lyrics/vue's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.5.2 (2026-07-09)\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erefactor(core):\u003c/strong\u003e 将点击相关事件和样式由歌词行上移至歌词组 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/538\"\u003e#538\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003echore(core):\u003c/strong\u003e 一些简单的代码优化避免样式重新计算 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/540\"\u003e#540\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003echore(core):\u003c/strong\u003e 简单优化一点Mesh着色器的代码 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003echore:\u003c/strong\u003e 修复 linter 警告 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/539\"\u003e#539\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eapoint123 \u003ca href=\"https://github.com/apoint123\"\u003e\u003ccode\u003e@​apoint123\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLinho\u003c/li\u003e\n\u003cli\u003eSteveXMH \u003ca href=\"https://github.com/Steve-xmh\"\u003e\u003ccode\u003e@​Steve-xmh\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.5.1 (2026-05-17)\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efix:\u003c/strong\u003e 修复含对唱时歌词错误提前导致的多行高亮 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/521\"\u003e#521\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003erefactor:\u003c/strong\u003e 引入歌词组来包装主歌词和背景人声 \u0026amp; 前置背景人声 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/531\"\u003e#531\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003echore:\u003c/strong\u003e 更正 package.json 协议声明 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/534\"\u003e#534\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003e仓库根目录的 LICENSE 文件为 AGPL v3.0 协议，但是 package.json 中的 \u003ccode\u003elicense\u003c/code\u003e 字段为 \u003ccode\u003eGPL-3.0\u003c/code\u003e。经与原开发者确认，package.json 中的 \u003ccode\u003elicense\u003c/code\u003e 字段有误。仓库与其所有产出的 npm 包均应为 AGPL v3 only 协议，SPDX: \u003ccode\u003eAGPL-3.0-only\u003c/code\u003e。因此，更正各包 \u003ccode\u003epackage.json\u003c/code\u003e 的 \u003ccode\u003elicense\u003c/code\u003e 字段为 \u003ccode\u003eAGPL-3.0-only\u003c/code\u003e。\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003echore(core):\u003c/strong\u003e 优化类型定义 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/519\"\u003e#519\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eapoint123 \u003ca href=\"https://github.com/apoint123\"\u003e\u003ccode\u003e@​apoint123\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLinho \u003ca href=\"https://github.com/Linho1219\"\u003e\u003ccode\u003e@​Linho1219\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.5.0 (2026-05-12)\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erefactor:\u003c/strong\u003e 整理核心播放器代码结构，将抽象接口部分集中到统一目录 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/508\"\u003e#508\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003erefactor:\u003c/strong\u003e 整理核心播放器抽象类中时间线、滚动与单行布局部分的结构与状态管理 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/509\"\u003e#509\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e 修复 setCurrentTime 在提供 isSeek 标志时，实际排版未遵守标志导致布局异常漂移的问题 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/509\"\u003e#509\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e 修复在同一行时间内拖拽进度条时逐字动画不同步的问题 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/509\"\u003e#509\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e 修复暂停状态下点击行跳转时仍播放逐字动画的问题 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/509\"\u003e#509\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLinho \u003ca href=\"https://github.com/Linho1219\"\u003e\u003ccode\u003e@​Linho1219\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.4.2 (2026-05-01)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/fd7ec2d597daa2a66a37ca5f3214d6757ec17cfa\"\u003e\u003ccode\u003efd7ec2d\u003c/code\u003e\u003c/a\u003e chore(release): publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/36e57035a735596479abe943f78846b8d1e78afc\"\u003e\u003ccode\u003e36e5703\u003c/code\u003e\u003c/a\u003e chore(release): publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/251e1fbe4f709365b5eb3ec96f18deed2faebe74\"\u003e\u003ccode\u003e251e1fb\u003c/code\u003e\u003c/a\u003e chore: 更正错误的 package.json 协议声明 (\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/vue/issues/534\"\u003e#534\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/0af2d978e670640cc6c1b8383d55d60c8dd6590c\"\u003e\u003ccode\u003e0af2d97\u003c/code\u003e\u003c/a\u003e chore: 映射真实源代码 (\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/vue/issues/519\"\u003e#519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/366164c117225b627c09208865098ac7c541ecca\"\u003e\u003ccode\u003e366164c\u003c/code\u003e\u003c/a\u003e docs: 补齐 changelog 链接 (\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/vue/issues/518\"\u003e#518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/c38969e801d18bfa3955b16b5e8f53ee3d152c83\"\u003e\u003ccode\u003ec38969e\u003c/code\u003e\u003c/a\u003e chore(release): publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/ab07d7205dd43bf3a0523eaeed9bd8ce589b9199\"\u003e\u003ccode\u003eab07d72\u003c/code\u003e\u003c/a\u003e chore(release): publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/48ec944509271f9eebf5a45433645f5296c41584\"\u003e\u003ccode\u003e48ec944\u003c/code\u003e\u003c/a\u003e chore(release): publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/de5c5705666f6d2ebeafb987372564155ba9e036\"\u003e\u003ccode\u003ede5c570\u003c/code\u003e\u003c/a\u003e fix(vue): 修复掩码模式错误的类型 (\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/vue/issues/496\"\u003e#496\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/f1c8309d314640893a3141c2a9eb6b04e428e874\"\u003e\u003ccode\u003ef1c8309\u003c/code\u003e\u003c/a\u003e build: 内联 CSS 中的 url (\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/vue/issues/493\"\u003e#493\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commits/core-bundle@0.5.2/packages/vue\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@neteasecloudmusicapienhanced/api` from 4.32.0 to 4.36.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/releases\"\u003e@​neteasecloudmusicapienhanced/api's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eRelease v4.36.1\u003c/h1\u003e\n\u003ch2\u003e更新内容 / Changelog\u003c/h2\u003e\n\u003cp\u003e从 \u003ccode\u003ev4.35.2\u003c/code\u003e 到 \u003ccode\u003ev4.36.1\u003c/code\u003e 的提交记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: 请求异常 (83ee2cda34a20f64c6d343f7dfe22aa6a1c84b3d) (1454ee2)\u003c/li\u003e\n\u003cli\u003efeat: add NCBL encrypted scrobble interface and update related documentation (83ee2cd)\u003c/li\u003e\n\u003cli\u003efeat: 新增听歌打卡示例页面 (3c352b5)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e自动发布 via GitHub Actions\u003c/p\u003e\n\u003ch1\u003eRelease v4.35.2\u003c/h1\u003e\n\u003ch2\u003e更新内容 / Changelog\u003c/h2\u003e\n\u003cp\u003e从 \u003ccode\u003ev4.35.1\u003c/code\u003e 到 \u003ccode\u003ev4.35.2\u003c/code\u003e 的提交记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: 修复听歌打卡接口 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/167\"\u003e#167\u003c/a\u003e) (60ee927)\u003c/li\u003e\n\u003cli\u003efeat: 支持显示加密方式 (eb07a52)\u003c/li\u003e\n\u003cli\u003efeat(docs-format): 增加文档格式化工具 (6fc4231)\u003c/li\u003e\n\u003cli\u003erevert: some changes (fa69736)\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;feat: 增加文档格式化工具\u0026quot; (73a5e9d)\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;fix(deploy): 修复部分启动失败 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/196\"\u003e#196\u003c/a\u003e)\u0026quot; (dc6f56e)\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;refactor: 优化serverless入口文件\u0026quot; (2c9da85)\u003c/li\u003e\n\u003cli\u003erefactor: 优化serverless入口文件 (1db3544)\u003c/li\u003e\n\u003cli\u003efix(deploy): 修复部分启动失败 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/196\"\u003e#196\u003c/a\u003e) (395a80e)\u003c/li\u003e\n\u003cli\u003efeat: 增加文档格式化工具 (6550c7c)\u003c/li\u003e\n\u003cli\u003efeat: 增强配置生成逻辑，添加重试机制和日志记录 (c959866)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e自动发布 via GitHub Actions\u003c/p\u003e\n\u003ch1\u003eRelease v4.35.1\u003c/h1\u003e\n\u003ch2\u003e更新内容 / Changelog\u003c/h2\u003e\n\u003cp\u003e从 \u003ccode\u003ev4.35.0\u003c/code\u003e 到 \u003ccode\u003ev4.35.1\u003c/code\u003e 的提交记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: 修复游客登陆接口 (e3a1c04)\u003c/li\u003e\n\u003cli\u003ebuild(packages): bump \u003ccode\u003e@​types/node\u003c/code\u003e from 25.5.0 to 25.9.2 (0300c1b)\u003c/li\u003e\n\u003cli\u003echore(deps): bump docker/login-action from 3 to 4 (a9c33de)\u003c/li\u003e\n\u003cli\u003echore(deps): bump aormsby/Fork-Sync-With-Upstream-action (6175d55)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e自动发布 via GitHub Actions\u003c/p\u003e\n\u003ch1\u003eRelease v4.35.0\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commits/v4.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​neteasecloudmusicapienhanced/api\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@simplewebauthn/server` from 13.3.0 to 13.3.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/releases\"\u003e@​simplewebauthn/server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev13.3.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v4 Low (2.0) security vulnerability identified in \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e. See the security advisory linked below for more information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e allowing a maliciously-crafted attestation statement's \u003ccode\u003ex5c\u003c/code\u003e to contain a self-signed \u0026quot;root certificate\u0026quot; instead of chaining back to an RP-specified trust anchor (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-6hxq-p678-4hr2\"\u003eGHSA-6hxq-p678-4hr2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.3.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e failing to verify some Packed and SafetyNet statements (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md\"\u003e@​simplewebauthn/server's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev13.3.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v4 Low (2.0) security vulnerability identified in\n\u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e. See the security advisory linked below for more information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e allowing a maliciously-crafted\nattestation statement's \u003ccode\u003ex5c\u003c/code\u003e to contain a self-signed \u0026quot;root certificate\u0026quot; instead of chaining back\nto an RP-specified trust anchor\n(\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-6hxq-p678-4hr2\"\u003eGHSA-6hxq-p678-4hr2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.3.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e failing to verify some Packed and\nSafetyNet statements (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/84656fff764256609193b9e0a0661c82dd379ebb\"\u003e\u003ccode\u003e84656ff\u003c/code\u003e\u003c/a\u003e Update version to 13.3.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/dd0d73c716a528e6645efafbd43a972b64df71f9\"\u003e\u003ccode\u003edd0d73c\u003c/code\u003e\u003c/a\u003e Fail cert path validation closed instead\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/213e9ba052632c9915704edbab48d4667141c3f2\"\u003e\u003ccode\u003e213e9ba\u003c/code\u003e\u003c/a\u003e Add test for failure to chain to trust anchor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/989507a62d23960933b44018c1b090da0e73c803\"\u003e\u003ccode\u003e989507a\u003c/code\u003e\u003c/a\u003e Add tests for notAfter enforcement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/b55f4b957881ca6a0c93d05aebca6cdf6424fffb\"\u003e\u003ccode\u003eb55f4b9\u003c/code\u003e\u003c/a\u003e Move explanation into test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/7bed04ce33a8fc2e4b0c2f8c84d7c171f001905f\"\u003e\u003ccode\u003e7bed04c\u003c/code\u003e\u003c/a\u003e Update comments around cert chain validity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/6ee964484ad9bb9365c45c95b32e0065db45ed96\"\u003e\u003ccode\u003e6ee9644\u003c/code\u003e\u003c/a\u003e Add new tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/c23890af1a0e741b0451461eb713eb0d4607d096\"\u003e\u003ccode\u003ec23890a\u003c/code\u003e\u003c/a\u003e Update existing test to use helpers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/8d02ed4e546859aaf3d0816bfe35917efcef88a7\"\u003e\u003ccode\u003e8d02ed4\u003c/code\u003e\u003c/a\u003e Add X.509 cert helpers for tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/8a53d70f42bcbb7c744ef1b90e6db35bc4b26d06\"\u003e\u003ccode\u003e8a53d70\u003c/code\u003e\u003c/a\u003e Use X509ChainBuilder for chain validation\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.2/packages/server\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.15.2 to 1.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.18.1 — June 21, 2026\u003c/h2\u003e\n\u003cp\u003eThis release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10913\"\u003e#10913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10917\"\u003e#10917\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10930\"\u003e#10930\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10942\"\u003e#10942\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10993\"\u003e#10993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRuntime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10959\"\u003e#10959\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11021\"\u003e#11021\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAxiosURLSearchParams: Switched the encoder callback to an arrow function so \u003ccode\u003eencoder.call(this)\u003c/code\u003e receives the \u003ccode\u003eAxiosURLSearchParams\u003c/code\u003e instance correctly. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDocumentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11007\"\u003e#11007\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11010\"\u003e#11010\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11023\"\u003e#11023\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11025\"\u003e#11025\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eDependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11011\"\u003e#11011\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11012\"\u003e#11012\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11013\"\u003e#11013\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11014\"\u003e#11014\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11015\"\u003e#11015\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11016\"\u003e#11016\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11017\"\u003e#11017\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11026\"\u003e#11026\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webdevelopersrinu\"\u003e\u003ccode\u003e@​webdevelopersrinu\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10913\"\u003e#10913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sijie-Z\"\u003e\u003ccode\u003e@​sijie-Z\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10993\"\u003e#10993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bartlomieju\"\u003e\u003ccode\u003e@​bartlomieju\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11023\"\u003e#11023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JSap0914\"\u003e\u003ccode\u003e@​JSap0914\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.18.0...v1.18.1\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.0 — June 13, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eRedirect Header Safety:\u003c/strong\u003e Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10892\"\u003e#10892\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eURL And ...\n\n_Description has been truncated_","html_url":"https://github.com/gvbhj111/VoiceHub-for-XWYZ/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/gvbhj111%2FVoiceHub-for-XWYZ/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"},{"uuid":"4848842704","node_id":"PR_kwDOSjRKBs7v273C","number":22,"state":"closed","title":"build(deps): bump the npm_and_yarn group across 1 directory with 9 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-07-09T21:51:07.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-09T18:24:52.000Z","updated_at":"2026-07-09T21:51:13.000Z","time_to_close":12375,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"npm_and_yarn","update_count":9,"packages":[{"name":"undici","old_version":"6.26.0","new_version":"6.27.0","repository_url":"https://github.com/nodejs/undici"},{"name":"js-yaml","old_version":"3.14.2","new_version":"3.15.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"hono","old_version":"4.12.23","new_version":"4.12.28","repository_url":"https://github.com/honojs/hono"},{"name":"tar","old_version":"7.5.15","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [undici](https://github.com/nodejs/undici) | `6.26.0` | `6.27.0` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.0` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [hono](https://github.com/honojs/hono) | `4.12.23` | `4.12.28` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.15` | `7.5.19` |\n\n\nUpdates `undici` from 6.26.0 to 6.27.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.27.0\u003c/h2\u003e\n\u003ch1\u003e⚠️ Security Release\u003c/h1\u003e\n\u003cp\u003eThis release line addresses \u003cstrong\u003e4 security advisories\u003c/strong\u003e.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eAction required:\u003c/strong\u003e Upgrade to \u003cstrong\u003eundici 6.27.0\u003c/strong\u003e or later.\u003c/p\u003e\n\u003cpre lang=\"sh\"\u003e\u003ccode\u003enpm install undici@^6.27.0\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eNote on patched version:\u003c/strong\u003e the v6 fixes shipped in \u003cstrong\u003ev6.27.0\u003c/strong\u003e, not \u003ccode\u003e6.26.0\u003c/code\u003e\n— \u003ccode\u003ev6.26.0\u003c/code\u003e contains only the chunked-EOF fix (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5308\"\u003e#5308\u003c/a\u003e) and the version bump, none\nof the security fixes below.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThe v6 line is \u003cstrong\u003enot\u003c/strong\u003e affected by the SOCKS5 advisories (GHSA-vmh5-mc38-953g,\nGHSA-hm92-r4w5-c3mj), the shared-cache disclosure (GHSA-pr7r-676h-xcf6), or the\n8.x-only WebSocket regression (GHSA-38rv-x7px-6hhq).\u003c/p\u003e\n\u003ch2\u003eSummary\u003c/h2\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eAdvisory\u003c/th\u003e\n\u003cth\u003eCVE\u003c/th\u003e\n\u003cth\u003eSeverity (CVSS)\u003c/th\u003e\n\u003cth\u003eFixed in\u003c/th\u003e\n\u003cth\u003eFix commit\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q\"\u003eGHSA-vxpw-j846-p89q\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-12151\u003c/td\u003e\n\u003ctd\u003eHigh (7.5)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/b7f252e7\"\u003e\u003ccode\u003eb7f252e7\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-p88m-4jfj-68fv\"\u003eGHSA-p88m-4jfj-68fv\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-9679\u003c/td\u003e\n\u003ctd\u003eModerate (5.9)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/25efa447\"\u003e\u003ccode\u003e25efa447\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m\"\u003eGHSA-g8m3-5g58-fq7m\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-11525\u003c/td\u003e\n\u003ctd\u003eLow (3.7)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/25efa447\"\u003e\u003ccode\u003e25efa447\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52\"\u003eGHSA-35p6-xmwp-9g52\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-6733\u003c/td\u003e\n\u003ctd\u003eLow (3.7)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/f4c31d60\"\u003e\u003ccode\u003ef4c31d60\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003chr /\u003e\n\u003ch2\u003eHigh severity\u003c/h2\u003e\n\u003ch3\u003eWebSocket DoS via fragment count bypass — CVE-2026-12151\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q\"\u003eGHSA-vxpw-j846-p89q\u003c/a\u003e\u003c/strong\u003e · CWE-400, CWE-770\n\u003cstrong\u003eFix:\u003c/strong\u003e \u003ca href=\"https://github.com/nodejs/undici/commit/b7f252e7\"\u003e\u003ccode\u003eb7f252e7\u003c/code\u003e\u003c/a\u003e \u003cem\u003eBackport WebSocket maxPayloadSize fixes\u003c/em\u003e (\u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5423\"\u003e#5423\u003c/a\u003e, backported to v6 in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5428\"\u003e#5428\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eA malicious WebSocket server can stream a large number of small or empty\ncontinuation frames. Undici enforced a limit on cumulative payload size but did\nnot limit the \u003cem\u003enumber\u003c/em\u003e of fragments per message, leading to unbounded memory\ngrowth and denial of service. All releases from 6.17.0 onward are affected.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eAffected:\u003c/strong\u003e applications using \u003ccode\u003enew WebSocket(...)\u003c/code\u003e or \u003ccode\u003eWebSocketStream\u003c/code\u003e\nagainst untrusted endpoints.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eWorkaround:\u003c/strong\u003e none — upgrade is required.\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003eModerate severity\u003c/h2\u003e\n\u003ch3\u003eHTTP header injection via Set-Cookie percent-decoding — CVE-2026-9679\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/551138cbc1742c92242a68216167761075e8a82c\"\u003e\u003ccode\u003e551138c\u003c/code\u003e\u003c/a\u003e Bumped v6.27.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5431\"\u003e#5431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/b7f252e7c0841418fb9d95cd297bdd9fad9d2a53\"\u003e\u003ccode\u003eb7f252e\u003c/code\u003e\u003c/a\u003e Backport WebSocket maxPayloadSize fixes to v7.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5423\"\u003e#5423\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5428\"\u003e#5428\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/25efa447997f74d5881edd144525c3fd7db945a4\"\u003e\u003ccode\u003e25efa44\u003c/code\u003e\u003c/a\u003e fix(cookies): preserve values and parse SameSite strictly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/f4c31d60c42d0385bca6ad602c112706b0695212\"\u003e\u003ccode\u003ef4c31d6\u003c/code\u003e\u003c/a\u003e fix: guard idle socket validation to skip fresh sockets (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5400\"\u003e#5400\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nodejs/undici/compare/v6.26.0...v6.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@xhmikosr/decompress` from 11.1.2 to 11.1.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/XhmikosR/decompress/releases\"\u003e@​xhmikosr/decompress's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev11.1.3\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cp\u003eFixes a crafted archive being able to read or write files outside the extraction directory:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eValidate symlink and hardlink targets against the output directory\u003c/li\u003e\n\u003cli\u003eReplace the prefix-based containment check with \u003ccode\u003epath.relative\u003c/code\u003e, fixing a sibling-directory bypass\u003c/li\u003e\n\u003cli\u003eStrip setuid, setgid, and sticky bits from extracted files\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAdvisory: \u003ca href=\"https://github.com/XhmikosR/decompress/security/advisories/GHSA-mp2f-45pm-3cg9\"\u003eGHSA-mp2f-45pm-3cg9\u003c/a\u003e (CVE-2026-53486)\u003c/p\u003e\n\u003ch2\u003eOther changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eWrite regular files before hardlinks so a hardlink to an extracted file resolves\u003c/li\u003e\n\u003cli\u003eInternal refactoring of the extraction code\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/XhmikosR/decompress/compare/v11.1.2...v11.1.3\"\u003ehttps://github.com/XhmikosR/decompress/compare/v11.1.2...v11.1.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/921c957ca09437139599d86d5f4aa963f1b3fa82\"\u003e\u003ccode\u003e921c957\u003c/code\u003e\u003c/a\u003e 11.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/4a2e46f914cd2c25f9199bcbf1332a9ff7c0ce92\"\u003e\u003ccode\u003e4a2e46f\u003c/code\u003e\u003c/a\u003e extractFile: write files before hardlinks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/44bc4bed3023d385185cb8099d9243b24b596cc9\"\u003e\u003ccode\u003e44bc4be\u003c/code\u003e\u003c/a\u003e runPlugins: use Array.flat()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/eab194d37d853d1450b9fe8a72225b7cc0bc082f\"\u003e\u003ccode\u003eeab194d\u003c/code\u003e\u003c/a\u003e refactor: hoist umask and timestamp out of the extraction loop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/3796c879582ea991438c6083e0b8610970bf3e9d\"\u003e\u003ccode\u003e3796c87\u003c/code\u003e\u003c/a\u003e Rename variables\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/2612bd5f75d3b8fcdaf4d7aa308111c173d6bf53\"\u003e\u003ccode\u003e2612bd5\u003c/code\u003e\u003c/a\u003e Settle all entries before propagating a failure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/b7d172672fa5e172c165dee26842277983765f0d\"\u003e\u003ccode\u003eb7d1726\u003c/code\u003e\u003c/a\u003e Resolve the output path once per extraction\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/60b5299402e72b0b53ca2e55222e9a1ccb44afae\"\u003e\u003ccode\u003e60b5299\u003c/code\u003e\u003c/a\u003e Strip setuid/setgid/sticky bits from extracted files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/281cefa00cd4275c10479bc5f1abba6b14dee8bd\"\u003e\u003ccode\u003e281cefa\u003c/code\u003e\u003c/a\u003e Validate link targets to prevent escaping the output directory\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/aca5aac415dc04a6fae5200e51368cff436a09dd\"\u003e\u003ccode\u003eaca5aac\u003c/code\u003e\u003c/a\u003e Fix sibling-prefix path traversal via \u003ccode\u003epath.relative\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/XhmikosR/decompress/compare/v11.1.2...v11.1.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `devalue` from 5.6.3 to 5.8.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sveltejs/devalue/releases\"\u003edevalue's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.8.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e206ca67: fix: force sparse arrays to allocate sparsely\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.8.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ec5115b0: feat: add \u003ccode\u003estringifyAsync\u003c/code\u003e for async serialization\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.7.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e8becc7c: fix: handle regexes consistently in uneval's value and reference formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.7.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edf2e284: feat: use native alternatives to encode/decode base64\u003c/li\u003e\n\u003cli\u003e498656e: feat: add \u003ccode\u003eDataView\u003c/code\u003e support\u003c/li\u003e\n\u003cli\u003ea210130: feat: whitelist \u003ccode\u003eFloat16Array\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003edf2e284: feat: simplify TypedArray slices\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e5590634: fix: get \u003ccode\u003euneval\u003c/code\u003e type handling up to parity with \u003ccode\u003estringify\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e57f73fc: fix: correctly support boxed bigints and sentinel values\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.6.4\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e87c1f3c: fix: reject \u003ccode\u003e__proto__\u003c/code\u003e keys in malformed \u003ccode\u003eObject\u003c/code\u003e wrapper payloads\u003c/p\u003e\n\u003cp\u003eThis validates the \u003ccode\u003e\u0026quot;Object\u0026quot;\u003c/code\u003e parse path and throws when the wrapped value has an own \u003ccode\u003e__proto__\u003c/code\u003e key.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e40f1db1: fix: ensure sparse array indices are integers\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e87c1f3c: fix: disallow \u003ccode\u003e__proto__\u003c/code\u003e keys in null-prototype object parsing\u003c/p\u003e\n\u003cp\u003eThis disallows \u003ccode\u003e__proto__\u003c/code\u003e keys in the \u003ccode\u003e\u0026quot;null\u0026quot;\u003c/code\u003e parse path so null-prototype object hydration cannot carry that key through parse/unflatten.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md\"\u003edevalue's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.8.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e206ca67: fix: force sparse arrays to allocate sparsely\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.8.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ec5115b0: feat: add \u003ccode\u003estringifyAsync\u003c/code\u003e for async serialization\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.7.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e8becc7c: fix: handle regexes consistently in uneval's value and reference formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.7.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edf2e284: feat: use native alternatives to encode/decode base64\u003c/li\u003e\n\u003cli\u003e498656e: feat: add \u003ccode\u003eDataView\u003c/code\u003e support\u003c/li\u003e\n\u003cli\u003ea210130: feat: whitelist \u003ccode\u003eFloat16Array\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003edf2e284: feat: simplify TypedArray slices\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e5590634: fix: get \u003ccode\u003euneval\u003c/code\u003e type handling up to parity with \u003ccode\u003estringify\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e57f73fc: fix: correctly support boxed bigints and sentinel values\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.6.4\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e87c1f3c: fix: reject \u003ccode\u003e__proto__\u003c/code\u003e keys in malformed \u003ccode\u003eObject\u003c/code\u003e wrapper payloads\u003c/p\u003e\n\u003cp\u003eThis validates the \u003ccode\u003e\u0026quot;Object\u0026quot;\u003c/code\u003e parse path and throws when the wrapped value has an own \u003ccode\u003e__proto__\u003c/code\u003e key.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e40f1db1: fix: ensure sparse array indices are integers\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e87c1f3c: fix: disallow \u003ccode\u003e__proto__\u003c/code\u003e keys in null-prototype object parsing\u003c/p\u003e\n\u003cp\u003eThis disallows \u003ccode\u003e__proto__\u003c/code\u003e keys in the \u003ccode\u003e\u0026quot;null\u0026quot;\u003c/code\u003e parse path so null-prototype object hydration cannot carry that key through parse/unflatten.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/796ea83a76eb7e0f2af376f9c2c875f1d057f50f\"\u003e\u003ccode\u003e796ea83\u003c/code\u003e\u003c/a\u003e Version Packages (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/152\"\u003e#152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/206ca6712fbc380a4571c59de9ab04b91110792d\"\u003e\u003ccode\u003e206ca67\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/14933f78ff6b712829162628682b0a1993e75d19\"\u003e\u003ccode\u003e14933f7\u003c/code\u003e\u003c/a\u003e Version Packages (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/151\"\u003e#151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/c5115b0074ec298fb4077f6cee5616cefbd13902\"\u003e\u003ccode\u003ec5115b0\u003c/code\u003e\u003c/a\u003e feat: \u003ccode\u003estringifyAsync\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/150\"\u003e#150\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/67dad450b5db18ea9aa3059d334d8b0ee6704d9e\"\u003e\u003ccode\u003e67dad45\u003c/code\u003e\u003c/a\u003e docs: update README to reflect serialization stability non-goal (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/147\"\u003e#147\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/6eb920a7db6fe388f24f640d0e4e874a57f148fb\"\u003e\u003ccode\u003e6eb920a\u003c/code\u003e\u003c/a\u003e Version Packages (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/8becc7c436f0d4f85e2e5b32cb49dcfdf4fdec42\"\u003e\u003ccode\u003e8becc7c\u003c/code\u003e\u003c/a\u003e fix: handle regexes consistently in uneval's value and reference formats (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/145\"\u003e#145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/2eee2e435ea0ea3d495dc7a266486df95a4eb6ed\"\u003e\u003ccode\u003e2eee2e4\u003c/code\u003e\u003c/a\u003e Version Packages (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/144\"\u003e#144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/498656e75d36dfc63a386240722bdeac63337b25\"\u003e\u003ccode\u003e498656e\u003c/code\u003e\u003c/a\u003e DataView support (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/143\"\u003e#143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/5590634db53ed555d3ce2e2024924b30352a6afc\"\u003e\u003ccode\u003e5590634\u003c/code\u003e\u003c/a\u003e Improve platform types support (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/142\"\u003e#142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sveltejs/devalue/compare/v5.6.3...v5.8.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `esbuild` from 0.27.7 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evanw/esbuild/releases\"\u003eesbuild's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDisallow \u003ccode\u003e\\\u003c/code\u003e in local development server HTTP requests (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr\"\u003eGHSA-g7r4-m6w7-qqqr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThis release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \u003ccode\u003e\\\u003c/code\u003e backslash character. It happened due to the use of Go's \u003ccode\u003epath.Clean()\u003c/code\u003e function, which only handles Unix-style \u003ccode\u003e/\u003c/code\u003e characters. HTTP requests with paths containing \u003ccode\u003e\\\u003c/code\u003e are no longer allowed.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/dellalibera\"\u003e\u003ccode\u003e@​dellalibera\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd integrity checks to the Deno API (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr\"\u003eGHSA-gv7w-rqvm-qjhr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.\u003c/p\u003e\n\u003cp\u003eNote that esbuild's Deno API installs from \u003ccode\u003eregistry.npmjs.org\u003c/code\u003e by default, but allows the \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e environment variable to override this with a custom package registry. This change means that the esbuild executable served by \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e must now match the expected content.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/sondt99\"\u003e\u003ccode\u003e@​sondt99\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAvoid inlining \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild's minifier sometimes incorrectly inlined \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for \u003ccode\u003elet\u003c/code\u003e and \u003ccode\u003econst\u003c/code\u003e declarations by avoiding doing it for \u003ccode\u003evar\u003c/code\u003e declarations, which no longer worked when more declaration types were added. Here's an example:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\r\n{\r\n  using x = new Resource()\r\n  x.activate()\r\n}\r\n\u003cp\u003e// Old output (with --minify)\u003cbr /\u003e\nnew Resource().activate();\u003c/p\u003e\n\u003cp\u003e// New output (with --minify)\u003cbr /\u003e\n{using e=new Resource;e.activate()}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix module evaluation when an error is thrown (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4461\"\u003e#4461\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/pull/4467\"\u003e#4467\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eIf an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e is used to import a module multiple times. The thrown error is supposed to be thrown by every call to \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e, not just the first. With this release, esbuild will now throw the same error every time you call \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e on a module that throws during its evaluation.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix some edge cases around the \u003ccode\u003enew\u003c/code\u003e operator (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4477\"\u003e#4477\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a \u003ccode\u003enew\u003c/code\u003e expression (specifically an optional chain and/or a tagged template literal). The generated code for the \u003ccode\u003enew\u003c/code\u003e target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the \u003ccode\u003enew\u003c/code\u003e target in parentheses. Here is an example of some affected code:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\r\nnew (foo()`bar`)()\r\nnew (foo()?.bar)()\r\n\u003cp\u003e// Old output\u003cbr /\u003e\nnew foo()\u003ccode\u003ebar\u003c/code\u003e();\u003cbr /\u003e\nnew (foo())?.bar();\u003c/p\u003e\n\u003cp\u003e\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evanw/esbuild/blob/main/CHANGELOG.md\"\u003eesbuild's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDisallow \u003ccode\u003e\\\u003c/code\u003e in local development server HTTP requests (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr\"\u003eGHSA-g7r4-m6w7-qqqr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThis release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \u003ccode\u003e\\\u003c/code\u003e backslash character. It happened due to the use of Go's \u003ccode\u003epath.Clean()\u003c/code\u003e function, which only handles Unix-style \u003ccode\u003e/\u003c/code\u003e characters. HTTP requests with paths containing \u003ccode\u003e\\\u003c/code\u003e are no longer allowed.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/dellalibera\"\u003e\u003ccode\u003e@​dellalibera\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd integrity checks to the Deno API (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr\"\u003eGHSA-gv7w-rqvm-qjhr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.\u003c/p\u003e\n\u003cp\u003eNote that esbuild's Deno API installs from \u003ccode\u003eregistry.npmjs.org\u003c/code\u003e by default, but allows the \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e environment variable to override this with a custom package registry. This change means that the esbuild executable served by \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e must now match the expected content.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/sondt99\"\u003e\u003ccode\u003e@​sondt99\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAvoid inlining \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild's minifier sometimes incorrectly inlined \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for \u003ccode\u003elet\u003c/code\u003e and \u003ccode\u003econst\u003c/code\u003e declarations by avoiding doing it for \u003ccode\u003evar\u003c/code\u003e declarations, which no longer worked when more declaration types were added. Here's an example:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\n{\n  using x = new Resource()\n  x.activate()\n}\n\u003cp\u003e// Old output (with --minify)\u003cbr /\u003e\nnew Resource().activate();\u003c/p\u003e\n\u003cp\u003e// New output (with --minify)\u003cbr /\u003e\n{using e=new Resource;e.activate()}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix module evaluation when an error is thrown (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4461\"\u003e#4461\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/pull/4467\"\u003e#4467\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eIf an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e is used to import a module multiple times. The thrown error is supposed to be thrown by every call to \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e, not just the first. With this release, esbuild will now throw the same error every time you call \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e on a module that throws during its evaluation.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix some edge cases around the \u003ccode\u003enew\u003c/code\u003e operator (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4477\"\u003e#4477\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a \u003ccode\u003enew\u003c/code\u003e expression (specifically an optional chain and/or a tagged template literal). The generated code for the \u003ccode\u003enew\u003c/code\u003e target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the \u003ccode\u003enew\u003c/code\u003e target in parentheses. Here is an example of some affected code:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\nnew (foo()`bar`)()\nnew (foo()?.bar)()\n\u003cp\u003e// Old output\u003cbr /\u003e\nnew foo()\u003ccode\u003ebar\u003c/code\u003e();\u003cbr /\u003e\nnew (foo())?.bar();\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/bb9db84c02433fbe37b3509f53f9f3e3cc48725e\"\u003e\u003ccode\u003ebb9db84\u003c/code\u003e\u003c/a\u003e publish 0.28.1 to npm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/9ff053e53b8eeb990f59355dbea365277ac45ee2\"\u003e\u003ccode\u003e9ff053e\u003c/code\u003e\u003c/a\u003e security: add integrity checks to the Deno API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/0a9bf2135b67c7e28989a5ba19f0f000805a5ab5\"\u003e\u003ccode\u003e0a9bf21\u003c/code\u003e\u003c/a\u003e enforce non-negative size in gzip parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/e2a1a7132058ee067fe736eac15f695861b8654e\"\u003e\u003ccode\u003ee2a1a71\u003c/code\u003e\u003c/a\u003e security: forbid \u003ccode\u003e\\\\\u003c/code\u003e in local dev server requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/83a2cbfc35809f4fd5152da59572d7bed7739d78\"\u003e\u003ccode\u003e83a2cbf\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e: don't inline \u003ccode\u003eusing\u003c/code\u003e declarations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/308ad745d824c77bc607603451b257d0f2fd9a38\"\u003e\u003ccode\u003e308ad74\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4471\"\u003e#4471\u003c/a\u003e: renaming of nested \u003ccode\u003evar\u003c/code\u003e declarations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/f013f5f99a015bce92ec48d49181d4ad3177b29b\"\u003e\u003ccode\u003ef013f5f\u003c/code\u003e\u003c/a\u003e fix some typos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/aafd6e48b1088336a5f5a17e930be7e840d43d8c\"\u003e\u003ccode\u003eaafd6e4\u003c/code\u003e\u003c/a\u003e chore: fix some minor issues in comments (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4462\"\u003e#4462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/15300c30b5e22f7cfcbed850c246d35095658386\"\u003e\u003ccode\u003e15300c3\u003c/code\u003e\u003c/a\u003e follow up: cjs evaluation fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/1bda0c31d7697c0af44b3ab39b81e599e559a395\"\u003e\u003ccode\u003e1bda0c3\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4461\"\u003e#4461\u003c/a\u003e, fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4467\"\u003e#4467\u003c/a\u003e: esm evaluation fixes\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/evanw/esbuild/compare/v0.27.7...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.14.2 to 3.15.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/d8ff750b0130e4e4b4062fb0dbd32027e41d4c51\"\u003e\u003ccode\u003ed8ff750\u003c/code\u003e\u003c/a\u003e Add package lock\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7\"\u003e\u003ccode\u003e24f13e7\u003c/code\u003e\u003c/a\u003e Added \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option (v5 backport)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.2...3.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `form-data` from 4.0.5 to 4.0.6\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/form-data/form-data/blob/master/CHANGELOG.md\"\u003eform-data's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ev4.0.6\u003c/a\u003e - 2026-06-12\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames \u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435\"\u003e\u003ccode\u003e64190db\u003c/code\u003e\u003c/a\u003e v4.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e [Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `hono` from 4.12.23 to 4.12.28\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/honojs/hono/releases\"\u003ehono's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.12.28\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(serve-static): treat empty string content as found by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5062\"\u003ehonojs/hono#5062\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(MIGRATION): fix req.raw.headers reference (property, not method) by \u003ca href=\"https://github.com/EduardF1\"\u003e\u003ccode\u003e@​EduardF1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5047\"\u003ehonojs/hono#5047\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: don't publish \u003ccode\u003e*.tsbuildinfo\u003c/code\u003e by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5066\"\u003ehonojs/hono#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(utils/body,validator): normalize Content-Type media type for case-insensitive matching by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5067\"\u003ehonojs/hono#5067\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid circular dependency between body.ts and request.ts by \u003ca href=\"https://github.com/usualoma\"\u003e\u003ccode\u003e@​usualoma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5071\"\u003ehonojs/hono#5071\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(bun): report the requested subprotocol on WSContext.protocol by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5059\"\u003ehonojs/hono#5059\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump \u003ccode\u003edevDependencies\u003c/code\u003e by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5085\"\u003ehonojs/hono#5085\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(aws-lambda): detect V2 events by request context, not rawPath alone by \u003ca href=\"https://github.com/VihaanAgarwal\"\u003e\u003ccode\u003e@​VihaanAgarwal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5033\"\u003ehonojs/hono#5033\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(context-storage): fix JSDoc by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5086\"\u003ehonojs/hono#5086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/EduardF1\"\u003e\u003ccode\u003e@​EduardF1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5047\"\u003ehonojs/hono#5047\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5059\"\u003ehonojs/hono#5059\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/VihaanAgarwal\"\u003e\u003ccode\u003e@​VihaanAgarwal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5033\"\u003ehonojs/hono#5033\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.12.27...v4.12.28\"\u003ehttps://github.com/honojs/hono/compare/v4.12.27...v4.12.28\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.12.27\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cp\u003eThis release includes fixes for the following security issues:\u003c/p\u003e\n\u003ch3\u003ehono/jsx does not isolate context per request\u003c/h3\u003e\n\u003cp\u003eAffects: \u003ccode\u003ehono/jsx\u003c/code\u003e, \u003ccode\u003ehono/jsx-renderer\u003c/code\u003e. During SSR, context was stored process-wide instead of per request, so \u003ccode\u003euseContext()\u003c/code\u003e/\u003ccode\u003euseRequestContext()\u003c/code\u003e read after an \u003ccode\u003eawait\u003c/code\u003e in an async component could return another concurrent request's value — leading to cross-request data disclosure or authorization checks against the wrong request. GHSA-hvrm-45r6-mjfj\u003c/p\u003e\n\u003ch3\u003eServer-Side XSS via JSX escaping bypass in cx()\u003c/h3\u003e\n\u003cp\u003eAffects: \u003ccode\u003ehono/css\u003c/code\u003e. \u003ccode\u003ecx()\u003c/code\u003e marked its composed class name as already-escaped without escaping the input, so untrusted input passed as a class name could break out of the JSX \u003ccode\u003eclass\u003c/code\u003e attribute during SSR and inject markup (XSS). GHSA-w62v-xxxg-mg59\u003c/p\u003e\n\u003ch3\u003eAPI Gateway v1 adapter can drop a repeated request header value\u003c/h3\u003e\n\u003cp\u003eAffects: \u003ccode\u003ehono/aws-lambda\u003c/code\u003e. The API Gateway v1 (and VPC Lattice) adapter de-duplicated repeated header values by substring instead of exact match, dropping a value that is a substring of another (e.g. \u003ccode\u003e203.0.113.1\u003c/code\u003e dropped when \u003ccode\u003e203.0.113.10\u003c/code\u003e is present) — affecting logic such as \u003ccode\u003eX-Forwarded-For\u003c/code\u003e-based IP restriction. GHSA-xgm2-5f3f-mvvc\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003eUsers of \u003ccode\u003ehono/jsx\u003c/code\u003e/\u003ccode\u003ehono/jsx-renderer\u003c/code\u003e, \u003ccode\u003ehono/css\u003c/code\u003e (\u003ccode\u003ecx()\u003c/code\u003e), or the \u003ccode\u003ehono/aws-lambda\u003c/code\u003e API Gateway v1 / VPC Lattice adapters are encouraged to upgrade.\u003c/p\u003e\n\u003ch2\u003ev4.12.26\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(lambda-edge): satisfy Deno lib types for Content-Length body encoding by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5013\"\u003ehonojs/hono#5013\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: publish to npm from CI with OIDC trusted publishing by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5028\"\u003ehonojs/hono#5028\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove unused devcontainer and gitpod configs by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5029\"\u003ehonojs/hono#5029\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: replace arg and glob with Bun native APIs in build script by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5030\"\u003ehonojs/hono#5030\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.12.25...v4.12.26\"\u003ehttps://github.com/honojs/hono/compare/v4.12.25...v4.12.26\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/626b185d0e80fa1c2a3cc1a8945afd0df6aaf3ec\"\u003e\u003ccode\u003e626b185\u003c/code\u003e\u003c/a\u003e 4.12.28\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/d6b1d32a697ef9ba9f5036753fe9bde1121c0ff9\"\u003e\u003ccode\u003ed6b1d32\u003c/code\u003e\u003c/a\u003e docs(context-storage): fix JSDoc (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5086\"\u003e#5086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/45b081b9b90244a03444f9781d7777cbe620e6b4\"\u003e\u003ccode\u003e45b081b\u003c/code\u003e\u003c/a\u003e fix(aws-lambda): detect V2 events by request context, not rawPath alone (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5033\"\u003e#5033\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/a05813c0586cd8ee7873dab8158c08a5f772a9ed\"\u003e\u003ccode\u003ea05813c\u003c/code\u003e\u003c/a\u003e chore: bump \u003ccode\u003edevDependencies\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5085\"\u003e#5085\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/872997d2836dad3849817b6270d857d92f3dee85\"\u003e\u003ccode\u003e872997d\u003c/code\u003e\u003c/a\u003e fix(bun): report the requested subprotocol on WSContext.protocol (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5059\"\u003e#5059\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/82b321b5b0e7a57cdaab45f2f90671ec0737795b\"\u003e\u003ccode\u003e82b321b\u003c/code\u003e\u003c/a\u003e fix: avoid circular dependency between body.ts and request.ts (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5071\"\u003e#5071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/b20d4225c9aa9e615717ca74e437852cc9fd5b94\"\u003e\u003ccode\u003eb20d422\u003c/code\u003e\u003c/a\u003e fix(utils/body,validator): normalize Content-Type media type for case-insensi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/9728702911073aec5a63a3ba2840b7240e5d3205\"\u003e\u003ccode\u003e9728702\u003c/code\u003e\u003c/a\u003e chore: don't publish \u003ccode\u003e*.tsbuildinfo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5066\"\u003e#5066\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/ed8795e5cc49e83649c1ebbf4b72154a87abba19\"\u003e\u003ccode\u003eed8795e\u003c/code\u003e\u003c/a\u003e docs(MIGRATION): fix req.raw.headers reference (property, not method) (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5047\"\u003e#5047\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/03a9416a13a681028011e23841ba89d1dd6c9a62\"\u003e\u003ccode\u003e03a9416\u003c/code\u003e\u003c/a\u003e fix(serve-static): treat empty string content as found (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5062\"\u003e#5062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/honojs/hono/compare/v4.12.23...v4.12.28\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for hono since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `piscina` from 4.9.2 to 4.9.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/piscinajs/piscina/blob/v4.9.3/CHANGELOG.md\"\u003episcina's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/piscinajs/piscina/compare/v4.9.2...v4.9.3\"\u003e4.9.3\u003c/a\u003e (2026-06-12)\u003c/h3\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/4440ae15037b2462549943ba9ab66da0b87f906d\"\u003e\u003ccode\u003e4440ae1\u003c/code\u003e\u003c/a\u003e chore(release): 4.9.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/8703d3e353936c05dd3386508955e0e30c2ffc57\"\u003e\u003ccode\u003e8703d3e\u003c/code\u003e\u003c/a\u003e Merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/63532c5a7595dba7647f4c521d9aed39475a6d0f\"\u003e\u003ccode\u003e63532c5\u003c/code\u003e\u003c/a\u003e docs: Update Fastify listen() calls to use { port: 3000 } in docs and example...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/67591a20a78c894de9170f782a038365784874bc\"\u003e\u003ccode\u003e67591a2\u003c/code\u003e\u003c/a\u003e chores: gh actions least privilege (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/1013\"\u003e#1013\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/1014\"\u003e#1014\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/7c4220706fa45ff1ea629891854ef45ed0ecdc30\"\u003e\u003ccode\u003e7c42207\u003c/code\u003e\u003c/a\u003e chore: enhance contributing guidelines (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/972\"\u003e#972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/04c2c52b7c7bdfd7471668d2c052848fd91d9347\"\u003e\u003ccode\u003e04c2c52\u003c/code\u003e\u003c/a\u003e chore: pin actions (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/848\"\u003e#848\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/850\"\u003e#850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/d157099670fbb55a5a6f8d730d44bff131d04387\"\u003e\u003ccode\u003ed157099\u003c/code\u003e\u003c/a\u003e [Backport v4] chore: edit ignore files (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/826\"\u003e#826\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/piscinajs/piscina/compare/v4.9.2...v4.9.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.5.15 to 7.5.19\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.15...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/HENRYIXDJ/HENRY-IX/pull/22","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/HENRYIXDJ%2FHENRY-IX/issues/22","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/22/packages"},{"uuid":"4811170562","node_id":"PR_kwDOSIskQM7t9a5Y","number":307,"state":"open","title":"chore(deps): bump the minor-and-patch group across 1 directory with 15 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-05T01:21:50.000Z","updated_at":"2026-07-05T01:22:13.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"minor-and-patch","update_count":15,"packages":[{"name":"@biomejs/biome","old_version":"2.4.13","new_version":"2.5.2","repository_url":"https://github.com/biomejs/biome"},{"name":"lefthook","old_version":"2.1.6","new_version":"2.1.9","repository_url":"https://github.com/evilmartians/lefthook"},{"name":"turbo","old_version":"2.9.6","new_version":"2.10.3","repository_url":"https://github.com/vercel/turborepo"},{"name":"@clerk/tanstack-react-start","old_version":"1.4.10","new_version":"1.4.12","repository_url":"https://github.com/clerk/javascript"},{"name":"@stripe/react-stripe-js","old_version":"6.6.0","new_version":"6.7.0","repository_url":"https://github.com/stripe/react-stripe-js"},{"name":"@stripe/stripe-js","old_version":"9.8.0","new_version":"9.9.0","repository_url":"https://github.com/stripe/stripe-js"},{"name":"@tanstack/react-router","old_version":"1.170.16","new_version":"1.170.17","repository_url":"https://github.com/TanStack/router"},{"name":"@tanstack/react-start","old_version":"1.168.26","new_version":"1.168.27","repository_url":"https://github.com/TanStack/router"},{"name":"nuqs","old_version":"2.8.9","new_version":"2.9.0","repository_url":"https://github.com/47ng/nuqs"},{"name":"posthog-js","old_version":"1.373.4","new_version":"1.396.6","repository_url":"https://github.com/PostHog/posthog-js"},{"name":"@tanstack/router-cli","old_version":"1.167.17","new_version":"1.167.18","repository_url":"https://github.com/TanStack/router"},{"name":"@types/node","old_version":"22.19.17","new_version":"22.20.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"vite","old_version":"8.1.0","new_version":"8.1.3","repository_url":"https://github.com/vitejs/vite"},{"name":"@clack/prompts","old_version":"1.2.0","new_version":"1.7.0","repository_url":"https://github.com/bombshell-dev/clack"},{"name":"tar","old_version":"7.5.13","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps the minor-and-patch group with 15 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.13` | `2.5.2` |\n| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.6` | `2.1.9` |\n| [turbo](https://github.com/vercel/turborepo) | `2.9.6` | `2.10.3` |\n| [@clerk/tanstack-react-start](https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start) | `1.4.10` | `1.4.12` |\n| [@stripe/react-stripe-js](https://github.com/stripe/react-stripe-js) | `6.6.0` | `6.7.0` |\n| [@stripe/stripe-js](https://github.com/stripe/stripe-js) | `9.8.0` | `9.9.0` |\n| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.16` | `1.170.17` |\n| [@tanstack/react-start](https://github.com/TanStack/router/tree/HEAD/packages/react-start) | `1.168.26` | `1.168.27` |\n| [nuqs](https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs) | `2.8.9` | `2.9.0` |\n| [posthog-js](https://github.com/PostHog/posthog-js) | `1.373.4` | `1.396.6` |\n| [@tanstack/router-cli](https://github.com/TanStack/router/tree/HEAD/packages/router-cli) | `1.167.17` | `1.167.18` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.17` | `22.20.0` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.0` | `8.1.3` |\n| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.2.0` | `1.7.0` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.13` | `7.5.19` |\n\n\nUpdates `@biomejs/biome` from 2.4.13 to 2.5.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/biomejs/biome/releases\"\u003e@​biomejs/biome's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eBiome CLI v2.5.2\u003c/h2\u003e\n\u003ch2\u003e2.5.2\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10595\"\u003e#10595\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f4580289094a8fe5c85252adc3399c060bab811e\"\u003e\u003ccode\u003ef458028\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/pkallos\"\u003e\u003ccode\u003e@​pkallos\u003c/code\u003e\u003c/a\u003e! - Added the option \u003ccode\u003eignoreBooleanCoercion\u003c/code\u003e to \u003ca href=\"https://biomejs.dev/linter/rules/use-nullish-coalescing/\"\u003euseNullishCoalescing\u003c/a\u003e. When enabled, Biome ignores \u003ccode\u003e||\u003c/code\u003e and \u003ccode\u003e||=\u003c/code\u003e used inside a \u003ccode\u003eBoolean()\u003c/code\u003e call, where coalescing on falsy values is intentional.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10798\"\u003e#10798\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/4a32b63eb41f144dc8faf6b5cdb05e1de5dbcb63\"\u003e\u003ccode\u003e4a32b63\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/pkallos\"\u003e\u003ccode\u003e@​pkallos\u003c/code\u003e\u003c/a\u003e! - Added the option \u003ccode\u003eignorePrimitives\u003c/code\u003e to \u003ca href=\"https://biomejs.dev/linter/rules/use-nullish-coalescing/\"\u003euseNullishCoalescing\u003c/a\u003e. When enabled, Biome ignores \u003ccode\u003e||\u003c/code\u003e, \u003ccode\u003e||=\u003c/code\u003e, and ternary expressions whose non-nullish operands are all primitives the option opts out of. Use \u003ccode\u003etrue\u003c/code\u003e to ignore all primitives, or an object selecting \u003ccode\u003estring\u003c/code\u003e, \u003ccode\u003enumber\u003c/code\u003e, \u003ccode\u003eboolean\u003c/code\u003e, or \u003ccode\u003ebigint\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10545\"\u003e#10545\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f3d4c0082676c5188e9a6aa516318c7e3d59bda6\"\u003e\u003ccode\u003ef3d4c00\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Mokto\"\u003e\u003ccode\u003e@​Mokto\u003c/code\u003e\u003c/a\u003e! - Added the new nursery rule \u003ca href=\"https://biomejs.dev/linter/rules/no-svelte-unnecessary-state-wrap/\"\u003e\u003ccode\u003enoSvelteUnnecessaryStateWrap\u003c/code\u003e\u003c/a\u003e, which reports unnecessary \u003ccode\u003e$state()\u003c/code\u003e wrapping of classes from \u003ccode\u003esvelte/reactivity\u003c/code\u003e that are already reactive.\u003c/p\u003e\n\u003cpre lang=\"svelte\"\u003e\u003ccode\u003e\u0026lt;script\u0026gt;\nimport { SvelteMap } from \u0026quot;svelte/reactivity\u0026quot;;\nconst map = $state(new SvelteMap()); // redundant\n\u0026lt;/script\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10752\"\u003e#10752\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f62fb8b53092fe85e16f9d4ea0e584fee7031ab5\"\u003e\u003ccode\u003ef62fb8b\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ematipico\"\u003e\u003ccode\u003e@​ematipico\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/10739\"\u003e#10739\u003c/a\u003e. Now the rule \u003ca href=\"https://biomejs.dev/linter/rules/use-valid-autocomplete/\"\u003e\u003ccode\u003euseValidAutocomplete\u003c/code\u003e\u003c/a\u003e correctly flags the \u003ccode\u003eautoComplete\u003c/code\u003e attribute.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10796\"\u003e#10796\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f1b3ab2c09522a52c93f669ce679675237b96813\"\u003e\u003ccode\u003ef1b3ab2\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ematipico\"\u003e\u003ccode\u003e@​ematipico\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/10768\"\u003e#10768\u003c/a\u003e. Improved the performance of the Biome Language Server by cancelling certain in-flight operations when there are fast updates.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10719\"\u003e#10719\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/aa649b586a2221bf058af7ce80af6faa11faf846\"\u003e\u003ccode\u003eaa649b5\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/minseong0324\"\u003e\u003ccode\u003e@​minseong0324\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://biomejs.dev/linter/rules/no-misleading-return-type/\"\u003e\u003ccode\u003enoMisleadingReturnType\u003c/code\u003e\u003c/a\u003e false positive on returns that use a widening type assertion: \u003ccode\u003e\u0026quot;a\u0026quot; as string\u003c/code\u003e is no longer reported as misleading. The rule now also reports a literal-pinning assertion such as \u003ccode\u003efalse as false\u003c/code\u003e, matching the existing \u003ccode\u003eas const\u003c/code\u003e behavior.\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003e// No longer flagged (returns are `string`):\nfunction getValue(b: boolean): string {\n  if (b) return \u0026quot;a\u0026quot; as string;\n  return \u0026quot;b\u0026quot; as string;\n}\n\u003cp\u003e// Now also reported, like \u003ccode\u003eas const\u003c/code\u003e (returns \u003ccode\u003efalse\u003c/code\u003e):\u003cbr /\u003e\nfunction isReady(): boolean {\u003cbr /\u003e\nreturn false as false;\u003cbr /\u003e\n}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10678\"\u003e#10678\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/8f073a7cd72b4cf46c2ebf2bc08f4068fc4b5e34\"\u003e\u003ccode\u003e8f073a7\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/PranavAchar01\"\u003e\u003ccode\u003e@​PranavAchar01\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/7718\"\u003e#7718\u003c/a\u003e: Biome now correctly parses CSS nesting selectors when \u003ccode\u003e\u0026amp;\u003c/code\u003e appears as a trailing sub-selector after a type selector, e.g. \u003ccode\u003eh1\u0026amp; { color: red; }\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10756\"\u003e#10756\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/5ec965a2620dec7cb40aa4946ba1d41408b11fd9\"\u003e\u003ccode\u003e5ec965a\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/denbezrukov\"\u003e\u003ccode\u003e@​denbezrukov\u003c/code\u003e\u003c/a\u003e! - Fixed CSS formatter output for selector lists with \u003ccode\u003eallowWrongLineComments\u003c/code\u003e and \u003ccode\u003e//\u003c/code\u003e comments after a selector comma. Biome now keeps the selector before the line comment inline instead of breaking it across descendant combinators.\u003c/p\u003e\n\u003cpre lang=\"diff\"\u003e\u003ccode\u003e-.powerPathNavigator\n-  .helm\n-  button.pressedButton, // pressed\n+.powerPathNavigator .helm button.pressedButton, // pressed\n .powerPathNavigator .helm button:active:not(.disabledButton) {\n }\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md\"\u003e@​biomejs/biome's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.5.2\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10595\"\u003e#10595\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f4580289094a8fe5c85252adc3399c060bab811e\"\u003e\u003ccode\u003ef458028\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/pkallos\"\u003e\u003ccode\u003e@​pkallos\u003c/code\u003e\u003c/a\u003e! - Added the option \u003ccode\u003eignoreBooleanCoercion\u003c/code\u003e to \u003ca href=\"https://biomejs.dev/linter/rules/use-nullish-coalescing/\"\u003euseNullishCoalescing\u003c/a\u003e. When enabled, Biome ignores \u003ccode\u003e||\u003c/code\u003e and \u003ccode\u003e||=\u003c/code\u003e used inside a \u003ccode\u003eBoolean()\u003c/code\u003e call, where coalescing on falsy values is intentional.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10798\"\u003e#10798\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/4a32b63eb41f144dc8faf6b5cdb05e1de5dbcb63\"\u003e\u003ccode\u003e4a32b63\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/pkallos\"\u003e\u003ccode\u003e@​pkallos\u003c/code\u003e\u003c/a\u003e! - Added the option \u003ccode\u003eignorePrimitives\u003c/code\u003e to \u003ca href=\"https://biomejs.dev/linter/rules/use-nullish-coalescing/\"\u003euseNullishCoalescing\u003c/a\u003e. When enabled, Biome ignores \u003ccode\u003e||\u003c/code\u003e, \u003ccode\u003e||=\u003c/code\u003e, and ternary expressions whose non-nullish operands are all primitives the option opts out of. Use \u003ccode\u003etrue\u003c/code\u003e to ignore all primitives, or an object selecting \u003ccode\u003estring\u003c/code\u003e, \u003ccode\u003enumber\u003c/code\u003e, \u003ccode\u003eboolean\u003c/code\u003e, or \u003ccode\u003ebigint\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10545\"\u003e#10545\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f3d4c0082676c5188e9a6aa516318c7e3d59bda6\"\u003e\u003ccode\u003ef3d4c00\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Mokto\"\u003e\u003ccode\u003e@​Mokto\u003c/code\u003e\u003c/a\u003e! - Added the new nursery rule \u003ca href=\"https://biomejs.dev/linter/rules/no-svelte-unnecessary-state-wrap/\"\u003e\u003ccode\u003enoSvelteUnnecessaryStateWrap\u003c/code\u003e\u003c/a\u003e, which reports unnecessary \u003ccode\u003e$state()\u003c/code\u003e wrapping of classes from \u003ccode\u003esvelte/reactivity\u003c/code\u003e that are already reactive.\u003c/p\u003e\n\u003cpre lang=\"svelte\"\u003e\u003ccode\u003e\u0026lt;script\u0026gt;\nimport { SvelteMap } from \u0026quot;svelte/reactivity\u0026quot;;\nconst map = $state(new SvelteMap()); // redundant\n\u0026lt;/script\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10752\"\u003e#10752\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f62fb8b53092fe85e16f9d4ea0e584fee7031ab5\"\u003e\u003ccode\u003ef62fb8b\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ematipico\"\u003e\u003ccode\u003e@​ematipico\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/10739\"\u003e#10739\u003c/a\u003e. Now the rule \u003ca href=\"https://biomejs.dev/linter/rules/use-valid-autocomplete/\"\u003e\u003ccode\u003euseValidAutocomplete\u003c/code\u003e\u003c/a\u003e correctly flags the \u003ccode\u003eautoComplete\u003c/code\u003e attribute.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10796\"\u003e#10796\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f1b3ab2c09522a52c93f669ce679675237b96813\"\u003e\u003ccode\u003ef1b3ab2\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ematipico\"\u003e\u003ccode\u003e@​ematipico\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/10768\"\u003e#10768\u003c/a\u003e. Improved the performance of the Biome Language Server by cancelling certain in-flight operations when there are fast updates.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10719\"\u003e#10719\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/aa649b586a2221bf058af7ce80af6faa11faf846\"\u003e\u003ccode\u003eaa649b5\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/minseong0324\"\u003e\u003ccode\u003e@​minseong0324\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://biomejs.dev/linter/rules/no-misleading-return-type/\"\u003e\u003ccode\u003enoMisleadingReturnType\u003c/code\u003e\u003c/a\u003e false positive on returns that use a widening type assertion: \u003ccode\u003e\u0026quot;a\u0026quot; as string\u003c/code\u003e is no longer reported as misleading. The rule now also reports a literal-pinning assertion such as \u003ccode\u003efalse as false\u003c/code\u003e, matching the existing \u003ccode\u003eas const\u003c/code\u003e behavior.\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003e// No longer flagged (returns are `string`):\nfunction getValue(b: boolean): string {\n  if (b) return \u0026quot;a\u0026quot; as string;\n  return \u0026quot;b\u0026quot; as string;\n}\n\u003cp\u003e// Now also reported, like \u003ccode\u003eas const\u003c/code\u003e (returns \u003ccode\u003efalse\u003c/code\u003e):\u003cbr /\u003e\nfunction isReady(): boolean {\u003cbr /\u003e\nreturn false as false;\u003cbr /\u003e\n}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10678\"\u003e#10678\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/8f073a7cd72b4cf46c2ebf2bc08f4068fc4b5e34\"\u003e\u003ccode\u003e8f073a7\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/PranavAchar01\"\u003e\u003ccode\u003e@​PranavAchar01\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/7718\"\u003e#7718\u003c/a\u003e: Biome now correctly parses CSS nesting selectors when \u003ccode\u003e\u0026amp;\u003c/code\u003e appears as a trailing sub-selector after a type selector, e.g. \u003ccode\u003eh1\u0026amp; { color: red; }\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10756\"\u003e#10756\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/5ec965a2620dec7cb40aa4946ba1d41408b11fd9\"\u003e\u003ccode\u003e5ec965a\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/denbezrukov\"\u003e\u003ccode\u003e@​denbezrukov\u003c/code\u003e\u003c/a\u003e! - Fixed CSS formatter output for selector lists with \u003ccode\u003eallowWrongLineComments\u003c/code\u003e and \u003ccode\u003e//\u003c/code\u003e comments after a selector comma. Biome now keeps the selector before the line comment inline instead of breaking it across descendant combinators.\u003c/p\u003e\n\u003cpre lang=\"diff\"\u003e\u003ccode\u003e-.powerPathNavigator\n-  .helm\n-  button.pressedButton, // pressed\n+.powerPathNavigator .helm button.pressedButton, // pressed\n .powerPathNavigator .helm button:active:not(.disabledButton) {\n }\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10757\"\u003e#10757\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/6232fcdef77471e6a6a74bcc33ff7b2b2a9f85a2\"\u003e\u003ccode\u003e6232fcd\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/PranavAchar01\"\u003e\u003ccode\u003e@​PranavAchar01\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/8269\"\u003e#8269\u003c/a\u003e: the CSS parser now accepts Tailwind \u003ccode\u003e@variant\u003c/code\u003e and \u003ccode\u003e@utility\u003c/code\u003e names that start with a digit, such as the \u003ccode\u003e2xl\u003c/code\u003e breakpoint.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/e64919850ceb7571673b81665a54051510e84925\"\u003e\u003ccode\u003ee649198\u003c/code\u003e\u003c/a\u003e ci: release (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10747\"\u003e#10747\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/4a32b63eb41f144dc8faf6b5cdb05e1de5dbcb63\"\u003e\u003ccode\u003e4a32b63\u003c/code\u003e\u003c/a\u003e feat(lint): add ignorePrimitives option to useNullishCoalescing (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10798\"\u003e#10798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/f3d4c0082676c5188e9a6aa516318c7e3d59bda6\"\u003e\u003ccode\u003ef3d4c00\u003c/code\u003e\u003c/a\u003e feat(js/nursery): add noSvelteNoUnnecessaryStateWrap rule (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10545\"\u003e#10545\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/f4580289094a8fe5c85252adc3399c060bab811e\"\u003e\u003ccode\u003ef458028\u003c/code\u003e\u003c/a\u003e feat(lint): add ignoreBooleanCoercion option to useNullishCoalescing (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10595\"\u003e#10595\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/ffe7d33212f7cb89162bb222ce29e3468b75488d\"\u003e\u003ccode\u003effe7d33\u003c/code\u003e\u003c/a\u003e chore: revert\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/564d660150ea153cb8383f2331313a294d465c05\"\u003e\u003ccode\u003e564d660\u003c/code\u003e\u003c/a\u003e chore: revert\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/0abf1a582fd4dfeb13f508d3d3ef0ff583989a41\"\u003e\u003ccode\u003e0abf1a5\u003c/code\u003e\u003c/a\u003e ci: release (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10627\"\u003e#10627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/23814f1ad8430df906a39323ee31d27d7b9ca17b\"\u003e\u003ccode\u003e23814f1\u003c/code\u003e\u003c/a\u003e chore(biome_configuration): add allowTrailingCommas to json-schema to make VS...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/a0f197eb1a6974539927f105ff1dde1f51d07d74\"\u003e\u003ccode\u003ea0f197e\u003c/code\u003e\u003c/a\u003e chore: dead and old links (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10668\"\u003e#10668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/c0b98327a3b14e44d8fbd9a11481bf56c505b8ed\"\u003e\u003ccode\u003ec0b9832\u003c/code\u003e\u003c/a\u003e ci: release (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10499\"\u003e#10499\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.2/packages/@biomejs/biome\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lefthook` from 2.1.6 to 2.1.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evilmartians/lefthook/releases\"\u003elefthook's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.9\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e1d35cbabe1ebaf2a5ed4d2186caa0402de6448e2 chore: add pretty gradient (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1432\"\u003e#1432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e22be6c50e1412c748f3c6b60e9c61cd056dc693b deps: May 2026 (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1415\"\u003e#1415\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e1bae568f03dfb88af9185031fa44e9fee285e917 fix: update hooks path after resetting (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1431\"\u003e#1431\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.1.8\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e488a5f99a5a496e5837f757f8ce3e6c6d1415792 fix: do not warn if local hooks path is equal to default hooks path (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1421\"\u003e#1421\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.1.7\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ef415a9d3fce1d4f6af62622cf96c72e04ecf7bd3 chore: go mod tidy\u003c/li\u003e\n\u003cli\u003ecf4ab9ea4580f5aeb0d4b61d4dd169533e5bb0c9 fix: always restore unstaged changes (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1416\"\u003e#1416\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e4c0e000d6fe9f35f42efefb9263b0b4cb5dfbd49 fix: apply stage_fixed only if it is safe (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1418\"\u003e#1418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e76aa843ef5ceb6970f61cd2ff28d16dd2ec82272 fix: linter, sacrifice optimization for readability\u003c/li\u003e\n\u003cli\u003e9d53c36ed9a26d3bf66e341a9650a0ecac9b6a37 fix: separate fallback push branch from pathspecs (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1396\"\u003e#1396\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e22c9f773cf93b59005bd244c5b00caab2947a755 fix: try to always restore unstaged changes (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1417\"\u003e#1417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e37d83986d8e6d6bf6792f57e22e7cbb1a9e28064 fix: use contrast colors (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1420\"\u003e#1420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eeb1064d0b8c6248627960bea1abf6891db5a21b1 refactor: add new logger without a global state (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1385\"\u003e#1385\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md\"\u003elefthook's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.1.9 (2026-05-29)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update hooks path after resetting (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1431\"\u003e#1431\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: May 2026 (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1415\"\u003e#1415\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.1.8 (2026-05-19)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: do not warn if local hooks path is equal to default hooks path (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1421\"\u003e#1421\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.1.7 (2026-05-19)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: use contrast colors (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1420\"\u003e#1420\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: apply stage_fixed only if it is safe (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1418\"\u003e#1418\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: try to always restore unstaged changes (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1417\"\u003e#1417\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: always restore unstaged changes (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1416\"\u003e#1416\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: add new logger without a global state (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1385\"\u003e#1385\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: linter, sacrifice optimization for readability by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: separate fallback push branch from pathspecs (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1396\"\u003e#1396\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​lawrence3699\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/75f99ff325a731c296b572292dd1c855cd970b93\"\u003e\u003ccode\u003e75f99ff\u003c/code\u003e\u003c/a\u003e 2.1.9: fix install with --reset-hooks-path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/1d35cbabe1ebaf2a5ed4d2186caa0402de6448e2\"\u003e\u003ccode\u003e1d35cba\u003c/code\u003e\u003c/a\u003e chore: add pretty gradient (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1432\"\u003e#1432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/1bae568f03dfb88af9185031fa44e9fee285e917\"\u003e\u003ccode\u003e1bae568\u003c/code\u003e\u003c/a\u003e fix: update hooks path after resetting (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1431\"\u003e#1431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/22be6c50e1412c748f3c6b60e9c61cd056dc693b\"\u003e\u003ccode\u003e22be6c5\u003c/code\u003e\u003c/a\u003e deps: May 2026 (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1415\"\u003e#1415\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/9e75b2138b4d31b156d3256c2b0617851377aaf2\"\u003e\u003ccode\u003e9e75b21\u003c/code\u003e\u003c/a\u003e 2.1.8: reduce warning for core.hooksPath if it matches the default\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/488a5f99a5a496e5837f757f8ce3e6c6d1415792\"\u003e\u003ccode\u003e488a5f9\u003c/code\u003e\u003c/a\u003e fix: do not warn if local hooks path is equal to default hooks path (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1421\"\u003e#1421\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/b5c8310e174489a3705dbbe240eea035058a9128\"\u003e\u003ccode\u003eb5c8310\u003c/code\u003e\u003c/a\u003e 2.1.7: restore unstaged changes when possible\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/37d83986d8e6d6bf6792f57e22e7cbb1a9e28064\"\u003e\u003ccode\u003e37d8398\u003c/code\u003e\u003c/a\u003e fix: use contrast colors (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1420\"\u003e#1420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/4c0e000d6fe9f35f42efefb9263b0b4cb5dfbd49\"\u003e\u003ccode\u003e4c0e000\u003c/code\u003e\u003c/a\u003e fix: apply stage_fixed only if it is safe (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1418\"\u003e#1418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/22c9f773cf93b59005bd244c5b00caab2947a755\"\u003e\u003ccode\u003e22c9f77\u003c/code\u003e\u003c/a\u003e fix: try to always restore unstaged changes (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1417\"\u003e#1417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/evilmartians/lefthook/compare/v2.1.6...v2.1.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `turbo` from 2.9.6 to 2.10.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/turborepo/releases\"\u003eturbo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eTurborepo v2.10.3\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eChangelog\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Add nub to create-turbo options by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13173\"\u003evercel/turborepo#13173\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13174\"\u003evercel/turborepo#13174\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.1 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13176\"\u003evercel/turborepo#13176\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Normalize package manager versions by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13177\"\u003evercel/turborepo#13177\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Use singular workspace in package resolution error by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13178\"\u003evercel/turborepo#13178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Support nub native lockfiles by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13179\"\u003evercel/turborepo#13179\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(build): Enable thin LTO + codegen-units=1 for release builds by \u003ca href=\"https://github.com/lukesandberg\"\u003e\u003ccode\u003e@​lukesandberg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13160\"\u003evercel/turborepo#13160\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13181\"\u003evercel/turborepo#13181\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Add aube package manager support by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13183\"\u003evercel/turborepo#13183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.3 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13184\"\u003evercel/turborepo#13184\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Normalize package manager version output by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13185\"\u003evercel/turborepo#13185\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.4 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13186\"\u003evercel/turborepo#13186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Richer internal dependency data by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13188\"\u003evercel/turborepo#13188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(repository): honor semver ranges in devEngines.packageManager.version by \u003ca href=\"https://github.com/colinhacks\"\u003e\u003ccode\u003e@​colinhacks\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13189\"\u003evercel/turborepo#13189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Skip node_modules in boundaries checks by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13191\"\u003evercel/turborepo#13191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Add token exchange recovery guidance by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13192\"\u003evercel/turborepo#13192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Add --production flag to turbo prune by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13190\"\u003evercel/turborepo#13190\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.5 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13193\"\u003evercel/turborepo#13193\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Accept Bun lockfile version 2 by \u003ca href=\"https://github.com/tsushanth\"\u003e\u003ccode\u003e@​tsushanth\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13119\"\u003evercel/turborepo#13119\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Handle task executor join errors as internal errors by \u003ca href=\"https://github.com/gwagjiug\"\u003e\u003ccode\u003e@​gwagjiug\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13148\"\u003evercel/turborepo#13148\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Tweaks for nub support by \u003ca href=\"https://github.com/colinhacks\"\u003e\u003ccode\u003e@​colinhacks\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13187\"\u003evercel/turborepo#13187\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.6 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13194\"\u003evercel/turborepo#13194\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.7 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13195\"\u003evercel/turborepo#13195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Upgrade TypeScript to 7.0.1-rc by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13144\"\u003evercel/turborepo#13144\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: Add filtered installs to Vercel guide by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13196\"\u003evercel/turborepo#13196\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexamples: add with-mcp-servers by \u003ca href=\"https://github.com/Nishant-Chaudhary5338\"\u003e\u003ccode\u003e@​Nishant-Chaudhary5338\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/12997\"\u003evercel/turborepo#12997\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Report malformed JSON parse errors instead of panicking by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13198\"\u003evercel/turborepo#13198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Improve error messaging when platform binary is missing by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13199\"\u003evercel/turborepo#13199\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.8 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13200\"\u003evercel/turborepo#13200\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(watch): Recover from slow initial hash instead of timing out by \u003ca href=\"https://github.com/lukesandberg\"\u003e\u003ccode\u003e@​lukesandberg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13159\"\u003evercel/turborepo#13159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Update vitest example to vitest 4 and use native test merging by \u003ca href=\"https://github.com/abhiaagarwal\"\u003e\u003ccode\u003e@​abhiaagarwal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13202\"\u003evercel/turborepo#13202\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Toggle between the TUI and streamed logs by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13203\"\u003evercel/turborepo#13203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Resolve Bun scoped package deps that share a name with a dependency by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13207\"\u003evercel/turborepo#13207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Select tasks by clicking rows in the TUI task list by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13206\"\u003evercel/turborepo#13206\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: Avoid deep-cloning dependency maps in lockfile closure cache by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13209\"\u003evercel/turborepo#13209\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: Cache root internal dependencies in package graph by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13211\"\u003evercel/turborepo#13211\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Automatically copy TUI selection to clipboard on mouse release by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13208\"\u003evercel/turborepo#13208\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: Cache env wildcard matches across tasks during hashing by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13210\"\u003evercel/turborepo#13210\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: Replace per-package graph traversals in scope filtering by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13212\"\u003evercel/turborepo#13212\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: Derive dirty hash from repo index by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13213\"\u003evercel/turborepo#13213\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Include untracked symlinks in repo-index dirty hash by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13218\"\u003evercel/turborepo#13218\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Use upstream libghostty-vt crates instead of vendored bindings by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13205\"\u003evercel/turborepo#13205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Remove devtools feature flag by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13219\"\u003evercel/turborepo#13219\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Harden TUI terminal restore during shutdown by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13220\"\u003evercel/turborepo#13220\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Correct gitignore precedence in untracked walk and memoize matcher chains by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13221\"\u003evercel/turborepo#13221\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/9980449cabac759906a66b29fa2b0aacffec4cfc\"\u003e\u003ccode\u003e9980449\u003c/code\u003e\u003c/a\u003e publish 2.10.3 to registry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/bc32fccf931a1408df2c3870721e89a56db0b9b6\"\u003e\u003ccode\u003ebc32fcc\u003c/code\u003e\u003c/a\u003e fix: Correct gitignore precedence in untracked walk and memoize matcher chain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/dccab936ec0f674f2c46f2e0f2f13552b892bbc6\"\u003e\u003ccode\u003edccab93\u003c/code\u003e\u003c/a\u003e fix: Harden TUI terminal restore during shutdown (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13220\"\u003e#13220\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/65efe27d23a1bf4635592a008f4e757fdd02a87e\"\u003e\u003ccode\u003e65efe27\u003c/code\u003e\u003c/a\u003e fix: Remove devtools feature flag (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13219\"\u003e#13219\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/c2115dc21d871c1799b91b0249bf335a8fc4074b\"\u003e\u003ccode\u003ec2115dc\u003c/code\u003e\u003c/a\u003e refactor: Use upstream libghostty-vt crates instead of vendored bindings (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13\"\u003e#13\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/c3c91abddfba2407657ed66a3133914a4d5b5877\"\u003e\u003ccode\u003ec3c91ab\u003c/code\u003e\u003c/a\u003e fix: Include untracked symlinks in repo-index dirty hash (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13218\"\u003e#13218\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/b521d3262aa743b3e40edf67b19715662f9ec417\"\u003e\u003ccode\u003eb521d32\u003c/code\u003e\u003c/a\u003e perf: Derive dirty hash from repo index (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13213\"\u003e#13213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/28d18711988dac293d10530fffdc42ee460ed8d6\"\u003e\u003ccode\u003e28d1871\u003c/code\u003e\u003c/a\u003e perf: Replace per-package graph traversals in scope filtering (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13212\"\u003e#13212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/148b1ddf840c8a49ca0707c791c1eace644aa563\"\u003e\u003ccode\u003e148b1dd\u003c/code\u003e\u003c/a\u003e perf: Cache env wildcard matches across tasks during hashing (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13210\"\u003e#13210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/61d6013d4647677b6b5d890f6b50c7fea071edbf\"\u003e\u003ccode\u003e61d6013\u003c/code\u003e\u003c/a\u003e feat: Automatically copy TUI selection to clipboard on mouse release (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13208\"\u003e#13208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/turborepo/compare/v2.9.6...v2.10.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@clerk/tanstack-react-start` from 1.4.10 to 1.4.12\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/clerk/javascript/releases\"\u003e@​clerk/tanstack-react-start's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​clerk/tanstack-react-start\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.4.12\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/f42aad99389fa219588a3f450cdaa8fb6b55acda\"\u003e\u003ccode\u003ef42aad9\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/backend\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.10.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/react\u003c/code\u003e\u003ca href=\"https://github.com/6\"\u003e\u003ccode\u003e@​6\u003c/code\u003e\u003c/a\u003e.11.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​clerk/tanstack-react-start\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.4.11\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/2914c2c5dd8e2ce46be37a6645642f4cb32e7909\"\u003e\u003ccode\u003e2914c2c\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/430614605666c4ad387c3f945700c08df1e774c0\"\u003e\u003ccode\u003e4306146\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/07e1b067dc0c6b52ccc23d0a5f0988c4b731959a\"\u003e\u003ccode\u003e07e1b06\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/533f0b17e48bc326310df80a9d4a53234548b915\"\u003e\u003ccode\u003e533f0b1\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/6a9bb609050ed498c66db9087ed96350f91ed5df\"\u003e\u003ccode\u003e6a9bb60\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/backend\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.9.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/shared\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.23.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/react\u003c/code\u003e\u003ca href=\"https://github.com/6\"\u003e\u003ccode\u003e@​6\u003c/code\u003e\u003c/a\u003e.11.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/clerk/javascript/blob/main/packages/tanstack-react-start/CHANGELOG.md\"\u003e@​clerk/tanstack-react-start's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.12\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/f42aad99389fa219588a3f450cdaa8fb6b55acda\"\u003e\u003ccode\u003ef42aad9\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/backend\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.10.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/react\u003c/code\u003e\u003ca href=\"https://github.com/6\"\u003e\u003ccode\u003e@​6\u003c/code\u003e\u003c/a\u003e.11.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.4.11\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/2914c2c5dd8e2ce46be37a6645642f4cb32e7909\"\u003e\u003ccode\u003e2914c2c\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/430614605666c4ad387c3f945700c08df1e774c0\"\u003e\u003ccode\u003e4306146\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/07e1b067dc0c6b52ccc23d0a5f0988c4b731959a\"\u003e\u003ccode\u003e07e1b06\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/533f0b17e48bc326310df80a9d4a53234548b915\"\u003e\u003ccode\u003e533f0b1\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/6a9bb609050ed498c66db9087ed96350f91ed5df\"\u003e\u003ccode\u003e6a9bb60\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/backend\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.9.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/shared\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.23.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/react\u003c/code\u003e\u003ca href=\"https://github.com/6\"\u003e\u003ccode\u003e@​6\u003c/code\u003e\u003c/a\u003e.11.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/8842511de0874c7b33f794f4367ffa2d4c833c6a\"\u003e\u003ccode\u003e8842511\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/9050\"\u003e#9050\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/59d245686b1a8fede4b3318fde9ba74978cbe1e1\"\u003e\u003ccode\u003e59d2456\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/9035\"\u003e#9035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/773acc2ad2fdaf03e6e713a86faedf247b4480cd\"\u003e\u003ccode\u003e773acc2\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/9013\"\u003e#9013\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/34c653a6f2f7d35e9db81a86f24045da33e4e3a9\"\u003e\u003ccode\u003e34c653a\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8993\"\u003e#8993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/d79852e4cabe9bb0681084a6e9653874cf5aa378\"\u003e\u003ccode\u003ed79852e\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8939\"\u003e#8939\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/e68a59a69becb0c4bd94fb9221bbcd7cd669fdf7\"\u003e\u003ccode\u003ee68a59a\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8938\"\u003e#8938\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/88525a6d3f4c58aaf69351c1c1a00adcb1497357\"\u003e\u003ccode\u003e88525a6\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8914\"\u003e#8914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/a49608d7d74fd681b6979ffe40f53fcf64d05441\"\u003e\u003ccode\u003ea49608d\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8910\"\u003e#8910\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/f4488f5b0cdf311e60026fc0815fd10ca5c047c0\"\u003e\u003ccode\u003ef4488f5\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8876\"\u003e#8876\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/9d7db809a7a7831e234002614c2e612f058b8724\"\u003e\u003ccode\u003e9d7db80\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8836\"\u003e#8836\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/clerk/javascript/commits/@clerk/tanstack-react-start@1.4.12/packages/tanstack-react-start\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@stripe/react-stripe-js` from 6.6.0 to 6.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/stripe/react-stripe-js/releases\"\u003e@​stripe/react-stripe-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.7.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump stripe.js version to 9.9.0 (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/690\"\u003e#690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump js-yaml from 3.14.2 to 3.15.0 (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/689\"\u003e#689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​babel/core\u003c/code\u003e from 7.14.3 to 7.29.6 (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/688\"\u003e#688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClose project to external pull requests (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/687\"\u003e#687\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/react-stripe-js/commit/ff8771ead5473b2e6630e6e700ba113cc9dff97e\"\u003e\u003ccode\u003eff8771e\u003c/code\u003e\u003c/a\u003e v6.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/react-stripe-js/commit/40e7860f2d630bc83c628470732e20994f2d044e\"\u003e\u003ccode\u003e40e7860\u003c/code\u003e\u003c/a\u003e Bump stripe.js version to 9.9.0 (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/690\"\u003e#690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/react-stripe-js/commit/7f28d870a23ee56a455b06835dab8f016e4a985c\"\u003e\u003ccode\u003e7f28d87\u003c/code\u003e\u003c/a\u003e Bump js-yaml from 3.14.2 to 3.15.0 (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/689\"\u003e#689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/react-stripe-js/commit/dcf1bf20baa2bdbeb00249650033d7b8ca12693e\"\u003e\u003ccode\u003edcf1bf2\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003e@​babel/core\u003c/code\u003e from 7.14.3 to 7.29.6 (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/688\"\u003e#688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/react-stripe-js/commit/b6a55945106a04effcd6b7394087ce68e1e7fdc1\"\u003e\u003ccode\u003eb6a5594\u003c/code\u003e\u003c/a\u003e Close project to external pull requests (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/687\"\u003e#687\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/stripe/react-stripe-js/compare/v6.6.0...v6.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~alaycock-stripe\"\u003ealaycock-stripe\u003c/a\u003e, a new releaser for \u003ccode\u003e@​stripe/react-stripe-js\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@stripe/stripe-js` from 9.8.0 to 9.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/stripe/stripe-js/releases\"\u003e@​stripe/stripe-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev9.9.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump js-yaml from 3.14.2 to 3.15.0 in /examples/parcel (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/944\"\u003e#944\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​babel/core\u003c/code\u003e from 7.10.5 to 7.29.6 in /examples/parcel (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/943\"\u003e#943\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMove isProrated to StripeCheckoutRecurring (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eType updates for PE fields option (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/941\"\u003e#941\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClose project to external pull requests (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/942\"\u003e#942\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/stripe-js/commit/856fbe411e76f5be6018caa9c54e7c2ae8de3562\"\u003e\u003ccode\u003e856fbe4\u003c/code\u003e\u003c/a\u003e v9.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/stripe-js/commit/40800593ff3cb48a4c73d58774d0ec35a8409b02\"\u003e\u003ccode\u003e4080059\u003c/code\u003e\u003c/a\u003e Bump js-yaml from 3.14.2 to 3.15.0 in /examples/parcel (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/944\"\u003e#944\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/stripe-js/commit/48250eb528086156053d54b6d3582c129b0f3ae6\"\u003e\u003ccode\u003e48250eb\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003e@​babel/core\u003c/code\u003e from 7.10.5 to 7.29.6 in /examples/parcel (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/943\"\u003e#943\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/stripe-js/commit/7314dd8e450d256847aeb9d456297f4d1ac7576c\"\u003e\u003ccode\u003e7314dd8\u003c/code\u003e\u003c/a\u003e Move isProrated to StripeCheckoutRecurring (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/stripe-js/commit/2240e4ecbb2db2be1191de55193ab7bfcfe79d18\"\u003e\u003ccode\u003e2240e4e\u003c/code\u003e\u003c/a\u003e Type updates for PE fields option (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/941\"\u003e#941\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/stripe-js/commit/67e538a4dc882d3ff35e3d5c6ecff682cb33cfca\"\u003e\u003ccode\u003e67e538a\u003c/code\u003e\u003c/a\u003e Close project to external pull requests (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/942\"\u003e#942\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/stripe/stripe-js/compare/v9.8.0...v9.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@tanstack/react-router` from 1.170.16 to 1.170.17\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/router/releases\"\u003e@​tanstack/react-router's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-router\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.17\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/9809a0619d4ed3fe8c2a393af5b9eca4b6c7695b\"\u003e\u003ccode\u003e9809a06\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.14\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md\"\u003e@​tanstack/react-router's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.170.17\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/9809a0619d4ed3fe8c2a393af5b9eca4b6c7695b\"\u003e\u003ccode\u003e9809a06\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.14\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/ecbbd9a8ec1d2433382cd30d13b0764e504e91cf\"\u003e\u003ccode\u003eecbbd9a\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/react-router/issues/7676\"\u003e#7676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.17/packages/react-router\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@tanstack/react-start` from 1.168.26 to 1.168.27\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/router/releases\"\u003e@​tanstack/react-start's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-start\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.168.27\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/ba52d2b8f9e95d6becd1be14c020b35f3231e02c\"\u003e\u003ccode\u003eba52d2b\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.13\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-router\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.17\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-start-client\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.168.15\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-start-rsc\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.1.26\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-start-server\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.21\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-plugin-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.19\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.16\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/router/blob/main/packages/react-start/CHANGELOG.md\"\u003e@​tanstack/react-start's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.168.27\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/ba52d2b8f9e95d6becd1be14c020b35f3231e02c\"\u003e\u003ccode\u003eba52d2b\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.13\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-router\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.17\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-start-client\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.168.15\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-start-rsc\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.1.26\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-start-server\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.21\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-plugin-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.19\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.16\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/ecbbd9a8ec1d2433382cd30d13b0764e504e91cf\"\u003e\u003ccode\u003eecbbd9a\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/react-start/issues/7676\"\u003e#7676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/TanStack/router/commits/@tanstack/react-start@1.168.27/packages/react-start\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nuqs` from 2.8.9 to 2.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/47ng/nuqs/releases\"\u003enuqs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.9.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1437\"\u003e#1437\u003c/a\u003e - add support for react-router v8, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1451\"\u003e#1451\u003c/a\u003e - add history to adapters \u003c!-- raw HTML omitted --\u003edefaultOptions\u003c!-- raw HTML omitted --\u003e, by \u003ca href=\"https://github.com/manojVivek\"\u003e\u003ccode\u003e@​manojVivek\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBug fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1318\"\u003e#1318\u003c/a\u003e - cross-page transitions in TanStack Router, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1433\"\u003e#1433\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1334\"\u003e#1334\u003c/a\u003e - stale URL value when revisiting a page under Next.js cacheComponents, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1273\"\u003e#1273\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1366\"\u003e#1366\u003c/a\u003e - prevent infinite re-renders with TSR viewport preloading, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1363\"\u003e#1363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1368\"\u003e#1368\u003c/a\u003e - wrong transient state in next/app when updating in useEffect, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1365\"\u003e#1365\u003c/a\u003e, \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1428\"\u003e#1428\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1445\"\u003e#1445\u003c/a\u003e - stale value under Activity, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1444\"\u003e#1444\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1450\"\u003e#1450\u003c/a\u003e - stale search params leaking across React Router navigation, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1358\"\u003e#1358\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1222\"\u003e#1222\u003c/a\u003e - add registry metadata, by \u003ca href=\"https://github.com/taro-yanagiya\"\u003e\u003ccode\u003e@​taro-yanagiya\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1221\"\u003e#1221\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1256\"\u003e#1256\u003c/a\u003e - add changelog page, by \u003ca href=\"https://github.com/rajanarahul93\"\u003e\u003ccode\u003e@​rajanarahul93\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1251\"\u003e#1251\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1351\"\u003e#1351\u003c/a\u003e - strip Fumadocs inline code syntax highlighting hints from LLM markdown, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1353\"\u003e#1353\u003c/a\u003e - update recharts \u0026amp; replace partialLine implementation, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1356\"\u003e#1356\u003c/a\u003e - add Sentry and Syntax.fm as sponsors 💖, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1357\"\u003e#1357\u003c/a\u003e - add 1771 Technologies as a sponsor 💖, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1362\"\u003e#1362\u003c/a\u003e - update images alt attributes, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1364\"\u003e#1364\u003c/a\u003e - extrapolate missing NPM stats data, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1376\"\u003e#1376\u003c/a\u003e - add attribution footer in LLM docs, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1383\"\u003e#1383\u003c/a\u003e - add 1771 Technologies as sidebar sponsor, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1400\"\u003e#1400\u003c/a\u003e - add redirect from /changelog to /docs/changelog, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1406\"\u003e#1406\u003c/a\u003e - add brand assets context menu, by \u003ca href=\"https://github.com/TheOrcDev\"\u003e\u003ccode\u003e@​TheOrcDev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1409\"\u003e#1409\u003c/a\u003e - add TradingGoose as a sponsor 💖, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1414\"\u003e#1414\u003c/a\u003e - add Upstash as a sponsor 💖, by \u003ca href=\"https://github.com/mezotv\"\u003e\u003ccode\u003e@​mezotv\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1415\"\u003e#1415\u003c/a\u003e - add CodeRabbit as a sponsor 💖, by \u003ca href=\"https://github.com/mezotv\"\u003e\u003ccode\u003e@​mezotv\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1416\"\u003e#1416\u003c/a\u003e - use \u003ca href=\"http://www.usenotra.com\"\u003ewww.usenotra.com\u003c/a\u003e for Notra sponsor link, by \u003ca href=\"https://github.com/mezotv\"\u003e\u003ccode\u003e@​mezotv\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1418\"\u003e#1418\u003c/a\u003e - tighter sponsors grid, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1432\"\u003e#1432\u003c/a\u003e - changelog reads DTO from releases, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1438\"\u003e#1438\u003c/a\u003e - add Deno \u0026amp; other package managers to install instructions, by \u003ca href=\"https://github.com/bartlomieju\"\u003e\u003ccode\u003e@​bartlomieju\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1441\"\u003e#1441\u003c/a\u003e - theme-aware shieldcn badges + wordmark header, by \u003ca href=\"https://github.com/jal-co\"\u003e\u003ccode\u003e@​jal-co\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1447\"\u003e#1447\u003c/a\u003e - trim down llm content, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1456\"\u003e#1456\u003c/a\u003e - add Loops as a sponsor 💖, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1457\"\u003e#1457\u003c/a\u003e - strip unreleased headings from the production ToC, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1461\"\u003e#1461\u003c/a\u003e - fix shallow updates \u0026quot;Invalid URL\u0026quot; crash, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1460\"\u003e#1460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e9cb051fc - reorder \u0026amp; tweak readme badges, by François Best\u003c/li\u003e\n\u003cli\u003ee9cd8f7c - fix contributors link in README, by François Best\u003c/li\u003e\n\u003cli\u003ef48b3908 - fix wordmark on npmx.dev \u0026amp; npmjs.com, by François Best\u003c/li\u003e\n\u003cli\u003e6722fe05 - fix react router logos in README, by François Best\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1154\"\u003e#1154\u003c/a\u003e - add Knip for upkeeping, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1176\"\u003e#1176\u003c/a\u003e - split debug logs to reduce bundle size, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1149\"\u003e#1149\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/692687ba358e56fb78b887448392a54a22397559\"\u003e\u003ccode\u003e692687b\u003c/code\u003e\u003c/a\u003e fix: stale search params leaking across React Router navigation (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1450\"\u003e#1450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/8b2dee5eab9a53aab772fe4ba9bf9c965b3d2897\"\u003e\u003ccode\u003e8b2dee5\u003c/code\u003e\u003c/a\u003e feat: add history to adapter's \u003ccode\u003edefaultOptions\u003c/code\u003e (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1451\"\u003e#1451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/95dcb8309dd4e78c1e0d4c66bbd91f12754ec3ee\"\u003e\u003ccode\u003e95dcb83\u003c/code\u003e\u003c/a\u003e fix: stale URL value when revisiting a page under Next.js cacheComponents (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/af8ce38a2546ede9f421edaf9d9c94caea86bf1a\"\u003e\u003ccode\u003eaf8ce38\u003c/code\u003e\u003c/a\u003e ref: scope nullable useSearchParams defence to Next.js specific adapter (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1446\"\u003e#1446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/06be94ff1d2fa8dd5474570d30244350026c3f70\"\u003e\u003ccode\u003e06be94f\u003c/code\u003e\u003c/a\u003e ref: split debug logs to reduce bundle size (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1176\"\u003e#1176\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/2d5fa8eed3b0911902e64c5b8034520fcaad2940\"\u003e\u003ccode\u003e2d5fa8e\u003c/code\u003e\u003c/a\u003e fix: stale value under Activity (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1445\"\u003e#1445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/84ee2dfe11be1dbaa76b34519b4e2683da51d00c\"\u003e\u003ccode\u003e84ee2df\u003c/code\u003e\u003c/a\u003e feat: add support for react-router v8 (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1437\"\u003e#1437\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/54cbbd882cd0b125a98692b14ea0e501da243469\"\u003e\u003ccode\u003e54cbbd8\u003c/code\u003e\u003c/a\u003e fix: cross-page transitions in TanStack Router (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1318\"\u003e#1318\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/f57551f31fc6b00350a83eab7f6856850f51f849\"\u003e\u003ccode\u003ef57551f\u003c/code\u003e\u003c/a\u003e chore: pnpm dedupe (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1436\"\u003e#1436\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/281a0f04fa0e5490ae2eae5b328cc6585613ba25\"\u003e\u003ccode\u003e281a0f0\u003c/code\u003e\u003c/a\u003e chore(ci): keep npm --json stdout clean and harden stage-id parsing\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/47ng/nuqs/commits/v2.9.0/packages/nuqs\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `posthog-js` from 1.373.4 to 1.396.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/PostHog/posthog-js/releases\"\u003eposthog-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eposthog-js@1.396.6\u003c/h2\u003e\n\u003ch2\u003e1.396.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/PostHog/posthog-js/pull/4053\"\u003e#4053\u003c/a\u003e \u003ca href=\"https://github.com/PostHog/posthog-js/commit/45d1b36e517d9eeb3d68b0398d80599b88293386\"\u003e\u003ccode\u003e45d1b36\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/apps/posthog\"\u003e\u003ccode\u003e@​posthog\u003c/code\u003e\u003c/a\u003e! - feat(web): add a graceful \u003ccode\u003eshutdown()\u003c/code\u003e to the browser client for parity with posthog-node, so isomorphic teardown code (e.g. the Nuxt module) that calls \u003ccode\u003eposthog.shutdown()\u003c/code\u003e on the client no longer throws \u003ccode\u003eTypeError: shutdown is not a function\u003c/code\u003e. It best-effort flushes the queued events and always resolves.\n(2026-07-03)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/PostHog/posthog-js/pull/4054\"\u003e#4054\u003c/a\u003e \u003ca href=\"https://github.com/PostHog/posthog-js/commit/f0657eb867604175ed44f9f2f43762c93db7ebf6\"\u003e\u003ccode\u003ef0657eb\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/apps/posthog\"\u003e\u003ccode\u003e@​posthog\u003c/code\u003e\u003c/a\u003e! - fix(web): detect our own feature-flag request timeouts via a \u003ccode\u003etime...\n\n_Description has been truncated_","html_url":"https://github.com/Clawdi-AI/clawdi/pull/307","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Clawdi-AI%2Fclawdi/issues/307","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/307/packages"},{"uuid":"4810746984","node_id":"PR_kwDOI0mVeM7t8Jn2","number":191,"state":"open","title":"deps: bump the dev-dependencies group across 1 directory with 10 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-04T22:23:55.000Z","updated_at":"2026-07-04T22:24:17.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps: bump","group_name":"dev-dependencies","update_count":10,"packages":[{"name":"@playwright/test","old_version":"1.60.0","new_version":"1.61.1","repository_url":"https://github.com/microsoft/playwright"},{"name":"conventional-changelog-conventionalcommits","old_version":"9.3.1","new_version":"10.2.0","repository_url":"https://github.com/conventional-changelog/conventional-changelog"},{"name":"eslint","old_version":"10.4.1","new_version":"10.6.0","repository_url":"https://github.com/eslint/eslint"},{"name":"eslint-plugin-import-x","old_version":"4.16.2","new_version":"4.17.0","repository_url":"https://github.com/un-ts/eslint-plugin-import-x"},{"name":"globals","old_version":"17.6.0","new_version":"17.7.0","repository_url":"https://github.com/sindresorhus/globals"},{"name":"playwright","old_version":"1.60.0","new_version":"1.61.1","repository_url":"https://github.com/microsoft/playwright"},{"name":"serialize-javascript","old_version":"7.0.5","new_version":"7.0.6","repository_url":"https://github.com/yahoo/serialize-javascript"},{"name":"tar","old_version":"7.5.16","new_version":"7.5.17","repository_url":"https://github.com/isaacs/node-tar"},{"name":"prettier","old_version":"3.8.4","new_version":"3.9.0","repository_url":"https://github.com/prettier/prettier"},{"name":"rollup","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"}],"path":null,"ecosystem":"npm"},"body":"Bumps the dev-dependencies group with 10 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` |\n| [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) | `9.3.1` | `10.2.0` |\n| [eslint](https://github.com/eslint/eslint) | `10.4.1` | `10.6.0` |\n| [eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x) | `4.16.2` | `4.17.0` |\n| [globals](https://github.com/sindresorhus/globals) | `17.6.0` | `17.7.0` |\n| [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` |\n| [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `7.0.5` | `7.0.6` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.16` | `7.5.17` |\n| [prettier](https://github.com/prettier/prettier) | `3.8.4` | `3.9.0` |\n| [rollup](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n\n\nUpdates `@playwright/test` from 1.60.0 to 1.61.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/microsoft/playwright/releases\"\u003e@​playwright/test's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.61.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41365\"\u003e#41365\u003c/a\u003e [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41351\"\u003e#41351\u003c/a\u003e [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41360\"\u003e#41360\u003c/a\u003e [Bug]: Trace viewer: message times in websockets are downscaled by 1000\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41311\"\u003e#41311\u003c/a\u003e [Bug]: [Regression]: Sync loader throws \u0026quot;context.conditions?.includes is not a function\u0026quot; on Node 22.15\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41371\"\u003e#41371\u003c/a\u003e [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.61.0\u003c/h2\u003e\n\u003ch2\u003e🔑 WebAuthn passkeys\u003c/h2\u003e\n\u003cp\u003eNew \u003ca href=\"https://playwright.dev/docs/api/class-credentials\"\u003eCredentials\u003c/a\u003e virtual authenticator, available via \u003ca href=\"https://playwright.dev/docs/api/class-browsercontext#browser-context-credentials\"\u003ebrowserContext.credentials\u003c/a\u003e, lets tests register passkeys and answer \u003ccode\u003enavigator.credentials.create()\u003c/code\u003e / \u003ccode\u003enavigator.credentials.get()\u003c/code\u003e ceremonies in the page — no real hardware key required, works in all browsers:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003econst context = await browser.newContext();\r\n\u003cp\u003e// Seed a passkey your backend provisioned for a test user.\nawait context.credentials.create('example.com', {\nid: credentialId,\nuserHandle,\nprivateKey,\npublicKey,\n});\nawait context.credentials.install();\u003c/p\u003e\n\u003cp\u003econst page = await context.newPage();\nawait page.goto('\u003ca href=\"https://example.com/login\"\u003ehttps://example.com/login\u003c/a\u003e');\n// The page's navigator.credentials.get() is answered with the seeded passkey.\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eYou can also let the app register a passkey once in a setup test, read it back with \u003ca href=\"https://playwright.dev/docs/api/class-credentials#credentials-get\"\u003ecredentials.get()\u003c/a\u003e, and seed it into later tests — see \u003ca href=\"https://playwright.dev/docs/api/class-credentials\"\u003eCredentials\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003e🗃️ Web Storage\u003c/h2\u003e\n\u003cp\u003eNew \u003ca href=\"https://playwright.dev/docs/api/class-webstorage\"\u003eWebStorage\u003c/a\u003e API, available via \u003ca href=\"https://playwright.dev/docs/api/class-page#page-local-storage\"\u003epage.localStorage\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-page#page-session-storage\"\u003epage.sessionStorage\u003c/a\u003e, reads and writes the page's storage for the current origin:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eawait page.localStorage.setItem('token', 'abc');\r\nconst token = await page.localStorage.getItem('token');\r\nconst items = await page.sessionStorage.items();\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eNew APIs\u003c/h2\u003e\n\u003ch3\u003eNetwork\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://playwright.dev/docs/api/class-apiresponse#api-response-security-details\"\u003eapiResponse.securityDetails()\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-apiresponse#api-response-server-addr\"\u003eapiResponse.serverAddr()\u003c/a\u003e mirror the browser-side \u003ca href=\"https://playwright.dev/docs/api/class-response#response-security-details\"\u003eresponse.securityDetails()\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-response#response-server-addr\"\u003eresponse.serverAddr()\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBrowser and Screencast\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/39e3553a4f283a41134d75d7e404484bd9e6865a\"\u003e\u003ccode\u003e39e3553\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41399\"\u003e#41399\u003c/a\u003e): fix(test): load require-reached files as commonjs in syn...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/4328122a0fa91df1be287f12d26f272f598ccca7\"\u003e\u003ccode\u003e4328122\u003c/code\u003e\u003c/a\u003e chore: mark v1.61.1 (\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41404\"\u003e#41404\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/2c29a94ed59a2dbb2cb2553ee7d1ba429f027826\"\u003e\u003ccode\u003e2c29a94\u003c/code\u003e\u003c/a\u003e fix(tracing): stop recording websocket frames outside of chunks (\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41398\"\u003e#41398\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/4324b1904199c58ae56d864390f5210df18e33f6\"\u003e\u003ccode\u003e4324b19\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41367\"\u003e#41367\u003c/a\u003e): fix(test): keep builtin expect matchers on base extend\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/041e7e30002e7c384e1918c29720b34c435145f4\"\u003e\u003ccode\u003e041e7e3\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41364\"\u003e#41364\u003c/a\u003e): fix(har): \u003ccode\u003eWebSocket\u003c/code\u003e message timestamps should be in mi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/b8a0fc33932399fc5cfcd211165cf16f8ca01d71\"\u003e\u003ccode\u003eb8a0fc3\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41309\"\u003e#41309\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43149\"\u003e#43149\u003c/a\u003e): Revert \u0026quot;fix(firefox): treat `navigationCommitted...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/b5a31759e6611397bf3afaaa6049a420a5f082bd\"\u003e\u003ccode\u003eb5a3175\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41319\"\u003e#41319\u003c/a\u003e): fix(loader): support other node versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/d4724a91b280ae1ee9a87c426e9d6a953c59756e\"\u003e\u003ccode\u003ed4724a9\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41290\"\u003e#41290\u003c/a\u003e): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/1cc5a90cfa3eaa430b1a991963100f95126caa47\"\u003e\u003ccode\u003e1cc5a90\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41295\"\u003e#41295\u003c/a\u003e): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/a6772bdede34028cbbd417a3b3d778801899e870\"\u003e\u003ccode\u003ea6772bd\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41280\"\u003e#41280\u003c/a\u003e): Revert \u0026quot;fix(trace-viewer): add keyboard navigation to `N...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `conventional-changelog-conventionalcommits` from 9.3.1 to 10.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/releases\"\u003econventional-changelog-conventionalcommits's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econventional-changelog-conventionalcommits: v10.2.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport changelog preamble partial (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1491\"\u003e#1491\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/e93dbe4a16bb621c6ae9d1082dcd09d34c6f8136\"\u003ee93dbe4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003econventional-changelog-conventionalcommits: v10.1.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport changelog preamble (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1489\"\u003e#1489\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/7d9794ff7c4ca5e9bd916c400b7fb1e426319379\"\u003e7d9794f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003econventional-changelog-conventionalcommits: v10.0.0\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ethe commit type \u003ccode\u003eeffect\u003c/code\u003e property replaces the \u003ccode\u003ehidden\u003c/code\u003e commit type property and the \u003ccode\u003ebumpStrict\u003c/code\u003e preset option for controlling changelog visibility and version bumps.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits/issues/1476\"\u003e#1476\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eHandlebars template strings and partial files were replaced with render functions.\u003c/li\u003e\n\u003cli\u003epackages now require Node.js 22 or newer.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereplace handlebars templates with render functions (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1477\"\u003e#1477\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/55e6716e8f40c2a705bcb0cd343e1dcacd2f9459\"\u003e55e6716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erequire node 22 (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/de5e1368096ea0805e51e20df587ce528ca0575b\"\u003ede5e136\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport commit type effects (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1484\"\u003e#1484\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/78761ae19b4711260d015f599316f2558804cbbc\"\u003e78761ae\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eencode compare URL tags (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1483\"\u003e#1483\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/96bf2355e9f4316eaf54823d7359a6b4bd42da4a\"\u003e96bf235\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erender non-closing references separately (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1482\"\u003e#1482\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/adb2c697abe594d0b4cb6d858fcc3d2b46f21c30\"\u003eadb2c69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esort notes without compare-func (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1487\"\u003e#1487\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/dc78285784fd119994c2438bd0f4cdbbb827565a\"\u003edc78285\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md\"\u003econventional-changelog-conventionalcommits's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/compare/conventional-changelog-conventionalcommits-v10.1.0...conventional-changelog-conventionalcommits-v10.2.0\"\u003e10.2.0\u003c/a\u003e (2026-06-27)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport changelog preamble partial (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1491\"\u003e#1491\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/e93dbe4a16bb621c6ae9d1082dcd09d34c6f8136\"\u003ee93dbe4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/compare/conventional-changelog-conventionalcommits-v10.0.0...conventional-changelog-conventionalcommits-v10.1.0\"\u003e10.1.0\u003c/a\u003e (2026-06-27)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport changelog preamble (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1489\"\u003e#1489\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/7d9794ff7c4ca5e9bd916c400b7fb1e426319379\"\u003e7d9794f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/compare/conventional-changelog-conventionalcommits-v9.3.1...conventional-changelog-conventionalcommits-v10.0.0\"\u003e10.0.0\u003c/a\u003e (2026-06-26)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ethe commit type \u003ccode\u003eeffect\u003c/code\u003e property replaces the \u003ccode\u003ehidden\u003c/code\u003e commit type property and the \u003ccode\u003ebumpStrict\u003c/code\u003e preset option for controlling changelog visibility and version bumps.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits/issues/1476\"\u003e#1476\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eHandlebars template strings and partial files were replaced with render functions.\u003c/li\u003e\n\u003cli\u003epackages now require Node.js 22 or newer.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereplace handlebars templates with render functions (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1477\"\u003e#1477\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/55e6716e8f40c2a705bcb0cd343e1dcacd2f9459\"\u003e55e6716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erequire node 22 (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/de5e1368096ea0805e51e20df587ce528ca0575b\"\u003ede5e136\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport commit type effects (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1484\"\u003e#1484\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/78761ae19b4711260d015f599316f2558804cbbc\"\u003e78761ae\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eencode compare URL tags (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1483\"\u003e#1483\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/96bf2355e9f4316eaf54823d7359a6b4bd42da4a\"\u003e96bf235\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erender non-closing references separately (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1482\"\u003e#1482\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/adb2c697abe594d0b4cb6d858fcc3d2b46f21c30\"\u003eadb2c69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esort notes without compare-func (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1487\"\u003e#1487\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/dc78285784fd119994c2438bd0f4cdbbb827565a\"\u003edc78285\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/69b0d36212b7bb4e29cc26d3fcb9d691c5cb8719\"\u003e\u003ccode\u003e69b0d36\u003c/code\u003e\u003c/a\u003e chore(release): monorepo release (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits/issues/1492\"\u003e#1492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/e93dbe4a16bb621c6ae9d1082dcd09d34c6f8136\"\u003e\u003ccode\u003ee93dbe4\u003c/code\u003e\u003c/a\u003e feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/f72f5e2f3f795079f65b7681ddccff3d9532c6d1\"\u003e\u003ccode\u003ef72f5e2\u003c/code\u003e\u003c/a\u003e chore(release): monorepo release (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits/issues/1490\"\u003e#1490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/7d9794ff7c4ca5e9bd916c400b7fb1e426319379\"\u003e\u003ccode\u003e7d9794f\u003c/code\u003e\u003c/a\u003e feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/ed9862d289b351f1bb67fddb2bc1495b732a65bc\"\u003e\u003ccode\u003eed9862d\u003c/code\u003e\u003c/a\u003e chore(release): monorepo release (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits/issues/1474\"\u003e#1474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/dc78285784fd119994c2438bd0f4cdbbb827565a\"\u003e\u003ccode\u003edc78285\u003c/code\u003e\u003c/a\u003e fix(conventional-changelog-angular,conventional-changelog-conventionalcommits...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/f9195d5d27642599a7737d46f98fe5f8be57dc48\"\u003e\u003ccode\u003ef9195d5\u003c/code\u003e\u003c/a\u003e fix(conventional-commits-parser,template): keep footers out of breaking notes...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/78761ae19b4711260d015f599316f2558804cbbc\"\u003e\u003ccode\u003e78761ae\u003c/code\u003e\u003c/a\u003e feat(conventional-changelog-conventionalcommits)!: support commit type effect...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/96bf2355e9f4316eaf54823d7359a6b4bd42da4a\"\u003e\u003ccode\u003e96bf235\u003c/code\u003e\u003c/a\u003e fix(template,conventional-changelog-angular,conventional-changelog-convention...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/adb2c697abe594d0b4cb6d858fcc3d2b46f21c30\"\u003e\u003ccode\u003eadb2c69\u003c/code\u003e\u003c/a\u003e fix(conventional-changelog-conventionalcommits): render non-closing reference...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v10.2.0/packages/conventional-changelog-conventionalcommits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `eslint` from 10.4.1 to 10.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/eslint/eslint/releases\"\u003eeslint's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.6.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/b1f910628e29a018c860e2352bc14cd07c853d67\"\u003e\u003ccode\u003eb1f9106\u003c/code\u003e\u003c/a\u003e feat: detect Symbol() and BigInt() in no-constant-binary-expression (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20981\"\u003e#20981\u003c/a\u003e) (Taejin Kim)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/f291007cb73f55c09cf3c2aa3a405df379a5c594\"\u003e\u003ccode\u003ef291007\u003c/code\u003e\u003c/a\u003e feat: add checkRelationalComparisons to no-constant-binary-expression (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20948\"\u003e#20948\u003c/a\u003e) (sethamus)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/6b05784eb271ac98ca3e1e2a48c4b14bb588c786\"\u003e\u003ccode\u003e6b05784\u003c/code\u003e\u003c/a\u003e fix: prefer-exponentiation-operator invalid autofix at statement start (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20997\"\u003e#20997\u003c/a\u003e) (Milos Djermanovic)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/bb9eb2ab28daf6e6dafc62daa6b5daf9c2b7046c\"\u003e\u003ccode\u003ebb9eb2a\u003c/code\u003e\u003c/a\u003e fix: account for shadowed \u003ccode\u003eBoolean\u003c/code\u003e in \u003ccode\u003eno-extra-boolean-cast\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21013\"\u003e#21013\u003c/a\u003e) (den$)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/8fd8741009a3ed7845c89bfe2fb3eaa2119b2d15\"\u003e\u003ccode\u003e8fd8741\u003c/code\u003e\u003c/a\u003e fix: don't report shadowed undefined in \u003ccode\u003eradix\u003c/code\u003e rule (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21011\"\u003e#21011\u003c/a\u003e) (Pixel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/5784980ce8ba99556db98907895d82ef49cd0a27\"\u003e\u003ccode\u003e5784980\u003c/code\u003e\u003c/a\u003e fix: don't report shadowed undefined in no-throw-literal (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21010\"\u003e#21010\u003c/a\u003e) (Pixel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9cd1e6de5bad487a9c713bdc9fda5af7ea0babcd\"\u003e\u003ccode\u003e9cd1e6d\u003c/code\u003e\u003c/a\u003e fix: suppress invalid class suggestion in no-promise-executor-return (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21008\"\u003e#21008\u003c/a\u003e) (Pixel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/d4eb2dc95f17cdf491edca91b7d9caf05b86253f\"\u003e\u003ccode\u003ed4eb2dc\u003c/code\u003e\u003c/a\u003e fix: don't report shadowed undefined in prefer-promise-reject-errors (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21006\"\u003e#21006\u003c/a\u003e) (Pixel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/23604646db6d987d01edb8aa5f4d2a88bd4c01d0\"\u003e\u003ccode\u003e2360464\u003c/code\u003e\u003c/a\u003e fix: prefer-promise-reject-errors false positives for shadowed Promise (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21003\"\u003e#21003\u003c/a\u003e) (den$)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/63d52d28de705ec46f328d18166e8b7170b3f024\"\u003e\u003ccode\u003e63d52d2\u003c/code\u003e\u003c/a\u003e fix: restore max-classes-per-file report range (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21002\"\u003e#21002\u003c/a\u003e) (Pixel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/7feaff0cfb8d6a6260d3ea56887c9161daf8c700\"\u003e\u003ccode\u003e7feaff0\u003c/code\u003e\u003c/a\u003e fix: callback detection logic for IIFEs in max-nested-callbacks (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20979\"\u003e#20979\u003c/a\u003e) (fnx)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/399a2ec81bcbcff2c67920db51d9276b20ac1025\"\u003e\u003ccode\u003e399a2ec\u003c/code\u003e\u003c/a\u003e fix: don't report inner non-callbacks in \u003ccode\u003emax-nested-callbacks\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20995\"\u003e#20995\u003c/a\u003e) (Milos Djermanovic)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/a83683db1c27193c2ad333fc5c0aedcc8a293db7\"\u003e\u003ccode\u003ea83683d\u003c/code\u003e\u003c/a\u003e docs: Update README (GitHub Actions Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/f5449f96c2caabbc1a28b15211873e2f672f5ae5\"\u003e\u003ccode\u003ef5449f9\u003c/code\u003e\u003c/a\u003e docs: document userland patterns for global assertionOptions in RuleT… (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20986\"\u003e#20986\u003c/a\u003e) (playgirl)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/bea49f7b2899ebf708482f977ef2ada41fd2c3f0\"\u003e\u003ccode\u003ebea49f7\u003c/code\u003e\u003c/a\u003e docs: Update README (GitHub Actions Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/e5f70f9b06683a887dd0d6dc1cc91a9c9bea816d\"\u003e\u003ccode\u003ee5f70f9\u003c/code\u003e\u003c/a\u003e docs: update code-path diagrams (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20984\"\u003e#20984\u003c/a\u003e) (Tanuj Kanti)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/8890c2d40880b195b9167735c24ec0cc5de5eb96\"\u003e\u003ccode\u003e8890c2d\u003c/code\u003e\u003c/a\u003e docs: add TypeScript config guidance for MCP server (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20796\"\u003e#20796\u003c/a\u003e) (Pierluigi Lenoci)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/3eb3d9b1b5edecc3fcae0519ddba0e3745e889e3\"\u003e\u003ccode\u003e3eb3d9b\u003c/code\u003e\u003c/a\u003e docs: Update README (GitHub Actions Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/c5bb59cf613dabafd550227b6adaa9327b1095f5\"\u003e\u003ccode\u003ec5bb59c\u003c/code\u003e\u003c/a\u003e docs: Update README (GitHub Actions Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/eb3c97c776731ce11b28cc99f0271f41b9994701\"\u003e\u003ccode\u003eeb3c97c\u003c/code\u003e\u003c/a\u003e docs: fix grammar in prefer-const rule description (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20983\"\u003e#20983\u003c/a\u003e) (lumir)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/6a42034a57a816b0a313720b3b9df09455bd0b5e\"\u003e\u003ccode\u003e6a42034\u003c/code\u003e\u003c/a\u003e ci: run ecosystem tests on main branch (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20891\"\u003e#20891\u003c/a\u003e) (sethamus)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/3dbacdbb31673c87ca86ecafbb18712d8d1daed8\"\u003e\u003ccode\u003e3dbacdb\u003c/code\u003e\u003c/a\u003e ci: bump actions/checkout from 6 to 7 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21014\"\u003e#21014\u003c/a\u003e) (dependabot[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/c3abfca7c96cc9a244f54eeb66e9971c59280354\"\u003e\u003ccode\u003ec3abfca\u003c/code\u003e\u003c/a\u003e chore: correct JSDoc param types in html formatter (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21018\"\u003e#21018\u003c/a\u003e) (Minseon Kim)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/a8323209cdbefefd540c5beeaa51418d8ec40f9e\"\u003e\u003ccode\u003ea832320\u003c/code\u003e\u003c/a\u003e ci: split ecosystem tests into separate jobs (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21001\"\u003e#21001\u003c/a\u003e) (xbinaryx)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/27166e78511db526688afc34bbfab1a458405f3f\"\u003e\u003ccode\u003e27166e7\u003c/code\u003e\u003c/a\u003e chore: update ecosystem plugins (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21005\"\u003e#21005\u003c/a\u003e) (ESLint Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/865d76e40107d4fa10a17fc3203b303eb8a88dc3\"\u003e\u003ccode\u003e865d76e\u003c/code\u003e\u003c/a\u003e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20989\"\u003e#20989\u003c/a\u003e) (dependabot[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/27a88c9fa7c040f4cd39e5a5e6e2d02441c408ef\"\u003e\u003ccode\u003e27a88c9\u003c/code\u003e\u003c/a\u003e chore: update dependency markdown-it to v14 in root (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20994\"\u003e#20994\u003c/a\u003e) (Milos Djermanovic)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/970cea62b295d931a4109abedeb21ba192d3f2be\"\u003e\u003ccode\u003e970cea6\u003c/code\u003e\u003c/a\u003e chore: update dependency markdown-it to v14 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20993\"\u003e#20993\u003c/a\u003e) (Milos Djermanovic)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/b482120bacb40204fbf16f3b20be7207057157a5\"\u003e\u003ccode\u003eb482120\u003c/code\u003e\u003c/a\u003e chore: update dependency prettier to v3.8.4 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20990\"\u003e#20990\u003c/a\u003e) (renovate[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/6993fb3173da84999fc208507b93f523aa657448\"\u003e\u003ccode\u003e6993fb3\u003c/code\u003e\u003c/a\u003e chore: update ecosystem plugins (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20985\"\u003e#20985\u003c/a\u003e) (ESLint Bot)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.5.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/5ca8c5278edea1fd84d3ba83d8ea3f52fb3831ad\"\u003e\u003ccode\u003e5ca8c52\u003c/code\u003e\u003c/a\u003e feat: correct stack tracking in max-nested-callbacks (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20973\"\u003e#20973\u003c/a\u003e) (Pixel998)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/b5657837604fa5e8cf1278074782025cadd34b6c\"\u003e\u003ccode\u003eb565783\u003c/code\u003e\u003c/a\u003e feat: report no-with violations at the with keyword (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20971\"\u003e#20971\u003c/a\u003e) (Pixel998)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/2ce032fbc72a1a80c024c084a4f382fb6dece684\"\u003e\u003ccode\u003e2ce032f\u003c/code\u003e\u003c/a\u003e feat: report max-lines-per-function violations at function head (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20966\"\u003e#20966\u003c/a\u003e) (Pixel998)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/732cb3e09d5b8b809b5f461d118a5d9fdcd6427f\"\u003e\u003ccode\u003e732cb3e\u003c/code\u003e\u003c/a\u003e feat: report max-nested-callbacks violations at function head (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20967\"\u003e#20967\u003c/a\u003e) (Pixel998)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/f9c138a0ba7d8e37aed39aef4a3ff1cae8c669f7\"\u003e\u003ccode\u003ef9c138a\u003c/code\u003e\u003c/a\u003e feat: report max-depth violations on keywords (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20943\"\u003e#20943\u003c/a\u003e) (Pixel998)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/bdb496cc0d54b6d0a023aef9abd5f040ccff2101\"\u003e\u003ccode\u003ebdb496c\u003c/code\u003e\u003c/a\u003e feat: correct max-depth handling for else-if chains (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20944\"\u003e#20944\u003c/a\u003e) (Pixel998)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/c29687354a7f96093f57f7d73eecb866ad5e2953\"\u003e\u003ccode\u003ec296873\u003c/code\u003e\u003c/a\u003e feat: update error loc in \u003ccode\u003emax-statements\u003c/code\u003e to function header (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20907\"\u003e#20907\u003c/a\u003e) (Taejin Kim)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/5d12a0419636abb71628b7e45063a943c454a7c7\"\u003e\u003ccode\u003e5d12a04\u003c/code\u003e\u003c/a\u003e 10.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/f7ca54b138c4ba7b8e65f83b7fe58cc8de50af8b\"\u003e\u003ccode\u003ef7ca54b\u003c/code\u003e\u003c/a\u003e Build: changelog update for 10.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/6a42034a57a816b0a313720b3b9df09455bd0b5e\"\u003e\u003ccode\u003e6a42034\u003c/code\u003e\u003c/a\u003e ci: run ecosystem tests on main branch (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20891\"\u003e#20891\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/b1f910628e29a018c860e2352bc14cd07c853d67\"\u003e\u003ccode\u003eb1f9106\u003c/code\u003e\u003c/a\u003e feat: detect Symbol() and BigInt() in no-constant-binary-expression (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20981\"\u003e#20981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/3dbacdbb31673c87ca86ecafbb18712d8d1daed8\"\u003e\u003ccode\u003e3dbacdb\u003c/code\u003e\u003c/a\u003e ci: bump actions/checkout from 6 to 7 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21014\"\u003e#21014\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/c3abfca7c96cc9a244f54eeb66e9971c59280354\"\u003e\u003ccode\u003ec3abfca\u003c/code\u003e\u003c/a\u003e chore: correct JSDoc param types in html formatter (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21018\"\u003e#21018\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/a83683db1c27193c2ad333fc5c0aedcc8a293db7\"\u003e\u003ccode\u003ea83683d\u003c/code\u003e\u003c/a\u003e docs: Update README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/a8323209cdbefefd540c5beeaa51418d8ec40f9e\"\u003e\u003ccode\u003ea832320\u003c/code\u003e\u003c/a\u003e ci: split ecosystem tests into separate jobs (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21001\"\u003e#21001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/6b05784eb271ac98ca3e1e2a48c4b14bb588c786\"\u003e\u003ccode\u003e6b05784\u003c/code\u003e\u003c/a\u003e fix: prefer-exponentiation-operator invalid autofix at statement start (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20997\"\u003e#20997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/bb9eb2ab28daf6e6dafc62daa6b5daf9c2b7046c\"\u003e\u003ccode\u003ebb9eb2a\u003c/code\u003e\u003c/a\u003e fix: account for shadowed \u003ccode\u003eBoolean\u003c/code\u003e in \u003ccode\u003eno-extra-boolean-cast\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21013\"\u003e#21013\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/eslint/eslint/compare/v10.4.1...v10.6.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `eslint-plugin-import-x` from 4.16.2 to 4.17.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/releases\"\u003eeslint-plugin-import-x's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.17.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/474\"\u003e#474\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/4b2c0c50577ba5b38823fb6d2b1f7e0e2cb9b760\"\u003e\u003ccode\u003e4b2c0c5\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/regseb\"\u003e\u003ccode\u003e@​regseb\u003c/code\u003e\u003c/a\u003e! - Support \u003ccode\u003eRegExp\u003c/code\u003e in the \u003ccode\u003eimport-x/ignore\u003c/code\u003e setting and the \u003ccode\u003eignore\u003c/code\u003e option of the \u003ccode\u003eno-unresolved\u003c/code\u003e rule.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/494\"\u003e#494\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/1c84235057e693f107352b2874c5e9bc6d974e75\"\u003e\u003ccode\u003e1c84235\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/morgan-coded\"\u003e\u003ccode\u003e@​morgan-coded\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ccode\u003eno-unresolved\u003c/code\u003e crashing when case-sensitive path checks encounter \u003ccode\u003eEACCES\u003c/code\u003e or \u003ccode\u003eEPERM\u003c/code\u003e on an ancestor directory.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/481\"\u003e#481\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/3e131214f1a027858ce87d146576b243f6acad0c\"\u003e\u003ccode\u003e3e13121\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/B4nan\"\u003e\u003ccode\u003e@​B4nan\u003c/code\u003e\u003c/a\u003e! - fix: memoize legacyNodeResolve resolver to avoid native memory leak\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/484\"\u003e#484\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/9a070094ac6e3c5891762acebe882281b022501d\"\u003e\u003ccode\u003e9a07009\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/sairus2k\"\u003e\u003ccode\u003e@​sairus2k\u003c/code\u003e\u003c/a\u003e! - Make the \u003ccode\u003eextensions\u003c/code\u003e rule check Node.js subpath imports (specifiers starting with \u003ccode\u003e#\u003c/code\u003e, e.g. \u003ccode\u003e#utils/helper\u003c/code\u003e). Previously \u003ccode\u003eparsePath\u003c/code\u003e treated a leading \u003ccode\u003e#\u003c/code\u003e as a URL hash fragment, so the rule skipped extension validation for these imports.\u003c/p\u003e\n\u003cp\u003eNote: single-segment subpath imports without a slash (e.g. \u003ccode\u003e#dep\u003c/code\u003e) are still skipped by the existing external-root-module classification; fixing that is deferred to avoid expanding scope.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/468\"\u003e#468\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/240ed58cb3d699c5107af065d8482a5c902a2f95\"\u003e\u003ccode\u003e240ed58\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/silverwind\"\u003e\u003ccode\u003e@​silverwind\u003c/code\u003e\u003c/a\u003e! - Make \u003ccode\u003eextensions\u003c/code\u003e handle \u003ccode\u003e.d.ts\u003c/code\u003e correctly\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/479\"\u003e#479\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/e3cc7e458fe8440fdac291beba9f09ab216ec682\"\u003e\u003ccode\u003ee3cc7e4\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/mrginglymus\"\u003e\u003ccode\u003e@​mrginglymus\u003c/code\u003e\u003c/a\u003e! - fix: strip querystrings and hash fragments when checking for file existence\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/476\"\u003e#476\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/fce29b1bb7c1f57f18beb5f0ac5636b14ab848dc\"\u003e\u003ccode\u003efce29b1\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/nbouvrette\"\u003e\u003ccode\u003e@​nbouvrette\u003c/code\u003e\u003c/a\u003e! - fix(deps): replace \u003ccode\u003e@​package-json/types\u003c/code\u003e with an inline minimal type\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/blob/master/CHANGELOG.md\"\u003eeslint-plugin-import-x's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.17.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/474\"\u003e#474\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/4b2c0c50577ba5b38823fb6d2b1f7e0e2cb9b760\"\u003e\u003ccode\u003e4b2c0c5\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/regseb\"\u003e\u003ccode\u003e@​regseb\u003c/code\u003e\u003c/a\u003e! - Support \u003ccode\u003eRegExp\u003c/code\u003e in the \u003ccode\u003eimport-x/ignore\u003c/code\u003e setting and the \u003ccode\u003eignore\u003c/code\u003e option of the \u003ccode\u003eno-unresolved\u003c/code\u003e rule.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/494\"\u003e#494\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/1c84235057e693f107352b2874c5e9bc6d974e75\"\u003e\u003ccode\u003e1c84235\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/morgan-coded\"\u003e\u003ccode\u003e@​morgan-coded\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ccode\u003eno-unresolved\u003c/code\u003e crashing when case-sensitive path checks encounter \u003ccode\u003eEACCES\u003c/code\u003e or \u003ccode\u003eEPERM\u003c/code\u003e on an ancestor directory.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/481\"\u003e#481\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/3e131214f1a027858ce87d146576b243f6acad0c\"\u003e\u003ccode\u003e3e13121\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/B4nan\"\u003e\u003ccode\u003e@​B4nan\u003c/code\u003e\u003c/a\u003e! - fix: memoize legacyNodeResolve resolver to avoid native memory leak\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/484\"\u003e#484\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/9a070094ac6e3c5891762acebe882281b022501d\"\u003e\u003ccode\u003e9a07009\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/sairus2k\"\u003e\u003ccode\u003e@​sairus2k\u003c/code\u003e\u003c/a\u003e! - Make the \u003ccode\u003eextensions\u003c/code\u003e rule check Node.js subpath imports (specifiers starting with \u003ccode\u003e#\u003c/code\u003e, e.g. \u003ccode\u003e#utils/helper\u003c/code\u003e). Previously \u003ccode\u003eparsePath\u003c/code\u003e treated a leading \u003ccode\u003e#\u003c/code\u003e as a URL hash fragment, so the rule skipped extension validation for these imports.\u003c/p\u003e\n\u003cp\u003eNote: single-segment subpath imports without a slash (e.g. \u003ccode\u003e#dep\u003c/code\u003e) are still skipped by the existing external-root-module classification; fixing that is deferred to avoid expanding scope.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/468\"\u003e#468\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/240ed58cb3d699c5107af065d8482a5c902a2f95\"\u003e\u003ccode\u003e240ed58\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/silverwind\"\u003e\u003ccode\u003e@​silverwind\u003c/code\u003e\u003c/a\u003e! - Make \u003ccode\u003eextensions\u003c/code\u003e handle \u003ccode\u003e.d.ts\u003c/code\u003e correctly\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/479\"\u003e#479\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/e3cc7e458fe8440fdac291beba9f09ab216ec682\"\u003e\u003ccode\u003ee3cc7e4\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/mrginglymus\"\u003e\u003ccode\u003e@​mrginglymus\u003c/code\u003e\u003c/a\u003e! - fix: strip querystrings and hash fragments when checking for file existence\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/476\"\u003e#476\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/fce29b1bb7c1f57f18beb5f0ac5636b14ab848dc\"\u003e\u003ccode\u003efce29b1\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/nbouvrette\"\u003e\u003ccode\u003e@​nbouvrette\u003c/code\u003e\u003c/a\u003e! - fix(deps): replace \u003ccode\u003e@​package-json/types\u003c/code\u003e with an inline minimal type\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/7578513a194ce4c05cce6ac520efa00b7adc249f\"\u003e\u003ccode\u003e7578513\u003c/code\u003e\u003c/a\u003e chore: release eslint-plugin-import-x (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/472\"\u003e#472\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/e3cc7e458fe8440fdac291beba9f09ab216ec682\"\u003e\u003ccode\u003ee3cc7e4\u003c/code\u003e\u003c/a\u003e fix: strip querystrings and hash fragments when checking for file existence (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/9a070094ac6e3c5891762acebe882281b022501d\"\u003e\u003ccode\u003e9a07009\u003c/code\u003e\u003c/a\u003e fix: make \u003ccode\u003eextensions\u003c/code\u003e rule check Node.js subpath imports (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/484\"\u003e#484\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/3e131214f1a027858ce87d146576b243f6acad0c\"\u003e\u003ccode\u003e3e13121\u003c/code\u003e\u003c/a\u003e fix: memoize legacyNodeResolve resolver to avoid native memory leak (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/481\"\u003e#481\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/fce29b1bb7c1f57f18beb5f0ac5636b14ab848dc\"\u003e\u003ccode\u003efce29b1\u003c/code\u003e\u003c/a\u003e fix(deps): replace \u003ccode\u003e@​package-json/types\u003c/code\u003e with an inline minimal type (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/476\"\u003e#476\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/1c84235057e693f107352b2874c5e9bc6d974e75\"\u003e\u003ccode\u003e1c84235\u003c/code\u003e\u003c/a\u003e fix: handle access errors during case checks (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/494\"\u003e#494\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/96222bf429d083213eededbfea9a1eaade1c4ba5\"\u003e\u003ccode\u003e96222bf\u003c/code\u003e\u003c/a\u003e chore: drop unused \u003ccode\u003etmp\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/487\"\u003e#487\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/4b2c0c50577ba5b38823fb6d2b1f7e0e2cb9b760\"\u003e\u003ccode\u003e4b2c0c5\u003c/code\u003e\u003c/a\u003e feat: support RegExp in ignore (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/474\"\u003e#474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/240ed58cb3d699c5107af065d8482a5c902a2f95\"\u003e\u003ccode\u003e240ed58\u003c/code\u003e\u003c/a\u003e fix: make \u003ccode\u003eextensions\u003c/code\u003e rule handle \u003ccode\u003e.d.ts\u003c/code\u003e correctly (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/468\"\u003e#468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/compare/v4.16.2...v4.17.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `globals` from 17.6.0 to 17.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sindresorhus/globals/releases\"\u003eglobals's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev17.7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate globals (2026-06-22) (\u003ca href=\"https://redirect.github.com/sindresorhus/globals/issues/345\"\u003e#345\u003c/a\u003e)  33b75f9\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/globals/compare/v17.6.0...v17.7.0\"\u003ehttps://github.com/sindresorhus/globals/compare/v17.6.0...v17.7.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/globals/commit/a19670cc86c1218e915657c55ea02ba3e7623834\"\u003e\u003ccode\u003ea19670c\u003c/code\u003e\u003c/a\u003e 17.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/globals/commit/9611620bad0ea45531ae0261b986ce694374e42c\"\u003e\u003ccode\u003e9611620\u003c/code\u003e\u003c/a\u003e Update actions (\u003ca href=\"https://redirect.github.com/sindresorhus/globals/issues/346\"\u003e#346\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/globals/commit/33b75f9ddeb6f9ddd81251b043667eb8104a8d15\"\u003e\u003ccode\u003e33b75f9\u003c/code\u003e\u003c/a\u003e Update globals (2026-06-22) (\u003ca href=\"https://redirect.github.com/sindresorhus/globals/issues/345\"\u003e#345\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/globals/commit/887dd529bde24486b7f9e31d1b2c515df2b7cf5c\"\u003e\u003ccode\u003e887dd52\u003c/code\u003e\u003c/a\u003e Fix build script (\u003ca href=\"https://redirect.github.com/sindresorhus/globals/issues/344\"\u003e#344\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sindresorhus/globals/compare/v17.6.0...v17.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `playwright` from 1.60.0 to 1.61.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/microsoft/playwright/releases\"\u003eplaywright's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.61.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41365\"\u003e#41365\u003c/a\u003e [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41351\"\u003e#41351\u003c/a\u003e [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41360\"\u003e#41360\u003c/a\u003e [Bug]: Trace viewer: message times in websockets are downscaled by 1000\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41311\"\u003e#41311\u003c/a\u003e [Bug]: [Regression]: Sync loader throws \u0026quot;context.conditions?.includes is not a function\u0026quot; on Node 22.15\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41371\"\u003e#41371\u003c/a\u003e [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.61.0\u003c/h2\u003e\n\u003ch2\u003e🔑 WebAuthn passkeys\u003c/h2\u003e\n\u003cp\u003eNew \u003ca href=\"https://playwright.dev/docs/api/class-credentials\"\u003eCredentials\u003c/a\u003e virtual authenticator, available via \u003ca href=\"https://playwright.dev/docs/api/class-browsercontext#browser-context-credentials\"\u003ebrowserContext.credentials\u003c/a\u003e, lets tests register passkeys and answer \u003ccode\u003enavigator.credentials.create()\u003c/code\u003e / \u003ccode\u003enavigator.credentials.get()\u003c/code\u003e ceremonies in the page — no real hardware key required, works in all browsers:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003econst context = await browser.newContext();\r\n\u003cp\u003e// Seed a passkey your backend provisioned for a test user.\nawait context.credentials.create('example.com', {\nid: credentialId,\nuserHandle,\nprivateKey,\npublicKey,\n});\nawait context.credentials.install();\u003c/p\u003e\n\u003cp\u003econst page = await context.newPage();\nawait page.goto('\u003ca href=\"https://example.com/login\"\u003ehttps://example.com/login\u003c/a\u003e');\n// The page's navigator.credentials.get() is answered with the seeded passkey.\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eYou can also let the app register a passkey once in a setup test, read it back with \u003ca href=\"https://playwright.dev/docs/api/class-credentials#credentials-get\"\u003ecredentials.get()\u003c/a\u003e, and seed it into later tests — see \u003ca href=\"https://playwright.dev/docs/api/class-credentials\"\u003eCredentials\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003e🗃️ Web Storage\u003c/h2\u003e\n\u003cp\u003eNew \u003ca href=\"https://playwright.dev/docs/api/class-webstorage\"\u003eWebStorage\u003c/a\u003e API, available via \u003ca href=\"https://playwright.dev/docs/api/class-page#page-local-storage\"\u003epage.localStorage\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-page#page-session-storage\"\u003epage.sessionStorage\u003c/a\u003e, reads and writes the page's storage for the current origin:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eawait page.localStorage.setItem('token', 'abc');\r\nconst token = await page.localStorage.getItem('token');\r\nconst items = await page.sessionStorage.items();\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eNew APIs\u003c/h2\u003e\n\u003ch3\u003eNetwork\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://playwright.dev/docs/api/class-apiresponse#api-response-security-details\"\u003eapiResponse.securityDetails()\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-apiresponse#api-response-server-addr\"\u003eapiResponse.serverAddr()\u003c/a\u003e mirror the browser-side \u003ca href=\"https://playwright.dev/docs/api/class-response#response-security-details\"\u003eresponse.securityDetails()\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-response#response-server-addr\"\u003eresponse.serverAddr()\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBrowser and Screencast\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/39e3553a4f283a41134d75d7e404484bd9e6865a\"\u003e\u003ccode\u003e39e3553\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41399\"\u003e#41399\u003c/a\u003e): fix(test): load require-reached files as commonjs in syn...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/4328122a0fa91df1be287f12d26f272f598ccca7\"\u003e\u003ccode\u003e4328122\u003c/code\u003e\u003c/a\u003e chore: mark v1.61.1 (\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41404\"\u003e#41404\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/2c29a94ed59a2dbb2cb2553ee7d1ba429f027826\"\u003e\u003ccode\u003e2c29a94\u003c/code\u003e\u003c/a\u003e fix(tracing): stop recording websocket frames outside of chunks (\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41398\"\u003e#41398\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/4324b1904199c58ae56d864390f5210df18e33f6\"\u003e\u003ccode\u003e4324b19\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41367\"\u003e#41367\u003c/a\u003e): fix(test): keep builtin expect matchers on base extend\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/041e7e30002e7c384e1918c29720b34c435145f4\"\u003e\u003ccode\u003e041e7e3\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41364\"\u003e#41364\u003c/a\u003e): fix(har): \u003ccode\u003eWebSocket\u003c/code\u003e message timestamps should be in mi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/b8a0fc33932399fc5cfcd211165cf16f8ca01d71\"\u003e\u003ccode\u003eb8a0fc3\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41309\"\u003e#41309\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43149\"\u003e#43149\u003c/a\u003e): Revert \u0026quot;fix(firefox): treat `navigationCommitted...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/b5a31759e6611397bf3afaaa6049a420a5f082bd\"\u003e\u003ccode\u003eb5a3175\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41319\"\u003e#41319\u003c/a\u003e): fix(loader): support other node versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/d4724a91b280ae1ee9a87c426e9d6a953c59756e\"\u003e\u003ccode\u003ed4724a9\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41290\"\u003e#41290\u003c/a\u003e): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/1cc5a90cfa3eaa430b1a991963100f95126caa47\"\u003e\u003ccode\u003e1cc5a90\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41295\"\u003e#41295\u003c/a\u003e): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/a6772bdede34028cbbd417a3b3d778801899e870\"\u003e\u003ccode\u003ea6772bd\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41280\"\u003e#41280\u003c/a\u003e): Revert \u0026quot;fix(trace-viewer): add keyboard navigation to `N...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `serialize-javascript` from 7.0.5 to 7.0.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/yahoo/serialize-javascript/releases\"\u003eserialize-javascript's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.0.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps-dev): bump lodash from 4.17.23 to 4.18.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/yahoo/serialize-javascript/pull/215\"\u003eyahoo/serialize-javascript#215\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject spoofed URL objects with non-string toString() result by \u003ca href=\"https://github.com/redonkulus\"\u003e\u003ccode\u003e@​redonkulus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/yahoo/serialize-javascript/pull/217\"\u003eyahoo/serialize-javascript#217\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease: v7.0.6 by \u003ca href=\"https://github.com/okuryu\"\u003e\u003ccode\u003e@​okuryu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/yahoo/serialize-javascript/pull/221\"\u003eyahoo/serialize-javascript#221\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/yahoo/serialize-javascript/compare/v7.0.5...v7.0.6\"\u003ehttps://github.com/yahoo/serialize-javascript/compare/v7.0.5...v7.0.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yahoo/serialize-javascript/commit/153eb437d45310f34f4b8414a4ac1f8658a622dd\"\u003e\u003ccode\u003e153eb43\u003c/code\u003e\u003c/a\u003e release: v7.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yahoo/serialize-javascript/commit/a83d2cb9e04a85726827a23c941f03177018774b\"\u003e\u003ccode\u003ea83d2cb\u003c/code\u003e\u003c/a\u003e fix: reject spoofed URL objects with non-string toString() result\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yahoo/serialize-javascript/commit/451af655bcf055489f39a2629673ae8f67023b90\"\u003e\u003ccode\u003e451af65\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump lodash from 4.17.23 to 4.18.1 (\u003ca href=\"https://redirect.github.com/yahoo/serialize-javascript/issues/215\"\u003e#215\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/yahoo/serialize-javascript/compare/v7.0.5...v7.0.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.5.16 to 7.5.17\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.16...v7.5.17\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `prettier` from 3.8.4 to 3.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prettier/prettier/releases\"\u003eprettier's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.9.0\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/prettier/prettier/compare/3.8.5...3.9.0\"\u003ediff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e🔗 \u003ca href=\"https://prettier.io/blog/2026/06/27/3.9.0\"\u003ePrettier 3.9: Major parser upgrades and Formatting improvements\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.8.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Flow variance annotation print (\u003ca href=\"https://redirect.github.com/prettier/prettier/pull/19022\"\u003e#19022\u003c/a\u003e by \u003ca href=\"https://github.com/marcoww6\"\u003e\u003ccode\u003e@​marcoww6\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e🔗 \u003ca href=\"https://github.com/prettier/prettier/blob/3.8.5/CHANGELOG.md#385\"\u003eChangelog\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prettier/prettier/blob/main/CHANGELOG.md\"\u003eprettier's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e3.9.0\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/prettier/prettier/compare/3.8.5...3.9.0\"\u003ediff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e🔗 \u003ca href=\"https://prettier.io/blog/2026/06/27/3.9.0\"\u003eRelease Notes\u003c/a\u003e\u003c/p\u003e\n\u003ch1\u003e3.8.5\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/prettier/prettier/compare/3.8.4...3.8.5\"\u003ediff\u003c/a\u003e\u003c/p\u003e\n\u003ch4\u003eFlow: Support \u003ccode\u003ereadonly\u003c/code\u003e as a variance annotation (\u003ca href=\"https://redirect.github.com/prettier/prettier/pull/19022\"\u003e#19022\u003c/a\u003e by \u003ca href=\"https://github.com/marcoww6\"\u003e\u003ccode\u003e@​marcoww6\u003c/code\u003e\u003c/a\u003e)\u003c/h4\u003e\n\u003cp\u003eFlow now accepts \u003ccode\u003ereadonly\u003c/code\u003e as a property variance annotation, equivalent to \u003ccode\u003e+\u003c/code\u003e (covariant/read-only).\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cpre lang=\"jsx\"\u003e\u003ccode\u003e// Input\ntype T = {\n  readonly foo: string,\n};\n\u003cp\u003e// Prettier 3.8.4\u003cbr /\u003e\nSyntaxError\u003c/p\u003e\n\u003cp\u003e// Prettier 3.8.5\u003cbr /\u003e\ntype T = {\u003cbr /\u003e\nreadonly foo: string,\u003cbr /\u003e\n};\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/8171cf4c119ed650f3d8c5e8b158891f65c67a2a\"\u003e\u003ccode\u003e8171cf4\u003c/code\u003e\u003c/a\u003e Release 3.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/165423ceb31639f05ef03bf36c9e90c93cb6e7f1\"\u003e\u003ccode\u003e165423c\u003c/code\u003e\u003c/a\u003e Fix linting failure on main branch (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19481\"\u003e#19481\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/70edc07c64111f13c4016980f7a2125eb4a89120\"\u003e\u003ccode\u003e70edc07\u003c/code\u003e\u003c/a\u003e Update actions/cache action to v6.1.0 (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19479\"\u003e#19479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/7503e0791b12e5aae3238b490599802fa883e18d\"\u003e\u003ccode\u003e7503e07\u003c/code\u003e\u003c/a\u003e Update dependency eslint to v10.6.0 (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19480\"\u003e#19480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/c193ea55238bb3077e86c6ea7c514bf3a744e4d6\"\u003e\u003ccode\u003ec193ea5\u003c/code\u003e\u003c/a\u003e Update dependency \u003ccode\u003e@​codemirror/view\u003c/code\u003e to v6.43.4 (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19460\"\u003e#19460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/bb51b20069ec386262b9f6624ccf3746ff98d7b5\"\u003e\u003ccode\u003ebb51b20\u003c/code\u003e\u003c/a\u003e Update dependency \u003ccode\u003e@​angular/compiler\u003c/code\u003e to v22.0.4 (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19478\"\u003e#19478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/fe040aeef90c7fc3db4514b92275e61cc5dd3b99\"\u003e\u003ccode\u003efe040ae\u003c/code\u003e\u003c/a\u003e Fix cache not invalidated when files are ignored or restored (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/18029\"\u003e#18029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/ae594b849f4431b166ec089c8c1297a2d6e8fbcc\"\u003e\u003ccode\u003eae594b8\u003c/code\u003e\u003c/a\u003e Fix mutiline opening inline html tag (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19477\"\u003e#19477\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/7eecbe3602182d33ae50f073c51021386fea163e\"\u003e\u003ccode\u003e7eecbe3\u003c/code\u003e\u003c/a\u003e Update dependency vue to v3.5.39 (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19474\"\u003e#19474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/226a1c8a1594b11aba0e7eb52541d55c72e19464\"\u003e\u003ccode\u003e226a1c8\u003c/code\u003e\u003c/a\u003e Update dependency webpack to v5.108.1 (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19475\"\u003e#19475\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/prettier/prettier/compare/3.8.4...3.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `rollup` from 4.61.1 to 4.62.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/rollup/rollup/releases\"\u003erollup's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.62.2\u003c/h2\u003e\n\u003ch2\u003e4.62.2\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-19\u003c/em\u003e\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDo not add spurious side-effect-free external imports to chunks when using minChunkSize (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6411\"\u003e#6411\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePull Requests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6411\"\u003e#6411\u003c/a\u003e: Skip side-effect-free external imports when hoisting is disabled (\u003ca href=\"https://github.com/morgan-coded\"\u003e\u003ccode\u003e@​morgan-coded\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6416\"\u003e#6416\u003c/a\u003e: refactor(rust/parser_ast): extract property AstConverter write buffer kind logic to new method (\u003ca href=\"https://github.com/fabianbernhart\"\u003e\u003ccode\u003e@​fabianbernhart\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.62.1\u003c/h2\u003e\n\u003ch2\u003e4.62.1\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-19\u003c/em\u003e\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve multipart file extensions when deconflicting output chunks (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6408\"\u003e#6408\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an issue where getLogFilter would match additional logs (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6415\"\u003e#6415\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePull Requests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6393\"\u003e#6393\u003c/a\u003e: Use import attributes for importing JSON (\u003ca href=\"https://github.com/selfisekai\"\u003e\u003ccode\u003e@​selfisekai\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6408\"\u003e#6408\u003c/a\u003e: fix: insert conflict numbers before first extension in multi-extension filenames (\u003ca href=\"https://github.com/LeSingh1\"\u003e\u003ccode\u003e@​LeSingh1\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6415\"\u003e#6415\u003c/a\u003e: fix: advance value past wildcard prefix before suffix check in getLogFilter (\u003ca href=\"https://github.com/JSap0914\"\u003e\u003ccode\u003e@​JSap0914\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6417\"\u003e#6417\u003c/a\u003e: chore(deps): update msys2/setup-msys2 digest to 66cd2cc (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6418\"\u003e#6418\u003c/a\u003e: fix(deps): update minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot], \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6419\"\u003e#6419\u003c/a\u003e: chore(deps): update dependency eslint-plugin-unicorn to v66 (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6420\"\u003e#6420\u003c/a\u003e: chore(deps): lock file maintenance minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot], \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.62.0\u003c/h2\u003e\n\u003ch2\u003e4.62.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-13\u003c/em\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure that shared dependencies between manual chunks and entry points receive a serparate chunk (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6374\"\u003e#6374\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePull Requests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6374\"\u003e#6374\u003c/a\u003e: Extract the static dependencies imported by manual chunks into separate chunks (\u003ca href=\"https://github.com/TrickyPi\"\u003e\u003ccode\u003e@​TrickyPi\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6405\"\u003e#6405\u003c/a\u003e: fix(deps): update minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6406\"\u003e#6406\u003c/a\u003e: chore(deps): pin dependency concurrently to v9 (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot], \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6407\"\u003e#6407\u003c/a\u003e: chore(deps): lock file maintenance minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6409\"\u003e#6409\u003c/a\u003e: chore(deps): update minor/patch updates to v6.2.0 (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/rollup/rollup/blob/master/CHANGELOG.md\"\u003erollup's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.62.2\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-19\u003c/em\u003e\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDo not add spurious side-effect-free external imports to chunks when using minChunkSize (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6411\"\u003e#6411\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePull Requests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6411\"\u003e#6411\u003c/a\u003e: Skip side-effect-free external imports when hoisting is disabled (\u003ca href=\"https://github.com/morgan-coded\"\u003e\u003ccode\u003e@​morgan-coded\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6416\"\u003e#6416\u003c/a\u003e: refactor(rust/parser_ast): extract property AstConverter write buffer kind logic to new method (\u003ca href=\"https://github.com/fabianbernhart\"\u003e\u003ccode\u003e@​fabianbernhart\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.62.1\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-19\u003c/em\u003e\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve multipart file extensions when deconflicting output chunks (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6408\"\u003e#6408\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an issue where getLogFilter would match additional logs (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6415\"\u003e#6415\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePull Requests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6393\"\u003e#6393\u003c/a\u003e: Use import attributes for importing JSON (\u003ca href=\"https://github.com/selfisekai\"\u003e\u003ccode\u003e@​selfisekai\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6408\"\u003e#6408\u003c/a\u003e: fix: insert conflict numbers before first extension in multi-extension filenames (\u003ca href=\"https://github.com/LeSingh1\"\u003e\u003ccode\u003e@​LeSingh1\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6415\"\u003e#6415\u003c/a\u003e: fix: advance value past wildcard prefix before suffix check in getLogFilter (\u003ca href=\"https://github.com/JSap0914\"\u003e\u003ccode\u003e@​JSap0914\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6417\"\u003e#6417\u003c/a\u003e: chore(deps): update msys2/setup-msys2 digest to 66cd2cc (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6418\"\u003e#6418\u003c/a\u003e: fix(deps): update minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot], \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6419\"\u003e#6419\u003c/a\u003e: chore(deps): update dependency eslint-plugin-unicorn to v66 (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6420\"\u003e#6420\u003c/a\u003e: chore(deps): lock file maintenance minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot], \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.62.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-13\u003c/em\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure that shared dependencies between manual chunks and entry points receive a serparate chunk (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6374\"\u003e#6374\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePull Requests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6374\"\u003e#6374\u003c/a\u003e: Extract the static dependencies imported by manual chunks into separate chunks (\u003ca href=\"https://github.com/TrickyPi\"\u003e\u003ccode\u003e@​TrickyPi\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6405\"\u003e#6405\u003c/a\u003e: fix(deps): update minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6406\"\u003e#6406\u003c/a\u003e: chore(deps): pin dependency concurrently to v9 (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e...\n\n_Description has been truncated_","html_url":"https://github.com/theQRL/qrypto.js/pull/191","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/theQRL%2Fqrypto.js/issues/191","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/191/packages"},{"uuid":"4807230827","node_id":"PR_kwDOSyklwc7txg2E","number":2,"state":"open","title":"chore(deps): bump the npm-minor-patch group with 191 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-04T01:48:29.000Z","updated_at":"2026-07-04T01:49:02.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm-minor-patch","update_count":191,"packages":[{"name":"@neteasecloudmusicapienhanced/api","old_version":"4.34.3","new_version":"4.36.1","repository_url":"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced"},{"name":"@sentry/node","old_version":"10.56.0","new_version":"10.63.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@sentry/vue","old_version":"10.56.0","new_version":"10.63.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@simplewebauthn/server","old_version":"13.3.1","new_version":"13.3.2","repository_url":"https://github.com/MasterKale/SimpleWebAuthn"},{"name":"axios","old_version":"1.17.0","new_version":"1.18.1","repository_url":"https://github.com/axios/axios"},{"name":"multer","old_version":"2.1.1","new_version":"2.2.0","repository_url":"https://github.com/expressjs/multer"},{"name":"@types/multer","old_version":"2.1.0","new_version":"2.2.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"nodemailer","old_version":"8.0.10","new_version":"8.0.11","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"@types/nodemailer","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"nuxt","old_version":"4.4.7","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"sass","old_version":"1.100.0","new_version":"1.101.0","repository_url":"https://github.com/sass/dart-sass"},{"name":"tsx","old_version":"4.22.4","new_version":"4.23.0","repository_url":"https://github.com/privatenumber/tsx"},{"name":"vue","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@nuxt/eslint","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/nuxt/eslint"},{"name":"prettier","old_version":"3.8.3","new_version":"3.9.4","repository_url":"https://github.com/prettier/prettier"},{"name":"@bomb.sh/tab","old_version":"0.0.15","new_version":"0.0.17","repository_url":"https://github.com/bombshell-dev/tab"},{"name":"@clack/core","old_version":"1.4.1","new_version":"1.4.3","repository_url":"https://github.com/bombshell-dev/clack"},{"name":"@clack/prompts","old_version":"1.5.1","new_version":"1.7.0","repository_url":"https://github.com/bombshell-dev/clack"},{"name":"@colordx/core","old_version":"5.4.3","new_version":"5.5.0","repository_url":"https://github.com/dkryaklin/colordx"},{"name":"@es-joy/jsdoccomment","old_version":"0.86.0","new_version":"0.87.0","repository_url":"https://github.com/es-joy/jsdoccomment"},{"name":"@eslint/config-inspector","old_version":"1.5.0","new_version":"3.0.4","repository_url":"https://github.com/eslint/config-inspector"},{"name":"@napi-rs/wasm-runtime","old_version":"1.1.4","new_version":"1.1.6","repository_url":"https://github.com/napi-rs/napi-rs"},{"name":"@neteasecloudmusicapienhanced/unblockmusic-utils","old_version":"0.3.2","new_version":"0.3.4"},{"name":"@nuxt/cli","old_version":"3.35.2","new_version":"3.36.1","repository_url":"https://github.com/nuxt/cli"},{"name":"@nuxt/eslint-config","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/nuxt/eslint"},{"name":"@nuxt/eslint-plugin","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/nuxt/eslint"},{"name":"@nuxt/nitro-server","old_version":"4.4.7","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@nuxt/schema","old_version":"4.4.7","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@nuxt/vite-builder","old_version":"4.4.7","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@opentelemetry/core","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/resources","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-trace-base","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@oxc-parser/binding-android-arm-eabi","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-android-arm64","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-darwin-arm64","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-darwin-x64","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-freebsd-x64","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm-gnueabihf","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm-musleabihf","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm64-gnu","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm64-musl","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-ppc64-gnu","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-riscv64-gnu","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-riscv64-musl","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-s390x-gnu","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-x64-gnu","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-x64-musl","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-openharmony-arm64","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-wasm32-wasi","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-win32-arm64-msvc","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-win32-ia32-msvc","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-win32-x64-msvc","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-project/types","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@peculiar/asn1-android","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-cms","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-csr","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-ecc","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-pfx","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-pkcs8","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-pkcs9","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-rsa","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-schema","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-x509-attr","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-x509","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@rollup/rollup-android-arm-eabi","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-android-arm64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-darwin-arm64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-darwin-x64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-freebsd-arm64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-freebsd-x64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm-gnueabihf","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm-musleabihf","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm64-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm64-musl","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-loong64-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-loong64-musl","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-ppc64-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-ppc64-musl","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-riscv64-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-riscv64-musl","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-s390x-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-x64-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-x64-musl","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-openbsd-x64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-openharmony-arm64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-arm64-msvc","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-ia32-msvc","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-x64-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-x64-msvc","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@sentry/browser","old_version":"10.56.0","new_version":"10.63.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@sentry/core","old_version":"10.56.0","new_version":"10.63.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@sentry/node-core","old_version":"10.56.0","new_version":"10.63.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@sentry/opentelemetry","old_version":"10.56.0","new_version":"10.63.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@speed-highlight/core","old_version":"1.2.15","new_version":"1.2.17","repository_url":"https://github.com/speed-highlight/core"},{"name":"@tybys/wasm-util","old_version":"0.10.2","new_version":"0.10.3","repository_url":"https://github.com/toyobayashi/wasm-util"},{"name":"@typescript-eslint/eslint-plugin","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/parser","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/project-service","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/scope-manager","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/tsconfig-utils","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/type-utils","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/types","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/typescript-estree","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/utils","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/visitor-keys","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@vitejs/plugin-vue-jsx","old_version":"5.1.5","new_version":"5.1.6","repository_url":"https://github.com/vitejs/vite-plugin-vue"},{"name":"@vue/compiler-core","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/compiler-dom","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/compiler-sfc","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/compiler-ssr","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/devtools-core","old_version":"8.1.2","new_version":"8.1.5","repository_url":"https://github.com/vuejs/devtools"},{"name":"@vue/devtools-kit","old_version":"8.1.2","new_version":"8.1.5","repository_url":"https://github.com/vuejs/devtools"},{"name":"@vue/devtools-shared","old_version":"8.1.2","new_version":"8.1.5","repository_url":"https://github.com/vuejs/devtools"},{"name":"@vue/reactivity","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/runtime-core","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/runtime-dom","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/server-renderer","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/shared","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"bare-fs","old_version":"4.7.2","new_version":"4.7.3","repository_url":"https://github.com/holepunchto/bare-fs"},{"name":"bare-os","old_version":"3.9.1","new_version":"3.9.3","repository_url":"https://github.com/holepunchto/bare-os"},{"name":"bare-stream","old_version":"2.13.1","new_version":"2.13.3","repository_url":"https://github.com/holepunchto/bare-stream"},{"name":"bare-url","old_version":"2.4.3","new_version":"2.4.5","repository_url":"https://github.com/holepunchto/bare-url"},{"name":"builtin-modules","old_version":"5.2.0","new_version":"5.3.0","repository_url":"https://github.com/sindresorhus/builtin-modules"},{"name":"caniuse-api","old_version":"3.0.0","new_version":"4.0.0","repository_url":"https://github.com/MoOx/caniuse-api"},{"name":"comment-parser","old_version":"1.4.6","new_version":"1.4.7","repository_url":"https://github.com/yavorskiy/comment-parser"},{"name":"cssnano-preset-default","old_version":"8.0.1","new_version":"8.0.2","repository_url":"https://github.com/cssnano/cssnano"},{"name":"cssnano-utils","old_version":"6.0.0","new_version":"6.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"cssnano","old_version":"8.0.1","new_version":"8.0.2","repository_url":"https://github.com/cssnano/cssnano"},{"name":"es-module-lexer","old_version":"2.1.0","new_version":"2.3.0","repository_url":"https://github.com/guybedford/es-module-lexer"},{"name":"es-to-primitive","old_version":"1.3.0","new_version":"1.3.4","repository_url":"https://github.com/ljharb/es-to-primitive"},{"name":"eslint-plugin-import-lite","old_version":"0.5.2","new_version":"0.6.0","repository_url":"https://github.com/9romise/eslint-plugin-import-lite"},{"name":"eslint-plugin-import-x","old_version":"4.16.2","new_version":"4.17.1","repository_url":"https://github.com/un-ts/eslint-plugin-import-x"},{"name":"eslint-plugin-jsdoc","old_version":"62.9.0","new_version":"63.0.10","repository_url":"https://github.com/gajus/eslint-plugin-jsdoc"},{"name":"eslint-plugin-regexp","old_version":"3.1.0","new_version":"3.1.1","repository_url":"https://github.com/ota-meshi/eslint-plugin-regexp"},{"name":"eslint-plugin-unicorn","old_version":"63.0.0","new_version":"65.0.1","repository_url":"https://github.com/sindresorhus/eslint-plugin-unicorn"},{"name":"exsolve","old_version":"1.0.8","new_version":"1.1.0","repository_url":"https://github.com/unjs/exsolve"},{"name":"fast-uri","old_version":"3.1.2","new_version":"3.1.3","repository_url":"https://github.com/fastify/fast-uri"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"function.prototype.name","old_version":"1.1.8","new_version":"1.2.0","repository_url":"https://github.com/es-shims/Function.prototype.name"},{"name":"fuse.js","old_version":"7.4.1","new_version":"7.4.2","repository_url":"https://github.com/krisk/Fuse"},{"name":"httpxy","old_version":"0.5.3","new_version":"0.5.4","repository_url":"https://github.com/unjs/httpxy"},{"name":"immutable","old_version":"5.1.6","new_version":"5.1.9","repository_url":"https://github.com/immutable-js/immutable-js"},{"name":"import-in-the-middle","old_version":"3.0.1","new_version":"3.3.0","repository_url":"https://github.com/nodejs/import-in-the-middle"},{"name":"music-metadata","old_version":"11.12.3","new_version":"11.13.0","repository_url":"https://github.com/Borewit/music-metadata"},{"name":"nypm","old_version":"0.6.6","new_version":"0.6.8","repository_url":"https://github.com/unjs/nypm"},{"name":"obug","old_version":"2.1.2","new_version":"2.1.3","repository_url":"https://github.com/sxzz/obug"},{"name":"oxc-parser","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"package-manager-detector","old_version":"1.6.0","new_version":"1.7.0","repository_url":"https://github.com/antfu-collective/package-manager-detector"},{"name":"postcss-colormin","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-convert-values","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-comments","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-duplicates","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-empty","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-overridden","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-merge-longhand","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-merge-rules","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-font-values","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-gradients","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-params","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-selectors","old_version":"8.0.1","new_version":"8.0.2","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-charset","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-display-values","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-positions","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-repeat-style","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-string","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-timing-functions","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-unicode","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-url","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-whitespace","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-ordered-values","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-reduce-initial","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-reduce-transforms","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-svgo","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-unique-selectors","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"qs","old_version":"6.15.2","new_version":"6.15.3","repository_url":"https://github.com/ljharb/qs"},{"name":"regjsparser","old_version":"0.13.1","new_version":"0.13.2","repository_url":"https://github.com/jviereck/regjsparser"},{"name":"shell-quote","old_version":"1.8.4","new_version":"1.9.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"side-channel","old_version":"1.1.0","new_version":"1.1.1","repository_url":"https://github.com/ljharb/side-channel"},{"name":"srvx","old_version":"0.11.16","new_version":"0.11.20","repository_url":"https://github.com/h3js/srvx"},{"name":"streamx","old_version":"2.26.0","new_version":"2.28.0","repository_url":"https://github.com/mafintosh/streamx"},{"name":"string.prototype.trim","old_version":"1.2.10","new_version":"1.2.11","repository_url":"https://github.com/es-shims/String.prototype.trim"},{"name":"string.prototype.trimend","old_version":"1.0.9","new_version":"1.0.10","repository_url":"https://github.com/es-shims/String.prototype.trimEnd"},{"name":"stylehacks","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"tar","old_version":"7.5.16","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"},{"name":"tinyclip","old_version":"0.1.14","new_version":"0.1.15","repository_url":"https://github.com/tinylibs/tinyclip"},{"name":"unimport","old_version":"5.7.0","new_version":"6.3.0","repository_url":"https://github.com/unjs/unimport"},{"name":"unplugin-utils","old_version":"0.3.1","new_version":"0.3.2","repository_url":"https://github.com/sxzz/unplugin-utils"},{"name":"vite-plugin-checker","old_version":"0.14.1","new_version":"0.14.4","repository_url":"https://github.com/fi3ework/vite-plugin-checker"},{"name":"vite","old_version":"7.3.5","new_version":"7.3.6","repository_url":"https://github.com/vitejs/vite"},{"name":"vue-bundle-renderer","old_version":"2.2.0","new_version":"2.3.1","repository_url":"https://github.com/nuxt-contrib/vue-bundle-renderer"},{"name":"which-typed-array","old_version":"1.1.21","new_version":"1.1.22","repository_url":"https://github.com/inspect-js/which-typed-array"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-minor-patch group with 191 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@neteasecloudmusicapienhanced/api](https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced) | `4.34.3` | `4.36.1` |\n| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.63.0` |\n| [@sentry/vue](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.63.0` |\n| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.1` | `13.3.2` |\n| [axios](https://github.com/axios/axios) | `1.17.0` | `1.18.1` |\n| [multer](https://github.com/expressjs/multer) | `2.1.1` | `2.2.0` |\n| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.1.0` | `2.2.0` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.10` | `8.0.11` |\n| [@types/nodemailer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/nodemailer) | `8.0.0` | `8.0.1` |\n| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.4.7` | `4.4.8` |\n| [sass](https://github.com/sass/dart-sass) | `1.100.0` | `1.101.0` |\n| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.0` |\n| [vue](https://github.com/vuejs/core) | `3.5.35` | `3.5.39` |\n| [@nuxt/eslint](https://github.com/nuxt/eslint/tree/HEAD/packages/module) | `1.15.2` | `1.16.0` |\n| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.4` |\n| [@bomb.sh/tab](https://github.com/bombshell-dev/tab) | `0.0.15` | `0.0.17` |\n| [@clack/core](https://github.com/bombshell-dev/clack/tree/HEAD/packages/core) | `1.4.1` | `1.4.3` |\n| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.5.1` | `1.7.0` |\n| [@colordx/core](https://github.com/dkryaklin/colordx) | `5.4.3` | `5.5.0` |\n| [@es-joy/jsdoccomment](https://github.com/es-joy/jsdoccomment) | `0.86.0` | `0.87.0` |\n| [@eslint/config-inspector](https://github.com/eslint/config-inspector) | `1.5.0` | `3.0.4` |\n| [@napi-rs/wasm-runtime](https://github.com/napi-rs/napi-rs/tree/HEAD/wasm-runtime) | `1.1.4` | `1.1.6` |\n| @neteasecloudmusicapienhanced/unblockmusic-utils | `0.3.2` | `0.3.4` |\n| [@nuxt/cli](https://github.com/nuxt/cli/tree/HEAD/packages/nuxt-cli) | `3.35.2` | `3.36.1` |\n| [@nuxt/eslint-config](https://github.com/nuxt/eslint/tree/HEAD/packages/eslint-config) | `1.15.2` | `1.16.0` |\n| [@nuxt/eslint-plugin](https://github.com/nuxt/eslint/tree/HEAD/packages/eslint-plugin) | `1.15.2` | `1.16.0` |\n| [@nuxt/nitro-server](https://github.com/nuxt/nuxt/tree/HEAD/packages/nitro-server) | `4.4.7` | `4.4.8` |\n| [@nuxt/schema](https://github.com/nuxt/nuxt/tree/HEAD/packages/schema) | `4.4.7` | `4.4.8` |\n| [@nuxt/vite-builder](https://github.com/nuxt/nuxt/tree/HEAD/packages/vite) | `4.4.7` | `4.4.8` |\n| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@oxc-parser/binding-android-arm-eabi](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-android-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-darwin-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-darwin-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-freebsd-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm-gnueabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm-musleabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-ppc64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-riscv64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-riscv64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-s390x-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-x64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-x64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-openharmony-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-wasm32-wasi](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-win32-arm64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-win32-ia32-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-win32-x64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-project/types](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxc-types) | `0.133.0` | `0.132.0` |\n| [@peculiar/asn1-android](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/android) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-cms](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/cms) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-csr](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/csr) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-ecc](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/ecc) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-pfx](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/pfx) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-pkcs8](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/pkcs8) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-pkcs9](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/pkcs9) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-rsa](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/rsa) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-schema](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/schema) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-x509-attr](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/x509-attr) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-x509](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/x509) | `2.7.0` | `2.8.0` |\n| [@rollup/rollup-android-arm-eabi](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-android-arm64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-darwin-arm64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-darwin-x64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-freebsd-arm64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-freebsd-x64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-arm-gnueabihf](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-arm-musleabihf](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-arm64-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-arm64-musl](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-loong64-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-loong64-musl](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-ppc64-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-ppc64-musl](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-riscv64-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-riscv64-musl](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-s390x-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-x64-musl](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-openbsd-x64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-openharmony-arm64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-win32-arm64-msvc](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-win32-ia32-msvc](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-win32-x64-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-win32-x64-msvc](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.63.0` |\n| [@sentry/core](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.63.0` |\n| [@sentry/node-core](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.63.0` |\n| [@sentry/opentelemetry](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.63.0` |\n| [@speed-highlight/core](https://github.com/speed-highlight/core) | `1.2.15` | `1.2.17` |\n| [@tybys/wasm-util](https://github.com/toyobayashi/wasm-util) | `0.10.2` | `0.10.3` |\n| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/project-service](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/project-service) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/scope-manager](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/scope-manager) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/tsconfig-utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/tsconfig-utils) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/type-utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/type-utils) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/types](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/types) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/typescript-estree](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-estree) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/utils) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/visitor-keys](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/visitor-keys) | `8.60.1` | `8.62.1` |\n| [@vitejs/plugin-vue-jsx](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue-jsx) | `5.1.5` | `5.1.6` |\n| [@vue/compiler-core](https://github.com/vuejs/core/tree/HEAD/packages/compiler-core) | `3.5.35` | `3.5.39` |\n| [@vue/compiler-dom](https://github.com/vuejs/core/tree/HEAD/packages/compiler-dom) | `3.5.35` | `3.5.39` |\n| [@vue/compiler-sfc](https://github.com/vuejs/core/tree/HEAD/packages/compiler-sfc) | `3.5.35` | `3.5.39` |\n| [@vue/compiler-ssr](https://github.com/vuejs/core/tree/HEAD/packages/compiler-ssr) | `3.5.35` | `3.5.39` |\n| [@vue/devtools-core](https://github.com/vuejs/devtools/tree/HEAD/packages/core) | `8.1.2` | `8.1.5` |\n| [@vue/devtools-kit](https://github.com/vuejs/devtools/tree/HEAD/packages/devtools-kit) | `8.1.2` | `8.1.5` |\n| [@vue/devtools-shared](https://github.com/vuejs/devtools/tree/HEAD/packages/shared) | `8.1.2` | `8.1.5` |\n| [@vue/reactivity](https://github.com/vuejs/core/tree/HEAD/packages/reactivity) | `3.5.35` | `3.5.39` |\n| [@vue/runtime-core](https://github.com/vuejs/core/tree/HEAD/packages/runtime-core) | `3.5.35` | `3.5.39` |\n| [@vue/runtime-dom](https://github.com/vuejs/core/tree/HEAD/packages/runtime-dom) | `3.5.35` | `3.5.39` |\n| [@vue/server-renderer](https://github.com/vuejs/core/tree/HEAD/packages/server-renderer) | `3.5.35` | `3.5.39` |\n| [@vue/shared](https://github.com/vuejs/core/tree/HEAD/packages/shared) | `3.5.35` | `3.5.39` |\n| [bare-fs](https://github.com/holepunchto/bare-fs) | `4.7.2` | `4.7.3` |\n| [bare-os](https://github.com/holepunchto/bare-os) | `3.9.1` | `3.9.3` |\n| [bare-stream](https://github.com/holepunchto/bare-stream) | `2.13.1` | `2.13.3` |\n| [bare-url](https://github.com/holepunchto/bare-url) | `2.4.3` | `2.4.5` |\n| [builtin-modules](https://github.com/sindresorhus/builtin-modules) | `5.2.0` | `5.3.0` |\n| [caniuse-api](https://github.com/MoOx/caniuse-api) | `3.0.0` | `4.0.0` |\n| [comment-parser](https://github.com/yavorskiy/comment-parser) | `1.4.6` | `1.4.7` |\n| [cssnano-preset-default](https://github.com/cssnano/cssnano) | `8.0.1` | `8.0.2` |\n| [cssnano-utils](https://github.com/cssnano/cssnano) | `6.0.0` | `6.0.1` |\n| [cssnano](https://github.com/cssnano/cssnano) | `8.0.1` | `8.0.2` |\n| [es-module-lexer](https://github.com/guybedford/es-module-lexer) | `2.1.0` | `2.3.0` |\n| [es-to-primitive](https://github.com/ljharb/es-to-primitive) | `1.3.0` | `1.3.4` |\n| [eslint-plugin-import-lite](https://github.com/9romise/eslint-plugin-import-lite) | `0.5.2` | `0.6.0` |\n| [eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x) | `4.16.2` | `4.17.1` |\n| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `62.9.0` | `63.0.10` |\n| [eslint-plugin-regexp](https://github.com/ota-meshi/eslint-plugin-regexp) | `3.1.0` | `3.1.1` |\n| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | `63.0.0` | `65.0.1` |\n| [exsolve](https://github.com/unjs/exsolve) | `1.0.8` | `1.1.0` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.2` | `3.1.3` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [function.prototype.name](https://github.com/es-shims/Function.prototype.name) | `1.1.8` | `1.2.0` |\n| [fuse.js](https://github.com/krisk/Fuse) | `7.4.1` | `7.4.2` |\n| [httpxy](https://github.com/unjs/httpxy) | `0.5.3` | `0.5.4` |\n| [immutable](https://github.com/immutable-js/immutable-js) | `5.1.6` | `5.1.9` |\n| [import-in-the-middle](https://github.com/nodejs/import-in-the-middle) | `3.0.1` | `3.3.0` |\n| [music-metadata](https://github.com/Borewit/music-metadata) | `11.12.3` | `11.13.0` |\n| [nypm](https://github.com/unjs/nypm) | `0.6.6` | `0.6.8` |\n| [obug](https://github.com/sxzz/obug) | `2.1.2` | `2.1.3` |\n| [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [package-manager-detector](https://github.com/antfu-collective/package-manager-detector) | `1.6.0` | `1.7.0` |\n| [postcss-colormin](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-convert-values](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-discard-comments](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-discard-duplicates](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-discard-empty](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-discard-overridden](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-merge-longhand](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-merge-rules](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-minify-font-values](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-minify-gradients](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-minify-params](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-minify-selectors](https://github.com/cssnano/cssnano) | `8.0.1` | `8.0.2` |\n| [postcss-normalize-charset](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-display-values](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-positions](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-repeat-style](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-string](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-timing-functions](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-unicode](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-url](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-whitespace](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-ordered-values](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-reduce-initial](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-reduce-transforms](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-svgo](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-unique-selectors](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [qs](https://github.com/ljharb/qs) | `6.15.2` | `6.15.3` |\n| [regjsparser](https://github.com/jviereck/regjsparser) | `0.13.1` | `0.13.2` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.4` | `1.9.0` |\n| [side-channel](https://github.com/ljharb/side-channel) | `1.1.0` | `1.1.1` |\n| [srvx](https://github.com/h3js/srvx) | `0.11.16` | `0.11.20` |\n| [streamx](https://github.com/mafintosh/streamx) | `2.26.0` | `2.28.0` |\n| [string.prototype.trim](https://github.com/es-shims/String.prototype.trim) | `1.2.10` | `1.2.11` |\n| [string.prototype.trimend](https://github.com/es-shims/String.prototype.trimEnd) | `1.0.9` | `1.0.10` |\n| [stylehacks](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.16` | `7.5.19` |\n| [tinyclip](https://github.com/tinylibs/tinyclip) | `0.1.14` | `0.1.15` |\n| [unimport](https://github.com/unjs/unimport) | `5.7.0` | `6.3.0` |\n| [unplugin-utils](https://github.com/sxzz/unplugin-utils) | `0.3.1` | `0.3.2` |\n| [vite-plugin-checker](https://github.com/fi3ework/vite-plugin-checker) | `0.14.1` | `0.14.4` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.5` | `7.3.6` |\n| [vue-bundle-renderer](https://github.com/nuxt-contrib/vue-bundle-renderer) | `2.2.0` | `2.3.1` |\n| [which-typed-array](https://github.com/inspect-js/which-typed-array) | `1.1.21` | `1.1.22` |\n\nUpdates `@neteasecloudmusicapienhanced/api` from 4.34.3 to 4.36.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/releases\"\u003e@​neteasecloudmusicapienhanced/api's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eRelease v4.36.1\u003c/h1\u003e\n\u003ch2\u003e更新内容 / Changelog\u003c/h2\u003e\n\u003cp\u003e从 \u003ccode\u003ev4.35.2\u003c/code\u003e 到 \u003ccode\u003ev4.36.1\u003c/code\u003e 的提交记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: 请求异常 (83ee2cda34a20f64c6d343f7dfe22aa6a1c84b3d) (1454ee2)\u003c/li\u003e\n\u003cli\u003efeat: add NCBL encrypted scrobble interface and update related documentation (83ee2cd)\u003c/li\u003e\n\u003cli\u003efeat: 新增听歌打卡示例页面 (3c352b5)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e自动发布 via GitHub Actions\u003c/p\u003e\n\u003ch1\u003eRelease v4.35.2\u003c/h1\u003e\n\u003ch2\u003e更新内容 / Changelog\u003c/h2\u003e\n\u003cp\u003e从 \u003ccode\u003ev4.35.1\u003c/code\u003e 到 \u003ccode\u003ev4.35.2\u003c/code\u003e 的提交记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: 修复听歌打卡接口 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/167\"\u003e#167\u003c/a\u003e) (60ee927)\u003c/li\u003e\n\u003cli\u003efeat: 支持显示加密方式 (eb07a52)\u003c/li\u003e\n\u003cli\u003efeat(docs-format): 增加文档格式化工具 (6fc4231)\u003c/li\u003e\n\u003cli\u003erevert: some changes (fa69736)\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;feat: 增加文档格式化工具\u0026quot; (73a5e9d)\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;fix(deploy): 修复部分启动失败 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/196\"\u003e#196\u003c/a\u003e)\u0026quot; (dc6f56e)\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;refactor: 优化serverless入口文件\u0026quot; (2c9da85)\u003c/li\u003e\n\u003cli\u003erefactor: 优化serverless入口文件 (1db3544)\u003c/li\u003e\n\u003cli\u003efix(deploy): 修复部分启动失败 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/196\"\u003e#196\u003c/a\u003e) (395a80e)\u003c/li\u003e\n\u003cli\u003efeat: 增加文档格式化工具 (6550c7c)\u003c/li\u003e\n\u003cli\u003efeat: 增强配置生成逻辑，添加重试机制和日志记录 (c959866)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e自动发布 via GitHub Actions\u003c/p\u003e\n\u003ch1\u003eRelease v4.35.1\u003c/h1\u003e\n\u003ch2\u003e更新内容 / Changelog\u003c/h2\u003e\n\u003cp\u003e从 \u003ccode\u003ev4.35.0\u003c/code\u003e 到 \u003ccode\u003ev4.35.1\u003c/code\u003e 的提交记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: 修复游客登陆接口 (e3a1c04)\u003c/li\u003e\n\u003cli\u003ebuild(packages): bump \u003ccode\u003e@​types/node\u003c/code\u003e from 25.5.0 to 25.9.2 (0300c1b)\u003c/li\u003e\n\u003cli\u003echore(deps): bump docker/login-action from 3 to 4 (a9c33de)\u003c/li\u003e\n\u003cli\u003echore(deps): bump aormsby/Fork-Sync-With-Upstream-action (6175d55)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e自动发布 via GitHub Actions\u003c/p\u003e\n\u003ch1\u003eRelease v4.35.0\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/1454ee216ce9bb4133879bad333e4d2aed21c80b\"\u003e\u003ccode\u003e1454ee2\u003c/code\u003e\u003c/a\u003e fix: 请求异常 (83ee2cda34a20f64c6d343f7dfe22aa6a1c84b3d)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/83ee2cda34a20f64c6d343f7dfe22aa6a1c84b3d\"\u003e\u003ccode\u003e83ee2cd\u003c/code\u003e\u003c/a\u003e feat: add NCBL encrypted scrobble interface and update related documentation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/3c352b5752fc73e1322b692dbfafe06137317ff7\"\u003e\u003ccode\u003e3c352b5\u003c/code\u003e\u003c/a\u003e feat: 新增听歌打卡示例页面\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/60ee927e3224ab675679d023065225af11bdc693\"\u003e\u003ccode\u003e60ee927\u003c/code\u003e\u003c/a\u003e fix: 修复听歌打卡接口 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/167\"\u003e#167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/eb07a525eb72e2f369f27d03cbae8a96faf90c40\"\u003e\u003ccode\u003eeb07a52\u003c/code\u003e\u003c/a\u003e feat: 支持显示加密方式\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/6fc4231142e2a91913cdf54f27cc9722391e30c0\"\u003e\u003ccode\u003e6fc4231\u003c/code\u003e\u003c/a\u003e feat(docs-format): 增加文档格式化工具\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/fa69736300708fc753b1e3782841bedae8e4b190\"\u003e\u003ccode\u003efa69736\u003c/code\u003e\u003c/a\u003e revert: some changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/73a5e9d7886510613e16b1796058339800a647de\"\u003e\u003ccode\u003e73a5e9d\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat: 增加文档格式化工具\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/dc6f56e8a8e03308016ff540135b6f7061dea125\"\u003e\u003ccode\u003edc6f56e\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;fix(deploy): 修复部分启动失败 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/196\"\u003e#196\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/2c9da8507d960196c7b44d25056187d8c8528c86\"\u003e\u003ccode\u003e2c9da85\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;refactor: 优化serverless入口文件\u0026quot;\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/compare/v4.34.3...v4.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@sentry/node` from 10.56.0 to 10.63.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/getsentry/sentry-javascript/releases\"\u003e@​sentry/node's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e10.63.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(browser): Add \u003ccode\u003eurl.full\u003c/code\u003e attribute to resource spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21846\"\u003e#21846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eextendIntegration\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21759\"\u003e#21759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eisTracingSuppressed\u003c/code\u003e to the async context strategy (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21785\"\u003e#21785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Pass normalizedRequest to the sampling context for root spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21833\"\u003e#21833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Add lru-memoizer diagnostics-channel integration to experimentalUseDiagnosticsChannelInjection (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(browser): Defer sending session envelope until browser is idle (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21844\"\u003e#21844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Improve waiting for tracing channel bindings (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21815\"\u003e#21815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Serialize streamed span status message to \u003ccode\u003esentry.status.message\u003c/code\u003e attribute (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21811\"\u003e#21811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(nextjs): Don't inject trace meta tags when Cache Components is enabled (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21141\"\u003e#21141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(opentelemetry): Strip leading ? and # from inferred http.query and http.fragment (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21848\"\u003e#21848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(tanstackstart-react): Drop server transactions for tunnel route requests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21769\"\u003e#21769\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003echore: Add external contributor to CHANGELOG.md (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21832\"\u003e#21832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Hoist transitive imports for bundles (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21858\"\u003e#21858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Mark http.query/http.fragment stripping for v11 url.query migration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21852\"\u003e#21852\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: Use Cloudflare nodejs_compat flag (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21659\"\u003e#21659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Add lru-memoizer diagnostics-channel integration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Restore caller context for callback tracing channels (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21863\"\u003e#21863\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(core): Move \u003ccode\u003espanStreamingIntegration\u003c/code\u003e setup into \u003ccode\u003eServerRuntimeClient\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21814\"\u003e#21814\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Infer orchestrion integration names (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21834\"\u003e#21834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Move node-fetch instrumentation away from InstrumentBase (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21778\"\u003e#21778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline Prisma instrumentation (v6 and v7) (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21819\"\u003e#21819\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline vendored mysql instrumentation (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21568\"\u003e#21568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Ensure ts3.8 has diagnostics channel shim (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21845\"\u003e#21845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Move mysql orchestrion integration onto bindTracingChannelToSpan (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21865\"\u003e#21865\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Set error attributes on span and simplify error info extraction (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21822\"\u003e#21822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: Introduce .unordered in node-integration-tests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21697\"\u003e#21697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(cloudflare): Align CF types and compat flags (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21835\"\u003e#21835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(e2e/hono): Isolate request-data extraction tests onto a dedicated route (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21869\"\u003e#21869\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration): Harden knex mysql2 healthcheck to fix flaky test (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21868\"\u003e#21868\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Fix flaky postgresjs basic transaction/error ordering (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21870\"\u003e#21870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Retry transient docker compose up failures (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(nuxt): Test \u003ccode\u003emysql\u003c/code\u003e instrumentation with orchestrion bundler plugin (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21782\"\u003e#21782\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003eWork in this release was contributed by \u003ca href=\"https://github.com/suzunn\"\u003e\u003ccode\u003e@​suzunn\u003c/code\u003e\u003c/a\u003e. Thank you for your contribution!\u003c/p\u003e\n\u003ch2\u003eBundle size 📦\u003c/h2\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003ePath\u003c/th\u003e\n\u003cth\u003eSize\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@​sentry/browser\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e26.97 KB\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@​sentry/browser\u003c/code\u003e - with treeshaking flags\u003c/td\u003e\n\u003ctd\u003e25.44 KB\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md\"\u003e@​sentry/node's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e10.63.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(browser): Add \u003ccode\u003eurl.full\u003c/code\u003e attribute to resource spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21846\"\u003e#21846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eextendIntegration\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21759\"\u003e#21759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eisTracingSuppressed\u003c/code\u003e to the async context strategy (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21785\"\u003e#21785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Pass normalizedRequest to the sampling context for root spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21833\"\u003e#21833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Add lru-memoizer diagnostics-channel integration to experimentalUseDiagnosticsChannelInjection (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(browser): Defer sending session envelope until browser is idle (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21844\"\u003e#21844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Improve waiting for tracing channel bindings (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21815\"\u003e#21815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Serialize streamed span status message to \u003ccode\u003esentry.status.message\u003c/code\u003e attribute (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21811\"\u003e#21811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(nextjs): Don't inject trace meta tags when Cache Components is enabled (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21141\"\u003e#21141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(opentelemetry): Strip leading ? and # from inferred http.query and http.fragment (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21848\"\u003e#21848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(tanstackstart-react): Drop server transactions for tunnel route requests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21769\"\u003e#21769\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003echore: Add external contributor to CHANGELOG.md (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21832\"\u003e#21832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Hoist transitive imports for bundles (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21858\"\u003e#21858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Mark http.query/http.fragment stripping for v11 url.query migration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21852\"\u003e#21852\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: Use Cloudflare nodejs_compat flag (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21659\"\u003e#21659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Add lru-memoizer diagnostics-channel integration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Restore caller context for callback tracing channels (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21863\"\u003e#21863\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(core): Move \u003ccode\u003espanStreamingIntegration\u003c/code\u003e setup into \u003ccode\u003eServerRuntimeClient\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21814\"\u003e#21814\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Infer orchestrion integration names (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21834\"\u003e#21834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Move node-fetch instrumentation away from InstrumentBase (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21778\"\u003e#21778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline Prisma instrumentation (v6 and v7) (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21819\"\u003e#21819\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline vendored mysql instrumentation (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21568\"\u003e#21568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Ensure ts3.8 has diagnostics channel shim (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21845\"\u003e#21845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Move mysql orchestrion integration onto bindTracingChannelToSpan (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21865\"\u003e#21865\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Set error attributes on span and simplify error info extraction (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21822\"\u003e#21822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: Introduce .unordered in node-integration-tests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21697\"\u003e#21697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(cloudflare): Align CF types and compat flags (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21835\"\u003e#21835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(e2e/hono): Isolate request-data extraction tests onto a dedicated route (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21869\"\u003e#21869\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration): Harden knex mysql2 healthcheck to fix flaky test (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21868\"\u003e#21868\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Fix flaky postgresjs basic transaction/error ordering (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21870\"\u003e#21870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Retry transient docker compose up failures (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(nuxt): Test \u003ccode\u003emysql\u003c/code\u003e instrumentation with orchestrion bundler plugin (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21782\"\u003e#21782\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003eWork in this release was contributed by \u003ca href=\"https://github.com/suzunn\"\u003e\u003ccode\u003e@​suzunn\u003c/code\u003e\u003c/a\u003e. Thank you for your contribution!\u003c/p\u003e\n\u003ch2\u003e10.62.0\u003c/h2\u003e\n\u003ch3\u003eImportant Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efeat(server-runtimes): Add v7 support for \u003ccode\u003evercelAiIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21613\"\u003e#21613\u003c/a\u003e)\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/2362e9f4ff0c95566ab4a11e3b0296172e539bfd\"\u003e\u003ccode\u003e2362e9f\u003c/code\u003e\u003c/a\u003e release: 10.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/5b51d5e9e52f1d21bdfd92def461e92d505fbb8e\"\u003e\u003ccode\u003e5b51d5e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/21874\"\u003e#21874\u003c/a\u003e from getsentry/prepare-release/10.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/4e16503ad41814f2d2dc3d742a5e0a36caa1d237\"\u003e\u003ccode\u003e4e16503\u003c/code\u003e\u003c/a\u003e meta(changelog): Update changelog for 10.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/690f77853e425ce32fd47a4bd1ce0b8b3109d793\"\u003e\u003ccode\u003e690f778\u003c/code\u003e\u003c/a\u003e test(node-integration): Harden knex mysql2 healthcheck to fix flaky test (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/429cdafe8f43bcaec682a12465c202e9f012abde\"\u003e\u003ccode\u003e429cdaf\u003c/code\u003e\u003c/a\u003e test(node-integration-tests): Fix flaky postgresjs basic transaction/error or...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/35998e687165579ff3aed07a3bcf871dd05f0691\"\u003e\u003ccode\u003e35998e6\u003c/code\u003e\u003c/a\u003e test(e2e/hono): Isolate request-data extraction tests onto a dedicated route ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/88e7ad5444ece21f074e53768cb8633e00fa3a2b\"\u003e\u003ccode\u003e88e7ad5\u003c/code\u003e\u003c/a\u003e feat(server-utils): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/e3161515dd5324e664b97e69ddcb7fa8ef6cd838\"\u003e\u003ccode\u003ee316151\u003c/code\u003e\u003c/a\u003e ref(server-utils): Move mysql orchestrion integration onto bindTracingChannel...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/e7c24a57210b8ac99eef3514bce4097d9bae848c\"\u003e\u003ccode\u003ee7c24a5\u003c/code\u003e\u003c/a\u003e feat(server-utils): Restore caller context for callback tracing channels (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/bf21b16ffd8cecc6627ca7db35d8d65567d47273\"\u003e\u003ccode\u003ebf21b16\u003c/code\u003e\u003c/a\u003e fix(nextjs): Don't inject trace meta tags when Cache Components is enabled (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/getsentry/sentry-javascript/compare/10.56.0...10.63.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@sentry/vue` from 10.56.0 to 10.63.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/getsentry/sentry-javascript/releases\"\u003e@​sentry/vue's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e10.63.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(browser): Add \u003ccode\u003eurl.full\u003c/code\u003e attribute to resource spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21846\"\u003e#21846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eextendIntegration\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21759\"\u003e#21759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eisTracingSuppressed\u003c/code\u003e to the async context strategy (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21785\"\u003e#21785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Pass normalizedRequest to the sampling context for root spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21833\"\u003e#21833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Add lru-memoizer diagnostics-channel integration to experimentalUseDiagnosticsChannelInjection (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(browser): Defer sending session envelope until browser is idle (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21844\"\u003e#21844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Improve waiting for tracing channel bindings (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21815\"\u003e#21815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Serialize streamed span status message to \u003ccode\u003esentry.status.message\u003c/code\u003e attribute (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21811\"\u003e#21811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(nextjs): Don't inject trace meta tags when Cache Components is enabled (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21141\"\u003e#21141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(opentelemetry): Strip leading ? and # from inferred http.query and http.fragment (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21848\"\u003e#21848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(tanstackstart-react): Drop server transactions for tunnel route requests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21769\"\u003e#21769\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003echore: Add external contributor to CHANGELOG.md (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21832\"\u003e#21832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Hoist transitive imports for bundles (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21858\"\u003e#21858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Mark http.query/http.fragment stripping for v11 url.query migration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21852\"\u003e#21852\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: Use Cloudflare nodejs_compat flag (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21659\"\u003e#21659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Add lru-memoizer diagnostics-channel integration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Restore caller context for callback tracing channels (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21863\"\u003e#21863\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(core): Move \u003ccode\u003espanStreamingIntegration\u003c/code\u003e setup into \u003ccode\u003eServerRuntimeClient\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21814\"\u003e#21814\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Infer orchestrion integration names (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21834\"\u003e#21834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Move node-fetch instrumentation away from InstrumentBase (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21778\"\u003e#21778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline Prisma instrumentation (v6 and v7) (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21819\"\u003e#21819\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline vendored mysql instrumentation (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21568\"\u003e#21568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Ensure ts3.8 has diagnostics channel shim (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21845\"\u003e#21845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Move mysql orchestrion integration onto bindTracingChannelToSpan (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21865\"\u003e#21865\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Set error attributes on span and simplify error info extraction (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21822\"\u003e#21822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: Introduce .unordered in node-integration-tests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21697\"\u003e#21697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(cloudflare): Align CF types and compat flags (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21835\"\u003e#21835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(e2e/hono): Isolate request-data extraction tests onto a dedicated route (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21869\"\u003e#21869\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration): Harden knex mysql2 healthcheck to fix flaky test (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21868\"\u003e#21868\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Fix flaky postgresjs basic transaction/error ordering (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21870\"\u003e#21870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Retry transient docker compose up failures (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(nuxt): Test \u003ccode\u003emysql\u003c/code\u003e instrumentation with orchestrion bundler plugin (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21782\"\u003e#21782\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003eWork in this release was contributed by \u003ca href=\"https://github.com/suzunn\"\u003e\u003ccode\u003e@​suzunn\u003c/code\u003e\u003c/a\u003e. Thank you for your contribution!\u003c/p\u003e\n\u003ch2\u003eBundle size 📦\u003c/h2\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003ePath\u003c/th\u003e\n\u003cth\u003eSize\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@​sentry/browser\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e26.97 KB\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@​sentry/browser\u003c/code\u003e - with treeshaking flags\u003c/td\u003e\n\u003ctd\u003e25.44 KB\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md\"\u003e@​sentry/vue's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e10.63.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(browser): Add \u003ccode\u003eurl.full\u003c/code\u003e attribute to resource spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21846\"\u003e#21846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eextendIntegration\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21759\"\u003e#21759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eisTracingSuppressed\u003c/code\u003e to the async context strategy (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21785\"\u003e#21785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Pass normalizedRequest to the sampling context for root spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21833\"\u003e#21833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Add lru-memoizer diagnostics-channel integration to experimentalUseDiagnosticsChannelInjection (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(browser): Defer sending session envelope until browser is idle (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21844\"\u003e#21844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Improve waiting for tracing channel bindings (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21815\"\u003e#21815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Serialize streamed span status message to \u003ccode\u003esentry.status.message\u003c/code\u003e attribute (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21811\"\u003e#21811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(nextjs): Don't inject trace meta tags when Cache Components is enabled (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21141\"\u003e#21141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(opentelemetry): Strip leading ? and # from inferred http.query and http.fragment (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21848\"\u003e#21848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(tanstackstart-react): Drop server transactions for tunnel route requests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21769\"\u003e#21769\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003echore: Add external contributor to CHANGELOG.md (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21832\"\u003e#21832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Hoist transitive imports for bundles (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21858\"\u003e#21858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Mark http.query/http.fragment stripping for v11 url.query migration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21852\"\u003e#21852\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: Use Cloudflare nodejs_compat flag (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21659\"\u003e#21659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Add lru-memoizer diagnostics-channel integration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Restore caller context for callback tracing channels (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21863\"\u003e#21863\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(core): Move \u003ccode\u003espanStreamingIntegration\u003c/code\u003e setup into \u003ccode\u003eServerRuntimeClient\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21814\"\u003e#21814\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Infer orchestrion integration names (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21834\"\u003e#21834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Move node-fetch instrumentation away from InstrumentBase (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21778\"\u003e#21778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline Prisma instrumentation (v6 and v7) (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21819\"\u003e#21819\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline vendored mysql instrumentation (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21568\"\u003e#21568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Ensure ts3.8 has diagnostics channel shim (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21845\"\u003e#21845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Move mysql orchestrion integration onto bindTracingChannelToSpan (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21865\"\u003e#21865\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Set error attributes on span and simplify error info extraction (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21822\"\u003e#21822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: Introduce .unordered in node-integration-tests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21697\"\u003e#21697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(cloudflare): Align CF types and compat flags (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21835\"\u003e#21835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(e2e/hono): Isolate request-data extraction tests onto a dedicated route (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21869\"\u003e#21869\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration): Harden knex mysql2 healthcheck to fix flaky test (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21868\"\u003e#21868\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Fix flaky postgresjs basic transaction/error ordering (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21870\"\u003e#21870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Retry transient docker compose up failures (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(nuxt): Test \u003ccode\u003emysql\u003c/code\u003e instrumentation with orchestrion bundler plugin (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21782\"\u003e#21782\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003eWork in this release was contributed by \u003ca href=\"https://github.com/suzunn\"\u003e\u003ccode\u003e@​suzunn\u003c/code\u003e\u003c/a\u003e. Thank you for your contribution!\u003c/p\u003e\n\u003ch2\u003e10.62.0\u003c/h2\u003e\n\u003ch3\u003eImportant Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efeat(server-runtimes): Add v7 support for \u003ccode\u003evercelAiIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21613\"\u003e#21613\u003c/a\u003e)\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/2362e9f4ff0c95566ab4a11e3b0296172e539bfd\"\u003e\u003ccode\u003e2362e9f\u003c/code\u003e\u003c/a\u003e release: 10.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/5b51d5e9e52f1d21bdfd92def461e92d505fbb8e\"\u003e\u003ccode\u003e5b51d5e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/21874\"\u003e#21874\u003c/a\u003e from getsentry/prepare-release/10.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/4e16503ad41814f2d2dc3d742a5e0a36caa1d237\"\u003e\u003ccode\u003e4e16503\u003c/code\u003e\u003c/a\u003e meta(changelog): Update changelog for 10.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/690f77853e425ce32fd47a4bd1ce0b8b3109d793\"\u003e\u003ccode\u003e690f778\u003c/code\u003e\u003c/a\u003e test(node-integration): Harden knex mysql2 healthcheck to fix flaky test (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/429cdafe8f43bcaec682a12465c202e9f012abde\"\u003e\u003ccode\u003e429cdaf\u003c/code\u003e\u003c/a\u003e test(node-integration-tests): Fix flaky postgresjs basic transaction/error or...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/35998e687165579ff3aed07a3bcf871dd05f0691\"\u003e\u003ccode\u003e35998e6\u003c/code\u003e\u003c/a\u003e test(e2e/hono): Isolate request-data extraction tests onto a dedicated route ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/88e7ad5444ece21f074e53768cb8633e00fa3a2b\"\u003e\u003ccode\u003e88e7ad5\u003c/code\u003e\u003c/a\u003e feat(server-utils): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/e3161515dd5324e664b97e69ddcb7fa8ef6cd838\"\u003e\u003ccode\u003ee316151\u003c/code\u003e\u003c/a\u003e ref(server-utils): Move mysql orchestrion integration onto bindTracingChannel...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/e7c24a57210b8ac99eef3514bce4097d9bae848c\"\u003e\u003ccode\u003ee7c24a5\u003c/code\u003e\u003c/a\u003e feat(server-utils): Restore caller context for callback tracing channels (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/bf21b16ffd8cecc6627ca7db35d8d65567d47273\"\u003e\u003ccode\u003ebf21b16\u003c/code\u003e\u003c/a\u003e fix(nextjs): Don't inject trace meta tags when Cache Components is enabled (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/getsentry/sentry-javascript/compare/10.56.0...10.63.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@simplewebauthn/server` from 13.3.1 to 13.3.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/releases\"\u003e@​simplewebauthn/server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev13.3.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v4 Low (2.0) security vulnerability identified in \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e. See the security advisory linked below for more information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e allowing a maliciously-crafted attestation statement's \u003ccode\u003ex5c\u003c/code\u003e to contain a self-signed \u0026quot;root certificate\u0026quot; instead of chaining back to an RP-specified trust anchor (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-6hxq-p678-4hr2\"\u003eGHSA-6hxq-p678-4hr2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md\"\u003e@​simplewebauthn/server's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev13.3.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v4 Low (2.0) security vulnerability identified in\n\u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e. See the security advisory linked below for more information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e allowing a maliciously-crafted\nattestation statement's \u003ccode\u003ex5c\u003c/code\u003e to contain a self-signed \u0026quot;root certificate\u0026quot; instead of chaining back\nto an RP-specified trust anchor\n(\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-6hxq-p678-4hr2\"\u003eGHSA-6hxq-p678-4hr2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/84656fff764256609193b9e0a0661c82dd379ebb\"\u003e\u003ccode\u003e84656ff\u003c/code\u003e\u003c/a\u003e Update version to 13.3.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/dd0d73c716a528e6645efafbd43a972b64df71f9\"\u003e\u003ccode\u003edd0d73c\u003c/code\u003e\u003c/a\u003e Fail cert path validation closed instead\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/213e9ba052632c9915704edbab48d4667141c3f2\"\u003e\u003ccode\u003e213e9ba\u003c/code\u003e\u003c/a\u003e Add test for failure to chain to trust anchor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/989507a62d23960933b44018c1b090da0e73c803\"\u003e\u003ccode\u003e989507a\u003c/code\u003e\u003c/a\u003e Add tests for notAfter enforcement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/b55f4b957881ca6a0c93d05aebca6cdf6424fffb\"\u003e\u003ccode\u003eb55f4b9\u003c/code\u003e\u003c/a\u003e Move explanation into test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/7bed04ce33a8fc2e4b0c2f8c84d7c171f001905f\"\u003e\u003ccode\u003e7bed04c\u003c/code\u003e\u003c/a\u003e Update comments around cert chain validity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/6ee964484ad9bb9365c45c95b32e0065db45ed96\"\u003e\u003ccode\u003e6ee9644\u003c/code\u003e\u003c/a\u003e Add new tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/c23890af1a0e741b0451461eb713eb0d4607d096\"\u003e\u003ccode\u003ec23890a\u003c/code\u003e\u003c/a\u003e Update existing test to use helpers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/8d02ed4e546859aaf3d0816bfe35917efcef88a7\"\u003e\u003ccode\u003e8d02ed4\u003c/code\u003e\u003c/a\u003e Add X.509 cert helpers for tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/8a53d70f42bcbb7c744ef1b90e6db35bc4b26d06\"\u003e\u003ccode\u003e8a53d70\u003c/code\u003e\u003c/a\u003e Use X509ChainBuilder for chain validation\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.2/packages/server\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.17.0 to 1.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.18.1 — June 21, 2026\u003c/h2\u003e\n\u003cp\u003eThis release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10913\"\u003e#10913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10917\"\u003e#10917\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10930\"\u003e#10930\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10942\"\u003e#10942\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10993\"\u003e#10993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRuntime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10959\"\u003e#10959\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11021\"\u003e#11021\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAxiosURLSearchParams: Switched the encoder callback to an arrow function so \u003ccode\u003eencoder.call(this)\u003c/code\u003e receives the \u003ccode\u003eAxiosURLSearchParams\u003c/code\u003e instance correctly. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDocumentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11007\"\u003e#11007\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11010\"\u003e#11010\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11023\"\u003e#11023\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11025\"\u003e#11025\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eDependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11011\"\u003e#11011\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11012\"\u003e#11012\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11013\"\u003e#11013\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11014\"\u003e#11014\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11015\"\u003e#11015\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11016\"\u003e#11016\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11017\"\u003e#11017\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11026\"\u003e#11026\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webdevelopersrinu\"\u003e\u003ccode\u003e@​webdevelopersrinu\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10913\"\u003e#10913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sijie-Z\"\u003e\u003ccode\u003e@​sijie-Z\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10993\"\u003e#10993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bartlomieju\"\u003e\u003ccode\u003e@​bartlomieju\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11023\"\u003e#11023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JSap0914\"\u003e\u003ccode\u003e@​JSap0914\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.18.0...v1.18.1\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.0 — June 13, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eRedirect Header Safety:\u003c/strong\u003e Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10892\"\u003e#10892\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eURL And Request Hardening:\u003c/strong\u003e Rejects malformed \u003ccode\u003ehttp:\u003c/code\u003e and \u003ccode\u003ehttps:\u003c/code\u003e URLs that omit \u003ccode\u003e//\u003c/code\u003e with \u003ccode\u003eERR_INVALID_URL\u003c/code\u003e, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local \u003ccode\u003eNO_PROXY\u003c/code\u003e matching. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/11000\"\u003e#11000\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eStatus Validation:\u003c/strong\u003e Added \u003ccode\u003etransitional.validateStatusUndefinedResolves\u003c/code\u003e so applications can opt in to treating \u003ccode\u003evalidateStatus: undefined\u003c/code\u003e like the option was omitted, while \u003ccode\u003evalidateStatus: null\u003c/code\u003e remains the explicit way to accept every status. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10899\"\u003e#10899\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDocumentation:\u003c/strong\u003e Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the \u003ccode\u003eproxy\u003c/code\u003e request config as Node.js-only in the advanced docs. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10984\"\u003e#10984\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10988\"\u003e#10988\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10992\"\u003e#10992\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10995\"\u003e#10995\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003e@babel/core\u003c/code\u003e, \u003ccode\u003e@babel/preset-env\u003c/code\u003e, \u003ccode\u003e@commitlint/cli\u003c/code\u003e, \u003ccode\u003e@commitlint/config-conventional\u003c/code\u003e, \u003ccode\u003e@rollup/plugin-babel\u003c/code\u003e, \u003ccode\u003e@rollup/plugin-commonjs\u003c/code\u003e, \u003ccode\u003e@vitest/browser\u003c/code\u003e, \u003ccode\u003e@vitest/browser-playwright\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003elint-staged\u003c/code\u003e, \u003ccode\u003erollup\u003c/code\u003e, \u003ccode\u003evitest\u003c/code\u003e, and \u003ccode\u003eactions/checkout\u003c/code\u003e. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10989\"\u003e#10989\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10996\"\u003e#10996\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10997\"\u003e#10997\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eRelease Metadata:\u003c/strong\u003e Prepared the 1.18.0 release by updating package metadata and the runtime \u003ccode\u003eVERSION\u003c/code\u003e value. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/11003\"\u003e#11003\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csumma...\n\n_Description has been truncated_","html_url":"https://github.com/QQXIAOZHOU/voicehub2/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/QQXIAOZHOU%2Fvoicehub2/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"},{"uuid":"4806740855","node_id":"PR_kwDODgMeI87twAR6","number":46,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 30 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-03T22:55:36.000Z","updated_at":"2026-07-03T22:56:14.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":30,"packages":[{"name":"@babel/core","old_version":"7.11.1","new_version":"7.29.6","repository_url":"https://github.com/babel/babel"},{"name":"tar","old_version":"6.0.5","new_version":"7.5.16","repository_url":"https://github.com/isaacs/node-tar"},{"name":"webpack-dev-server","old_version":"3.11.0","new_version":"5.2.5","repository_url":"https://github.com/webpack/webpack-dev-server"},{"name":"json5","old_version":"1.0.1","new_version":"1.0.2","repository_url":"https://github.com/json5/json5"},{"name":"postcss","old_version":"7.0.13","new_version":"8.5.16","repository_url":"https://github.com/postcss/postcss"},{"name":"loader-utils","old_version":"1.2.3","new_version":"1.4.2","repository_url":"https://github.com/webpack/loader-utils"},{"name":"base-x","old_version":"3.0.5","new_version":"3.0.11","repository_url":"https://github.com/cryptocoinjs/base-x"},{"name":"bn.js","old_version":"4.11.9","new_version":"4.12.4","repository_url":"https://github.com/indutny/bn.js"},{"name":"qs","old_version":"6.5.2","new_version":"removed","repository_url":"https://github.com/ljharb/qs"},{"name":"braces","old_version":"3.0.2","new_version":"3.0.3","repository_url":"https://github.com/micromatch/braces"},{"name":"cipher-base","old_version":"1.0.4","new_version":"1.0.7","repository_url":"https://github.com/crypto-browserify/cipher-base"},{"name":"elliptic","old_version":"6.5.3","new_version":"removed","repository_url":"https://github.com/indutny/elliptic"},{"name":"flatted","old_version":"2.0.2","new_version":"3.4.2","repository_url":"https://github.com/WebReflection/flatted"},{"name":"lodash","old_version":"4.17.19","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"serialize-javascript","old_version":"4.0.0","new_version":"7.0.7","repository_url":"https://github.com/yahoo/serialize-javascript"},{"name":"sha.js","old_version":"2.4.11","new_version":"2.4.12","repository_url":"https://github.com/crypto-browserify/sha.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 16 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.11.1` | `7.29.6` |\n| [tar](https://github.com/isaacs/node-tar) | `6.0.5` | `7.5.16` |\n| [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `3.11.0` | `5.2.5` |\n| [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` |\n| [postcss](https://github.com/postcss/postcss) | `7.0.13` | `8.5.16` |\n| [loader-utils](https://github.com/webpack/loader-utils) | `1.2.3` | `1.4.2` |\n| [base-x](https://github.com/cryptocoinjs/base-x) | `3.0.5` | `3.0.11` |\n| [bn.js](https://github.com/indutny/bn.js) | `4.11.9` | `4.12.4` |\n| [qs](https://github.com/ljharb/qs) | `6.5.2` | `removed` |\n| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |\n| [cipher-base](https://github.com/crypto-browserify/cipher-base) | `1.0.4` | `1.0.7` |\n| [elliptic](https://github.com/indutny/elliptic) | `6.5.3` | `removed` |\n| [flatted](https://github.com/WebReflection/flatted) | `2.0.2` | `3.4.2` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.19` | `4.18.1` |\n| [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `4.0.0` | `7.0.7` |\n| [sha.js](https://github.com/crypto-browserify/sha.js) | `2.4.11` | `2.4.12` |\n\n\nUpdates `@babel/core` from 7.11.1 to 7.29.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17782\"\u003e#17782\u003c/a\u003e Improve trailing comma comment handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:memo: Documentation\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17847\"\u003e#17847\u003c/a\u003e Replace npmjs.com links with npmx.dev (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509\"\u003e\u003ccode\u003e04ea6b2\u003c/code\u003e\u003c/a\u003e v7.29.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb\"\u003e\u003ccode\u003e99f498a\u003c/code\u003e\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001\"\u003e#18001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc\"\u003e\u003ccode\u003efeba0a3\u003c/code\u003e\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998\"\u003e#17998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/aa8394e454337d118ac3d40bfa3ee1a3cb3f3ed2\"\u003e\u003ccode\u003eaa8394e\u003c/code\u003e\u003c/a\u003e v7.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/ad0d03f0c92404a60ec6b1c12f15febd38e2397a\"\u003e\u003ccode\u003ead0d03f\u003c/code\u003e\u003c/a\u003e [7.x backport] feat: Allow specifying startLine in code frame (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17739\"\u003e#17739\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17\"\u003e\u003ccode\u003ed7f4008\u003c/code\u003e\u003c/a\u003e v7.28.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/e130225028e93e106135586f344cfa44c4aac847\"\u003e\u003ccode\u003ee130225\u003c/code\u003e\u003c/a\u003e Polish(standalone): improve message on invalid preset/plugin (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17606\"\u003e#17606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99dcba5e71de3bd81ce14077cfa5b6df58e9b177\"\u003e\u003ccode\u003e99dcba5\u003c/code\u003e\u003c/a\u003e chore: enable some ts-eslint rules (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17592\"\u003e#17592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/c92c4919771105140015167f25f7bacac77c90d9\"\u003e\u003ccode\u003ec92c491\u003c/code\u003e\u003c/a\u003e Improve Unicode handling in code-frame tokenizer (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17589\"\u003e#17589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/d725e399fd6a4da463cff4918cf71aa03b8beb14\"\u003e\u003ccode\u003ed725e39\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eBABEL_7_TO_8_DANGEROUSLY_DISABLE_VERSION_CHECK\u003c/code\u003e (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17569\"\u003e#17569\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.6/packages/babel-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​babel/core\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 6.0.5 to 7.5.16\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/releases\"\u003etar's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.13\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/npm/node-tar/compare/v6.1.12...v6.1.13\"\u003e6.1.13\u003c/a\u003e (2022-12-07)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/npm/node-tar/commit/cc4e0ddfe523a0bce383846a67442c637a65d486\"\u003e\u003ccode\u003ecc4e0dd\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/npm/node-tar/pull/343\"\u003e#343\u003c/a\u003e bump minipass from 3.3.6 to 4.0.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.12\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/npm/node-tar/compare/v6.1.11...v6.1.12\"\u003e6.1.12\u003c/a\u003e (2022-10-31)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/npm/node-tar/commit/57493ee66ece50d62114e02914282fc37be3a91a\"\u003e\u003ccode\u003e57493ee\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/npm/node-tar/pull/332\"\u003e#332\u003c/a\u003e ensuring close event is emited after stream has ended (\u003ca href=\"https://github.com/webark\"\u003e\u003ccode\u003e@​webark\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/npm/node-tar/commit/b003c64f624332e24e19b30dc011069bb6708680\"\u003e\u003ccode\u003eb003c64\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/npm/node-tar/pull/314\"\u003e#314\u003c/a\u003e replace deprecated String.prototype.substr() (\u003ca href=\"https://redirect.github.com/isaacs/node-tar/issues/314\"\u003e#314\u003c/a\u003e) (\u003ca href=\"https://github.com/CommanderRoot\"\u003e\u003ccode\u003e@​CommanderRoot\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukekarrys\"\u003e\u003ccode\u003e@​lukekarrys\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/npm/node-tar/commit/f12992932f171ea248b27fad95e7d489a56d31ed\"\u003e\u003ccode\u003ef129929\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/npm/node-tar/pull/313\"\u003e#313\u003c/a\u003e remove dead link to benchmarks (\u003ca href=\"https://redirect.github.com/isaacs/node-tar/issues/313\"\u003e#313\u003c/a\u003e) (\u003ca href=\"https://github.com/yetzt\"\u003e\u003ccode\u003e@​yetzt\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/npm/node-tar/commit/c1faa9f44001dfb0bc7638b2850eb6058bd56a4a\"\u003e\u003ccode\u003ec1faa9f\u003c/code\u003e\u003c/a\u003e add examples/explanation of using tar.t (\u003ca href=\"https://github.com/isaacs\"\u003e\u003ccode\u003e@​isaacs\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/302f51ff3f8eefeccc06be4caf7d0de9b7c321d7\"\u003e\u003ccode\u003e302f51f\u003c/code\u003e\u003c/a\u003e fix inconsequential typo in PENDINGLINKS symbol name\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/55dbb99b27640bb12b2ac059b26883c23523b3e3\"\u003e\u003ccode\u003e55dbb99\u003c/code\u003e\u003c/a\u003e remove some uses of mutate-fs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/87cc309f13c21d598b0b833235d387a252455058\"\u003e\u003ccode\u003e87cc309\u003c/code\u003e\u003c/a\u003e 7.5.15\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7aef486f0d21c10fd7790b16b1b28f04648cf334\"\u003e\u003ccode\u003e7aef486\u003c/code\u003e\u003c/a\u003e fix: regression in pending links detection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/6244eb33846bbd407443f5d0e339bd8c91663cd6\"\u003e\u003ccode\u003e6244eb3\u003c/code\u003e\u003c/a\u003e 7.5.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9704d8c6f639573775133cbbd541aba83cb46c9c\"\u003e\u003ccode\u003e9704d8c\u003c/code\u003e\u003c/a\u003e stricter protection against hardlinks preempting their targets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/700734f9aeb113bcc5f1400d81b8be7d499e54a2\"\u003e\u003ccode\u003e700734f\u003c/code\u003e\u003c/a\u003e update workflows and deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v6.0.5...v7.5.16\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~isaacs\"\u003eisaacs\u003c/a\u003e, a new releaser for tar since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `webpack-dev-server` from 3.11.0 to 5.2.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/webpack/webpack-dev-server/releases\"\u003ewebpack-dev-server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSkip the HMR WebSocket path when forwarding upgrade requests to user-defined proxies, so custom proxy WebSocket upgrades are no longer intercepted by the dev server. (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5680\"\u003e#5680\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.2.4\u003c/h2\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.3...v5.2.4\"\u003e5.2.4\u003c/a\u003e (2026-05-11)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eset Cross-Origin-Resource-Policy header to prevent source code theft over HTTP\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.2.3\u003c/h2\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.2...v5.2.3\"\u003e5.2.3\u003c/a\u003e (2026-01-12)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ecause\u003c/code\u003e for \u003ccode\u003eerrorObject\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5518\"\u003e#5518\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/37b033da2c48335178495a1987c469a26ef3de60\"\u003e37b033d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecompatibility with event target and universal target and lazy compilation  (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/574026c44b9c51f0bbd2f5a2836c54607289a071\"\u003e574026c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoverlay:\u003c/strong\u003e add ESC key to dismiss overlay (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5598\"\u003e#5598\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/f91baa8831e061e2998849966b8002b40b83fb07\"\u003ef91baa8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eprogress indicator styles (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5557\"\u003e#5557\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/41a53a1accdb0a90785d82cbe8a079794eeed3c8\"\u003e41a53a1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupgrade selfsigned to v5\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.2.2\u003c/h2\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.1...v5.2.2\"\u003e5.2.2\u003c/a\u003e (2025-06-03)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u0026quot;Overlay enabled\u0026quot; false positive (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/18e72ee3e57a6e7598a6c068c0ff7c7bb6a857f1\"\u003e18e72ee\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edo not crush when error is null for runtime errors (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5447\"\u003e#5447\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/309991f947baa0354140b9930a9654ac792e20c4\"\u003e309991f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove unnecessary header \u003ccode\u003eX_TEST\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5451\"\u003e#5451\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/64a6124bf1b4d158bb42a4341dd03121ae3759fa\"\u003e64a6124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erespect the \u003ccode\u003eallowedHosts\u003c/code\u003e option for cross-origin header check (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5510\"\u003e#5510\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/03d12141bf7be09dfb14e91e5c834ee63bd9a9a2\"\u003e03d1214\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.2.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.0...v6.0.0\"\u003e5.2.1\u003c/a\u003e (2025-03-26)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecross-origin requests are not allowed unless allowed by \u003ccode\u003eAccess-Control-Allow-Origin\u003c/code\u003e header\u003c/li\u003e\n\u003cli\u003erequests with an IP addresses in the \u003ccode\u003eOrigin\u003c/code\u003e header are not allowed to connect to WebSocket server unless configured by \u003ccode\u003eallowedHosts\u003c/code\u003e or it different from the \u003ccode\u003eHost\u003c/code\u003e header\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe above changes may make the dev server not work if you relied on such behavior, but unfortunately they carry security risks, so they were considered as fixes.\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eprevent overlay for errors caught by React error boundaries (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5431\"\u003e#5431\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be\"\u003e8c1abc9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etake the first network found instead of the last one, this restores the same behavior as 5.0.4 (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5411\"\u003e#5411\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96\"\u003effd0b86\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md\"\u003ewebpack-dev-server's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.2.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSkip the HMR WebSocket path when forwarding upgrade requests to user-defined proxies, so custom proxy WebSocket upgrades are no longer intercepted by the dev server. (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5680\"\u003e#5680\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAll notable changes to this project will be documented in this file. See \u003ca href=\"https://github.com/conventional-changelog/standard-version\"\u003estandard-version\u003c/a\u003e for commit guidelines.\u003c/p\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.3...v5.2.4\"\u003e5.2.4\u003c/a\u003e (2026-05-11)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eset Cross-Origin-Resource-Policy header to prevent source code theft over HTTP\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.2...v5.2.3\"\u003e5.2.3\u003c/a\u003e (2026-01-12)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ecause\u003c/code\u003e for \u003ccode\u003eerrorObject\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5518\"\u003e#5518\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/37b033da2c48335178495a1987c469a26ef3de60\"\u003e37b033d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecompatibility with event target and universal target and lazy compilation (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/574026c44b9c51f0bbd2f5a2836c54607289a071\"\u003e574026c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoverlay:\u003c/strong\u003e add ESC key to dismiss overlay (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5598\"\u003e#5598\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/f91baa8831e061e2998849966b8002b40b83fb07\"\u003ef91baa8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eprogress indicator styles (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5557\"\u003e#5557\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/41a53a1accdb0a90785d82cbe8a079794eeed3c8\"\u003e41a53a1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupgrade selfsigned to v5\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.1...v5.2.2\"\u003e5.2.2\u003c/a\u003e (2025-06-03)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u0026quot;Overlay enabled\u0026quot; false positive (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/18e72ee3e57a6e7598a6c068c0ff7c7bb6a857f1\"\u003e18e72ee\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edo not crush when error is null for runtime errors (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5447\"\u003e#5447\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/309991f947baa0354140b9930a9654ac792e20c4\"\u003e309991f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove unnecessary header \u003ccode\u003eX_TEST\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5451\"\u003e#5451\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/64a6124bf1b4d158bb42a4341dd03121ae3759fa\"\u003e64a6124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erespect the \u003ccode\u003eallowedHosts\u003c/code\u003e option for cross-origin header check (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5510\"\u003e#5510\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/03d12141bf7be09dfb14e91e5c834ee63bd9a9a2\"\u003e03d1214\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.0...v6.0.0\"\u003e5.2.1\u003c/a\u003e (2025-03-26)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecross-origin requests are not allowed unless allowed by \u003ccode\u003eAccess-Control-Allow-Origin\u003c/code\u003e header\u003c/li\u003e\n\u003cli\u003erequests with an IP addresses in the \u003ccode\u003eOrigin\u003c/code\u003e header are not allowed to connect to WebSocket server unless configured by \u003ccode\u003eallowedHosts\u003c/code\u003e or it different from the \u003ccode\u003eHost\u003c/code\u003e header\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe above changes may make the dev server not work if you relied on such behavior, but unfortunately they carry security risks, so they were considered as fixes.\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eprevent overlay for errors caught by React error boundaries (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5431\"\u003e#5431\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be\"\u003e8c1abc9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etake the first network found instead of the last one, this restores the same behavior as 5.0.4 (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5411\"\u003e#5411\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96\"\u003effd0b86\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.1.0...v5.2.0\"\u003e5.2.0\u003c/a\u003e (2024-12-11)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/c3ee325819f64ceb77f85dcf727b6b5ede85cbc4\"\u003e\u003ccode\u003ec3ee325\u003c/code\u003e\u003c/a\u003e chore(release): new release (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5682\"\u003e#5682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/60173be90873b187b41fc2009a4de253732988a1\"\u003e\u003ccode\u003e60173be\u003c/code\u003e\u003c/a\u003e feat: add changeset validation and release workflow (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5680\"\u003e#5680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/948d5e6089bebcd801dac2cbe3ed4f80b64f117a\"\u003e\u003ccode\u003e948d5e6\u003c/code\u003e\u003c/a\u003e fix(proxy): match the HMR upgrade path exactly like the ws server (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5678\"\u003e#5678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/93e8996124332a6c94c4d3e0f8e5f2cf95321c67\"\u003e\u003ccode\u003e93e8996\u003c/code\u003e\u003c/a\u003e fix: skip HMR websocket path when forwarding upgrades to user-defined proxies...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/fd401308f1cc026262880e2dab810004d6444282\"\u003e\u003ccode\u003efd40130\u003c/code\u003e\u003c/a\u003e chore(release): 5.2.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/ece4f3617bea31fb6d3833f69a32b6c289959a49\"\u003e\u003ccode\u003eece4f36\u003c/code\u003e\u003c/a\u003e chore: update deps (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5661\"\u003e#5661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/a2161442a314a06a97e25d1404d08410cb4e9c51\"\u003e\u003ccode\u003ea216144\u003c/code\u003e\u003c/a\u003e ci: fix test (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5658\"\u003e#5658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/df073c53a8cefb54210b43813fa6ee60364a554e\"\u003e\u003ccode\u003edf073c5\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/b550a702bd4246d1724513b70de0bfbe6604672f\"\u003e\u003ccode\u003eb550a70\u003c/code\u003e\u003c/a\u003e chore(release): 5.2.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/9704dc52e3f696ae1446428c25882745e9b65cbb\"\u003e\u003ccode\u003e9704dc5\u003c/code\u003e\u003c/a\u003e chore: upgrade selfsigned to v5 and remove node-forge dependency (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5618\"\u003e#5618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v3.11.0...v5.2.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for webpack-dev-server since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `json5` from 1.0.1 to 1.0.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/json5/json5/releases\"\u003ejson5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Properties with the name \u003ccode\u003e__proto__\u003c/code\u003e are added to objects and arrays. (\u003ca href=\"https://redirect.github.com/json5/json5/issues/199\"\u003e#199\u003c/a\u003e) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (\u003ca href=\"https://redirect.github.com/json5/json5/issues/295\"\u003e#295\u003c/a\u003e). This has been backported to v1. (\u003ca href=\"https://redirect.github.com/json5/json5/issues/298\"\u003e#298\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/json5/json5/blob/main/CHANGELOG.md\"\u003ejson5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003eUnreleased [\u003ca href=\"https://github.com/json5/json5/tree/main\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.2.3...HEAD\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003ch3\u003ev2.2.3 [\u003ca href=\"https://github.com/json5/json5/tree/v2.2.3\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.2.2...v2.2.3\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: json5@2.2.3 is now the 'latest' release according to npm instead of\nv1.0.2. (\u003ca href=\"https://redirect.github.com/json5/json5/issues/299\"\u003e#299\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev2.2.2 [\u003ca href=\"https://github.com/json5/json5/tree/v2.2.2\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.2.1...v2.2.2\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Properties with the name \u003ccode\u003e__proto__\u003c/code\u003e are added to objects and arrays.\n(\u003ca href=\"https://redirect.github.com/json5/json5/issues/199\"\u003e#199\u003c/a\u003e) This also fixes a prototype pollution vulnerability reported by\nJonathan Gregson! (\u003ca href=\"https://redirect.github.com/json5/json5/issues/295\"\u003e#295\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev2.2.1 [\u003ca href=\"https://github.com/json5/json5/tree/v2.2.1\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.2.0...v2.2.1\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Removed dependence on minimist to patch CVE-2021-44906. (\u003ca href=\"https://redirect.github.com/json5/json5/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev2.2.0 [\u003ca href=\"https://github.com/json5/json5/tree/v2.2.0\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.1.3...v2.2.0\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNew: Accurate and documented TypeScript declarations are now included. There\nis no need to install \u003ccode\u003e@types/json5\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/json5/json5/issues/236\"\u003e#236\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/json5/json5/issues/244\"\u003e#244\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev2.1.3 [\u003ca href=\"https://github.com/json5/json5/tree/v2.1.3\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.1.2...v2.1.3\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: An out of memory bug when parsing numbers has been fixed. (\u003ca href=\"https://redirect.github.com/json5/json5/issues/228\"\u003e#228\u003c/a\u003e,\n\u003ca href=\"https://redirect.github.com/json5/json5/issues/229\"\u003e#229\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev2.1.2 [\u003ca href=\"https://github.com/json5/json5/tree/v2.1.2\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.1.1...v2.1.2\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/json5/json5/commit/a62db1e51e1031d92ac260f5bb38bbed1fdbc754\"\u003e\u003ccode\u003ea62db1e\u003c/code\u003e\u003c/a\u003e 1.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/json5/json5/commit/e0c23fe458a77c0b2cdb271376be5d8d0908133c\"\u003e\u003ccode\u003ee0c23fe\u003c/code\u003e\u003c/a\u003e docs: update CHANGELOG for v1.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/json5/json5/commit/62a65408408d40aeea14c7869ed327acead12972\"\u003e\u003ccode\u003e62a6540\u003c/code\u003e\u003c/a\u003e fix: add \u003cstrong\u003eproto\u003c/strong\u003e to objects and arrays\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/json5/json5/compare/v1.0.1...v1.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@babel/traverse` from 7.11.0 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/traverse's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/aa8394e454337d118ac3d40bfa3ee1a3cb3f3ed2\"\u003e\u003ccode\u003eaa8394e\u003c/code\u003e\u003c/a\u003e v7.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/84366a8ea453814e732784db74cf2e2b6635eb6f\"\u003e\u003ccode\u003e84366a8\u003c/code\u003e\u003c/a\u003e fix(traverse): provide a hub when traversing a File or Program and no parentP...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/229eb452c5d5d2be0dc138ec2956aff7ff1057d7\"\u003e\u003ccode\u003e229eb45\u003c/code\u003e\u003c/a\u003e [7.x backport] fix: Rename switch discriminant references when body creates s...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17\"\u003e\u003ccode\u003ed7f4008\u003c/code\u003e\u003c/a\u003e v7.28.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/905bc22b2fff23673eabe467815c67b29bf8bba2\"\u003e\u003ccode\u003e905bc22\u003c/code\u003e\u003c/a\u003e fix: lint errors in main branch (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17612\"\u003e#17612\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/a03e2b63ae530674e866b60350b7eb4a5fcb5f59\"\u003e\u003ccode\u003ea03e2b6\u003c/code\u003e\u003c/a\u003e fix: \u003ccode\u003epath.evaluate\u003c/code\u003e correctly returns \u003ccode\u003econfident\u003c/code\u003e (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17584\"\u003e#17584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/aac2c37e11ad58905f7f9606103074e80bacbbcd\"\u003e\u003ccode\u003eaac2c37\u003c/code\u003e\u003c/a\u003e chore: Use Gulpfile.mts (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17579\"\u003e#17579\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/65c4a6b3ee0e1d32801529e841572bb22534e1f3\"\u003e\u003ccode\u003e65c4a6b\u003c/code\u003e\u003c/a\u003e [Babel 8] fix: Improve \u003ccode\u003etraverse\u003c/code\u003e types (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17574\"\u003e#17574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99dcba5e71de3bd81ce14077cfa5b6df58e9b177\"\u003e\u003ccode\u003e99dcba5\u003c/code\u003e\u003c/a\u003e chore: enable some ts-eslint rules (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17592\"\u003e#17592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-traverse\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​babel/traverse\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `postcss` from 7.0.13 to 8.5.16\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/releases\"\u003epostcss's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e position (by \u003ca href=\"https://github.com/mizdra\"\u003e\u003ccode\u003e@​mizdra\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eraws\u003c/code\u003e after rehydrating a JSON AST (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed putting parent-less node in \u003ccode\u003enodes\u003c/code\u003e of new node (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed computing \u003ccode\u003eoffset\u003c/code\u003e in \u003ccode\u003epositionBy()\u003c/code\u003e (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003erangeBy()\u003c/code\u003e on \u003ccode\u003eindex: 0\u003c/code\u003e (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed declaration parsing performance (by \u003ca href=\"https://github.com/homanp\"\u003e\u003ccode\u003e@​homanp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom syntax regression (by \u003ca href=\"https://github.com/43081j\"\u003e\u003ccode\u003e@​43081j\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epostcss-scss\u003c/code\u003e commend regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed reading any file via user-generated CSS.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003eopts.unsafeMap\u003c/code\u003e to disable checks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed nested brackets parsing performance (by \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up source map encoding paring in case of the error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eProcessor#version\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved source map annotation cleaning performance (by CodeAnt AI).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eContainerWithChildren\u003c/code\u003e type discriminating (by \u003ca href=\"https://github.com/Goodwine\"\u003e\u003ccode\u003e@​Goodwine\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epackage.json\u003c/code\u003e→\u003ccode\u003eexports\u003c/code\u003e compatibility with some tools (by \u003ca href=\"https://github.com/JounQin\"\u003e\u003ccode\u003e@​JounQin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel compatibility issue (by \u003ca href=\"https://github.com/git-sumitchaudhary\"\u003e\u003ccode\u003e@​git-sumitchaudhary\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded more details to \u003ccode\u003eUnknown word\u003c/code\u003e error (by \u003ca href=\"https://github.com/hiepxanh\"\u003e\u003ccode\u003e@​hiepxanh\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/romainmenke\"\u003e\u003ccode\u003e@​romainmenke\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/catnipan\"\u003e\u003ccode\u003e@​catnipan\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/blob/main/CHANGELOG.md\"\u003epostcss's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e position (by \u003ca href=\"https://github.com/mizdra\"\u003e\u003ccode\u003e@​mizdra\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eraws\u003c/code\u003e after rehydrating a JSON AST (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed putting parent-less node in \u003ccode\u003enodes\u003c/code\u003e of new node (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed computing \u003ccode\u003eoffset\u003c/code\u003e in \u003ccode\u003epositionBy()\u003c/code\u003e (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003erangeBy()\u003c/code\u003e on \u003ccode\u003eindex: 0\u003c/code\u003e (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed declaration parsing performance (by \u003ca href=\"https://github.com/homanp\"\u003e\u003ccode\u003e@​homanp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom syntax regression (by \u003ca href=\"https://github.com/43081j\"\u003e\u003ccode\u003e@​43081j\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epostcss-scss\u003c/code\u003e commend regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed reading any file via user-generated CSS.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003eopts.unsafeMap\u003c/code\u003e to disable checks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed nested brackets parsing performance (by \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up source map encoding paring in case of the error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eProcessor#version\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved source map annotation cleaning performance (by CodeAnt AI).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eContainerWithChildren\u003c/code\u003e type discriminating (by \u003ca href=\"https://github.com/Goodwine\"\u003e\u003ccode\u003e@​Goodwine\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.5\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/92ccc93ff15bd193491d67fad9763e62d489dfad\"\u003e\u003ccode\u003e92ccc93\u003c/code\u003e\u003c/a\u003e Release 8.5.16 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/818bdd6043359af773ccc3ca8663053d61a707c8\"\u003e\u003ccode\u003e818bdd6\u003c/code\u003e\u003c/a\u003e Update formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/46e451068ee6160b837865b715cf6972f28fabd5\"\u003e\u003ccode\u003e46e4510\u003c/code\u003e\u003c/a\u003e Fix \u003ccode\u003eInput#origin()\u003c/code\u003e returning incorrect position (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2036\"\u003e#2036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/34942ce76c0b0c9ee65b1421017ac71855e722c4\"\u003e\u003ccode\u003e34942ce\u003c/code\u003e\u003c/a\u003e Fix tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/d4feed645314ee421edf80ee9ebe453cc75c997f\"\u003e\u003ccode\u003ed4feed6\u003c/code\u003e\u003c/a\u003e Don't clone root-less child nodes in container constructor (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2097\"\u003e#2097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/da323fc8d327a38199a21987dcbf7e27e3bc34f3\"\u003e\u003ccode\u003eda323fc\u003c/code\u003e\u003c/a\u003e Revert version update to fix old Node.js on CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/886336919497516df8f140d0fb327bd125e35053\"\u003e\u003ccode\u003e8863369\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/3828982213fec6bc13d0791b1adf40393be0935e\"\u003e\u003ccode\u003e3828982\u003c/code\u003e\u003c/a\u003e Preserve node raws when rehydrating a JSON AST (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2100\"\u003e#2100\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/d1e80b830386b08dcd5b962fd466d1c51f28e82d\"\u003e\u003ccode\u003ed1e80b8\u003c/code\u003e\u003c/a\u003e Fix Node#rangeBy() ignoring index 0 (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2091\"\u003e#2091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/b91e4a63907325d98b75d11fda546bdd91acc608\"\u003e\u003ccode\u003eb91e4a6\u003c/code\u003e\u003c/a\u003e Fix Node.js 26 tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/postcss/postcss/compare/7.0.13...8.5.16\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for postcss since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `loader-utils` from 1.2.3 to 1.4.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/webpack/loader-utils/releases\"\u003eloader-utils's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.2\u003c/h2\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.4.1...v1.4.2\"\u003e1.4.2\u003c/a\u003e (2022-11-11)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReDoS problem (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/226\"\u003e#226\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa\"\u003e17cbf8f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.4.1\u003c/h2\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.4.0...v1.4.1\"\u003e1.4.1\u003c/a\u003e (2022-11-07)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esecurity problem (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/220\"\u003e#220\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/4504e34c4796a5836ef70458327351675aed48a5\"\u003e4504e34\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.4.0\u003c/h2\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.3.0...v1.4.0\"\u003e1.4.0\u003c/a\u003e (2020-02-19)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ethe \u003ccode\u003eresourceQuery\u003c/code\u003e is passed to the \u003ccode\u003einterpolateName\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/163\"\u003e#163\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/cd0e428\"\u003ecd0e428\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.0\u003c/h2\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.2.3...v1.3.0\"\u003e1.3.0\u003c/a\u003e (2020-02-19)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport the \u003ccode\u003e[query]\u003c/code\u003e template for the \u003ccode\u003einterpolatedName\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/162\"\u003e#162\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/469eeba\"\u003e469eeba\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md\"\u003eloader-utils's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.4.1...v1.4.2\"\u003e1.4.2\u003c/a\u003e (2022-11-11)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReDoS problem (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/226\"\u003e#226\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa\"\u003e17cbf8f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.4.0...v1.4.1\"\u003e1.4.1\u003c/a\u003e (2022-11-07)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esecurity problem (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/220\"\u003e#220\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/4504e34c4796a5836ef70458327351675aed48a5\"\u003e4504e34\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.3.0...v1.4.0\"\u003e1.4.0\u003c/a\u003e (2020-02-19)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ethe \u003ccode\u003eresourceQuery\u003c/code\u003e is passed to the \u003ccode\u003einterpolateName\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/163\"\u003e#163\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/cd0e428\"\u003ecd0e428\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.2.3...v1.3.0\"\u003e1.3.0\u003c/a\u003e (2020-02-19)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport the \u003ccode\u003e[query]\u003c/code\u003e template for the \u003ccode\u003einterpolatedName\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/162\"\u003e#162\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/469eeba\"\u003e469eeba\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/331ad5067d9a1a7b8d646692e6959639969210d1\"\u003e\u003ccode\u003e331ad50\u003c/code\u003e\u003c/a\u003e chore(release): 1.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa\"\u003e\u003ccode\u003e17cbf8f\u003c/code\u003e\u003c/a\u003e fix: ReDoS problem (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/226\"\u003e#226\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/8f082b39f6903929f30fe29dab34f4d9c7ef070a\"\u003e\u003ccode\u003e8f082b3\u003c/code\u003e\u003c/a\u003e chore(release): 1.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/4504e34c4796a5836ef70458327351675aed48a5\"\u003e\u003ccode\u003e4504e34\u003c/code\u003e\u003c/a\u003e fix: security problem (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/220\"\u003e#220\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/d95b8b53f0ad547133b47ac8226f735c479f76de\"\u003e\u003ccode\u003ed95b8b5\u003c/code\u003e\u003c/a\u003e chore(release): 1.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/cd0e4284a0aa090f8776c4eb1045d4b1080e7161\"\u003e\u003ccode\u003ecd0e428\u003c/code\u003e\u003c/a\u003e feat: the \u003ccode\u003eresourceQuery\u003c/code\u003e is passed to the \u003ccode\u003einterpolateName\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/163\"\u003e#163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/06d36cf3a619cab20b08608204cb7ea9bddaceab\"\u003e\u003ccode\u003e06d36cf\u003c/code\u003e\u003c/a\u003e chore(release): 1.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/469eeba9095b879a3a988cde23d2035e454da9c2\"\u003e\u003ccode\u003e469eeba\u003c/code\u003e\u003c/a\u003e feat: support the \u003ccode\u003e[query]\u003c/code\u003e template for the \u003ccode\u003einterpolatedName\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/162\"\u003e#162\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/909c99d3f85da40478b9f02338d4113332819cfd\"\u003e\u003ccode\u003e909c99d\u003c/code\u003e\u003c/a\u003e chore: funding.yml config and CI fix (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/159\"\u003e#159\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/b5b74f010cace25ca70a652ebef078f6b1cfaddb\"\u003e\u003ccode\u003eb5b74f0\u003c/code\u003e\u003c/a\u003e Set up CI with Azure Pipelines\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.2.3...v1.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `base-x` from 3.0.5 to 3.0.11\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/043a888a9bae09bc4b40500e37792e2c6398e9f2\"\u003e\u003ccode\u003e043a888\u003c/code\u003e\u003c/a\u003e 3.0.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/2705dddd2565b455641985974b534291d8defb31\"\u003e\u003ccode\u003e2705ddd\u003c/code\u003e\u003c/a\u003e [backport 3.x] Prohibit char codes that would overflow the \u003ccode\u003eBASE_MAP\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/3d43c0e16bfbc045a0a8bb6423e6e336df81b512\"\u003e\u003ccode\u003e3d43c0e\u003c/code\u003e\u003c/a\u003e 3.0.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/0a3544695fa6800649a8b78ed46cece61bcdbbe5\"\u003e\u003ccode\u003e0a35446\u003c/code\u003e\u003c/a\u003e Improve decoding performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/4c10d3313a5838ce122ca3022823f1b4b153b843\"\u003e\u003ccode\u003e4c10d33\u003c/code\u003e\u003c/a\u003e 3.0.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/c9dcddd5d68c5cb5fb87d3baa4382c596d574602\"\u003e\u003ccode\u003ec9dcddd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cryptocoinjs/base-x/issues/78\"\u003e#78\u003c/a\u003e from cryptocoinjs/fix/space-alphabets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/6c54632a1bebd60fb79203c65badeec2b4360af3\"\u003e\u003ccode\u003e6c54632\u003c/code\u003e\u003c/a\u003e Fix alphabets with space in them\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/69c09ed8b5cd0ea9853b4420337a5be0540becb5\"\u003e\u003ccode\u003e69c09ed\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cryptocoinjs/base-x/issues/73\"\u003e#73\u003c/a\u003e from terrierscript/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/1dd37959d559049397b7744ef3c4f1afd047aba9\"\u003e\u003ccode\u003e1dd3795\u003c/code\u003e\u003c/a\u003e Update README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/806ef3f473cb6c9a84559811f411b99cbcf93deb\"\u003e\u003ccode\u003e806ef3f\u003c/code\u003e\u003c/a\u003e 3.0.8\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cryptocoinjs/base-x/compare/v3.0.5...v3.0.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepublish\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bn.js` from 4.11.9 to 4.12.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/12f9f8f2577c1befb864b25a612377f9ed17588c\"\u003e\u003ccode\u003e12f9f8f\u003c/code\u003e\u003c/a\u003e 4.12.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/6b98684d6958e10605d9566b5704384b9fbb06b6\"\u003e\u003ccode\u003e6b98684\u003c/code\u003e\u003c/a\u003e fix: clear surplus words in inotn so notn(width) stays below 2 ** width (\u003ca href=\"https://redirect.github.com/indutny/bn.js/issues/319\"\u003e#319\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/39fe4389c773327ed15f29f77f8b7dbbff4beb4c\"\u003e\u003ccode\u003e39fe438\u003c/code\u003e\u003c/a\u003e 4.12.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/67ecb35dabaf252001b649c12d69c4b57deac6f6\"\u003e\u003ccode\u003e67ecb35\u003c/code\u003e\u003c/a\u003e backport(4.x): fix imaskn state (\u003ca href=\"https://redirect.github.com/indutny/bn.js/issues/317\"\u003e#317\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/c4098bac2470418f8e0f6bf11fe0cb676a2b9047\"\u003e\u003ccode\u003ec4098ba\u003c/code\u003e\u003c/a\u003e 4.12.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/6277fd705e51edae1c404c65f03ba2e512706945\"\u003e\u003ccode\u003e6277fd7\u003c/code\u003e\u003c/a\u003e backport(4.x): Fix imuln/muln with zero (backport of \u003ca href=\"https://redirect.github.com/indutny/bn.js/issues/313\"\u003e#313\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/indutny/bn.js/issues/314\"\u003e#314\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/ac0d4afaae91701815b9edc19789e44e7690d688\"\u003e\u003ccode\u003eac0d4af\u003c/code\u003e\u003c/a\u003e 4.12.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/a5f14b43ec61bc7cafc6de2e7444913b9f581b00\"\u003e\u003ccode\u003ea5f14b4\u003c/code\u003e\u003c/a\u003e Fix serious issue in \u003ccode\u003e.toString(16)\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/indutny/bn.js/issues/309\"\u003e#309\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/0cd2661b9d08512263c940662586042ef8aaccc6\"\u003e\u003ccode\u003e0cd2661\u003c/code\u003e\u003c/a\u003e Remove package-lock.json added by npm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/84ae31344a557abb78ddabe3bac923b7503e4fb5\"\u003e\u003ccode\u003e84ae313\u003c/code\u003e\u003c/a\u003e 4.12.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/indutny/bn.js/compare/v4.11.9...v4.12.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.19.0 to 1.20.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct off-by-one error in parameterCount by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(qs): bump qs to 6.15.1 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/722\"\u003eexpressjs/body-parser#722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.5 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/721\"\u003eexpressjs/body-parser#721\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSpecial thanks to triager \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e for keeping this on our radar and effectively triaging the specific issue!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove redundant depth check by \u003ca href=\"https://github.com/blakeembrey\"\u003e\u003ccode\u003e@​blakeembrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/538\"\u003eexpressjs/body-parser#538\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add support for Node.js v23 by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/553\"\u003eexpressjs/body-parser#553\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: restore CI for 1.x branch by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/665\"\u003eexpressjs/body-parser#665\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@^6.14.0 by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/664\"\u003eexpressjs/body-parser#664\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation and update certain dependencies by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/668\"\u003eexpressjs/body-parser#668\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove SECURITY.md by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/669\"\u003eexpressjs/body-parser#669\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add CodeQL (SAST) by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/670\"\u003eexpressjs/body-parser#670\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.4 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/672\"\u003eexpressjs/body-parser#672\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.3...1.20.4\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.3...1.20.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eImportant\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.13.0\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003edepth\u003c/code\u003e option to customize the depth level in the parser\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eIMPORTANT:\u003c/strong\u003e The default \u003ccode\u003edepth\u003c/code\u003e level for parsing URL-encoded data is now \u003ccode\u003e32\u003c/code\u003e (previously was \u003ccode\u003eInfinity\u003c/code\u003e). \u003ca href=\"https://github.com/expressjs/body-parser/blob/17529513673e39ba79886a7ce3363320cf1c0c50/README.md#depth\"\u003eDocumentation\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: add support for OSSF scorecard reporting by \u003ca href=\"https://github.com/inigomarquinez\"\u003e\u003ccode\u003e@​inigomarquinez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/522\"\u003eexpressjs/body-parser#522\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: fix errors in ci github action for node 8 and 9 by \u003ca href=\"https://github.com/inigomarquinez\"\u003e\u003ccode\u003e@​inigomarquinez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/523\"\u003eexpressjs/body-parser#523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: pin to node@22.4.1 by \u003ca href=\"https://github.com/wesleytodd\"\u003e\u003ccode\u003e@​wesleytodd\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/527\"\u003eexpressjs/body-parser#527\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@6.12.3 by \u003ca href=\"https://github.com/melikhov-dev\"\u003e\u003ccode\u003e@​melikhov-dev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/521\"\u003eexpressjs/body-parser#521\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd OSSF Scorecard badge by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/531\"\u003eexpressjs/body-parser#531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLinter by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/534\"\u003eexpressjs/body-parser#534\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.3 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/535\"\u003eexpressjs/body-parser#535\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/1.20.5/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.5 / 2026-04-24\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4 / 2025-12-01\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.3 / 2024-09-10\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.13.0\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003edepth\u003c/code\u003e option to customize the depth level in the parser\u003c/li\u003e\n\u003cli\u003eIMPORTANT: The default \u003ccode\u003edepth\u003c/code\u003e level for parsing URL-encoded data is now \u003ccode\u003e32\u003c/code\u003e (previously was \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.2 / 2023-02-21\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix strict json error message on Node.js 19+\u003c/li\u003e\n\u003cli\u003edeps: content-type@~1.0.5\n\u003cul\u003e\n\u003cli\u003eperf: skip value escaping when unnecessary\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: raw-body@2.5.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.1 / 2022-10-06\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.11.0\u003c/li\u003e\n\u003cli\u003eperf: remove unnecessary object clone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.0 / 2022-04-02\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix error message for json parse whitespace in \u003ccode\u003estrict\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eFix internal error when inflated body exceeds limit\u003c/li\u003e\n\u003cli\u003ePrevent loss of async hooks context\u003c/li\u003e\n\u003cli\u003ePrevent hanging when request already read\u003c/li\u003e\n\u003cli\u003edeps: depd@2.0.0\n\u003cul\u003e\n\u003cli\u003eReplace internal \u003ccode\u003eeval\u003c/code\u003e usage with \u003ccode\u003eFunction\u003c/code\u003e constructor\u003c/li\u003e\n\u003cli\u003eUse instance methods on \u003ccode\u003eprocess\u003c/code\u003e to check for listeners\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: http-errors@2.0.0\n\u003cul\u003e\n\u003cli\u003edeps: depd@2.0.0\u003c/li\u003e\n\u003cli\u003edeps: statuses@2.0.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: on-finished@2.4.1\u003c/li\u003e\n\u003cli\u003edeps: qs@6.10.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575\"\u003e\u003ccode\u003e0defdbe\u003c/code\u003e\u003c/a\u003e release(patch): 1.20.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f\"\u003e\u003ccode\u003ecd0e7a0\u003c/code\u003e\u003c/a\u003e deps(qs): bump qs to 6.15.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51\"\u003e\u003ccode\u003e6f24d7e\u003c/code\u003e\u003c/a\u003e fix: correct off-by-one error in parameterCount (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/b849bd533d8b4abf5576a3e301f28d9befa05ddd\"\u003e\u003ccode\u003eb849bd5\u003c/code\u003e\u003c/a\u003e deps: qs@~6.14.1 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/690\"\u003e#690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/2c55e2f712f320a8e8d0f9fcb1d06526d0e401c9\"\u003e\u003ccode\u003e2c55e2f\u003c/code\u003e\u003c/a\u003e refactor(json): simplify strict mode error string construction (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/692\"\u003e#692\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/7db202cac84a001e6566c2dc6516b44db98beff3\"\u003e\u003ccode\u003e7db202c\u003c/code\u003e\u003c/a\u003e 1.20.4 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/672\"\u003e#672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/d8f8adb898676dfdf997b4455e5f9b689b53e989\"\u003e\u003ccode\u003ed8f8adb\u003c/code\u003e\u003c/a\u003e ci: add CodeQL (SAST) (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6d133c19b3e7c0bb8301959ca1dba283d23d23c3\"\u003e\u003ccode\u003e6d133c1\u003c/code\u003e\u003c/a\u003e chore: remove SECURITY.md (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/669\"\u003e#669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/fcd15355041ada6f37288dd13858d50429016b66\"\u003e\u003ccode\u003efcd1535\u003c/code\u003e\u003c/a\u003e deps: use tilde notation and update certain dependencies (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/668\"\u003e#668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/ec5fa290d25d85e0049757e240249072331eaee6\"\u003e\u003ccode\u003eec5fa29\u003c/code\u003e\u003c/a\u003e deps: qs@~6.14.0 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/664\"\u003e#664\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.19.0...1.20.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to ...\n\n_Description has been truncated_","html_url":"https://github.com/mrheyday/bitcoin-forge/pull/46","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mrheyday%2Fbitcoin-forge/issues/46","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/46/packages"},{"uuid":"4806615281","node_id":"PR_kwDOQteXZs7tvmZd","number":3,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 18 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-03T22:21:54.000Z","updated_at":"2026-07-03T22:22:42.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":18,"packages":[{"name":"astro","old_version":"5.13.7","new_version":"7.0.6","repository_url":"https://github.com/withastro/astro"},{"name":"dompurify","old_version":"3.2.7","new_version":"3.4.11","repository_url":"https://github.com/cure53/DOMPurify"},{"name":"fast-xml-parser","old_version":"5.2.5","new_version":"5.9.3","repository_url":"https://github.com/NaturalIntelligence/fast-xml-parser"},{"name":"mermaid","old_version":"11.12.0","new_version":"11.15.0","repository_url":"https://github.com/mermaid-js/mermaid"},{"name":"vitest","old_version":"2.1.6","new_version":"4.1.9","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"axios","old_version":"1.9.0","new_version":"1.18.1","repository_url":"https://github.com/axios/axios"},{"name":"fast-uri","old_version":"3.0.5","new_version":"3.1.3","repository_url":"https://github.com/fastify/fast-uri"},{"name":"flatted","old_version":"3.3.2","new_version":"3.4.2","repository_url":"https://github.com/WebReflection/flatted"},{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"tar","old_version":"6.2.1","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"},{"name":"tmp","old_version":"0.0.33","new_version":"0.2.7","repository_url":"https://github.com/raszi/node-tmp"},{"name":"uuid","old_version":"11.1.0","new_version":"14.0.1","repository_url":"https://github.com/uuidjs/uuid"},{"name":"vite","old_version":"6.3.6","new_version":"8.1.3","repository_url":"https://github.com/vitejs/vite"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 13 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `5.13.7` | `7.0.6` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.2.7` | `3.4.11` |\n| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.2.5` | `5.9.3` |\n| [mermaid](https://github.com/mermaid-js/mermaid) | `11.12.0` | `11.15.0` |\n| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `2.1.6` | `4.1.9` |\n| [axios](https://github.com/axios/axios) | `1.9.0` | `1.18.1` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.0.5` | `3.1.3` |\n| [flatted](https://github.com/WebReflection/flatted) | `3.3.2` | `3.4.2` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.19` |\n| [tmp](https://github.com/raszi/node-tmp) | `0.0.33` | `0.2.7` |\n| [uuid](https://github.com/uuidjs/uuid) | `11.1.0` | `14.0.1` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.3.6` | `8.1.3` |\n\n\nUpdates `astro` from 5.13.7 to 7.0.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/withastro/astro/releases\"\u003eastro's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eastro@7.0.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17261\"\u003e#17261\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/79aa99c648b4b40b95a31d4a961b77074cf7963c\"\u003e\u003ccode\u003e79aa99c\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes a false deprecation warning for \u003ccode\u003emarkdown.gfm\u003c/code\u003e and \u003ccode\u003emarkdown.smartypants\u003c/code\u003e when using the Container API\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17247\"\u003e#17247\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/f94280d61496de38f97a818975bd38529569f3e8\"\u003e\u003ccode\u003ef94280d\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/chatman-media\"\u003e\u003ccode\u003e@​chatman-media\u003c/code\u003e\u003c/a\u003e! - Fixes route generation throwing \u0026quot;Missing parameter\u0026quot; (or silently dropping the segment) when a dynamic param's value is \u003ccode\u003e0\u003c/code\u003e. The generator used truthy checks instead of checking for \u003ccode\u003eundefined\u003c/code\u003e, so \u003ccode\u003epaginate(posts, { params: { categoryId: 0 } })\u003c/code\u003e would crash even though \u003ccode\u003e0\u003c/code\u003e is a perfectly valid param value.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17278\"\u003e#17278\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/6f11739f2c7b28b108c2d8d0a2012f0711775a8c\"\u003e\u003ccode\u003e6f11739\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes missing CSS for virtual style modules (e.g., responsive image layout styles) in dev mode when JavaScript is disabled\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17250\"\u003e#17250\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/0b30b35f864310bee8485c952d1877e82e2b9b1a\"\u003e\u003ccode\u003e0b30b35\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes the \u003ccode\u003esecurity.checkOrigin\u003c/code\u003e check so it is applied consistently to Astro Actions and on-demand endpoints, regardless of how the request pipeline is composed. Previously, the origin check could be skipped in the composable \u003ccode\u003eastro/hono\u003c/code\u003e pipeline depending on the order of the \u003ccode\u003emiddleware()\u003c/code\u003e primitive (or when it was omitted).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17274\"\u003e#17274\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/8c3579b2707703037bd439992a9a4e5efceeda3b\"\u003e\u003ccode\u003e8c3579b\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes missing \u003ccode\u003erender()\u003c/code\u003e type overload for live collection entries. Previously, calling \u003ccode\u003erender()\u003c/code\u003e on a \u003ccode\u003eLiveDataEntry\u003c/code\u003e produced a TypeScript error when using only \u003ccode\u003elive.config.ts\u003c/code\u003e without a \u003ccode\u003econtent.config.ts\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17257\"\u003e#17257\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/4208297b37d1781bfe54254c0b981eb146e08691\"\u003e\u003ccode\u003e4208297\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes \u003ccode\u003eastro check\u003c/code\u003e failing to find \u003ccode\u003e@astrojs/check\u003c/code\u003e and \u003ccode\u003etypescript\u003c/code\u003e when astro is installed in a directory outside the project tree (e.g. pnpm virtual store)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17272\"\u003e#17272\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/b428648a3ce0efe7367933096949d1d18bea0168\"\u003e\u003ccode\u003eb428648\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes island component paths so that extensionless imports (e.g. \u003ccode\u003eimport { Counter } from '../components/Counter'\u003c/code\u003e) resolve to the real file on disk, matching Vite's extension order and directory \u003ccode\u003eindex\u003c/code\u003e resolution. This makes the \u003ccode\u003einclude\u003c/code\u003e/\u003ccode\u003eexclude\u003c/code\u003e options of JSX renderer integrations (React, Preact, Solid) match components imported without a file extension, and removes the spurious React 19 \u0026quot;Invalid hook call\u0026quot; warning logged on every request in dev when \u003ccode\u003einclude\u003c/code\u003e was set alongside another JSX renderer\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17279\"\u003e#17279\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/2aeaa44a23e42426619e680c37bea5b79fb9bc9d\"\u003e\u003ccode\u003e2aeaa44\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes a bug where \u003ccode\u003e\u0026lt;Picture inferSize\u0026gt;\u003c/code\u003e with a remote image could fail with \u003ccode\u003eFailedToFetchRemoteImageDimensions\u003c/code\u003e when the image server rate-limits requests (e.g. HTTP 429). Remote dimensions are now resolved once per render instead of once per output format.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17251\"\u003e#17251\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/5240e26c9dd91f9bc7140dcfacdb48d5a132830d\"\u003e\u003ccode\u003e5240e26\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Hardens the handling of attribute rendering when using with custom elements.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17248\"\u003e#17248\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/429bd6287a24770461321696f87edf34758b90fd\"\u003e\u003ccode\u003e429bd62\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes a crash when using Astro's \u003ccode\u003egetViteConfig\u003c/code\u003e with Vitest browser mode (e.g., Storybook vitest runner). Astro now skips dev server setup inside Vitest, preventing errors.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17260\"\u003e#17260\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/14524c03f3d7ea84224d4e708488f30902a9f275\"\u003e\u003ccode\u003e14524c0\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes a regression where a \u003ccode\u003e\u0026lt;script\u0026gt;\u003c/code\u003e inside a component rendered through \u003ccode\u003eAstro.slots.render()\u003c/code\u003e was hoisted out of its original position instead of staying next to its component content\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/withastro/astro/commit/eb6f97e391ee587747e37609c255c7cd4b9cce3c\"\u003e\u003ccode\u003eeb6f97e\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​astrojs/internal-helpers\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.10.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​astrojs/markdown-remark\u003c/code\u003e\u003ca href=\"https://github.com/7\"\u003e\u003ccode\u003e@​7\u003c/code\u003e\u003c/a\u003e.2.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​astrojs/markdown-satteri\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.3.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eastro@7.0.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17242\"\u003e#17242\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/9c05ba474cee5e3ef5142d88e7e08d53acfbe431\"\u003e\u003ccode\u003e9c05ba4\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes an error that could occur after the dev server restarts when using an adapter such as \u003ccode\u003e@astrojs/cloudflare\u003c/code\u003e, where a request would fail with a \u003ccode\u003e500\u003c/code\u003e referencing a missing pre-bundled dependency:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eThe file does not exist at \u0026quot;node_modules/.vite/deps_ssr/astro_compiler-runtime.js?v=6419660d\u0026quot; which is in the optimize deps directory. The dependency might be incompatible with the dep optimizer. Try adding it to `optimizeDeps.exclude`.\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17202\"\u003e#17202\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/c6d254dab889f9b15ec79eab84d8dbf7f7cd0007\"\u003e\u003ccode\u003ec6d254d\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Refactors path alias resolution to use Vite's native \u003ccode\u003etsconfigPaths\u003c/code\u003e option\u003c/p\u003e\n\u003cp\u003eThis is an internal change with no expected impact on user projects. Astro now defers tsconfig and jsconfig \u003ccode\u003epaths\u003c/code\u003e alias resolution to Vite, keeping a small fallback for a few CSS cases Vite does not yet handle.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17123\"\u003e#17123\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/72e29bd7f9d6c9f86febf5c9b97417bc90de5bb1\"\u003e\u003ccode\u003e72e29bd\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/martrapp\"\u003e\u003ccode\u003e@​martrapp\u003c/code\u003e\u003c/a\u003e! - Fixes an issue where the ClientRouter wipes head elements after page transitions if the \u003ccode\u003e\u0026lt;head\u0026gt;\u003c/code\u003e contains a \u003ccode\u003eserver:defer\u003c/code\u003e component.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17232\"\u003e#17232\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/257505ebfd8be87e6b11fd369340245edd0c937a\"\u003e\u003ccode\u003e257505e\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes a bug where \u003ccode\u003e\u0026lt;style\u0026gt;\u003c/code\u003e tags from components such as a content collection's \u003ccode\u003eContent\u003c/code\u003e could be silently dropped from the output when an \u003ccode\u003eawait\u003c/code\u003e appeared before the component in an \u003ccode\u003e.astro\u003c/code\u003e file's markup.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17193\"\u003e#17193\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/a7352fda1218bf48d8483a9893c6f7ed9bdf2060\"\u003e\u003ccode\u003ea7352fd\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/jan-kubica\"\u003e\u003ccode\u003e@​jan-kubica\u003c/code\u003e\u003c/a\u003e! - Fixes the background dev server failing to start when \u003ccode\u003eastro\u003c/code\u003e is hoisted outside the project's \u003ccode\u003enode_modules\u003c/code\u003e (for example bun workspaces). The background process is now spawned from Astro's own resolved location instead of a path assumed under the project root.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17255\"\u003e#17255\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/581d17113cb192e8b34aa3ad9965fe733e3ca210\"\u003e\u003ccode\u003e581d171\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes prefetch not working for links inside \u003ccode\u003eserver:defer\u003c/code\u003e components\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eastro@7.0.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md\"\u003eastro's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e7.0.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17261\"\u003e#17261\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/79aa99c648b4b40b95a31d4a961b77074cf7963c\"\u003e\u003ccode\u003e79aa99c\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes a false deprecation warning for \u003ccode\u003emarkdown.gfm\u003c/code\u003e and \u003ccode\u003emarkdown.smartypants\u003c/code\u003e when using the Container API\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17247\"\u003e#17247\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/f94280d61496de38f97a818975bd38529569f3e8\"\u003e\u003ccode\u003ef94280d\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/chatman-media\"\u003e\u003ccode\u003e@​chatman-media\u003c/code\u003e\u003c/a\u003e! - Fixes route generation throwing \u0026quot;Missing parameter\u0026quot; (or silently dropping the segment) when a dynamic param's value is \u003ccode\u003e0\u003c/code\u003e. The generator used truthy checks instead of checking for \u003ccode\u003eundefined\u003c/code\u003e, so \u003ccode\u003epaginate(posts, { params: { categoryId: 0 } })\u003c/code\u003e would crash even though \u003ccode\u003e0\u003c/code\u003e is a perfectly valid param value.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17278\"\u003e#17278\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/6f11739f2c7b28b108c2d8d0a2012f0711775a8c\"\u003e\u003ccode\u003e6f11739\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes missing CSS for virtual style modules (e.g., responsive image layout styles) in dev mode when JavaScript is disabled\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17250\"\u003e#17250\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/0b30b35f864310bee8485c952d1877e82e2b9b1a\"\u003e\u003ccode\u003e0b30b35\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes the \u003ccode\u003esecurity.checkOrigin\u003c/code\u003e check so it is applied consistently to Astro Actions and on-demand endpoints, regardless of how the request pipeline is composed. Previously, the origin check could be skipped in the composable \u003ccode\u003eastro/hono\u003c/code\u003e pipeline depending on the order of the \u003ccode\u003emiddleware()\u003c/code\u003e primitive (or when it was omitted).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17274\"\u003e#17274\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/8c3579b2707703037bd439992a9a4e5efceeda3b\"\u003e\u003ccode\u003e8c3579b\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes missing \u003ccode\u003erender()\u003c/code\u003e type overload for live collection entries. Previously, calling \u003ccode\u003erender()\u003c/code\u003e on a \u003ccode\u003eLiveDataEntry\u003c/code\u003e produced a TypeScript error when using only \u003ccode\u003elive.config.ts\u003c/code\u003e without a \u003ccode\u003econtent.config.ts\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17257\"\u003e#17257\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/4208297b37d1781bfe54254c0b981eb146e08691\"\u003e\u003ccode\u003e4208297\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes \u003ccode\u003eastro check\u003c/code\u003e failing to find \u003ccode\u003e@astrojs/check\u003c/code\u003e and \u003ccode\u003etypescript\u003c/code\u003e when astro is installed in a directory outside the project tree (e.g. pnpm virtual store)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17272\"\u003e#17272\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/b428648a3ce0efe7367933096949d1d18bea0168\"\u003e\u003ccode\u003eb428648\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes island component paths so that extensionless imports (e.g. \u003ccode\u003eimport { Counter } from '../components/Counter'\u003c/code\u003e) resolve to the real file on disk, matching Vite's extension order and directory \u003ccode\u003eindex\u003c/code\u003e resolution. This makes the \u003ccode\u003einclude\u003c/code\u003e/\u003ccode\u003eexclude\u003c/code\u003e options of JSX renderer integrations (React, Preact, Solid) match components imported without a file extension, and removes the spurious React 19 \u0026quot;Invalid hook call\u0026quot; warning logged on every request in dev when \u003ccode\u003einclude\u003c/code\u003e was set alongside another JSX renderer\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17279\"\u003e#17279\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/2aeaa44a23e42426619e680c37bea5b79fb9bc9d\"\u003e\u003ccode\u003e2aeaa44\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes a bug where \u003ccode\u003e\u0026lt;Picture inferSize\u0026gt;\u003c/code\u003e with a remote image could fail with \u003ccode\u003eFailedToFetchRemoteImageDimensions\u003c/code\u003e when the image server rate-limits requests (e.g. HTTP 429). Remote dimensions are now resolved once per render instead of once per output format.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17251\"\u003e#17251\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/5240e26c9dd91f9bc7140dcfacdb48d5a132830d\"\u003e\u003ccode\u003e5240e26\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Hardens the handling of attribute rendering when using with custom elements.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17248\"\u003e#17248\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/429bd6287a24770461321696f87edf34758b90fd\"\u003e\u003ccode\u003e429bd62\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes a crash when using Astro's \u003ccode\u003egetViteConfig\u003c/code\u003e with Vitest browser mode (e.g., Storybook vitest runner). Astro now skips dev server setup inside Vitest, preventing errors.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17260\"\u003e#17260\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/14524c03f3d7ea84224d4e708488f30902a9f275\"\u003e\u003ccode\u003e14524c0\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes a regression where a \u003ccode\u003e\u0026lt;script\u0026gt;\u003c/code\u003e inside a component rendered through \u003ccode\u003eAstro.slots.render()\u003c/code\u003e was hoisted out of its original position instead of staying next to its component content\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/withastro/astro/commit/eb6f97e391ee587747e37609c255c7cd4b9cce3c\"\u003e\u003ccode\u003eeb6f97e\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​astrojs/internal-helpers\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.10.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​astrojs/markdown-remark\u003c/code\u003e\u003ca href=\"https://github.com/7\"\u003e\u003ccode\u003e@​7\u003c/code\u003e\u003c/a\u003e.2.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​astrojs/markdown-satteri\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.3.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17242\"\u003e#17242\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/9c05ba474cee5e3ef5142d88e7e08d53acfbe431\"\u003e\u003ccode\u003e9c05ba4\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes an error that could occur after the dev server restarts when using an adapter such as \u003ccode\u003e@astrojs/cloudflare\u003c/code\u003e, where a request would fail with a \u003ccode\u003e500\u003c/code\u003e referencing a missing pre-bundled dependency:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eThe file does not exist at \u0026quot;node_modules/.vite/deps_ssr/astro_compiler-runtime.js?v=6419660d\u0026quot; which is in the optimize deps directory. The dependency might be incompatible with the dep optimizer. Try adding it to `optimizeDeps.exclude`.\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17202\"\u003e#17202\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/c6d254dab889f9b15ec79eab84d8dbf7f7cd0007\"\u003e\u003ccode\u003ec6d254d\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Refactors path alias resolution to use Vite's native \u003ccode\u003etsconfigPaths\u003c/code\u003e option\u003c/p\u003e\n\u003cp\u003eThis is an internal change with no expected impact on user projects. Astro now defers tsconfig and jsconfig \u003ccode\u003epaths\u003c/code\u003e alias resolution to Vite, keeping a small fallback for a few CSS cases Vite does not yet handle.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17123\"\u003e#17123\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/72e29bd7f9d6c9f86febf5c9b97417bc90de5bb1\"\u003e\u003ccode\u003e72e29bd\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/martrapp\"\u003e\u003ccode\u003e@​martrapp\u003c/code\u003e\u003c/a\u003e! - Fixes an issue where the ClientRouter wipes head elements after page transitions if the \u003ccode\u003e\u0026lt;head\u0026gt;\u003c/code\u003e contains a \u003ccode\u003eserver:defer\u003c/code\u003e component.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17232\"\u003e#17232\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/257505ebfd8be87e6b11fd369340245edd0c937a\"\u003e\u003ccode\u003e257505e\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes a bug where \u003ccode\u003e\u0026lt;style\u0026gt;\u003c/code\u003e tags from components such as a content collection's \u003ccode\u003eContent\u003c/code\u003e could be silently dropped from the output when an \u003ccode\u003eawait\u003c/code\u003e appeared before the component in an \u003ccode\u003e.astro\u003c/code\u003e file's markup.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17193\"\u003e#17193\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/a7352fda1218bf48d8483a9893c6f7ed9bdf2060\"\u003e\u003ccode\u003ea7352fd\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/jan-kubica\"\u003e\u003ccode\u003e@​jan-kubica\u003c/code\u003e\u003c/a\u003e! - Fixes the background dev server failing to start when \u003ccode\u003eastro\u003c/code\u003e is hoisted outside the project's \u003ccode\u003enode_modules\u003c/code\u003e (for example bun workspaces). The background process is now spawned from Astro's own resolved location instead of a path assumed under the project root.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/a86160ee79e4600bf77f89eb2dc84782acdeab6f\"\u003e\u003ccode\u003ea86160e\u003c/code\u003e\u003c/a\u003e [ci] release (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17256\"\u003e#17256\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/f94280d61496de38f97a818975bd38529569f3e8\"\u003e\u003ccode\u003ef94280d\u003c/code\u003e\u003c/a\u003e Fix route generator throwing on a dynamic param value of 0 (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17247\"\u003e#17247\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/6f11739f2c7b28b108c2d8d0a2012f0711775a8c\"\u003e\u003ccode\u003e6f11739\u003c/code\u003e\u003c/a\u003e fix(css): use raw module ID for virtual CSS cache lookup in dev mode (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17267\"\u003e#17267\u003c/a\u003e)...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/26c68f6939c071c9e9abfd4175d78d31199dfae3\"\u003e\u003ccode\u003e26c68f6\u003c/code\u003e\u003c/a\u003e [ci] format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/2aeaa44a23e42426619e680c37bea5b79fb9bc9d\"\u003e\u003ccode\u003e2aeaa44\u003c/code\u003e\u003c/a\u003e Fix \u003ccode\u003einferSize\u003c/code\u003e for remote images in the \u003ccode\u003ePicture\u003c/code\u003e component (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17279\"\u003e#17279\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/b428648a3ce0efe7367933096949d1d18bea0168\"\u003e\u003ccode\u003eb428648\u003c/code\u003e\u003c/a\u003e Resolve extensionless imports in island component paths (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17272\"\u003e#17272\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/14524c03f3d7ea84224d4e708488f30902a9f275\"\u003e\u003ccode\u003e14524c0\u003c/code\u003e\u003c/a\u003e Keep component scripts in place when rendered via Astro.slots.render() (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17260\"\u003e#17260\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/8c3579b2707703037bd439992a9a4e5efceeda3b\"\u003e\u003ccode\u003e8c3579b\u003c/code\u003e\u003c/a\u003e fix: add render() type overload for live collection entries (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/16688\"\u003e#16688\u003c/a\u003e) (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17274\"\u003e#17274\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/94dd2aa06f73d1d45a538823392879719dff51b6\"\u003e\u003ccode\u003e94dd2aa\u003c/code\u003e\u003c/a\u003e [ci] format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/5240e26c9dd91f9bc7140dcfacdb48d5a132830d\"\u003e\u003ccode\u003e5240e26\u003c/code\u003e\u003c/a\u003e Validate attribute names on custom HTML elements during SSR (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17251\"\u003e#17251\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/withastro/astro/commits/astro@7.0.6/packages/astro\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for astro since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dompurify` from 3.2.7 to 3.4.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cure53/DOMPurify/releases\"\u003edompurify's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDOMPurify 3.4.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with a leaky config for hooks via \u003ccode\u003esetConfig\u003c/code\u003e, thanks \u003ca href=\"https://github.com/trace37labs\"\u003e\u003ccode\u003e@​trace37labs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped vulnerable development dependencies to arrive at plain 0 with \u003ccode\u003enpm audit\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eUpdated the \u003ccode\u003eosv-scanner\u003c/code\u003e suppression list as no vulnerable dependencies are left for now\u003c/li\u003e\n\u003cli\u003eUpdated up the linting tool-chain and removed now-redundant lint directives\u003c/li\u003e\n\u003cli\u003eUpdated the documentation is several spots, README, wiki, etc.\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored codebase for clarity: extracted the public type declarations into \u003ccode\u003etypes.ts\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eDecomposed the three largest sanitizer functions into focused helpers\u003c/li\u003e\n\u003cli\u003eRemoved duplicated defaults and dead branches, consolidated \u003ccode\u003eSAFE_FOR_TEMPLATES\u003c/code\u003e scrubbing into single shared path\u003c/li\u003e\n\u003cli\u003eImproved per-node performance by hoisting the mXSS probe regexes and testing \u003ccode\u003etextContent\u003c/code\u003e before \u003ccode\u003einnerHTML\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdded a deterministic micro-benchmark harness (\u003ccode\u003enpm run bench\u003c/code\u003e) with a \u003ccode\u003e--compare\u003c/code\u003e mode\u003c/li\u003e\n\u003cli\u003eReduced CI cost by running the full three-engine browser suite once per PR\u003c/li\u003e\n\u003cli\u003eRefreshed the \u003ccode\u003edemos/\u003c/code\u003e folder so every demo runs again, and added a SVG-via-\u003ccode\u003e\u0026lt;img\u0026gt;\u003c/code\u003e demo\u003c/li\u003e\n\u003cli\u003eDocumented the bench and \u003ccode\u003etest:happydom\u003c/code\u003e scripts in the README\u003c/li\u003e\n\u003cli\u003eCompleted the Attack Classes \u0026amp; Bypass History wiki page\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFurther improved the handling of Trusted Types config options, thanks \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFurther improved the handling of \u003ccode\u003eIN_PLACE\u003c/code\u003e sanitization, thanks \u003ca href=\"https://github.com/mozfreddyb\"\u003e\u003ccode\u003e@​mozfreddyb\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded more test coverage for \u003ccode\u003eIN_PLACE\u003c/code\u003e and Trusted Types related usage\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003cli\u003eUpdated README and wiki with more accurate documentation \u0026amp; attack samples\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCleaned up the repository root, renamed some and removed unneeded files\u003c/li\u003e\n\u003cli\u003eFixed an issue with handling of Trusted Types policies, thanks \u003ca href=\"https://github.com/fulstadev\"\u003e\u003ccode\u003e@​fulstadev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed the node iterator for better template scrubbing, thanks \u003ca href=\"https://github.com/IamLeandrooooo\"\u003e\u003ccode\u003e@​IamLeandrooooo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIncluded formerly missing LICENSE-MPL in published npm package, thanks \u003ca href=\"https://github.com/asamuzaK\"\u003e\u003ccode\u003e@​asamuzaK\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHardened the handling of Shadow Roots when using \u003ccode\u003eIN_PLACE\u003c/code\u003e, thanks \u003ca href=\"https://github.com/GameZoneHacker\"\u003e\u003ccode\u003e@​GameZoneHacker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemoved a problem leading to permanent hook pollution, thanks \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactored the test suite and expanded test coverage significantly\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed several issues with DOM Clobbering in \u003ccode\u003eIN_PLACE\u003c/code\u003e mode, thanks \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/Bankde\"\u003e\u003ccode\u003e@​Bankde\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHardened the checks for cross-realm \u003ccode\u003eIN_PLACE\u003c/code\u003e and Shadow DOM sanitization, thanks \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/Bankde\"\u003e\u003ccode\u003e@​Bankde\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded more test coverage for \u003ccode\u003eIN_PLACE\u003c/code\u003e and general DOM Clobbering attacks\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bypass caused by the new HTML element \u003ccode\u003eselectedcontent\u003c/code\u003e added in 3.4.4, thanks \u003ca href=\"https://github.com/KabirAcharya\"\u003e\u003ccode\u003e@​KabirAcharya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eNote that this is a security release for an issue introduced in 3.4.4 and should be upgraded to immediately.\u003c/strong\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/0cae5187403132f96a6d357649e4b15633fc210a\"\u003e\u003ccode\u003e0cae518\u003c/code\u003e\u003c/a\u003e release: 3.4.11 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1494\"\u003e#1494\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/6ee5716f8336989753611beeca364957c0eb0c3e\"\u003e\u003ccode\u003e6ee5716\u003c/code\u003e\u003c/a\u003e release: 3.4.10 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1478\"\u003e#1478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/52102472d46035857c52df19e44285f8a1e102fc\"\u003e\u003ccode\u003e5210247\u003c/code\u003e\u003c/a\u003e release: 3.4.9 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1459\"\u003e#1459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/bcdd8285412dc9c4c149652aed2d712e790d6ccf\"\u003e\u003ccode\u003ebcdd828\u003c/code\u003e\u003c/a\u003e release: 3.4.8 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1439\"\u003e#1439\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff\"\u003e\u003ccode\u003eca30f07\u003c/code\u003e\u003c/a\u003e release: 3.4.7 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1414\"\u003e#1414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/bb7739e5bccec7e1ab3dae3f3e42d02db3acaaae\"\u003e\u003ccode\u003ebb7739e\u003c/code\u003e\u003c/a\u003e release: 3.4.6 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1394\"\u003e#1394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/011b0c78f2a0f57ee54f5fcccb697a46ca6e63ea\"\u003e\u003ccode\u003e011b0c7\u003c/code\u003e\u003c/a\u003e release: 3.4.5 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1382\"\u003e#1382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/5817ad969c15e67dfcd6cb37248d6e9c1553e7c3\"\u003e\u003ccode\u003e5817ad9\u003c/code\u003e\u003c/a\u003e release: 3.4.4 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1374\"\u003e#1374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/520edb0371a9638f9b51f1798051299a250c686b\"\u003e\u003ccode\u003e520edb0\u003c/code\u003e\u003c/a\u003e release: 3.4.3 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1352\"\u003e#1352\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/6f67fd396a7b8c64294343999fe607ca1f5299c0\"\u003e\u003ccode\u003e6f67fd3\u003c/code\u003e\u003c/a\u003e Sync/3.4.2 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1322\"\u003e#1322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cure53/DOMPurify/compare/3.2.7...3.4.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-xml-parser` from 5.2.5 to 5.9.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/releases\"\u003efast-xml-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHarden GitHub Actions workflows by \u003ca href=\"https://github.com/martincostello\"\u003e\u003ccode\u003e@​martincostello\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/841\"\u003eNaturalIntelligence/fast-xml-parser#841\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGitHub Actions workflow fixes by \u003ca href=\"https://github.com/martincostello\"\u003e\u003ccode\u003e@​martincostello\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/844\"\u003eNaturalIntelligence/fast-xml-parser#844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/martincostello\"\u003e\u003ccode\u003e@​martincostello\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/841\"\u003eNaturalIntelligence/fast-xml-parser#841\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.2...v5.9.3\"\u003ehttps://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.2...v5.9.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.9.2\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.1...v5.9.2\"\u003ehttps://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.1...v5.9.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.9.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.0...v5.9.1\"\u003ehttps://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.0...v5.9.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eupdate strnum, use is-unsafe\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eupdate strnum to 2.3.0\n\u003cul\u003e\n\u003cli\u003eyou can set hex, binary, enotation, infinity, unicode\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003evalidate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eupdate strnum, FXB. Use xml-naming for DOCTYPE\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eintegrate xml-naming to validate DOCTYPE entity name and notation name (using qname because of backward compatibility)\n\u003cul\u003e\n\u003cli\u003eThis will consider xml-version as well. '1.0' is default\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eupdate strnum to 2.3.0\n\u003cul\u003e\n\u003cli\u003eYou can set octal and binary parsing which is by deault off\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eupdate fast-xml-builder to 1.2.0\n\u003cul\u003e\n\u003cli\u003ecan sanitize tag names if found invalid\u003c/li\u003e\n\u003cli\u003efix format output\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003efix minor old bugs and update builder\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: alwaysCreateTextNode should create text node when attributes are present for self closing node\u003c/li\u003e\n\u003cli\u003efix stop node expression when ns prefix is removed (found by \u003ca href=\"https://github.com/iruizsalinas\"\u003eiruizsalinas\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XML Builder to 1.1.7\u003c/li\u003e\n\u003cli\u003emark addEntity deprecated\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ebackward compatibility for numerical external entity, fix \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/705\"\u003e#705\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/817\"\u003e#817\u003c/a\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eallow numerical external entity for backward compatibility\u003c/li\u003e\n\u003cli\u003efix \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/705\"\u003e#705\u003c/a\u003e: attributesGroupName working with preserveOrder\u003c/li\u003e\n\u003cli\u003efix \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/817\"\u003e#817\u003c/a\u003e: stackoverflow when tag expression is very long\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eupgrade \u003ccode\u003e@​nodable/entities\u003c/code\u003e and FXB\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003e@nodable/entities\u003c/code\u003e v2.1.0\n\u003cul\u003e\n\u003cli\u003ebreaking changes\n\u003cul\u003e\n\u003cli\u003esingle entity scan. You're not allowed to use entity value to form another entity name.\u003c/li\u003e\n\u003cli\u003eyou cant add numeric external entity\u003c/li\u003e\n\u003cli\u003eentity error message when expantion limit is crossed might change\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etypings are updated for new options related to process entity\u003c/li\u003e\n\u003cli\u003eplease follow documentation of \u003ccode\u003e@nodable/entities\u003c/code\u003e for more detail.\u003c/li\u003e\n\u003cli\u003eperformance\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md\"\u003efast-xml-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003eNote: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003cp\u003eNote: Due to some last quick changes on v4, detail of v4.5.3 \u0026amp; v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion\u003c/p\u003e\n\u003cp\u003e*\u003cem\u003e5.9.3 / 2026-06-19\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eupdate strnum\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e*\u003cem\u003e5.9.2 / 2026-06-17\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003edummy release to test changes in github action\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e*\u003cem\u003e5.9.1 / 2026-06-17\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003edummy release to test release from github action\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e*\u003cem\u003e5.9.0 / 2026-06-15\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eupdate strnum to 2.3.0\n\u003cul\u003e\n\u003cli\u003eyou can set hex, binary, enotation, infinity, unicode\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003evalidate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library.\nUser can override rules by overriding EntityDecoder.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e*\u003cem\u003e5.8.0 / 2026-05-12\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eintegrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)\n\u003cul\u003e\n\u003cli\u003eThis will consider xml-version as well. '1.0' is default\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eupdate strnum to 2.3.0\n\u003cul\u003e\n\u003cli\u003eYou can set octal and binary parsing which is bydeault off\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eupdate fast-xml-builder to 1.2.0\n\u003cul\u003e\n\u003cli\u003ecan sanitize tag names if found invalid\u003c/li\u003e\n\u003cli\u003efix format output\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e5.7.3 / 2006-05-05\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: alwaysCreateTextNode should create text node when attributes are present for self closing node\u003c/li\u003e\n\u003cli\u003efix stop node expression when ns prefix is removed (found by \u003ca href=\"https://github.com/iruizsalinas\"\u003eiruizsalinas\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XML Builder to 1.1.7\u003c/li\u003e\n\u003cli\u003emark addEntity deprecated\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e5.7.2 / 2026-04-25\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eallow numerical external entity for backward compatibility\u003c/li\u003e\n\u003cli\u003efix \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/705\"\u003e#705\u003c/a\u003e: attributesGroupName working with preserveOrder\u003c/li\u003e\n\u003cli\u003efix \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/817\"\u003e#817\u003c/a\u003e: stackoverflow when tag expression is very long\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e5.7.1 / 2026-04-20\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix typo in CJS typing file\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e5.7.0 / 2026-04-17\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003e@nodable/entities\u003c/code\u003e v2.1.0\n\u003cul\u003e\n\u003cli\u003ebreaking changes\n\u003cul\u003e\n\u003cli\u003esingle entity scan. You're not allowed to user entity value to form another entity name.\u003c/li\u003e\n\u003cli\u003eyou cant add numeric external entity\u003c/li\u003e\n\u003cli\u003eentity error message when expantion limit is crossed might change\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/93a09f108d6f457a84e607a6806a7bfd6abc3e55\"\u003e\u003ccode\u003e93a09f1\u003c/code\u003e\u003c/a\u003e 5.9.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/9c1905edd7ea28db70770f758e293fcf079060c5\"\u003e\u003ccode\u003e9c1905e\u003c/code\u003e\u003c/a\u003e update strnum\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/8d71292a9aaaa8f4a24294e636bd191cfbf4d8a7\"\u003e\u003ccode\u003e8d71292\u003c/code\u003e\u003c/a\u003e GitHub Actions workflow fixes (\u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/844\"\u003e#844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/784a0442b697e1498e1f3c3fc1a057ad57424858\"\u003e\u003ccode\u003e784a044\u003c/code\u003e\u003c/a\u003e Harden GitHub Actions workflows (\u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/841\"\u003e#841\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/bf9b81a9ab952ce153281e119f99f9953f32bc76\"\u003e\u003ccode\u003ebf9b81a\u003c/code\u003e\u003c/a\u003e 5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/232abf54c793a950aeb63fd25934fc7f6008dc86\"\u003e\u003ccode\u003e232abf5\u003c/code\u003e\u003c/a\u003e update publish action for better security\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/73411fa630cf85798397b3007b5db5bfff2d2d61\"\u003e\u003ccode\u003e73411fa\u003c/code\u003e\u003c/a\u003e update checklist\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/d57e33bb9aa045813440244cca9d5be837671bba\"\u003e\u003ccode\u003ed57e33b\u003c/code\u003e\u003c/a\u003e 5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/3be603a51aac23e2054c92291e188fb30f427220\"\u003e\u003ccode\u003e3be603a\u003c/code\u003e\u003c/a\u003e testing release from Github\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/b6c41ea401122dc97e3396066771672974622506\"\u003e\u003ccode\u003eb6c41ea\u003c/code\u003e\u003c/a\u003e Add GitHub Actions workflow for npm publishing\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.2.5...v5.9.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for fast-xml-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `mermaid` from 11.12.0 to 11.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mermaid-js/mermaid/releases\"\u003emermaid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003emermaid@11.15.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7174\"\u003e#7174\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/0aca21739c0d1fcaaa206e04a6cd574ebc415483\"\u003e\u003ccode\u003e0aca217\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/milesspencer35\"\u003e\u003ccode\u003e@​milesspencer35\u003c/code\u003e\u003c/a\u003e! - feat(sequence): Add support for decimal start and increment values in the \u003ccode\u003eautonumber\u003c/code\u003e directive\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7512\"\u003e#7512\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/8e17492f7365ba50896382feb69a23efd9d8a22d\"\u003e\u003ccode\u003e8e17492\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/aruncveli\"\u003e\u003ccode\u003e@​aruncveli\u003c/code\u003e\u003c/a\u003e! - feat(flowchart): add datastore shape\u003c/p\u003e\n\u003cp\u003eIn Data flow diagrams, a datastore/warehouse/file/database is used to represent data persistence. It is denoted by a rectangle with only top and bottom borders, and can be used in flowcharts with \u003ccode\u003eA@{ shape: datastore, label: \u0026quot;Datastore\u0026quot; }\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/6440\"\u003e#6440\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/9ad8dde6d049adde85d8ed2d476c09b5820f3f4b\"\u003e\u003ccode\u003e9ad8dde\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/yordis\"\u003e\u003ccode\u003e@​yordis\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lgazo\"\u003e\u003ccode\u003e@​lgazo\u003c/code\u003e\u003c/a\u003e! - feat: add Event Modeling diagram\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7707\"\u003e#7707\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/27db774627be1cee881961dfd0d2cb21cd01b79d\"\u003e\u003ccode\u003e27db774\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/txmxthy\"\u003e\u003ccode\u003e@​txmxthy\u003c/code\u003e\u003c/a\u003e! - feat(architecture): expose four fcose layout knobs for \u003ccode\u003earchitecture-beta\u003c/code\u003e diagrams (\u003ccode\u003enodeSeparation\u003c/code\u003e, \u003ccode\u003eidealEdgeLengthMultiplier\u003c/code\u003e, \u003ccode\u003eedgeElasticity\u003c/code\u003e, \u003ccode\u003enumIter\u003c/code\u003e) so authors can tune layout density and spread overlapping siblings without changing diagram source\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7604\"\u003e#7604\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/bf9502fb6012a4b724679b401ac928f5ee55161c\"\u003e\u003ccode\u003ebf9502f\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/M-a-c\"\u003e\u003ccode\u003e@​M-a-c\u003c/code\u003e\u003c/a\u003e! - feat(class): add nested namespace support for class diagrams via dot notation and syntactic nesting\u003c/p\u003e\n\u003cp\u003eIf you have namespaces in class diagrams that use \u003ccode\u003e.\u003c/code\u003es already and want to render them without nesting (≤v11.14.0 behaviour), you can use set \u003ccode\u003eclass.hierarchicalNamespaces=false\u003c/code\u003e in your mermaid config:\u003c/p\u003e\n\u003cpre lang=\"yaml\"\u003e\u003ccode\u003econfig:\n  class:\n    hierarchicalNamespaces: false\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7272\"\u003e#7272\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/88cdd3dc0aab9577174561b04e14760c565a232b\"\u003e\u003ccode\u003e88cdd3d\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/xinbenlv\"\u003e\u003ccode\u003e@​xinbenlv\u003c/code\u003e\u003c/a\u003e! - feat(sankey): add outlined label style, configurable nodeWidth/nodePadding, and custom node colors\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7737\"\u003e#7737\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/e9b0f34d8d82a6260077764ee45e1d7d90957a0f\"\u003e\u003ccode\u003ee9b0f34\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ashishjain0512\"\u003e\u003ccode\u003e@​ashishjain0512\u003c/code\u003e\u003c/a\u003e! - fix: prevent unbalanced CSS styles in classDefs\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7737\"\u003e#7737\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/37ff937f1da2e19f882fd1db01235db4d01f4056\"\u003e\u003ccode\u003e37ff937\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ashishjain0512\"\u003e\u003ccode\u003e@​ashishjain0512\u003c/code\u003e\u003c/a\u003e! - fix: create CSS styles using the CSSOM\u003c/p\u003e\n\u003cp\u003eThis removes some invalid CSS and normalizes some CSS formatting.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7508\"\u003e#7508\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/bfe60cc67b9a6dec64f9161f58e4d24a06c42b65\"\u003e\u003ccode\u003ebfe60cc\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/biiab\"\u003e\u003ccode\u003e@​biiab\u003c/code\u003e\u003c/a\u003e! - fix(stateDiagram): \u003ccode\u003eend note\u003c/code\u003e now only closes a note when used on a new line\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7737\"\u003e#7737\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/faafb5d49106dd32c367f3882505f2dd625aa30e\"\u003e\u003ccode\u003efaafb5d\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ashishjain0512\"\u003e\u003ccode\u003e@​ashishjain0512\u003c/code\u003e\u003c/a\u003e! - fix(gantt): add iteration limit for \u003ccode\u003eexcludes\u003c/code\u003e field\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7737\"\u003e#7737\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/65f8be2a42faf869b811469571983cba7eeeca99\"\u003e\u003ccode\u003e65f8be2\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ashishjain0512\"\u003e\u003ccode\u003e@​ashishjain0512\u003c/code\u003e\u003c/a\u003e! - fix: disallow some CSS at-rules in custom CSS\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7726\"\u003e#7726\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/1502f32f3c5fb944925b0c527fbbde3c4f041824\"\u003e\u003ccode\u003e1502f32\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/aloisklink\"\u003e\u003ccode\u003e@​aloisklink\u003c/code\u003e\u003c/a\u003e! - fix(wardley): fix unnecessary sanitization of text\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7578\"\u003e#7578\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/1f98db8e326299ac97a2fa60abfd509d8f5f16e2\"\u003e\u003ccode\u003e1f98db8\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Gaston202\"\u003e\u003ccode\u003e@​Gaston202\u003c/code\u003e\u003c/a\u003e! - fix(class): self-referential class multiplicity labels no longer rendered multiple times\u003c/p\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/issues/7560\"\u003e#7560\u003c/a\u003e. Resolves an issue where cardinality labels on self-referential class relationships were rendered three times due to edge splitting in the dagre layout. The fix ensures that each sub-edge only carries its relevant label positions.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7592\"\u003e#7592\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/2343e38498a3b31f8ce5e79f1f009e0b56fbe086\"\u003e\u003ccode\u003e2343e38\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/knsv-bot\"\u003e\u003ccode\u003e@​knsv-bot\u003c/code\u003e\u003c/a\u003e! - fix(sequence): add background box behind alt/else section title labels in sequence diagrams\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7589\"\u003e#7589\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/7fb9509b8b5cb1dc48519dc60cf6cdc6afba0462\"\u003e\u003ccode\u003e7fb9509\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/NYCU-Chung\"\u003e\u003ccode\u003e@​NYCU-Chung\u003c/code\u003e\u003c/a\u003e! - fix(block): prevent column widths from shrinking when mixing different column spans\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7632\"\u003e#7632\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/3f9e0f15bedc1e2c71ddb6b34192d1a21124cfc2\"\u003e\u003ccode\u003e3f9e0f1\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ekiauhce\"\u003e\u003ccode\u003e@​ekiauhce\u003c/code\u003e\u003c/a\u003e! - fix(sequence): correct messageAlign label position for right-to-left arrows in sequence diagrams\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/41646dfd43ac83f001b03c70605feb036afae46d\"\u003e\u003ccode\u003e41646df\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/issues/7739\"\u003e#7739\u003c/a\u003e from aloisklink/ci/fix-release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/2671f5c44a1515960ebc41c09a365c41860f95ee\"\u003e\u003ccode\u003e2671f5c\u003c/code\u003e\u003c/a\u003e docs: fix v11.15.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/f4bf04b5db8bed603e40ed3d5ce5228d6b07754e\"\u003e\u003ccode\u003ef4bf04b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/issues/7738\"\u003e#7738\u003c/a\u003e from mermaid-js/changeset-release/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/abfb563e1dcbd46d617f44a6361bd6d926dc6289\"\u003e\u003ccode\u003eabfb563\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/60b289f428d0a0832ad95ed4e1fb326344e23532\"\u003e\u003ccode\u003e60b289f\u003c/code\u003e\u003c/a\u003e Release Candidate 11.15.0 (\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/issues/7737\"\u003e#7737\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/d37c0db39ca2405b4473361063df2c47109dc2c9\"\u003e\u003ccode\u003ed37c0db\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/issues/7730\"\u003e#7730\u003c/a\u003e from aloisklink/fix/fix-edgeLabelRightLeft-changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/5ab5a2895fa8b7e90de85b43a4b99aa50b39b0f1\"\u003e\u003ccode\u003e5ab5a28\u003c/code\u003e\u003c/a\u003e docs: improve nested namespace changeset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/18f8b4c5bf67aface3485272b48042f2fdd6fad2\"\u003e\u003ccode\u003e18f8b4c\u003c/code\u003e\u003c/a\u003e fix: revert endEdgeLabelLeft/endEdgeLabelRight change\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/504b2eb73d4d827baa817efd47ab6f44ae769b5a\"\u003e\u003ccode\u003e504b2eb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/issues/7726\"\u003e#7726\u003c/a\u003e from aloisklink/fix/correct-unnecessary-html-escapes...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/1502f32f3c5fb944925b0c527fbbde3c4f041824\"\u003e\u003ccode\u003e1502f32\u003c/code\u003e\u003c/a\u003e fix(wardley): fix unnecessary sanitization of text\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mermaid-js/mermaid/compare/mermaid@11.12.0...mermaid@11.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for mermaid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vitest` from 2.1.6 to 4.1.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003evitest's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.9\u003c/h2\u003e\n\u003ch3\u003e🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eimportOriginal\u003c/code\u003e with optimizer and query import [backport to v4] - by \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e, \u003cstrong\u003eDavid Harris\u003c/strong\u003e, \u003cstrong\u003eCodex\u003c/strong\u003eand \u003cstrong\u003eVladimir\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10546\"\u003evitest-dev/vitest#10546\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a5180190c\"\u003e\u003c!-- raw HTML omitted --\u003e(a5180)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eWait for orchestrator readiness before resolving browser sessions [backport to v4] - by \u003cstrong\u003eVladimir\u003c/strong\u003e and \u003cstrong\u003eSéamus O'Connor\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10555\"\u003evitest-dev/vitest#10555\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/7fb29651a\"\u003e\u003c!-- raw HTML omitted --\u003e(7fb29)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWait for iframe tester readiness before preparing  [backport to v4] - by \u003cstrong\u003eVladimir\u003c/strong\u003e and \u003cstrong\u003eSéamus O'Connor\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10497\"\u003evitest-dev/vitest#10497\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10556\"\u003evitest-dev/vitest#10556\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/fbc626c40\"\u003e\u003c!-- raw HTML omitted --\u003e(fbc62)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emocker\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eHoist vi.mock() for vite-plus/test imports [backport to v4] - by \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e, \u003cstrong\u003eLongYinan\u003c/strong\u003e, \u003cstrong\u003eClaude Opus 4.8\u003c/strong\u003e and \u003cstrong\u003eVladimir\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10548\"\u003evitest-dev/vitest#10548\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/2c9559c02\"\u003e\u003c!-- raw HTML omitted --\u003e(2c955)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epool\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePrevent test run hang on worker crash  [backport to v4] - by \u003cstrong\u003eAri Perkkiö\u003c/strong\u003e and \u003cstrong\u003eJattioui Ismail\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10543\"\u003evitest-dev/vitest#10543\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10564\"\u003evitest-dev/vitest#10564\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/934b0f587\"\u003e\u003c!-- raw HTML omitted --\u003e(934b0)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.8...v4.1.9\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.8\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eDisable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [backport to v4]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCodex\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10450\"\u003evitest-dev/vitest#10450\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e4067b3b1\"\u003e\u003c!-- raw HTML omitted --\u003e(e4067)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by \u003ca href=\"https://github.com/toxik\"\u003e\u003ccode\u003e@​toxik\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Zelys-DFKH\"\u003e\u003ccode\u003e@​Zelys-DFKH\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10474\"\u003evitest-dev/vitest#10474\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/675b4343f\"\u003e\u003c!-- raw HTML omitted --\u003e(675b4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.7...v4.1.8\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.7\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erunner\u003c/strong\u003e: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10384\"\u003evitest-dev/vitest#10384\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4f0f2a1ee\"\u003e\u003c!-- raw HTML omitted --\u003e(4f0f2)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.6...v4.1.7\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.6\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Provide project reference in \u003ccode\u003eToMatchScreenshotResolvePath\u003c/code\u003e  -  by \u003ca href=\"https://github.com/macarie\"\u003e\u003ccode\u003e@​macarie\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10138\"\u003evitest-dev/vitest#10138\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/31882607c\"\u003e\u003c!-- raw HTML omitted --\u003e(31882)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGlobal \u003ccode\u003esequence.concurrent: true\u003c/code\u003e with top-level \u003ccode\u003etest(..., { concurrent: false })\u003c/code\u003e + depreacte \u003ccode\u003esequential\u003c/code\u003e test API and options  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eCodex\u003c/strong\u003e and \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10196\"\u003evitest-dev/vitest#10196\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/2847dfa2a\"\u003e\u003c!-- raw HTML omitted --\u003e(2847d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Simplify orchestrator otel carrier  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10285\"\u003evitest-dev/vitest#10285\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/18af98cee\"\u003e\u003c!-- raw HTML omitted --\u003e(18af9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🏎 Performance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eStringify diff objects only once  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10276\"\u003evitest-dev/vitest#10276\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9f7b1528c\"\u003e\u003c!-- raw HTML omitted --\u003e(9f7b1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.5...v4.1.6\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.5\u003c/h2\u003e\n\u003ch3\u003e   🚀 Experimental Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecoverage\u003c/strong\u003e: Istanbul to support \u003ccode\u003einstrumenter\u003c/code\u003e option  -  by \u003ca href=\"https://github.com/BartWaardenburg\"\u003e\u003ccode\u003e@​BartWaardenburg\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10119\"\u003evitest-dev/vitest#10119\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/0e0ff41c7\"\u003e\u003c!-- raw HTML omitted --\u003e(0e0ff)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a7a61e78c7d0718f00173cff6800a91a344457d4\"\u003e\u003ccode\u003ea7a61e7\u003c/code\u003e\u003c/a\u003e chore: release v4.1.9 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10598\"\u003e#10598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/934b0f587cb61d8338d83f525295322692a2db40\"\u003e\u003ccode\u003e934b0f5\u003c/code\u003e\u003c/a\u003e fix(pool): prevent test run hang on worker crash (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10543\"\u003e#10543\u003c/a\u003e) [backport to v4] (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/7fb29651afbae2a9b0cefe6c031a9308f168ac60\"\u003e\u003ccode\u003e7fb2965\u003c/code\u003e\u003c/a\u003e fix(browser): wait for orchestrator readiness before resolving browser sessio...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a5180190c1be7089e3705e3dd9e84fea118d09d3\"\u003e\u003ccode\u003ea518019\u003c/code\u003e\u003c/a\u003e fix: fix \u003ccode\u003eimportOriginal\u003c/code\u003e with optimizer and query import [backport to v4] (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/e61f2dd2a0ba0a266c1c5e0334aad3799fee527f\"\u003e\u003ccode\u003ee61f2dd\u003c/code\u003e\u003c/a\u003e chore: release v4.1.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/e4067b3b150005fd42cf75f994300119245806b9\"\u003e\u003ccode\u003ee4067b3\u003c/code\u003e\u003c/a\u003e fix(browser): disable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a09d47236e19fd3151351080c667036ca6164dc4\"\u003e\u003ccode\u003ea09d472\u003c/code\u003e\u003c/a\u003e chore: release v4.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a8fd24c1cad2320b19fcc651413c7d928423bdc1\"\u003e\u003ccode\u003ea8fd24c\u003c/code\u003e\u003c/a\u003e chore: release v4.1.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/18af98cee1830604d57f6a02bf28f8067cdffc06\"\u003e\u003ccode\u003e18af98c\u003c/code\u003e\u003c/a\u003e fix(browser): simplify orchestrator otel carrier (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10285\"\u003e#10285\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/31882607cc67c7bf52ead13a606321ffdb06a857\"\u003e\u003ccode\u003e3188260\u003c/code\u003e\u003c/a\u003e feat(browser): provide project reference in \u003ccode\u003eToMatchScreenshotResolvePath\u003c/code\u003e (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/vitest\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for vitest since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.9.0 to 1.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.18.1 — June 21, 2026\u003c/h2\u003e\n\u003cp\u003eThis release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10913\"\u003e#10913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10917\"\u003e#10917\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10930\"\u003e#10930\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10942\"\u003e#10942\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10993\"\u003e#10993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRuntime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10959\"\u003e#10959\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11021\"\u003e#11021\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAxiosURLSearchParams: Switched the encoder callback to an arrow function so \u003ccode\u003eencoder.call(this)\u003c/code\u003e receives the \u003ccode\u003eAxiosURLSearchParams\u003c/code\u003e instance correctly. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDocumentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11007\"\u003e#11007\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11010\"\u003e#11010\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11023\"\u003e#11023\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11025\"\u003e#11025\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eDependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11011\"\u003e#11011\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11012\"\u003e#11012\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11013\"\u003e#11013\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11014\"\u003e#11014\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11015\"\u003e#11015\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11016\"\u003e#11016\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11017\"\u003e#11017\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11026\"\u003e#11026\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webdevelopersrinu\"\u003e\u003ccode\u003e@​webdevelopersrinu\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10913\"\u003e#10913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sijie-Z\"\u003e\u003ccode\u003e@​sijie-Z\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10993\"\u003e#10993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bartlomieju\"\u003e\u003ccode\u003e@​bartlomieju\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11023\"\u003e#11023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JSap0914\"\u003e\u003ccode\u003e@​JSap0914\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.18.0...v1.18.1\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.0 — June 13, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eRedirect Header Safety:\u003c/strong\u003e Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10892\"\u003e#10892\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eURL And Request Hardening:\u003c/strong\u003e Rejects malformed \u003ccode\u003ehttp:\u003c/code\u003e and \u003ccode\u003ehttps:\u003c/code\u003e URLs that omit \u003ccode\u003e//\u003c/code\u003e with \u003ccode\u003eERR_INVALID_URL\u003c/code\u003e, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local \u003ccode\u003eNO_...\n\n_Description has been truncated_","html_url":"https://github.com/rzazadebilal7/cloudflare-docs/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/rzazadebilal7%2Fcloudflare-docs/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"},{"uuid":"4798688795","node_id":"PR_kwDOKduc6M7tVxJ2","number":839,"state":"open","title":"Bump tar from 7.4.3 to 7.5.19","user":"dependabot[bot]","labels":["size/M","🤖 bot","☑️ auto-merge"],"assignees":["guibranco"],"locked":false,"comments_count":7,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-02T22:47:39.000Z","updated_at":"2026-07-03T19:14:37.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"tar","old_version":"7.4.3","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps [tar](https://github.com/isaacs/node-tar) from 7.4.3 to 7.5.19.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~isaacs\"\u003eisaacs\u003c/a\u003e, a new releaser for tar since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar\u0026package-manager=npm_and_yarn\u0026previous-version=7.4.3\u0026new-version=7.5.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ApiBR/sports-agenda-ui/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/ApiBR/sports-agenda-ui/pull/839","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ApiBR%2Fsports-agenda-ui/issues/839","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/839/packages"},{"uuid":"4798656473","node_id":"PR_kwDONSvSGc7tVqjk","number":722,"state":"open","title":"Build(deps-dev): bump tar from 7.4.3 to 7.5.19","user":"dependabot[bot]","labels":["size/M"],"assignees":["guibranco"],"locked":false,"comments_count":7,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-02T22:40:07.000Z","updated_at":"2026-07-02T22:41:55.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Build(deps-dev)","packages":[{"name":"tar","old_version":"7.4.3","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps [tar](https://github.com/isaacs/node-tar) from 7.4.3 to 7.5.19.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~isaacs\"\u003eisaacs\u003c/a\u003e, a new releaser for tar since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar\u0026package-manager=npm_and_yarn\u0026previous-version=7.4.3\u0026new-version=7.5.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ApiBR/catalog/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/ApiBR/catalog/pull/722","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ApiBR%2Fcatalog/issues/722","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/722/packages"},{"uuid":"4798596350","node_id":"PR_kwDOCKdSKc7tVeT_","number":852,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","☑️ auto-merge","🤖 bot","size/XXL"],"assignees":["guibranco"],"locked":false,"comments_count":6,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-02T22:25:59.000Z","updated_at":"2026-07-03T00:24:25.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":8,"packages":[{"name":"postcss","old_version":"8.5.6","new_version":"8.5.16","repository_url":"https://github.com/postcss/postcss"},{"name":"vite","old_version":"6.3.5","new_version":"8.1.3","repository_url":"https://github.com/vitejs/vite"},{"name":"minimatch","old_version":"3.1.2","new_version":"3.1.5","repository_url":"https://github.com/isaacs/minimatch"},{"name":"flatted","old_version":"3.3.3","new_version":"3.4.2","repository_url":"https://github.com/WebReflection/flatted"},{"name":"js-yaml","old_version":"4.1.0","new_version":"4.3.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"picomatch","old_version":"2.3.1","new_version":"removed","repository_url":"https://github.com/micromatch/picomatch"},{"name":"react-router","old_version":"7.6.2","new_version":"7.18.1","repository_url":"https://github.com/remix-run/react-router"},{"name":"tar","old_version":"7.4.3","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.16` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.3.5` | `8.1.3` |\n| [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` |\n| [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.2` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.3.0` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `removed` |\n| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.6.2` | `7.18.1` |\n| [tar](https://github.com/isaacs/node-tar) | `7.4.3` | `7.5.19` |\n\n\nUpdates `postcss` from 8.5.6 to 8.5.16\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/releases\"\u003epostcss's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e position (by \u003ca href=\"https://github.com/mizdra\"\u003e\u003ccode\u003e@​mizdra\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eraws\u003c/code\u003e after rehydrating a JSON AST (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed putting parent-less node in \u003ccode\u003enodes\u003c/code\u003e of new node (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed computing \u003ccode\u003eoffset\u003c/code\u003e in \u003ccode\u003epositionBy()\u003c/code\u003e (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003erangeBy()\u003c/code\u003e on \u003ccode\u003eindex: 0\u003c/code\u003e (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed declaration parsing performance (by \u003ca href=\"https://github.com/homanp\"\u003e\u003ccode\u003e@​homanp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom syntax regression (by \u003ca href=\"https://github.com/43081j\"\u003e\u003ccode\u003e@​43081j\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epostcss-scss\u003c/code\u003e commend regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed reading any file via user-generated CSS.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003eopts.unsafeMap\u003c/code\u003e to disable checks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed nested brackets parsing performance (by \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up source map encoding paring in case of the error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eProcessor#version\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved source map annotation cleaning performance (by CodeAnt AI).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/blob/main/CHANGELOG.md\"\u003epostcss's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e position (by \u003ca href=\"https://github.com/mizdra\"\u003e\u003ccode\u003e@​mizdra\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eraws\u003c/code\u003e after rehydrating a JSON AST (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed putting parent-less node in \u003ccode\u003enodes\u003c/code\u003e of new node (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed computing \u003ccode\u003eoffset\u003c/code\u003e in \u003ccode\u003epositionBy()\u003c/code\u003e (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003erangeBy()\u003c/code\u003e on \u003ccode\u003eindex: 0\u003c/code\u003e (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed declaration parsing performance (by \u003ca href=\"https://github.com/homanp\"\u003e\u003ccode\u003e@​homanp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom syntax regression (by \u003ca href=\"https://github.com/43081j\"\u003e\u003ccode\u003e@​43081j\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epostcss-scss\u003c/code\u003e commend regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed reading any file via user-generated CSS.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003eopts.unsafeMap\u003c/code\u003e to disable checks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed nested brackets parsing performance (by \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up source map encoding paring in case of the error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eProcessor#version\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved source map annotation cleaning performance (by CodeAnt AI).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/92ccc93ff15bd193491d67fad9763e62d489dfad\"\u003e\u003ccode\u003e92ccc93\u003c/code\u003e\u003c/a\u003e Release 8.5.16 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/818bdd6043359af773ccc3ca8663053d61a707c8\"\u003e\u003ccode\u003e818bdd6\u003c/code\u003e\u003c/a\u003e Update formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/46e451068ee6160b837865b715cf6972f28fabd5\"\u003e\u003ccode\u003e46e4510\u003c/code\u003e\u003c/a\u003e Fix \u003ccode\u003eInput#origin()\u003c/code\u003e returning incorrect position (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2036\"\u003e#2036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/34942ce76c0b0c9ee65b1421017ac71855e722c4\"\u003e\u003ccode\u003e34942ce\u003c/code\u003e\u003c/a\u003e Fix tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/d4feed645314ee421edf80ee9ebe453cc75c997f\"\u003e\u003ccode\u003ed4feed6\u003c/code\u003e\u003c/a\u003e Don't clone root-less child nodes in container constructor (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2097\"\u003e#2097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/da323fc8d327a38199a21987dcbf7e27e3bc34f3\"\u003e\u003ccode\u003eda323fc\u003c/code\u003e\u003c/a\u003e Revert version update to fix old Node.js on CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/886336919497516df8f140d0fb327bd125e35053\"\u003e\u003ccode\u003e8863369\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/3828982213fec6bc13d0791b1adf40393be0935e\"\u003e\u003ccode\u003e3828982\u003c/code\u003e\u003c/a\u003e Preserve node raws when rehydrating a JSON AST (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2100\"\u003e#2100\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/d1e80b830386b08dcd5b962fd466d1c51f28e82d\"\u003e\u003ccode\u003ed1e80b8\u003c/code\u003e\u003c/a\u003e Fix Node#rangeBy() ignoring index 0 (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2091\"\u003e#2091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/b91e4a63907325d98b75d11fda546bdd91acc608\"\u003e\u003ccode\u003eb91e4a6\u003c/code\u003e\u003c/a\u003e Fix Node.js 26 tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/postcss/postcss/compare/8.5.6...8.5.16\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for postcss since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vite` from 6.3.5 to 8.1.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.1.3\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.3/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.2\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.2/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.1\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.1/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ecreate-vite@8.1.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/create-vite@8.1.0/packages/create-vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003eplugin-legacy@8.1.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0/packages/plugin-legacy/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.0/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003eplugin-legacy@8.1.0-beta.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0-beta.0/packages/plugin-legacy/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.0-beta.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.0-beta.0/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.16\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.16/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.15\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.15/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.14\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.14/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.13\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.13/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.12\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.12/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.11\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.11/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.10\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.10/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.9\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.9/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.8\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.8/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.1.2...v8.1.3\"\u003e8.1.3\u003c/a\u003e (2026-07-02)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e inject inlined CSS after the shebang line (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22717\"\u003e#22717\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/1534d362794e856cc718b123cb245e0efcf36b9a\"\u003e1534d36\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e bump \u003ccode\u003ees-module-lexer\u003c/code\u003e to 2.3.0 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22838\"\u003e#22838\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7103c3af795396e2ad87e1125eb3fc20d60d9430\"\u003e7103c3a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epreload css for nested dynamic imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22759\"\u003e#22759\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2c530542da1c50b95b7f0cb17adf82f64ecf97f3\"\u003e2c53054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e correct stacktrace column position for first line (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22828\"\u003e#22828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c4acd6982a051fa10dbd7e3a37e00f0c467793b8\"\u003ec4acd69\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.1.1...v8.1.2\"\u003e8.1.2\u003c/a\u003e (2026-06-30)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e revert es-module-lexer to 2.1.0 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22827\"\u003e#22827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d3bd7c4111b8345cfc353c7bbb2c30601752e26\"\u003e0d3bd7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erestore, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of cwd (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22757\"\u003e#22757\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22825\"\u003e#22825\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/efb98cce73f3f89c4f03936ab7741cd5b0636f5c\"\u003eefb98cc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erevert, \u0026quot;fix: escape ids with multiple null bytes (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22687\"\u003e#22687\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://github.com/vitejs/vite/commit/cccef55dfaa6253929d2cb58d3af53f217efc877\"\u003ecccef55\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erevert, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of cwd (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22757\"\u003e#22757\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://github.com/vitejs/vite/commit/cf97711963ddcdcfac3e4fcd00771d7a55e92141\"\u003ecf97711\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.1.0...v8.1.1\"\u003e8.1.1\u003c/a\u003e (2026-06-30)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dynamic import warning to link to Vite docs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22823\"\u003e#22823\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/62bd7afd27ec0507bf528a135165dda3a44ebc21\"\u003e62bd7af\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e avoid stack overflow on \u003ccode\u003eimport.meta.hot.invalidate()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22797\"\u003e#22797\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/709eb8ee03d3c46269755334f59b7e9a353fc522\"\u003e709eb8e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e serve assets emitted during HMR/lazy compile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22745\"\u003e#22745\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5876b2cc2e1a01df9363e1e3d1d19f474ba68285\"\u003e5876b2c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundledDev:\u003c/strong\u003e skip plugin transform hooks for rolldown-lazy stub modules (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22778\"\u003e#22778\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8f925e2e496f4d313d860acb53880245b07ce6f7\"\u003e8f925e2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e preserve dollar signs in external \u003ccode\u003e@import\u003c/code\u003e urls with lightningcss (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22718\"\u003e#22718\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/9fa7ab4990f4fe74597d0a37a16d84af1c1e3544\"\u003e9fa7ab4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e resolve tsconfig paths in CSS and Sass \u003ca href=\"https://github.com/import\"\u003e\u003ccode\u003e@​import\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22775\"\u003e#22775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ef0b8916160c4d2a677decc062f6faa48fbf1578\"\u003eef0b891\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22734\"\u003e#22734\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/e635f493faa24930ae637318d6564539bc668e89\"\u003ee635f49\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22804\"\u003e#22804\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8837400a676a633af1ad6d3746b584d13cf90ecc\"\u003e8837400\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22591\"\u003e#22591\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2ce6677a151c53a019baec32859b646267f9d320\"\u003e2ce6677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eescape ids with multiple null bytes (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22687\"\u003e#22687\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/833fc302f3f4a5030f49207b5fbf10422f3247a2\"\u003e833fc30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehide console window when running 'net use' on Windows (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22698\"\u003e#22698\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/92b63f219f6c1872f35461aa75e9e9aec79bb01c\"\u003e92b63f2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eignore bundled config temp dir (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22800\"\u003e#22800\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/043a81096ddf8c6f9077c8e3e12362c83f9ed089\"\u003e043a810\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einvert \u003ccode\u003eesbuild.jsxSideEffects\u003c/code\u003e when converting to \u003ccode\u003eoxc.jsx.pure\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22809\"\u003e#22809\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/33895ba4faa0a46d5bd7b3eb53d02255113c8b5d\"\u003e33895ba\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimize-deps:\u003c/strong\u003e ignore \u003ccode\u003eERR_CLOSED_SERVER\u003c/code\u003e in scanner (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22784\"\u003e#22784\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/085a0ab704bf1a698d459d625a5c955d27b73134\"\u003e085a0ab\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scanner should resolve \u003ccode\u003einput\u003c/code\u003e from \u003ccode\u003eroot\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22769\"\u003e#22769\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/9722b0795b68602597ddd53e3d3c7ed9f00cb831\"\u003e9722b07\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eresolve pnpm .modules.yaml from workspace root instead of cwd (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22757\"\u003e#22757\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2531ac7ccd1d581df5febe4a3814226ba8939a20\"\u003e2531ac7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ereturn sourcemap field from some plugins that were lacking (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22782\"\u003e#22782\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7e18bf802bdde7a386eb3b407c87a67f89a895ca\"\u003e7e18bf8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle malformed URI in indexHtmlMiddleware (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22781\"\u003e#22781\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/84f5cccc7574c740c46f5cb2a09f29cde8380701\"\u003e84f5ccc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eimprove dependency optimizer messages (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22549\"\u003e#22549\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/092cb3b4247a06ba176c094a9a743d335adc6574\"\u003e092cb3b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e remove lightningcss null byte bug workaround (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22822\"\u003e#22822\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2dafd3bb7f8b265037e216f50afaa890ae2e2875\"\u003e2dafd3b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003euse pre-defined environments variable to avoid duplicate \u003ccode\u003eObject.values\u003c/code\u003e calls (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22790\"\u003e#22790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/1113acf6cff711196b3443f7126804847c1d4e1e\"\u003e1113acf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/578ffb80d46940f3b99cd96ed609f8b3a0ac5ede\"\u003e\u003ccode\u003e578ffb8\u003c/code\u003e\u003c/a\u003e release: v8.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/7103c3af795396e2ad87e1125eb3fc20d60d9430\"\u003e\u003ccode\u003e7103c3a\u003c/code\u003e\u003c/a\u003e fix(deps): bump \u003ccode\u003ees-module-lexer\u003c/code\u003e to 2.3.0 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22838\"\u003e#22838\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/1534d362794e856cc718b123cb245e0efcf36b9a\"\u003e\u003ccode\u003e1534d36\u003c/code\u003e\u003c/a\u003e fix(css): inject inlined CSS after the shebang line (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22717\"\u003e#22717\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/c4acd6982a051fa10dbd7e3a37e00f0c467793b8\"\u003e\u003ccode\u003ec4acd69\u003c/code\u003e\u003c/a\u003e fix(ssr): correct stacktrace column position for first line (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22828\"\u003e#22828\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/2c530542da1c50b95b7f0cb17adf82f64ecf97f3\"\u003e\u003ccode\u003e2c53054\u003c/code\u003e\u003c/a\u003e fix: preload css for nested dynamic imports (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22759\"\u003e#22759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/ba3119397d0110952f29965774c627a3017d7292\"\u003e\u003ccode\u003eba31193\u003c/code\u003e\u003c/a\u003e release: v8.1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0d3bd7c4111b8345cfc353c7bbb2c30601752e26\"\u003e\u003ccode\u003e0d3bd7c\u003c/code\u003e\u003c/a\u003e fix(deps): revert es-module-lexer to 2.1.0 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22827\"\u003e#22827\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/efb98cce73f3f89c4f03936ab7741cd5b0636f5c\"\u003e\u003ccode\u003eefb98cc\u003c/code\u003e\u003c/a\u003e fix: restore, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/cf97711963ddcdcfac3e4fcd00771d7a55e92141\"\u003e\u003ccode\u003ecf97711\u003c/code\u003e\u003c/a\u003e fix: revert, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/cccef55dfaa6253929d2cb58d3af53f217efc877\"\u003e\u003ccode\u003ecccef55\u003c/code\u003e\u003c/a\u003e fix: revert, \u0026quot;fix: escape ids with multiple null bytes (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22687\"\u003e#22687\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v8.1.3/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for vite since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `minimatch` from 3.1.2 to 3.1.5\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/7bba97888a27a6162983056bcce2a6e28f668712\"\u003e\u003ccode\u003e7bba978\u003c/code\u003e\u003c/a\u003e 3.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/bd259425b2ca17b42897997f93e890314155522d\"\u003e\u003ccode\u003ebd25942\u003c/code\u003e\u003c/a\u003e docs: add warning about ReDoS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/1a9c27c75725474dbde57db2995b6281b267756d\"\u003e\u003ccode\u003e1a9c27c\u003c/code\u003e\u003c/a\u003e fix partial matching of globstar patterns\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/1a2e084af579731af66c221214e3ca8222c9bf23\"\u003e\u003ccode\u003e1a2e084\u003c/code\u003e\u003c/a\u003e 3.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/ae24656237c3d58067442f790ce17eff84463a47\"\u003e\u003ccode\u003eae24656\u003c/code\u003e\u003c/a\u003e update lockfile\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/b1003749228b2a79e1f237963a0d559ef7a0941e\"\u003e\u003ccode\u003eb100374\u003c/code\u003e\u003c/a\u003e limit recursion for **, improve perf considerably\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/26ffeaa091b9f660833e23f42e07165b33e85c13\"\u003e\u003ccode\u003e26ffeaa\u003c/code\u003e\u003c/a\u003e lockfile update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/9eca892a4e5dbb20534f9f30483b85cdeee6c2eb\"\u003e\u003ccode\u003e9eca892\u003c/code\u003e\u003c/a\u003e lock node version to 14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/00c323b188b704e5d4bc534ecec2268cfa70a32a\"\u003e\u003ccode\u003e00c323b\u003c/code\u003e\u003c/a\u003e 3.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/30486b2048929264f44d18822891cfffa02af78b\"\u003e\u003ccode\u003e30486b2\u003c/code\u003e\u003c/a\u003e update CI matrix and actions\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `flatted` from 3.3.3 to 3.4.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/3bf09091c3562e17a0647bc06710dd6097079cf7\"\u003e\u003ccode\u003e3bf0909\u003c/code\u003e\u003c/a\u003e 3.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802\"\u003e\u003ccode\u003e885ddcc\u003c/code\u003e\u003c/a\u003e fix CWE-1321\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/0bdba705d130f00892b1b8fcc80cf4cdea0631e3\"\u003e\u003ccode\u003e0bdba70\u003c/code\u003e\u003c/a\u003e added flatted-view to the benchmark\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/2a02dce7c641dec31194c67663f9b0b12e62da20\"\u003e\u003ccode\u003e2a02dce\u003c/code\u003e\u003c/a\u003e 3.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/fba4e8f2e113665da275b19cd0f695f3d98e9416\"\u003e\u003ccode\u003efba4e8f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/WebReflection/flatted/issues/89\"\u003e#89\u003c/a\u003e from WebReflection/python-fix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/5fe86485e6df7f7f34a07a2a85498bd3e17384e7\"\u003e\u003ccode\u003e5fe8648\u003c/code\u003e\u003c/a\u003e added \u0026quot;when in Rome\u0026quot; also a test for PHP\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/53517adbefe724fe472b2f9ebcdb01910d0ae3f0\"\u003e\u003ccode\u003e53517ad\u003c/code\u003e\u003c/a\u003e some minor improvement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/b3e2a0c387bf446435fec45ad7f05299f012346f\"\u003e\u003ccode\u003eb3e2a0c\u003c/code\u003e\u003c/a\u003e Fixing recursion issue in Python too\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/c4b46dbcbf782326e54ea1b65d3ebb1dc7a23fad\"\u003e\u003ccode\u003ec4b46db\u003c/code\u003e\u003c/a\u003e Add SECURITY.md for security policy and reporting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/f86d071e0f70de5a7d8200198824a3f07fc9c988\"\u003e\u003ccode\u003ef86d071\u003c/code\u003e\u003c/a\u003e Create dependabot.yml for version updates\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 4.1.0 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda\"\u003e\u003ccode\u003e33d05b5\u003c/code\u003e\u003c/a\u003e 4.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb\"\u003e\u003ccode\u003e663bfab\u003c/code\u003e\u003c/a\u003e Drop demo publish, to not override new v5 one.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986\"\u003e\u003ccode\u003e1cb8c7b\u003c/code\u003e\u003c/a\u003e Add v4-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157\"\u003e\u003ccode\u003e02f27af\u003c/code\u003e\u003c/a\u003e Restore umd builds back to es5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb\"\u003e\u003ccode\u003e8be84ed\u003c/code\u003e\u003c/a\u003e Fix es5 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4\"\u003e\u003ccode\u003e59423c6\u003c/code\u003e\u003c/a\u003e Replace \u003ccode\u003emaxMergeSeqLength\u003c/code\u003e option with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (more robust). Ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d\"\u003e\u003ccode\u003e6842ef6\u003c/code\u003e\u003c/a\u003e doc polish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/590dbabadd172b099c07654fab2eabec8c7a07b9\"\u003e\u003ccode\u003e590dbab\u003c/code\u003e\u003c/a\u003e 4.2.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f944dc5cd132251752499bdb157f33027d362177\"\u003e\u003ccode\u003ef944dc5\u003c/code\u003e\u003c/a\u003e Add package.json funding field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f6927192223355b64f2a6e19f3071ccc579ee718\"\u003e\u003ccode\u003ef692719\u003c/code\u003e\u003c/a\u003e Changelog update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/4.1.0...4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nRemoves `picomatch`\n\nUpdates `react-router` from 7.6.2 to 7.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/remix-run/react-router/releases\"\u003ereact-router's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.18.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181\"\u003ehttps://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.18.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.17.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.16.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.15.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.15.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.2\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.2\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.12.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.11.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7110\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7110\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.10.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7101\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7101\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.10.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7100\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7100\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.9.6\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v796\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v796\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/remix-run/react-router/blob/react-router@7.18.1/packages/react-router/CHANGELOG.md\"\u003ereact-router's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.18.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eNo changes\u003c/em\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.18.0\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix server handler prerender responses when using \u003ccode\u003essr: false\u003c/code\u003e and \u003ccode\u003efuture.v8_trailingSlashAwareDataRequests: true\u003c/code\u003e. Avoids false positive \u0026quot;SPA Mode\u0026quot; detection when serving prerendered paths (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15173\"\u003e#15173\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse the \u003ccode\u003eServerRouter\u003c/code\u003e nonce for nonce-aware SSR components when they don't provide their own value so strict CSP pages can load them. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15170\"\u003e#15170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003eturbo-stream\u003c/code\u003e to serialize and deserialize Framework Mode hydration errors (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15175\"\u003e#15175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrecompute route branch matchers to avoid recompiling route path regexes during matching (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15186\"\u003e#15186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse the constructed request URL host when validating action request origins. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15185\"\u003e#15185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove the un-documented custom error serialization logic from Data Mode SSR built-in hydration flows (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15175\"\u003e#15175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eValidate protocols in RSC render redirects (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15177\"\u003e#15177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eConsolidate url normalization logic and better handle mixed slashes (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15176\"\u003e#15176\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.17.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShip a subset of the official documentation inside the \u003ccode\u003ereact-router\u003c/code\u003e package (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15121\"\u003e#15121\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eMarkdown docs are now available in \u003ccode\u003enode_modules/react-router/docs\u003c/code\u003e, letting AI coding agents and the React Router agent skills read official docs locally\u003c/li\u003e\n\u003cli\u003eExcludes auto-generated API docs (\u003ccode\u003eapi/\u003c/code\u003e), \u003ccode\u003ecommunity/\u003c/code\u003e content, and tutorials (\u003ccode\u003etutorials/\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.16.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eStabilize \u003ccode\u003efuture.unstable_trailingSlashAwareDataRequests\u003c/code\u003e as \u003ccode\u003efuture.v8_trailingSlashAwareDataRequests\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15098\"\u003e#15098\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDisable manifest path when lazy route dicovery is disabled (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15068\"\u003e#15068\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix browser URL creation to use the configured history window instead of the global window. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15066\"\u003e#15066\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePass the history/router window through to \u003ccode\u003ecreateBrowserURLImpl\u003c/code\u003e so custom window contexts keep the correct URL origin.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix \u003ccode\u003euseNavigation()\u003c/code\u003e return type to preserve discriminated union across navigation states (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15095\"\u003e#15095\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eWiden \u003ccode\u003eMetaDescriptor\u003c/code\u003e \u003ccode\u003escript:ld+json\u003c/code\u003e type from \u003ccode\u003eLdJsonObject\u003c/code\u003e to \u003ccode\u003eLdJsonObject | LdJsonObject[]\u003c/code\u003e to permit multiple JSON-LD schemas in a single \u003ccode\u003e\u0026lt;script type=\u0026quot;application/ld+json\u0026quot;\u0026gt;\u003c/code\u003e tag emitted by \u003ccode\u003e\u0026lt;Meta /\u0026gt;\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15082\"\u003e#15082\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.15.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate router to operate on fetcher Maps in an immutable manner to avoid delayed React renders from potentially reading an updated but not yet committed Map. This could result in brief flickers in some fetcher-driven optimistic UI scenarios. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15028\"\u003e#15028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eserverLoader()\u003c/code\u003e returning stale SSR data when a client navigation aborts pending hydration before the hydration \u003ccode\u003eclientLoader\u003c/code\u003e resolves (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15022\"\u003e#15022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/afdf85d3c15448a41017514caca2aca038d3e9ca\"\u003e\u003ccode\u003eafdf85d\u003c/code\u003e\u003c/a\u003e Release v7.18.1 (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15253\"\u003e#15253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/6fb1e79f8304eddd8b78759edea83cb32389ebf5\"\u003e\u003ccode\u003e6fb1e79\u003c/code\u003e\u003c/a\u003e Release v7.18.0 (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15187\"\u003e#15187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/09e6020d1950e54f361f7ad00938ecd4dde60929\"\u003e\u003ccode\u003e09e6020\u003c/code\u003e\u003c/a\u003e Optimize route matching internals (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15186\"\u003e#15186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/5b57f5f371595ad97ac91cca389c5adc08ddcc3a\"\u003e\u003ccode\u003e5b57f5f\u003c/code\u003e\u003c/a\u003e Request Host derivation + CSRF check simplifications (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15185\"\u003e#15185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/ce596e823f0d7b883a433af1d5a839a8b9fe0242\"\u003e\u003ccode\u003ece596e8\u003c/code\u003e\u003c/a\u003e Validate RSC redirect protocols (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15177\"\u003e#15177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/1cebd2a823bb232ad74dcb2d970f750070b2bebe\"\u003e\u003ccode\u003e1cebd2a\u003c/code\u003e\u003c/a\u003e chore: format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/9d22943fd46c8ae4b08236425fa3549e10e9ad1a\"\u003e\u003ccode\u003e9d22943\u003c/code\u003e\u003c/a\u003e Use turbo stream for framework hydration errors (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15175\"\u003e#15175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/bf63729561365b50705a24fd576e293424df23ef\"\u003e\u003ccode\u003ebf63729\u003c/code\u003e\u003c/a\u003e Consolidate url normalization logic (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15176\"\u003e#15176\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/4ce8ff72737bcf43afc7e9f5705c9214a19ec9f6\"\u003e\u003ccode\u003e4ce8ff7\u003c/code\u003e\u003c/a\u003e Fix prerendering pathname issue with trailingSlashAwareDataRequests e… (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15173\"\u003e#15173\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/4f060dd11cd8bedcba9e3ee96fce832bd987fe25\"\u003e\u003ccode\u003e4f060dd\u003c/code\u003e\u003c/a\u003e Use ServerRouter nonce when nonce prop is not specified (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15170\"\u003e#15170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/remix-run/react-router/commits/react-router@7.18.1/packages/react-router\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for react-router since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.4.3 to 7.5.19\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~isaacs\"\u003eisaacs\u003c/a\u003e, a new releaser for tar since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/guibranco/guibranco.github.io/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/guibranco/guibranco.github.io/pull/852","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/guibranco%2Fguibranco.github.io/issues/852","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/852/packages"},{"uuid":"4798582753","node_id":"PR_kwDOCKdSKc7tVbeI","number":833,"state":"closed","title":"Bump the npm_and_yarn group across 1 directory with 4 updates","user":"dependabot[bot]","labels":["dependencies","size/XXL"],"assignees":["guibranco"],"locked":false,"comments_count":7,"pull_request":true,"closed_at":"2026-07-02T22:26:02.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-02T22:23:10.000Z","updated_at":"2026-07-02T22:27:27.000Z","time_to_close":172,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":4,"packages":[{"name":"vite","old_version":"6.3.5","new_version":"8.1.3","repository_url":"https://github.com/vitejs/vite"},{"name":"js-yaml","old_version":"4.1.0","new_version":"4.3.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"react-router","old_version":"7.6.2","new_version":"7.18.1","repository_url":"https://github.com/remix-run/react-router"},{"name":"tar","old_version":"7.4.3","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 4 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [js-yaml](https://github.com/nodeca/js-yaml), [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) and [tar](https://github.com/isaacs/node-tar).\n\nUpdates `vite` from 6.3.5 to 8.1.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.1.3\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.3/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.2\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.2/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.1\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.1/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ecreate-vite@8.1.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/create-vite@8.1.0/packages/create-vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003eplugin-legacy@8.1.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0/packages/plugin-legacy/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.0/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003eplugin-legacy@8.1.0-beta.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0-beta.0/packages/plugin-legacy/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.0-beta.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.0-beta.0/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.16\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.16/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.15\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.15/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.14\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.14/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.13\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.13/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.12\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.12/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.11\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.11/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.10\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.10/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.9\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.9/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.8\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.8/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.1.2...v8.1.3\"\u003e8.1.3\u003c/a\u003e (2026-07-02)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e inject inlined CSS after the shebang line (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22717\"\u003e#22717\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/1534d362794e856cc718b123cb245e0efcf36b9a\"\u003e1534d36\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e bump \u003ccode\u003ees-module-lexer\u003c/code\u003e to 2.3.0 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22838\"\u003e#22838\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7103c3af795396e2ad87e1125eb3fc20d60d9430\"\u003e7103c3a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epreload css for nested dynamic imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22759\"\u003e#22759\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2c530542da1c50b95b7f0cb17adf82f64ecf97f3\"\u003e2c53054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e correct stacktrace column position for first line (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22828\"\u003e#22828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c4acd6982a051fa10dbd7e3a37e00f0c467793b8\"\u003ec4acd69\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.1.1...v8.1.2\"\u003e8.1.2\u003c/a\u003e (2026-06-30)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e revert es-module-lexer to 2.1.0 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22827\"\u003e#22827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d3bd7c4111b8345cfc353c7bbb2c30601752e26\"\u003e0d3bd7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erestore, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of cwd (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22757\"\u003e#22757\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22825\"\u003e#22825\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/efb98cce73f3f89c4f03936ab7741cd5b0636f5c\"\u003eefb98cc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erevert, \u0026quot;fix: escape ids with multiple null bytes (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22687\"\u003e#22687\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://github.com/vitejs/vite/commit/cccef55dfaa6253929d2cb58d3af53f217efc877\"\u003ecccef55\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erevert, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of cwd (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22757\"\u003e#22757\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://github.com/vitejs/vite/commit/cf97711963ddcdcfac3e4fcd00771d7a55e92141\"\u003ecf97711\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.1.0...v8.1.1\"\u003e8.1.1\u003c/a\u003e (2026-06-30)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dynamic import warning to link to Vite docs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22823\"\u003e#22823\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/62bd7afd27ec0507bf528a135165dda3a44ebc21\"\u003e62bd7af\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e avoid stack overflow on \u003ccode\u003eimport.meta.hot.invalidate()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22797\"\u003e#22797\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/709eb8ee03d3c46269755334f59b7e9a353fc522\"\u003e709eb8e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e serve assets emitted during HMR/lazy compile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22745\"\u003e#22745\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5876b2cc2e1a01df9363e1e3d1d19f474ba68285\"\u003e5876b2c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundledDev:\u003c/strong\u003e skip plugin transform hooks for rolldown-lazy stub modules (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22778\"\u003e#22778\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8f925e2e496f4d313d860acb53880245b07ce6f7\"\u003e8f925e2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e preserve dollar signs in external \u003ccode\u003e@import\u003c/code\u003e urls with lightningcss (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22718\"\u003e#22718\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/9fa7ab4990f4fe74597d0a37a16d84af1c1e3544\"\u003e9fa7ab4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e resolve tsconfig paths in CSS and Sass \u003ca href=\"https://github.com/import\"\u003e\u003ccode\u003e@​import\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22775\"\u003e#22775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ef0b8916160c4d2a677decc062f6faa48fbf1578\"\u003eef0b891\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22734\"\u003e#22734\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/e635f493faa24930ae637318d6564539bc668e89\"\u003ee635f49\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22804\"\u003e#22804\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8837400a676a633af1ad6d3746b584d13cf90ecc\"\u003e8837400\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22591\"\u003e#22591\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2ce6677a151c53a019baec32859b646267f9d320\"\u003e2ce6677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eescape ids with multiple null bytes (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22687\"\u003e#22687\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/833fc302f3f4a5030f49207b5fbf10422f3247a2\"\u003e833fc30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehide console window when running 'net use' on Windows (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22698\"\u003e#22698\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/92b63f219f6c1872f35461aa75e9e9aec79bb01c\"\u003e92b63f2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eignore bundled config temp dir (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22800\"\u003e#22800\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/043a81096ddf8c6f9077c8e3e12362c83f9ed089\"\u003e043a810\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einvert \u003ccode\u003eesbuild.jsxSideEffects\u003c/code\u003e when converting to \u003ccode\u003eoxc.jsx.pure\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22809\"\u003e#22809\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/33895ba4faa0a46d5bd7b3eb53d02255113c8b5d\"\u003e33895ba\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimize-deps:\u003c/strong\u003e ignore \u003ccode\u003eERR_CLOSED_SERVER\u003c/code\u003e in scanner (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22784\"\u003e#22784\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/085a0ab704bf1a698d459d625a5c955d27b73134\"\u003e085a0ab\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scanner should resolve \u003ccode\u003einput\u003c/code\u003e from \u003ccode\u003eroot\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22769\"\u003e#22769\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/9722b0795b68602597ddd53e3d3c7ed9f00cb831\"\u003e9722b07\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eresolve pnpm .modules.yaml from workspace root instead of cwd (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22757\"\u003e#22757\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2531ac7ccd1d581df5febe4a3814226ba8939a20\"\u003e2531ac7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ereturn sourcemap field from some plugins that were lacking (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22782\"\u003e#22782\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7e18bf802bdde7a386eb3b407c87a67f89a895ca\"\u003e7e18bf8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle malformed URI in indexHtmlMiddleware (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22781\"\u003e#22781\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/84f5cccc7574c740c46f5cb2a09f29cde8380701\"\u003e84f5ccc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eimprove dependency optimizer messages (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22549\"\u003e#22549\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/092cb3b4247a06ba176c094a9a743d335adc6574\"\u003e092cb3b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e remove lightningcss null byte bug workaround (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22822\"\u003e#22822\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2dafd3bb7f8b265037e216f50afaa890ae2e2875\"\u003e2dafd3b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003euse pre-defined environments variable to avoid duplicate \u003ccode\u003eObject.values\u003c/code\u003e calls (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22790\"\u003e#22790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/1113acf6cff711196b3443f7126804847c1d4e1e\"\u003e1113acf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/578ffb80d46940f3b99cd96ed609f8b3a0ac5ede\"\u003e\u003ccode\u003e578ffb8\u003c/code\u003e\u003c/a\u003e release: v8.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/7103c3af795396e2ad87e1125eb3fc20d60d9430\"\u003e\u003ccode\u003e7103c3a\u003c/code\u003e\u003c/a\u003e fix(deps): bump \u003ccode\u003ees-module-lexer\u003c/code\u003e to 2.3.0 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22838\"\u003e#22838\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/1534d362794e856cc718b123cb245e0efcf36b9a\"\u003e\u003ccode\u003e1534d36\u003c/code\u003e\u003c/a\u003e fix(css): inject inlined CSS after the shebang line (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22717\"\u003e#22717\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/c4acd6982a051fa10dbd7e3a37e00f0c467793b8\"\u003e\u003ccode\u003ec4acd69\u003c/code\u003e\u003c/a\u003e fix(ssr): correct stacktrace column position for first line (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22828\"\u003e#22828\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/2c530542da1c50b95b7f0cb17adf82f64ecf97f3\"\u003e\u003ccode\u003e2c53054\u003c/code\u003e\u003c/a\u003e fix: preload css for nested dynamic imports (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22759\"\u003e#22759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/ba3119397d0110952f29965774c627a3017d7292\"\u003e\u003ccode\u003eba31193\u003c/code\u003e\u003c/a\u003e release: v8.1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0d3bd7c4111b8345cfc353c7bbb2c30601752e26\"\u003e\u003ccode\u003e0d3bd7c\u003c/code\u003e\u003c/a\u003e fix(deps): revert es-module-lexer to 2.1.0 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22827\"\u003e#22827\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/efb98cce73f3f89c4f03936ab7741cd5b0636f5c\"\u003e\u003ccode\u003eefb98cc\u003c/code\u003e\u003c/a\u003e fix: restore, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/cf97711963ddcdcfac3e4fcd00771d7a55e92141\"\u003e\u003ccode\u003ecf97711\u003c/code\u003e\u003c/a\u003e fix: revert, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/cccef55dfaa6253929d2cb58d3af53f217efc877\"\u003e\u003ccode\u003ecccef55\u003c/code\u003e\u003c/a\u003e fix: revert, \u0026quot;fix: escape ids with multiple null bytes (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22687\"\u003e#22687\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v8.1.3/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for vite since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 4.1.0 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda\"\u003e\u003ccode\u003e33d05b5\u003c/code\u003e\u003c/a\u003e 4.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb\"\u003e\u003ccode\u003e663bfab\u003c/code\u003e\u003c/a\u003e Drop demo publish, to not override new v5 one.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986\"\u003e\u003ccode\u003e1cb8c7b\u003c/code\u003e\u003c/a\u003e Add v4-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157\"\u003e\u003ccode\u003e02f27af\u003c/code\u003e\u003c/a\u003e Restore umd builds back to es5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb\"\u003e\u003ccode\u003e8be84ed\u003c/code\u003e\u003c/a\u003e Fix es5 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4\"\u003e\u003ccode\u003e59423c6\u003c/code\u003e\u003c/a\u003e Replace \u003ccode\u003emaxMergeSeqLength\u003c/code\u003e option with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (more robust). Ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d\"\u003e\u003ccode\u003e6842ef6\u003c/code\u003e\u003c/a\u003e doc polish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/590dbabadd172b099c07654fab2eabec8c7a07b9\"\u003e\u003ccode\u003e590dbab\u003c/code\u003e\u003c/a\u003e 4.2.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f944dc5cd132251752499bdb157f33027d362177\"\u003e\u003ccode\u003ef944dc5\u003c/code\u003e\u003c/a\u003e Add package.json funding field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f6927192223355b64f2a6e19f3071ccc579ee718\"\u003e\u003ccode\u003ef692719\u003c/code\u003e\u003c/a\u003e Changelog update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/4.1.0...4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react-router` from 7.6.2 to 7.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/remix-run/react-router/releases\"\u003ereact-router's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.18.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181\"\u003ehttps://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.18.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.17.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.16.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.15.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.15.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.2\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.2\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.12.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.11.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7110\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7110\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.10.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7101\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7101\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.10.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7100\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7100\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.9.6\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v796\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v796\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/remix-run/react-router/blob/react-router@7.18.1/packages/react-router/CHANGELOG.md\"\u003ereact-router's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.18.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eNo changes\u003c/em\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.18.0\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix server handler prerender responses when using \u003ccode\u003essr: false\u003c/code\u003e and \u003ccode\u003efuture.v8_trailingSlashAwareDataRequests: true\u003c/code\u003e. Avoids false positive \u0026quot;SPA Mode\u0026quot; detection when serving prerendered paths (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15173\"\u003e#15173\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse the \u003ccode\u003eServerRouter\u003c/code\u003e nonce for nonce-aware SSR components when they don't provide their own value so strict CSP pages can load them. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15170\"\u003e#15170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003eturbo-stream\u003c/code\u003e to serialize and deserialize Framework Mode hydration errors (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15175\"\u003e#15175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrecompute route branch matchers to avoid recompiling route path regexes during matching (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15186\"\u003e#15186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse the constructed request URL host when validating action request origins. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15185\"\u003e#15185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove the un-documented custom error serialization logic from Data Mode SSR built-in hydration flows (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15175\"\u003e#15175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eValidate protocols in RSC render redirects (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15177\"\u003e#15177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eConsolidate url normalization logic and better handle mixed slashes (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15176\"\u003e#15176\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.17.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShip a subset of the official documentation inside the \u003ccode\u003ereact-router\u003c/code\u003e package (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15121\"\u003e#15121\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eMarkdown docs are now available in \u003ccode\u003enode_modules/react-router/docs\u003c/code\u003e, letting AI coding agents and the React Router agent skills read official docs locally\u003c/li\u003e\n\u003cli\u003eExcludes auto-generated API docs (\u003ccode\u003eapi/\u003c/code\u003e), \u003ccode\u003ecommunity/\u003c/code\u003e content, and tutorials (\u003ccode\u003etutorials/\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.16.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eStabilize \u003ccode\u003efuture.unstable_trailingSlashAwareDataRequests\u003c/code\u003e as \u003ccode\u003efuture.v8_trailingSlashAwareDataRequests\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15098\"\u003e#15098\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDisable manifest path when lazy route dicovery is disabled (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15068\"\u003e#15068\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix browser URL creation to use the configured history window instead of the global window. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15066\"\u003e#15066\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePass the history/router window through to \u003ccode\u003ecreateBrowserURLImpl\u003c/code\u003e so custom window contexts keep the correct URL origin.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix \u003ccode\u003euseNavigation()\u003c/code\u003e return type to preserve discriminated union across navigation states (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15095\"\u003e#15095\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eWiden \u003ccode\u003eMetaDescriptor\u003c/code\u003e \u003ccode\u003escript:ld+json\u003c/code\u003e type from \u003ccode\u003eLdJsonObject\u003c/code\u003e to \u003ccode\u003eLdJsonObject | LdJsonObject[]\u003c/code\u003e to permit multiple JSON-LD schemas in a single \u003ccode\u003e\u0026lt;script type=\u0026quot;application/ld+json\u0026quot;\u0026gt;\u003c/code\u003e tag emitted by \u003ccode\u003e\u0026lt;Meta /\u0026gt;\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15082\"\u003e#15082\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.15.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate router to operate on fetcher Maps in an immutable manner to avoid delayed React renders from potentially reading an updated but not yet committed Map. This could result in brief flickers in some fetcher-driven optimistic UI scenarios. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15028\"\u003e#15028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eserverLoader()\u003c/code\u003e returning stale SSR data when a client navigation aborts pending hydration before the hydration \u003ccode\u003eclientLoader\u003c/code\u003e resolves (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15022\"\u003e#15022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/afdf85d3c15448a41017514caca2aca038d3e9ca\"\u003e\u003ccode\u003eafdf85d\u003c/code\u003e\u003c/a\u003e Release v7.18.1 (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15253\"\u003e#15253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/6fb1e79f8304eddd8b78759edea83cb32389ebf5\"\u003e\u003ccode\u003e6fb1e79\u003c/code\u003e\u003c/a\u003e Release v7.18.0 (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15187\"\u003e#15187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/09e6020d1950e54f361f7ad00938ecd4dde60929\"\u003e\u003ccode\u003e09e6020\u003c/code\u003e\u003c/a\u003e Optimize route matching internals (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15186\"\u003e#15186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/5b57f5f371595ad97ac91cca389c5adc08ddcc3a\"\u003e\u003ccode\u003e5b57f5f\u003c/code\u003e\u003c/a\u003e Request Host derivation + CSRF check simplifications (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15185\"\u003e#15185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/ce596e823f0d7b883a433af1d5a839a8b9fe0242\"\u003e\u003ccode\u003ece596e8\u003c/code\u003e\u003c/a\u003e Validate RSC redirect protocols (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15177\"\u003e#15177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/1cebd2a823bb232ad74dcb2d970f750070b2bebe\"\u003e\u003ccode\u003e1cebd2a\u003c/code\u003e\u003c/a\u003e chore: format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/9d22943fd46c8ae4b08236425fa3549e10e9ad1a\"\u003e\u003ccode\u003e9d22943\u003c/code\u003e\u003c/a\u003e Use turbo stream for framework hydration errors (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15175\"\u003e#15175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/bf63729561365b50705a24fd576e293424df23ef\"\u003e\u003ccode\u003ebf63729\u003c/code\u003e\u003c/a\u003e Consolidate url normalization logic (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15176\"\u003e#15176\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/4ce8ff72737bcf43afc7e9f5705c9214a19ec9f6\"\u003e\u003ccode\u003e4ce8ff7\u003c/code\u003e\u003c/a\u003e Fix prerendering pathname issue with trailingSlashAwareDataRequests e… (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15173\"\u003e#15173\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/4f060dd11cd8bedcba9e3ee96fce832bd987fe25\"\u003e\u003ccode\u003e4f060dd\u003c/code\u003e\u003c/a\u003e Use ServerRouter nonce when nonce prop is not specified (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15170\"\u003e#15170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/remix-run/react-router/commits/react-router@7.18.1/packages/react-router\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for react-router since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.4.3 to 7.5.19\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~isaacs\"\u003eisaacs\u003c/a\u003e, a new releaser for tar since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/guibranco/guibranco.github.io/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/guibranco/guibranco.github.io/pull/833","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/guibranco%2Fguibranco.github.io/issues/833","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/833/packages"},{"uuid":"4796892355","node_id":"PR_kwDOK5vYKc7tP46u","number":149,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 12 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-02T17:43:01.000Z","updated_at":"2026-07-02T17:45:13.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":12,"packages":[{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"uuid","old_version":"13.0.0","new_version":"14.0.1","repository_url":"https://github.com/uuidjs/uuid"},{"name":"postcss","old_version":"8.5.6","new_version":"8.5.10","repository_url":"https://github.com/postcss/postcss"},{"name":"flatted","old_version":"3.3.3","new_version":"3.4.2","repository_url":"https://github.com/WebReflection/flatted"},{"name":"tar","old_version":"6.2.1","new_version":"removed","repository_url":"https://github.com/isaacs/node-tar"},{"name":"tmp","old_version":"0.2.5","new_version":"0.2.7","repository_url":"https://github.com/raszi/node-tmp"},{"name":"ws","old_version":"7.5.10","new_version":"7.5.11","repository_url":"https://github.com/websockets/ws"},{"name":"ws","old_version":"8.18.3","new_version":"8.21.0","repository_url":"https://github.com/websockets/ws"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.1` |\n| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.10` |\n| [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.2` |\n| [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `removed` |\n| [tmp](https://github.com/raszi/node-tmp) | `0.2.5` | `0.2.7` |\n| [ws](https://github.com/websockets/ws) | `7.5.10` | `7.5.11` |\n| [ws](https://github.com/websockets/ws) | `8.18.3` | `8.21.0` |\n\n\nUpdates `lodash` from 4.17.21 to 4.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lodash/lodash/releases\"\u003elodash's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.18.1\u003c/h2\u003e\n\u003ch2\u003eBugs\u003c/h2\u003e\n\u003cp\u003eFixes a \u003ccode\u003eReferenceError\u003c/code\u003e issue in \u003ccode\u003elodash\u003c/code\u003e \u003ccode\u003elodash-es\u003c/code\u003e \u003ccode\u003elodash-amd\u003c/code\u003e and \u003ccode\u003elodash.template\u003c/code\u003e when using the \u003ccode\u003etemplate\u003c/code\u003e and \u003ccode\u003efromPairs\u003c/code\u003e functions from the modular builds. See \u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769\"\u003elodash/lodash#6167\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThese defects were related to how lodash distributions are built from the main branch using \u003ca href=\"https://github.com/lodash-archive/lodash-cli\"\u003ehttps://github.com/lodash-archive/lodash-cli\u003c/a\u003e. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.\u003c/p\u003e\n\u003cp\u003eThere is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003elodash\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-es\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-amd\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash.template\u003c/code\u003e\u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.18.0\u003c/h2\u003e\n\u003ch2\u003ev4.18.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.23...4.18.0\"\u003ehttps://github.com/lodash/lodash/compare/4.17.23...4.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.unset\u003c/code\u003e / \u003ccode\u003e_.omit\u003c/code\u003e\u003c/strong\u003e: Fixed prototype pollution via \u003ccode\u003econstructor\u003c/code\u003e/\u003ccode\u003eprototype\u003c/code\u003e path traversal (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh\"\u003eGHSA-f23m-r3pf-42rh\u003c/a\u003e, \u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003efe8d32e\u003c/a\u003e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now \u003ccode\u003econstructor\u003c/code\u003e and \u003ccode\u003eprototype\u003c/code\u003e are blocked unconditionally as non-terminal path keys, matching \u003ccode\u003ebaseSet\u003c/code\u003e. Calls that previously returned \u003ccode\u003etrue\u003c/code\u003e and deleted the property now return \u003ccode\u003efalse\u003c/code\u003e and leave the target untouched.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.template\u003c/code\u003e\u003c/strong\u003e: Fixed code injection via \u003ccode\u003eimports\u003c/code\u003e keys (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc\"\u003eGHSA-r5fr-rjxr-66jc\u003c/a\u003e, CVE-2026-4800, \u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e879aaa9\u003c/a\u003e). Fixes an incomplete patch for CVE-2021-23337. The \u003ccode\u003evariable\u003c/code\u003e option was validated against \u003ccode\u003ereForbiddenIdentifierChars\u003c/code\u003e but \u003ccode\u003eimportsKeys\u003c/code\u003e was left unguarded, allowing code injection via the same \u003ccode\u003eFunction()\u003c/code\u003e constructor sink. \u003ccode\u003eimports\u003c/code\u003e keys containing forbidden identifier characters now throw \u003ccode\u003e\u0026quot;Invalid imports option passed into _.template\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd security notice for \u003ccode\u003e_.template\u003c/code\u003e in threat model and API docs (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6099\"\u003e#6099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument \u003ccode\u003elower \u0026gt; upper\u003c/code\u003e behavior in \u003ccode\u003e_.random\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6115\"\u003e#6115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix quotes in \u003ccode\u003e_.compact\u003c/code\u003e jsdoc (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6090\"\u003e#6090\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003elodash.*\u003c/code\u003e modular packages\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6157\"\u003eDiff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWe have also regenerated and published a select number of the \u003ccode\u003elodash.*\u003c/code\u003e modular packages.\u003c/p\u003e\n\u003cp\u003eThese modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.orderby\"\u003elodash.orderby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.tonumber\"\u003elodash.tonumber\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trim\"\u003elodash.trim\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trimend\"\u003elodash.trimend\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.sortedindexby\"\u003elodash.sortedindexby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.zipobjectdeep\"\u003elodash.zipobjectdeep\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.unset\"\u003elodash.unset\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.omit\"\u003elodash.omit\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.template\"\u003elodash.template\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/cb0b9b9212521c08e3eafe7c8cb0af1b42b6649e\"\u003e\u003ccode\u003ecb0b9b9\u003c/code\u003e\u003c/a\u003e release(patch): bump main to 4.18.1 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6177\"\u003e#6177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/75535f57883b7225adb96de1cfc1cd4169cfcb51\"\u003e\u003ccode\u003e75535f5\u003c/code\u003e\u003c/a\u003e chore: prune stale advisory refs (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6170\"\u003e#6170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/62e91bc6a39c98d85b9ada8c44d40593deaf82a4\"\u003e\u003ccode\u003e62e91bc\u003c/code\u003e\u003c/a\u003e docs: remove n_ Node.js \u0026lt; 6 REPL note from README (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6165\"\u003e#6165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4\"\u003e\u003ccode\u003e59be2de\u003c/code\u003e\u003c/a\u003e release(minor): bump to 4.18.0 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6161\"\u003e#6161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d\"\u003e\u003ccode\u003eaf63457\u003c/code\u003e\u003c/a\u003e fix: broken tests for _.template 879aaa9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0\"\u003e\u003ccode\u003e1073a76\u003c/code\u003e\u003c/a\u003e fix: linting issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e\u003ccode\u003e879aaa9\u003c/code\u003e\u003c/a\u003e fix: validate imports keys in _.template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003e\u003ccode\u003efe8d32e\u003c/code\u003e\u003c/a\u003e fix: block prototype pollution in baseUnset via constructor/prototype traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d\"\u003e\u003ccode\u003e18ba0a3\u003c/code\u003e\u003c/a\u003e refactor(fromPairs): use baseAssignValue for consistent assignment (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2\"\u003e\u003ccode\u003eb819080\u003c/code\u003e\u003c/a\u003e ci: add dist sync validation workflow (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6137\"\u003e#6137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.21...4.18.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `uuid` from 13.0.0 to 14.0.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/uuidjs/uuid/releases\"\u003euuid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v14.0.0...v14.0.1\"\u003e14.0.1\u003c/a\u003e (2026-06-20)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd types condition to node export for moduleResolution bundler (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/961\"\u003e#961\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/27ffae5e867823b8c7db255975d65358fbdb1a7e\"\u003e27ffae5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0\"\u003e14.0.0\u003c/a\u003e (2026-04-19)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexpect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/dc4ddb87272ed2843faccd130bcc41d492688bd3\"\u003edc4ddb8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexpect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/f2c235f93059325fa43e1106e624b5291bb523c4\"\u003ef2c235f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse GITHUB_TOKEN for release-please and enable npm provenance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/925\"\u003e#925\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/ffa31383e8e4e1f0b4e22e504561272041b8738c\"\u003effa3138\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.1...v13.0.2\"\u003e13.0.2\u003c/a\u003e (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ererelease to fix provenance. (\u003ca href=\"https://github.com/uuidjs/uuid/commit/49ccb35f78c0c4ce1409dd2f1d89f83caadba10b\"\u003e49ccb35\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v13.0.1\"\u003e13.0.1\u003c/a\u003e (2026-04-27)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackport fix for GHSA-w5hq-g745-h8pq (\u003ca href=\"https://github.com/uuidjs/uuid/commit/9d27ddf7046ce496ef39569ff84d948eeff9cb2a\"\u003e9d27ddf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md\"\u003euuid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v14.0.0...v14.0.1\"\u003e14.0.1\u003c/a\u003e (2026-06-20)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd types condition to node export for moduleResolution bundler (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/961\"\u003e#961\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/27ffae5e867823b8c7db255975d65358fbdb1a7e\"\u003e27ffae5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0\"\u003e14.0.0\u003c/a\u003e (2026-04-19)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq\"\u003eGHSA-w5hq-g745-h8pq\u003c/a\u003e: \u003ccode\u003ev3()\u003c/code\u003e, \u003ccode\u003ev5()\u003c/code\u003e, and \u003ccode\u003ev6()\u003c/code\u003e did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid \u003ccode\u003eoffset\u003c/code\u003e was provided. A \u003ccode\u003eRangeError\u003c/code\u003e is now thrown if \u003ccode\u003eoffset \u0026lt; 0\u003c/code\u003e or \u003ccode\u003eoffset + 16 \u0026gt; buf.length\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecrypto\u003c/code\u003e is now expected to be globally defined (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/70177807e9229dfacde2038dc1e722f1828f358a\"\u003e\u003ccode\u003e7017780\u003c/code\u003e\u003c/a\u003e chore(main): release 14.0.1 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/964\"\u003e#964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/f2c3e4b513e47968f568ad1bf96417c6924e83a7\"\u003e\u003ccode\u003ef2c3e4b\u003c/code\u003e\u003c/a\u003e chore: fix release-please workflow (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/963\"\u003e#963\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/27ffae5e867823b8c7db255975d65358fbdb1a7e\"\u003e\u003ccode\u003e27ffae5\u003c/code\u003e\u003c/a\u003e fix: add types condition to node export for moduleResolution bundler (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/961\"\u003e#961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/664cb3163531f49d3a5125f732d38724621bfcaa\"\u003e\u003ccode\u003e664cb31\u003c/code\u003e\u003c/a\u003e Remove outdated security contact information (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/959\"\u003e#959\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/d729016037c4e1b09a522f4854a96f4f4add9047\"\u003e\u003ccode\u003ed729016\u003c/code\u003e\u003c/a\u003e fix(ci): checkout PR head commit in browser workflow (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/957\"\u003e#957\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/89a5ebcc56999fc25c95350f922693b71fb11d32\"\u003e\u003ccode\u003e89a5ebc\u003c/code\u003e\u003c/a\u003e Workflows (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/948\"\u003e#948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/196e208db33d568d8d43d5b549d5d0eb3d9b0fbf\"\u003e\u003ccode\u003e196e208\u003c/code\u003e\u003c/a\u003e chore: fix workflow (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/947\"\u003e#947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/95af4489be459d6ba14d137b6fcd87ffd0953e91\"\u003e\u003ccode\u003e95af448\u003c/code\u003e\u003c/a\u003e chore: update workflows (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/946\"\u003e#946\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/3b57f95555ab1b8432213264b5eaa318958fb8fe\"\u003e\u003ccode\u003e3b57f95\u003c/code\u003e\u003c/a\u003e chore: add workflow_dispatch (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/944\"\u003e#944\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/a433096a74e1d1815432fb1bed8115369785a1a9\"\u003e\u003ccode\u003ea433096\u003c/code\u003e\u003c/a\u003e chore: add 12.x and 13.x maintenance release branches (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/941\"\u003e#941\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for uuid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `postcss` from 8.5.6 to 8.5.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/releases\"\u003epostcss's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up source map encoding paring in case of the error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eProcessor#version\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved source map annotation cleaning performance (by CodeAnt AI).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/blob/main/CHANGELOG.md\"\u003epostcss's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up source map encoding paring in case of the error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eProcessor#version\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved source map annotation cleaning performance (by CodeAnt AI).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/33b9790263dc1562a46ce45d9532bd63e95b7986\"\u003e\u003ccode\u003e33b9790\u003c/code\u003e\u003c/a\u003e Release 8.5.10 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/536c79e4b01e58a3a56b09c3c0cf2323f4b9a28b\"\u003e\u003ccode\u003e536c79e\u003c/code\u003e\u003c/a\u003e Escape \u0026lt;/style\u0026gt; in CSS output (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2074\"\u003e#2074\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/afa96b2a139ce625c4d27973313479c7c85f39d4\"\u003e\u003ccode\u003eafa96b2\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2073\"\u003e#2073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/effe88bb87cabdc1876e02adbdd30f392f19f40d\"\u003e\u003ccode\u003eeffe88b\u003c/code\u003e\u003c/a\u003e Typo (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2072\"\u003e#2072\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/3ee79a2c4a11e41d52db50b444eebe38299495ad\"\u003e\u003ccode\u003e3ee79a2\u003c/code\u003e\u003c/a\u003e Thread model (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2071\"\u003e#2071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/2e0683daca4dc2919211b03774f6b2d137136c01\"\u003e\u003ccode\u003e2e0683d\u003c/code\u003e\u003c/a\u003e Create incident response docs (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2070\"\u003e#2070\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/fe88ac29c06b7b218be32994cdc6ca1525bdf2c9\"\u003e\u003ccode\u003efe88ac2\u003c/code\u003e\u003c/a\u003e Release 8.5.9 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/c551632496b87ab3f1965bfda5dc386b6c71963e\"\u003e\u003ccode\u003ec551632\u003c/code\u003e\u003c/a\u003e Avoid RegExp when we can use simple JS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/89a6b744060eb8dee743351c785a9fbe37d4525a\"\u003e\u003ccode\u003e89a6b74\u003c/code\u003e\u003c/a\u003e Move SECURITY.txt for docs folder to keep GitHub page cleaner\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/6ceb8a46af9f9de821faee98f861bdf84617347b\"\u003e\u003ccode\u003e6ceb8a4\u003c/code\u003e\u003c/a\u003e Create SECURITY.md\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/postcss/postcss/compare/8.5.6...8.5.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `flatted` from 3.3.3 to 3.4.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/3bf09091c3562e17a0647bc06710dd6097079cf7\"\u003e\u003ccode\u003e3bf0909\u003c/code\u003e\u003c/a\u003e 3.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802\"\u003e\u003ccode\u003e885ddcc\u003c/code\u003e\u003c/a\u003e fix CWE-1321\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/0bdba705d130f00892b1b8fcc80cf4cdea0631e3\"\u003e\u003ccode\u003e0bdba70\u003c/code\u003e\u003c/a\u003e added flatted-view to the benchmark\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/2a02dce7c641dec31194c67663f9b0b12e62da20\"\u003e\u003ccode\u003e2a02dce\u003c/code\u003e\u003c/a\u003e 3.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/fba4e8f2e113665da275b19cd0f695f3d98e9416\"\u003e\u003ccode\u003efba4e8f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/WebReflection/flatted/issues/89\"\u003e#89\u003c/a\u003e from WebReflection/python-fix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/5fe86485e6df7f7f34a07a2a85498bd3e17384e7\"\u003e\u003ccode\u003e5fe8648\u003c/code\u003e\u003c/a\u003e added \u0026quot;when in Rome\u0026quot; also a test for PHP\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/53517adbefe724fe472b2f9ebcdb01910d0ae3f0\"\u003e\u003ccode\u003e53517ad\u003c/code\u003e\u003c/a\u003e some minor improvement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/b3e2a0c387bf446435fec45ad7f05299f012346f\"\u003e\u003ccode\u003eb3e2a0c\u003c/code\u003e\u003c/a\u003e Fixing recursion issue in Python too\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/c4b46dbcbf782326e54ea1b65d3ebb1dc7a23fad\"\u003e\u003ccode\u003ec4b46db\u003c/code\u003e\u003c/a\u003e Add SECURITY.md for security policy and reporting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/f86d071e0f70de5a7d8200198824a3f07fc9c988\"\u003e\u003ccode\u003ef86d071\u003c/code\u003e\u003c/a\u003e Create dependabot.yml for version updates\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `form-data` from 4.0.5 to 4.0.6\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/form-data/form-data/blob/master/CHANGELOG.md\"\u003eform-data's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ev4.0.6\u003c/a\u003e - 2026-06-12\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames \u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435\"\u003e\u003ccode\u003e64190db\u003c/code\u003e\u003c/a\u003e v4.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e [Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nRemoves `tar`\n\nUpdates `ip-address` from 9.0.5 to 10.2.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/80fccaae984618f35dc941efab55cf2440ab37e8\"\u003e\u003ccode\u003e80fccaa\u003c/code\u003e\u003c/a\u003e 10.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/abaeb4d817cab16d3a1a78abd249d1f116bd302e\"\u003e\u003ccode\u003eabaeb4d\u003c/code\u003e\u003c/a\u003e Type Address4.addressMinusSuffix as non-nilable (closes \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/143\"\u003e#143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/2878c294e1216f9a0b69ad1d3c57a3790a7d5e8e\"\u003e\u003ccode\u003e2878c29\u003c/code\u003e\u003c/a\u003e Preserve subnet prefix through Address6.to4() (closes \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/123\"\u003e#123\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/203\"\u003e#203\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/586666ee9e666464071761d7a453715f98b6caee\"\u003e\u003ccode\u003e586666e\u003c/code\u003e\u003c/a\u003e Reject trailing junk in Address6.fromURL (closes \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/158\"\u003e#158\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/202\"\u003e#202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/80bc76eddf63df38db60defd5004bea919adf7ac\"\u003e\u003ccode\u003e80bc76e\u003c/code\u003e\u003c/a\u003e Validate static factories instead of silently overflowing (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/201\"\u003e#201\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/98927be9ef0c09f8ffcaf30b297405c9eff0a520\"\u003e\u003ccode\u003e98927be\u003c/code\u003e\u003c/a\u003e Clarify isValid() accepts CIDRs with host bits set (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/81\"\u003e#81\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/a0eb0732d6ac3088daa1106f4933eade41fd364a\"\u003e\u003ccode\u003ea0eb073\u003c/code\u003e\u003c/a\u003e Fix getScope() and broaden getType() classification (closes \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/122\"\u003e#122\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/200\"\u003e#200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/ec52105c87179129b9f091e97581e87b007824c7\"\u003e\u003ccode\u003eec52105\u003c/code\u003e\u003c/a\u003e Add networkForm() for CIDR network-address strings (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/199\"\u003e#199\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/a9443a72215b21a1e692be75cd3e18e8aa2262cb\"\u003e\u003ccode\u003ea9443a7\u003c/code\u003e\u003c/a\u003e Add isMapped4() predicate for IPv4-mapped IPv6 addresses (closes \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/62\"\u003e#62\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/198\"\u003e#198\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/f01d74267ed39f84521157e5f199edade9809f1e\"\u003e\u003ccode\u003ef01d742\u003c/code\u003e\u003c/a\u003e Add address-property predicates (private, ULA, loopback, link-local, etc.) (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v9.0.5...v10.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `sigstore` from 3.1.0 to 4.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore-js/releases\"\u003esigstore's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esigstore@4.1.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e7845532: Verification of OID certificate extensions\u003c/li\u003e\n\u003cli\u003ef074710: Require inclusion promise in Rekor entry when used as timestamp source\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [b5aa4f1]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [7845532]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [f074710]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/core\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.2.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/verify\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.1.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esigstore@4.1.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eeba6a52: \u003ccode\u003everify(bundle[, payload][, options])\u003c/code\u003e now returns a \u003ccode\u003eSigner\u003c/code\u003e object containing the public key and identity information from the verification.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [cee51c0]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [2042aad]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [018974e]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [dea916f]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [61a4f9e]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [5ffadc0]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [5ffadc0]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [1663b3e]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/tuf\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.0.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/verify\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.1.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/sign\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.1.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/core\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.1.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esigstore@4.0.0\u003c/h2\u003e\n\u003ch3\u003eMajor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e383e200: Drop support for node 18\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [40395f5]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [383e200]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [383e200]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [383e200]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/tuf\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.0.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/sign\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.0.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/bundle\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.0.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/verify\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.0.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/core\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.0.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/c1dc7d4778a450787fc72b083f2490ad02b714c6\"\u003e\u003ccode\u003ec1dc7d4\u003c/code\u003e\u003c/a\u003e Version Packages (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1607\"\u003e#1607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/f074710a91ea9260a9ac2142345634579843a3cd\"\u003e\u003ccode\u003ef074710\u003c/code\u003e\u003c/a\u003e reject integratedTime w/o inclusionPromise (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1659\"\u003e#1659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/7845532f9d17f6f765363dbee82b01bd159fb52b\"\u003e\u003ccode\u003e7845532\u003c/code\u003e\u003c/a\u003e OID certificate extension verification (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1658\"\u003e#1658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/b5aa4f1f8d2db0a9dfa6430fb114d9c2f1c304f7\"\u003e\u003ccode\u003eb5aa4f1\u003c/code\u003e\u003c/a\u003e proper utf-8 encoding in DSSE PAE (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1657\"\u003e#1657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/c7a34e0e9514f4573f8daf980c0987a4120a7183\"\u003e\u003ccode\u003ec7a34e0\u003c/code\u003e\u003c/a\u003e clarify cert ID matching (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1656\"\u003e#1656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/9858bd7fc535ff01755c8dd5842ef7171b0fafeb\"\u003e\u003ccode\u003e9858bd7\u003c/code\u003e\u003c/a\u003e Upgrade TypeScript to 6.x (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1655\"\u003e#1655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/8cef20d0069abd3ff03f2afb9ca320a76ddf6d4b\"\u003e\u003ccode\u003e8cef20d\u003c/code\u003e\u003c/a\u003e bump qs from 6.15.1 to 6.15.2 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1654\"\u003e#1654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/aca341b56aa561af4d74ad07fda4acd12c417beb\"\u003e\u003ccode\u003eaca341b\u003c/code\u003e\u003c/a\u003e bump \u003ccode\u003e@​sigstore/mock\u003c/code\u003e deps (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1653\"\u003e#1653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/0855acac119ae9f9dc21413356ce36eade2a51f8\"\u003e\u003ccode\u003e0855aca\u003c/code\u003e\u003c/a\u003e Pin all \u003ccode\u003e@​swc/core\u003c/code\u003e platform binaries as optionalDependencies (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1652\"\u003e#1652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/44a374d63107b25d11f880a8427e2e27d45965d8\"\u003e\u003ccode\u003e44a374d\u003c/code\u003e\u003c/a\u003e Pin all \u003ccode\u003e@​swc/core\u003c/code\u003e platform binaries as optionalDependencies (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1650\"\u003e#1650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore-js/compare/sigstore@3.1.0...sigstore@4.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for sigstore since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@sigstore/core` from 2.0.0 to 3.2.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore-js/releases\"\u003e@​sigstore/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​sigstore/core\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.2.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eb5aa4f1: Apply UTF-8 encoding to payload type during PAE calculation\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​sigstore/core\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.2.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e8f736ef: Update the \u003ccode\u003ecreatePublicKey\u003c/code\u003e function to support base64-encoded keys\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​sigstore/core\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.0.0\u003c/h2\u003e\n\u003ch3\u003eMajor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e383e200: Drop support for node 18\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/c1dc7d4778a450787fc72b083f2490ad02b714c6\"\u003e\u003ccode\u003ec1dc7d4\u003c/code\u003e\u003c/a\u003e Version Packages (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1607\"\u003e#1607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/f074710a91ea9260a9ac2142345634579843a3cd\"\u003e\u003ccode\u003ef074710\u003c/code\u003e\u003c/a\u003e reject integratedTime w/o inclusionPromise (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1659\"\u003e#1659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/7845532f9d17f6f765363dbee82b01bd159fb52b\"\u003e\u003ccode\u003e7845532\u003c/code\u003e\u003c/a\u003e OID certificate extension verification (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1658\"\u003e#1658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/b5aa4f1f8d2db0a9dfa6430fb114d9c2f1c304f7\"\u003e\u003ccode\u003eb5aa4f1\u003c/code\u003e\u003c/a\u003e proper utf-8 encoding in DSSE PAE (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1657\"\u003e#1657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/c7a34e0e9514f4573f8daf980c0987a4120a7183\"\u003e\u003ccode\u003ec7a34e0\u003c/code\u003e\u003c/a\u003e clarify cert ID matching (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1656\"\u003e#1656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/9858bd7fc535ff01755c8dd5842ef7171b0fafeb\"\u003e\u003ccode\u003e9858bd7\u003c/code\u003e\u003c/a\u003e Upgrade TypeScript to 6.x (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1655\"\u003e#1655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/8cef20d0069abd3ff03f2afb9ca320a76ddf6d4b\"\u003e\u003ccode\u003e8cef20d\u003c/code\u003e\u003c/a\u003e bump qs from 6.15.1 to 6.15.2 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1654\"\u003e#1654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/aca341b56aa561af4d74ad07fda4acd12c417beb\"\u003e\u003ccode\u003eaca341b\u003c/code\u003e\u003c/a\u003e bump \u003ccode\u003e@​sigstore/mock\u003c/code\u003e deps (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1653\"\u003e#1653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/0855acac119ae9f9dc21413356ce36eade2a51f8\"\u003e\u003ccode\u003e0855aca\u003c/code\u003e\u003c/a\u003e Pin all \u003ccode\u003e@​swc/core\u003c/code\u003e platform binaries as optionalDependencies (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1652\"\u003e#1652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/44a374d63107b25d11f880a8427e2e27d45965d8\"\u003e\u003ccode\u003e44a374d\u003c/code\u003e\u003c/a\u003e Pin all \u003ccode\u003e@​swc/core\u003c/code\u003e platform binaries as optionalDependencies (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1650\"\u003e#1650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore-js/compare/@sigstore/core@2.0.0...@sigstore/core@3.2.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​sigstore/core\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.14.0 to 6.15.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.3\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e for cumulative array growth via \u003ccode\u003ecombine\u003c/code\u003e/\u003ccode\u003emerge\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: respect encoding of surrogate pairs across chunks (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/559\"\u003e#559\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: throw the \u003ccode\u003earrayLimit\u003c/code\u003e error before splitting oversized comma values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils.merge\u003c/code\u003e / \u003ccode\u003eutils.assign\u003c/code\u003e: avoid invoking \u003ccode\u003e__proto__\u003c/code\u003e setter when copying own properties\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e consistently across \u003ccode\u003emerge\u003c/code\u003e's array paths\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003eutils\u003c/code\u003e: make \u003ccode\u003ecompact\u003c/code\u003e O(n) via a side-channel visited-set instead of \u003ccode\u003eArray.indexOf\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize current lenient handling of unbalanced bracket keys (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.2\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: skip null/undefined entries in \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e + \u003ccode\u003eencodeValuesOnly\u003c/code\u003e instead of crashing in \u003ccode\u003eencoder\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: use configured \u003ccode\u003edelimiter\u003c/code\u003e after \u003ccode\u003echarsetSentinel\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/555\"\u003e#555\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: apply \u003ccode\u003eformatter\u003c/code\u003e to encoded key under \u003ccode\u003estrictNullHandling\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/554\"\u003e#554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: skip null/undefined filter-array entries instead of crashing in \u003ccode\u003eencoder\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: handle nested bracket groups and add regression tests (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/530\"\u003e#530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] fix grammar (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/550\"\u003e#550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] add regression tests for keys containing percent-encoded bracket text\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: \u003ccode\u003eparameterLimit: Infinity\u003c/code\u003e with \u003ccode\u003ethrowOnLimitExceeded: true\u003c/code\u003e silently drops all parameters\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eiconv-lite\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] increase coverage\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add \u003ccode\u003estrictMerge\u003c/code\u003e option to wrap object/primitive conflicts in an array (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/425\"\u003e#425\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ljharb/qs/issues/122\"\u003e#122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eduplicates\u003c/code\u003e option should not apply to bracket notation keys (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/514\"\u003e#514\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.14.2\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: mark overflow objects for indexed notation exceeding \u003ccode\u003earrayLimit\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/546\"\u003e#546\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003earrayLimit\u003c/code\u003e means max count, not max index, in \u003ccode\u003ecombine\u003c/code\u003e/\u003ccode\u003emerge\u003c/code\u003e/\u003ccode\u003eparseArrayValue\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: throw on \u003ccode\u003earrayLimit\u003c/code\u003e exceeded with indexed notation when \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e is true (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/529\"\u003e#529\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e on \u003ccode\u003ecomma\u003c/code\u003e-parsed values\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: fix error message to reflect arrayLimit as max index; remove extraneous comments (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/545\"\u003e#545\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] avoid \u003ccode\u003e.push\u003c/code\u003e, use \u003ccode\u003evoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[readme] document that \u003ccode\u003eaddQueryPrefix\u003c/code\u003e does not add \u003ccode\u003e?\u003c/code\u003e to empty output (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/418\"\u003e#418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] clarify \u003ccode\u003eparseArrays\u003c/code\u003e and \u003ccode\u003earrayLimit\u003c/code\u003e documentation (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/543\"\u003e#543\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] replace runkit CI badge with shields.io check-runs badge\u003c/li\u003e\n\u003cli\u003e[meta] fix changelog typo (\u003ccode\u003earrayLength\u003c/code\u003e → \u003ccode\u003earrayLimit\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e[actions] fix rebase workflow permissions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.14.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] ensure \u003ccode\u003earrayLimit\u003c/code\u003e applies to \u003ccode\u003e[]\u003c/code\u003e notation as well\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: when a custom decoder returns \u003ccode\u003enull\u003c/code\u003e for a key, ignore that key\u003c/li\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003eparse\u003c/code\u003e: extract key segment splitting helper\u003c/li\u003e\n\u003cli\u003e[meta] add threat model\u003c/li\u003e\n\u003cli\u003e[actions] add workflow permissions\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/18d085e919dae70c8f1b200ab99323058edab2c2\"\u003e\u003ccode\u003e18d085e\u003c/code\u003e\u003c/a\u003e v6.15.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/c38af42039d8cbf83f3e0d486c924eaa5a5d1712\"\u003e\u003ccode\u003ec38af42\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/adce539489fcd34cc10830cf8c4a43e90b9300b0\"\u003e\u003ccode\u003eadce539\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/74a0f6a83af59245b4fa78785fbe709438580c97\"\u003e\u003ccode\u003e74a0f6a\u003c/code\u003e\u003c/a\u003e [Robustness] \u003ccode\u003eutils\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e consistently across \u003ccode\u003emerge\u003c/code\u003e's arra...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/f4938f594a0a2773d3c99c0c6f5c96f30d909a2c\"\u003e\u003ccode\u003ef4938f5\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize current lenient handling of unbalanced bracket ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/5d5f723afe55a861c52cff6327f62269df35fdd1\"\u003e\u003ccode\u003e5d5f723\u003c/code\u003e\u003c/a\u003e [Perf] \u003ccode\u003eutils\u003c/code\u003e: make \u003ccode\u003ecompact\u003c/code\u003e O(n) via a side-channel visited-set instead of...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/52afe00abdb36416ee01c8d5243919b47a59af67\"\u003e\u003ccode\u003e52afe00\u003c/code\u003e\u003c/a\u003e [Robustness] \u003ccode\u003eparse\u003c/code\u003e: throw the \u003ccode\u003earrayLimit\u003c/code\u003e error before splitting oversized...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/963e538c740961a35ecaa0b38ee1f5c16697e208\"\u003e\u003ccode\u003e963e538\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e for cumulative array growth via...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/59da434d5de8c3d2564e4d75aeedde2e8af72369\"\u003e\u003ccode\u003e59da434\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eutils\u003c/code\u003e: respect encoding of surrogate pairs across chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/9532969635a4bc96506370b28dd28dcab446e7ee\"\u003e\u003ccode\u003e9532969\u003c/code\u003e\u003c/a\u003e [Robustness] \u003ccode\u003eutils.merge\u003c/code\u003e / \u003ccode\u003eutils.assign\u003c/code\u003e: avoid invoking \u003ccode\u003e__proto__\u003c/code\u003e sette...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/qs/compare/v6.14.0...v6.15.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tmp` from 0.2.5 to 0.2.7\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raszi/node-tmp/commit/8ea1f37d75c67569e0f151448330d52f7babf211\"\u003e\u003ccode\u003e8ea1f37\u003c/code\u003e\u003c/a\u003e Bump up the version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raszi/node-tmp/commit/8f24f788a356b5d45c9bec894632bd4931338153\"\u003e\u003ccode\u003e8f24f78\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raszi/node-tmp/commit/ce787f37aaacccad921ae90990c9da33481fe59c\"\u003e\u003ccode\u003ece787f3\u003c/code\u003e\u003c/a\u003e Reject non-string prefix, postfix, template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raszi/node-tmp/commit/41f71598d03f104a67e0448a7cb9bd4efcdd5980\"\u003e\u003ccode\u003e41f7159\u003c/code\u003e\u003c/a\u003e Bump up the version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raszi/node-tmp/commit/efa4a06f24374797ae32ab2b6ae39b7a611ae429\"\u003e\u003ccode\u003eefa4a06\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raszi/node-tmp/commit/7ef2728ce0211b8110b2033dfe62eaf030341acf\"\u003e\u003ccode\u003e7ef2728\u003c/code\u003e\u003c/a\u003e Check for relative values\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/raszi/node-tmp/compare/v0.2.5...v0.2.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ws` from 7.5.10 to 7.5.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/websockets/ws/releases\"\u003ews's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e7.5.11\u003c/h2\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 2b2abd45 to the 7.x release line (e14c4586).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8\"\u003e\u003ccode\u003efd36cd8\u003c/code\u003e\u003c/a\u003e [dist] 7.5.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/e14c45861deca0cef60dec0f9109b694abebdf52\"\u003e\u003ccode\u003ee14c458\u003c/code\u003e\u003c/a\u003e [security] Limit retained message parts\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/websockets/ws/compare/7.5.10...7.5.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ws` from 8.18.3 to 8.21.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/websockets/ws/releases\"\u003ews's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e7.5.11\u003c/h2\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 2b2abd45 to the 7.x release line (e14c4586).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8\"\u003e\u003ccode\u003efd36cd8\u003c/code\u003e\u003c/a\u003e [dist] 7.5.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/e14c45861deca0cef60dec0f9109b694abebdf52\"\u003e\u003ccode\u003ee14c458\u003c/code\u003e\u003c/a\u003e [security] Limit retained message parts\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/websockets/ws/compare/7.5.10...7.5.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/soapy-dns/retirement-calc/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/soapy-dns/retirement-calc/pull/149","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/soapy-dns%2Fretirement-calc/issues/149","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/149/packages"},{"uuid":"4793593569","node_id":"PR_kwDOM5Y-Bc7tFEfN","number":2459,"state":"closed","title":"build(deps): bump the npm_and_yarn group across 19 directories with 4 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":9,"pull_request":true,"closed_at":"2026-07-02T10:46:06.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-02T10:37:46.000Z","updated_at":"2026-07-02T10:53:58.000Z","time_to_close":500,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"npm_and_yarn","update_count":4,"packages":[{"name":"@opentelemetry/core","old_version":"2.2.0","new_version":"2.8.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"@opentelemetry/core","old_version":"2.2.0","new_version":"2.8.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"@opentelemetry/core","old_version":"2.2.0","new_version":"2.8.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"tar","old_version":"7.5.11","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"},{"name":"undici","old_version":"7.24.7","new_version":"7.28.0","repository_url":"https://github.com/nodejs/undici"},{"name":"@opentelemetry/core","old_version":"2.2.0","new_version":"2.8.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the /examples/apq-subgraphs directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/extra-fields directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 4 updates in the /examples/federation-example directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js), [js-yaml](https://github.com/nodeca/js-yaml), [tar](https://github.com/isaacs/node-tar) and [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 4 updates in the /examples/federation-mixed directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js), [js-yaml](https://github.com/nodeca/js-yaml), [tar](https://github.com/isaacs/node-tar) and [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 4 updates in the /examples/federation-subscriptions-passthrough directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js), [js-yaml](https://github.com/nodeca/js-yaml), [tar](https://github.com/isaacs/node-tar) and [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 2 updates in the /examples/file-upload directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/hmac-auth-https directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/interface-additional-resolvers directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/json-schema-subscriptions directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 4 updates in the /examples/launchdarkly-override directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js), [js-yaml](https://github.com/nodeca/js-yaml), [tar](https://github.com/isaacs/node-tar) and [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 2 updates in the /examples/openapi-additional-resolvers directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/openapi-arg-rename directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/openapi-javascript-wiki directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/openapi-subscriptions directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/operation-field-permissions directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/programmatic-batching directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/subscriptions-with-transforms directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/type-merging-batching directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/typed-sdk directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\n\nUpdates `@opentelemetry/core` from 2.2.0 to 2.8.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.8.0\u003c/h2\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.1\u003c/h2\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.0\u003c/h2\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md\"\u003e@​opentelemetry/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: test Node.js 26 in CI \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6671\"\u003e#6671\u003c/a\u003e \u003ca href=\"https://github.com/cjihrig\"\u003e\u003ccode\u003e@​cjihrig\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.6.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/13a035bc695996cf4aec885fef7b9866f48bc555\"\u003e\u003ccode\u003e13a035b\u003c/code\u003e\u003c/a\u003e chore: prepare next release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6756\"\u003e#6756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/4b13587d1e08b47baf153e5312ccd08a3240d074\"\u003e\u003ccode\u003e4b13587\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/71d195c508320295f1892aaed1ee2f1971ffb470\"\u003e\u003ccode\u003e71d195c\u003c/code\u003e\u003c/a\u003e chore(renovate): set minimumReleaseAge to 3 days (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6792\"\u003e#6792\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/555fca6ce94fb8d40a5f869dbd28e43143b4e730\"\u003e\u003ccode\u003e555fca6\u003c/code\u003e\u003c/a\u003e Update renovate.json to use matchManagers (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6141\"\u003e#6141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/b711a81d5262904245d70f1857b6f3bc811b22cd\"\u003e\u003ccode\u003eb711a81\u003c/code\u003e\u003c/a\u003e docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/da704029ccd291d65402f3d1c469bd3f25aec047\"\u003e\u003ccode\u003eda70402\u003c/code\u003e\u003c/a\u003e fix(ci): supply-chain sec: disable caching in release-related workflow (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6790\"\u003e#6790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/002267b1c639aac1d2f1d6e5c7ac3ed023109ea0\"\u003e\u003ccode\u003e002267b\u003c/code\u003e\u003c/a\u003e chore: complete the move to the smaller SPDX license header (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6791\"\u003e#6791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/056ef9c4e1ddf9306477b7ce26acc7be489f9c6c\"\u003e\u003ccode\u003e056ef9c\u003c/code\u003e\u003c/a\u003e feat(sdk-metrics): implement metric reader metrics (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6449\"\u003e#6449\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/3bd69ce18011f9a16a7231489d9c3acc8294e8d9\"\u003e\u003ccode\u003e3bd69ce\u003c/code\u003e\u003c/a\u003e fix(configuration): improve environment variable substitution to handle all t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/bfbda7c2d90e1686f51cd0fc4d02d785ab9a9cc0\"\u003e\u003ccode\u003ebfbda7c\u003c/code\u003e\u003c/a\u003e docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/compare/v2.2.0...v2.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda\"\u003e\u003ccode\u003e33d05b5\u003c/code\u003e\u003c/a\u003e 4.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb\"\u003e\u003ccode\u003e663bfab\u003c/code\u003e\u003c/a\u003e Drop demo publish, to not override new v5 one.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986\"\u003e\u003ccode\u003e1cb8c7b\u003c/code\u003e\u003c/a\u003e Add v4-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157\"\u003e\u003ccode\u003e02f27af\u003c/code\u003e\u003c/a\u003e Restore umd builds back to es5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb\"\u003e\u003ccode\u003e8be84ed\u003c/code\u003e\u003c/a\u003e Fix es5 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4\"\u003e\u003ccode\u003e59423c6\u003c/code\u003e\u003c/a\u003e Replace \u003ccode\u003emaxMergeSeqLength\u003c/code\u003e option with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (more robust). Ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d\"\u003e\u003ccode\u003e6842ef6\u003c/code\u003e\u003c/a\u003e doc polish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/590dbabadd172b099c07654fab2eabec8c7a07b9\"\u003e\u003ccode\u003e590dbab\u003c/code\u003e\u003c/a\u003e 4.2.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f944dc5cd132251752499bdb157f33027d362177\"\u003e\u003ccode\u003ef944dc5\u003c/code\u003e\u003c/a\u003e Add package.json funding field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f6927192223355b64f2a6e19f3071ccc579ee718\"\u003e\u003ccode\u003ef692719\u003c/code\u003e\u003c/a\u003e Changelog update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@opentelemetry/core` from 2.2.0 to 2.8.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.8.0\u003c/h2\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.1\u003c/h2\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.0\u003c/h2\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md\"\u003e@​opentelemetry/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: test Node.js 26 in CI \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6671\"\u003e#6671\u003c/a\u003e \u003ca href=\"https://github.com/cjihrig\"\u003e\u003ccode\u003e@​cjihrig\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.6.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/13a035bc695996cf4aec885fef7b9866f48bc555\"\u003e\u003ccode\u003e13a035b\u003c/code\u003e\u003c/a\u003e chore: prepare next release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6756\"\u003e#6756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/4b13587d1e08b47baf153e5312ccd08a3240d074\"\u003e\u003ccode\u003e4b13587\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/71d195c508320295f1892aaed1ee2f1971ffb470\"\u003e\u003ccode\u003e71d195c\u003c/code\u003e\u003c/a\u003e chore(renovate): set minimumReleaseAge to 3 days (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6792\"\u003e#6792\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/555fca6ce94fb8d40a5f869dbd28e43143b4e730\"\u003e\u003ccode\u003e555fca6\u003c/code\u003e\u003c/a\u003e Update renovate.json to use matchManagers (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6141\"\u003e#6141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/b711a81d5262904245d70f1857b6f3bc811b22cd\"\u003e\u003ccode\u003eb711a81\u003c/code\u003e\u003c/a\u003e docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/da704029ccd291d65402f3d1c469bd3f25aec047\"\u003e\u003ccode\u003eda70402\u003c/code\u003e\u003c/a\u003e fix(ci): supply-chain sec: disable caching in release-related workflow (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6790\"\u003e#6790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/002267b1c639aac1d2f1d6e5c7ac3ed023109ea0\"\u003e\u003ccode\u003e002267b\u003c/code\u003e\u003c/a\u003e chore: complete the move to the smaller SPDX license header (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6791\"\u003e#6791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/056ef9c4e1ddf9306477b7ce26acc7be489f9c6c\"\u003e\u003ccode\u003e056ef9c\u003c/code\u003e\u003c/a\u003e feat(sdk-metrics): implement metric reader metrics (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6449\"\u003e#6449\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/3bd69ce18011f9a16a7231489d9c3acc8294e8d9\"\u003e\u003ccode\u003e3bd69ce\u003c/code\u003e\u003c/a\u003e fix(configuration): improve environment variable substitution to handle all t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/bfbda7c2d90e1686f51cd0fc4d02d785ab9a9cc0\"\u003e\u003ccode\u003ebfbda7c\u003c/code\u003e\u003c/a\u003e docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/compare/v2.2.0...v2.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda\"\u003e\u003ccode\u003e33d05b5\u003c/code\u003e\u003c/a\u003e 4.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb\"\u003e\u003ccode\u003e663bfab\u003c/code\u003e\u003c/a\u003e Drop demo publish, to not override new v5 one.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986\"\u003e\u003ccode\u003e1cb8c7b\u003c/code\u003e\u003c/a\u003e Add v4-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157\"\u003e\u003ccode\u003e02f27af\u003c/code\u003e\u003c/a\u003e Restore umd builds back to es5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb\"\u003e\u003ccode\u003e8be84ed\u003c/code\u003e\u003c/a\u003e Fix es5 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4\"\u003e\u003ccode\u003e59423c6\u003c/code\u003e\u003c/a\u003e Replace \u003ccode\u003emaxMergeSeqLength\u003c/code\u003e option with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (more robust). Ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d\"\u003e\u003ccode\u003e6842ef6\u003c/code\u003e\u003c/a\u003e doc polish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/590dbabadd172b099c07654fab2eabec8c7a07b9\"\u003e\u003ccode\u003e590dbab\u003c/code\u003e\u003c/a\u003e 4.2.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f944dc5cd132251752499bdb157f33027d362177\"\u003e\u003ccode\u003ef944dc5\u003c/code\u003e\u003c/a\u003e Add package.json funding field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f6927192223355b64f2a6e19f3071ccc579ee718\"\u003e\u003ccode\u003ef692719\u003c/code\u003e\u003c/a\u003e Changelog update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@opentelemetry/core` from 2.2.0 to 2.8.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.8.0\u003c/h2\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.1\u003c/h2\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.0\u003c/h2\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md\"\u003e@​opentelemetry/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: test Node.js 26 in CI \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6671\"\u003e#6671\u003c/a\u003e \u003ca href=\"https://github.com/cjihrig\"\u003e\u003ccode\u003e@​cjihrig\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.6.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/13a035bc695996cf4aec885fef7b9866f48bc555\"\u003e\u003ccode\u003e13a035b\u003c/code\u003e\u003c/a\u003e chore: prepare next release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6756\"\u003e#6756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/4b13587d1e08b47baf153e5312ccd08a3240d074\"\u003e\u003ccode\u003e4b13587\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/71d195c508320295f1892aaed1ee2f1971ffb470\"\u003e\u003ccode\u003e71d195c\u003c/code\u003e\u003c/a\u003e chore(renovate): set minimumReleaseAge to 3 days (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6792\"\u003e#6792\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/555fca6ce94fb8d40a5f869dbd28e43143b4e730\"\u003e\u003ccode\u003e555fca6\u003c/code\u003e\u003c/a\u003e Update renovate.json to use matchManagers (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6141\"\u003e#6141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/b711a81d5262904245d70f1857b6f3bc811b22cd\"\u003e\u003ccode\u003eb711a81\u003c/code\u003e\u003c/a\u003e docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/da704029ccd291d65402f3d1c469bd3f25aec047\"\u003e\u003ccode\u003eda70402\u003c/code\u003e\u003c/a\u003e fix(ci): supply-chain sec: disable caching in release-related workflow (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6790\"\u003e#6790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/002267b1c639aac1d2f1d6e5c7ac3ed023109ea0\"\u003e\u003ccode\u003e002267b\u003c/code\u003e\u003c/a\u003e chore: complete the move to the smaller SPDX license header (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6791\"\u003e#6791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/056ef9c4e1ddf9306477b7ce26acc7be489f9c6c\"\u003e\u003ccode\u003e056ef9c\u003c/code\u003e\u003c/a\u003e feat(sdk-metrics): implement metric reader metrics (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6449\"\u003e#6449\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/3bd69ce18011f9a16a7231489d9c3acc8294e8d9\"\u003e\u003ccode\u003e3bd69ce\u003c/code\u003e\u003c/a\u003e fix(configuration): improve environment variable substitution to handle all t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/bfbda7c2d90e1686f51cd0fc4d02d785ab9a9cc0\"\u003e\u003ccode\u003ebfbda7c\u003c/code\u003e\u003c/a\u003e docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/compare/v2.2.0...v2.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda\"\u003e\u003ccode\u003e33d05b5\u003c/code\u003e\u003c/a\u003e 4.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb\"\u003e\u003ccode\u003e663bfab\u003c/code\u003e\u003c/a\u003e Drop demo publish, to not override new v5 one.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986\"\u003e\u003ccode\u003e1cb8c7b\u003c/code\u003e\u003c/a\u003e Add v4-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157\"\u003e\u003ccode\u003e02f27af\u003c/code\u003e\u003c/a\u003e Restore umd builds back to es5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb\"\u003e\u003ccode\u003e8be84ed\u003c/code\u003e\u003c/a\u003e Fix es5 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4\"\u003e\u003ccode\u003e59423c6\u003c/code\u003e\u003c/a\u003e Replace \u003ccode\u003emaxMergeSeqLength\u003c/code\u003e option with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (more robust). Ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d\"\u003e\u003ccode\u003e6842ef6\u003c/code\u003e\u003c/a\u003e doc polish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/590dbabadd172b099c07654fab2eabec8c7a07b9\"\u003e\u003ccode\u003e590dbab\u003c/code\u003e\u003c/a\u003e 4.2.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f944dc5cd132251752499bdb157f33027d362177\"\u003e\u003ccode\u003ef944dc5\u003c/code\u003e\u003c/a\u003e Add package.json funding field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f6927192223355b64f2a6e19f3071ccc579ee718\"\u003e\u003ccode\u003ef692719\u003c/code\u003e\u003c/a\u003e Changelog update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.5.11 to 7.5.19\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.11...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `undici` from 7.24.7 to 7.28.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.28.0\u003c/h2\u003e\n\u003ch1\u003e⚠️ Security Release\u003c/h1\u003e\n\u003cp\u003eThis release line addresses \u003cstrong\u003e7 security advisories\u003c/strong\u003e, all shipped in \u003cstrong\u003ev7.28.0\u003c/strong\u003e.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eAction required:\u003c/strong\u003e Upgrade to \u003cstrong\u003eundici 7.28.0\u003c/strong\u003e or later.\u003c/p\u003e\n\u003cpre lang=\"sh\"\u003e\u003ccode\u003enpm install undici@^7.28.0\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThe v7 line is \u003cstrong\u003enot\u003c/strong\u003e affected by GHSA-38rv-x7px-6hhq (CVE-2026-9675), which is\nan 8.x-only regression.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eNote on GHSA-hm92-r4w5-c3mj:\u003c/strong\u003e this fix shipped in \u003cstrong\u003ev7.28.0\u003c/strong\u003e, not the\nearlier 7.2x line — the vulnerable single-pool code was still present through\n\u003ccode\u003ev7.27.2\u003c/code\u003e. The per-origin pool fix is\n\u003ca href=\"https://github.com/nodejs/undici/commit/3805b8f8\"\u003e\u003ccode\u003e3805b8f8\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5041\"\u003e#5041\u003c/a\u003e).\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eSummary\u003c/h2\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eAdvisory\u003c/th\u003e\n\u003cth\u003eCVE\u003c/th\u003e\n\u003cth\u003eSeverity (CVSS)\u003c/th\u003e\n\u003cth\u003eFixed in\u003c/th\u003e\n\u003cth\u003eFix commit\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q\"\u003eGHSA-vxpw-j846-p89q\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-12151\u003c/td\u003e\n\u003ctd\u003eHigh (7.5)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8cb10f98\"\u003e\u003ccode\u003e8cb10f98\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g\"\u003eGHSA-vmh5-mc38-953g\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-9697\u003c/td\u003e\n\u003ctd\u003eHigh (7.4)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/04201f89\"\u003e\u003ccode\u003e04201f89\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj\"\u003eGHSA-hm92-r4w5-c3mj\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-6734\u003c/td\u003e\n\u003ctd\u003eHigh (7.5)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/3805b8f8\"\u003e\u003ccode\u003e3805b8f8\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-pr7r-676h-xcf6\"\u003eGHSA-pr7r-676h-xcf6\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-9678\u003c/td\u003e\n\u003ctd\u003eModerate (5.9)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/85a24055\"\u003e\u003ccode\u003e85a24055\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-p88m-4jfj-68fv\"\u003eGHSA-p88m-4jfj-68fv\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-9679\u003c/td\u003e\n\u003ctd\u003eModerate (5.9)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/d0574cc4\"\u003e\u003ccode\u003ed0574cc4\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m\"\u003eGHSA-g8m3-5g58-fq7m\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-11525\u003c/td\u003e\n\u003ctd\u003eLow (3.7)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/d0574cc4\"\u003e\u003ccode\u003ed0574cc4\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52\"\u003eGHSA-35p6-xmwp-9g52\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-6733\u003c/td\u003e\n\u003ctd\u003eLow (3.7)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/ea8930cf\"\u003e\u003ccode\u003eea8930cf\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003chr /\u003e\n\u003ch2\u003eHigh severity\u003c/h2\u003e\n\u003ch3\u003eWebSocket DoS via fragment count bypass — CVE-2026-12151\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q\"\u003eGHSA-vxpw-j846-p89q\u003c/a\u003e\u003c/strong\u003e · CWE-400, CWE-770\n\u003cstrong\u003eFix:\u003c/strong\u003e \u003ca href=\"https://github.com/nodejs/undici/commit/8cb10f98\"\u003e\u003ccode\u003e8cb10f98\u003c/code\u003e\u003c/a\u003e \u003cem\u003ewebsocket: limit the number of fragments in a message\u003c/em\u003e (part of backport \u003ca href=\"https://github.com/nodejs/undici/commit/a027a4a0\"\u003e\u003ccode\u003ea027a4a0\u003c/code\u003e\u003c/a\u003e \u003cem\u003eBackport WebSocket maxPayloadSize fixes to v7.x\u003c/em\u003e, \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5423\"\u003e#5423\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eA malicious WebSocket server can stream a large number of small or empty\ncontinuation frames. Undici enforced a limit on cumulative payload size but did\nnot limit the \u003cem\u003enumber\u003c/em\u003e of fragments per message, leading to unbounded memory\ngrowth and denial of service.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eAffected:\u003c/strong\u003e applications using \u003ccode\u003enew WebSocket(...)\u003c/code\u003e or \u003ccode\u003eWebSocketStream\u003c/code\u003e\nagainst untrusted endpoints.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eWorkaround:\u003c/strong\u003e none — upgrade is required.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTLS certificate validation bypass in SOCKS5 ProxyAgent — CVE-2026-9697\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g\"\u003eGHSA-vmh5-mc38-953g\u003c/a\u003e\u003c/strong\u003e · CWE-295\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/f9eba0ad9134e1c0977848476bba9d49734696e4\"\u003e\u003ccode\u003ef9eba0a\u003c/code\u003e\u003c/a\u003e Bumped v7.28.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5430\"\u003e#5430\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/a027a4a04c6c055877d1abaf5f60ee4917e7e01f\"\u003e\u003ccode\u003ea027a4a\u003c/code\u003e\u003c/a\u003e Backport WebSocket maxPayloadSize fixes to v7.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5423\"\u003e#5423\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8cb10f983eb6005dd53f3744d95d3b6d7dbcee0f\"\u003e\u003ccode\u003e8cb10f9\u003c/code\u003e\u003c/a\u003e websocket: limit the number of fragments in a message\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/04201f8947041f0f4f2ac865dbdb1677e46a8844\"\u003e\u003ccode\u003e04201f8\u003c/code\u003e\u003c/a\u003e fix: honor requestTls when proxy is SOCKS5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/fcd642ff613ea9030dec87cf622e68d4b1ae9847\"\u003e\u003ccode\u003efcd642f\u003c/code\u003e\u003c/a\u003e fix(socks5): preserve dispatch backpressure return value (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5166\"\u003e#5166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/bc98c97906abf26fa1e959b2f6111b53ade0e18f\"\u003e\u003ccode\u003ebc98c97\u003c/code\u003e\u003c/a\u003e fix(socks5): use configured connector in Socks5ProxyAgent (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5168\"\u003e#5168\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/9e1c74372a2b27cacd92d27c13a83a6d84f10e0e\"\u003e\u003ccode\u003e9e1c743\u003c/code\u003e\u003c/a\u003e fix(socks5): encode embedded IPv4 tails in IPv6 literals correctly (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5099\"\u003e#5099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/376c8be27cb40cc17ccaad6b6ebb317fa7148d65\"\u003e\u003ccode\u003e376c8be\u003c/code\u003e\u003c/a\u003e fix(socks5): enforce authenticated state before CONNECT (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5097\"\u003e#5097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/3805b8f8518882991044048c256e005dc3c10a85\"\u003e\u003ccode\u003e3805b8f\u003c/code\u003e\u003c/a\u003e fix(socks5-proxy-agent): use per-origin pools to prevent cross-origin routing...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/85a240551c9feb8b8a0ecc56c84b2b3015add8a9\"\u003e\u003ccode\u003e85a2405\u003c/code\u003e\u003c/a\u003e fix(cache): trim qualified field names\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodejs/undici/compare/v7.24.7...v7.28.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@opentelemetry/core` from 2.2.0 to 2.8.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.8.0\u003c/h2\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.1\u003c/h2\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.0\u003c/h2\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md\"\u003e@​opentelemetry/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ef...\n\n_Description has been truncated_","html_url":"https://github.com/graphql-hive/gateway/pull/2459","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/graphql-hive%2Fgateway/issues/2459","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2459/packages"}],"issue_packages":[{"old_version":"7.5.8","new_version":"7.5.19","update_type":"patch","path":"/packages/cli","pr_created_at":"2026-07-23T04:00:02.000Z","version_change":"7.5.8 → 7.5.19","issue":{"uuid":"4955288675","node_id":"PR_kwDOQ098fM71L5Op","number":145,"state":"open","title":"chore(deps): bump tar from 7.5.8 to 7.5.19 in /packages/cli","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":7,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-23T04:00:02.000Z","updated_at":"2026-07-23T04:00:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"tar","old_version":"7.5.8","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":"/packages/cli","ecosystem":"npm"},"body":"Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.8 to 7.5.19.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.8...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar\u0026package-manager=npm_and_yarn\u0026previous-version=7.5.8\u0026new-version=7.5.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Dustin4444/gemini-cli/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- Reviewable:start --\u003e\n- - -\nThis change is [\u003cimg src=\"https://reviewable.io/review_button.svg\" height=\"34\" align=\"absmiddle\" alt=\"Reviewable\"/\u003e](https://reviewable.io/reviews/Dustin4444/gemini-cli/145)\n\u003c!-- Reviewable:end --\u003e\n","html_url":"https://github.com/Dustin4444/gemini-cli/pull/145","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Dustin4444%2Fgemini-cli/issues/145","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/145/packages"}},{"old_version":"7.4.3","new_version":"7.5.21","update_type":"minor","path":null,"pr_created_at":"2026-07-22T11:43:57.000Z","version_change":"7.4.3 → 7.5.21","issue":{"uuid":"4948531775","node_id":"PR_kwDOOHv4H87016d1","number":35,"state":"open","title":"Bump tar from 7.4.3 to 7.5.21","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":5,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-22T11:43:57.000Z","updated_at":"2026-07-22T11:44:12.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"tar","old_version":"7.4.3","new_version":"7.5.21","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps [tar](https://github.com/isaacs/node-tar) from 7.4.3 to 7.5.21.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/0cd9cc3c5814446d3c0cbea6a31d6c00c2c8a9d9\"\u003e\u003ccode\u003e0cd9cc3\u003c/code\u003e\u003c/a\u003e 7.5.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a\"\u003e\u003ccode\u003e631ae59\u003c/code\u003e\u003c/a\u003e list: prevent unbounded recursion\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/ebbb72094159d003f428dcd1cb28255d37ea4873\"\u003e\u003ccode\u003eebbb720\u003c/code\u003e\u003c/a\u003e 7.5.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2f271963a7fe5a5960aee5dd6adf9647a1e266fd\"\u003e\u003ccode\u003e2f27196\u003c/code\u003e\u003c/a\u003e fix: fully disable and dispose of unzip when aborting parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~isaacs\"\u003eisaacs\u003c/a\u003e, a new releaser for tar since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar\u0026package-manager=npm_and_yarn\u0026previous-version=7.4.3\u0026new-version=7.5.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Dustin4444/aria-practices/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- Reviewable:start --\u003e\n- - -\nThis change is [\u003cimg src=\"https://reviewable.io/review_button.svg\" height=\"34\" align=\"absmiddle\" alt=\"Reviewable\"/\u003e](https://reviewable.io/reviews/Dustin4444/aria-practices/35)\n\u003c!-- Reviewable:end --\u003e\n","html_url":"https://github.com/Dustin4444/aria-practices/pull/35","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Dustin4444%2Faria-practices/issues/35","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/35/packages"}},{"old_version":"7.5.20","new_version":"7.5.21","update_type":"patch","path":null,"pr_created_at":"2026-07-22T01:02:43.000Z","version_change":"7.5.20 → 7.5.21","issue":{"uuid":"4944385468","node_id":"PR_kwDODUDwxc70olZ7","number":141,"state":"closed","title":"Bump tar from 7.5.20 to 7.5.21","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-07-22T01:03:49.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-22T01:02:43.000Z","updated_at":"2026-07-22T01:03:56.000Z","time_to_close":66,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"tar","old_version":"7.5.20","new_version":"7.5.21","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.20 to 7.5.21.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/0cd9cc3c5814446d3c0cbea6a31d6c00c2c8a9d9\"\u003e\u003ccode\u003e0cd9cc3\u003c/code\u003e\u003c/a\u003e 7.5.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a\"\u003e\u003ccode\u003e631ae59\u003c/code\u003e\u003c/a\u003e list: prevent unbounded recursion\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.20...v7.5.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar\u0026package-manager=npm_and_yarn\u0026previous-version=7.5.20\u0026new-version=7.5.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/lightspeedwp/lsx-login/pull/141","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/lightspeedwp%2Flsx-login/issues/141","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/141/packages"}},{"old_version":"7.5.16","new_version":"7.5.20","update_type":"patch","path":null,"pr_created_at":"2026-07-21T04:04:37.000Z","version_change":"7.5.16 → 7.5.20","issue":{"uuid":"4935278477","node_id":"PR_kwDOMWbvD870KvTI","number":1465,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-21T04:04:37.000Z","updated_at":"2026-07-21T04:23:56.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":3,"packages":[{"name":"shell-quote","old_version":"1.8.4","new_version":"1.10.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"tar","old_version":"7.5.16","new_version":"7.5.20","repository_url":"https://github.com/isaacs/node-tar"},{"name":"webpack-dev-server","old_version":"5.2.5","new_version":"5.2.6","repository_url":"https://github.com/webpack/webpack-dev-server"}],"path":null,"ecosystem":"npm"},"body":"[//]: # (dependabot-start)\n⚠️  **Dependabot is rebasing this PR** ⚠️ \n\nRebasing might not happen immediately, so don't worry if this takes some time.\n\nNote: if you make any changes to this PR yourself, they will take precedence over the rebase.\n\n---\n\n[//]: # (dependabot-end)\n\nBumps the npm_and_yarn group with 3 updates in the / directory: [shell-quote](https://github.com/ljharb/shell-quote), [tar](https://github.com/isaacs/node-tar) and [webpack-dev-server](https://github.com/webpack/webpack-dev-server).\n\nUpdates `shell-quote` from 1.8.4 to 1.10.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0\"\u003ev1.10.0\u003c/a\u003e - 2026-07-10\u003c/h2\u003e\n\u003ch3\u003eMerged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add opt-in \u003ccode\u003esplitUnquoted\u003c/code\u003e option for shell field-splitting of unquoted expansions \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/pull/1\"\u003e\u003ccode\u003e[#1](https://github.com/ljharb/shell-quote/issues/1)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: match nested \u003ccode\u003e${...}\u003c/code\u003e braces so nested parameter expansion is consumed as one substitution \u003ca href=\"https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c\"\u003e\u003ccode\u003ec0842c8\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: pin single-quote literalness and unmatched-quote handling \u003ca href=\"https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62\"\u003e\u003ccode\u003ea0d03e3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[readme] remove the space in js code fences so evalmd evaluates them \u003ca href=\"https://github.com/ljharb/shell-quote/commit/2116fa36aeea77fe8d561b0db46b1f9b26b8cf1b\"\u003e\u003ccode\u003e2116fa3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003equote\u003c/code\u003e: pin conservative escaping of \u003ccode\u003e=\u003c/code\u003e, \u003ccode\u003e@\u003c/code\u003e, \u003ccode\u003e^\u003c/code\u003e, \u003ccode\u003e,\u003c/code\u003e, \u003ccode\u003e:\u003c/code\u003e, \u003ccode\u003e!\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/11\"\u003e#11\u003c/a\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e\"\u003e\u003ccode\u003e1c36f3f\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[readme] document that \u003ccode\u003equote\u003c/code\u003e outputs POSIX quoting, not \u003ccode\u003ecmd.exe\u003c/code\u003e/PowerShell \u003ca href=\"https://github.com/ljharb/shell-quote/commit/100e96e0ffadcca97d63dda15651c70b9f83507c\"\u003e\u003ccode\u003e100e96e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[readme] document \u003ccode\u003eparse\u003c/code\u003e's supported parameter-expansion subset \u003ca href=\"https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb\"\u003e\u003ccode\u003ee1c75cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: a backslash inside single quotes must not escape the closing quote \u003ca href=\"https://github.com/ljharb/shell-quote/commit/5d460a332b54b83153297fe7d1964330b28fa491\"\u003e\u003ccode\u003e5d460a3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[readme] fix stale example outputs \u003ca href=\"https://github.com/ljharb/shell-quote/commit/2de86f5d44f44d3ac9df36413d8a05f3534cdec6\"\u003e\u003ccode\u003e2de86f5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003equote\u003c/code\u003e: pin that a backslash with whitespace is not doubled in single quotes (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/14\"\u003e#14\u003c/a\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71\"\u003e\u003ccode\u003e190e236\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[readme] \u003ccode\u003equote\u003c/code\u003e: use output verbatim; do not re-quote it (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/11\"\u003e#11\u003c/a\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5\"\u003e\u003ccode\u003e1b36468\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003eparse\u003c/code\u003e: fix swapped \u003ccode\u003eSINGLE_QUOTE\u003c/code\u003e/\u003ccode\u003eDOUBLE_QUOTE\u003c/code\u003e variable names \u003ca href=\"https://github.com/ljharb/shell-quote/commit/801af5c935b27d6dcda63b3975d5e92a7b6f887f\"\u003e\u003ccode\u003e801af5c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[types] fix an error TS v6 ignores but v7 fails on \u003ca href=\"https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba\"\u003e\u003ccode\u003e59bbf8b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@arethetypeswrong/cli\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc\"\u003e\u003ccode\u003ea04d475\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@arethetypeswrong/ci\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d390f9a92b97a04b1f799298634e90dc581021e6\"\u003e\u003ccode\u003ed390f9a\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003equote\u003c/code\u003e: the tilde test escapes every \u003ccode\u003e~\u003c/code\u003e, not just a leading one (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/9\"\u003e#9\u003c/a\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c\"\u003e\u003ccode\u003e617d119\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.9.0\"\u003ev1.9.0\u003c/a\u003e - 2026-06-24\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] add types \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dca6e21a02df4cc1a83ed1b5baa4d82df134170a\"\u003e\u003ccode\u003edca6e21\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/9aa9e8f60991f8c4053a29e476795d891ff851ad\"\u003e\u003ccode\u003e9aa9e8f\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: finalize tokens in linear time (GHSA-395f-4hp3-45gv) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7ff5488599d01c323514f02f5efb74088dd134ec\"\u003e\u003ccode\u003e7ff5488\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] update workflows \u003ca href=\"https://github.com/ljharb/shell-quote/commit/75e849741ffaf2d3aa53ae0e18ef6bf9929ef478\"\u003e\u003ccode\u003e75e8497\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] Windows + node 4/6/7: pin eslint to 9 before install, since npm 2/3 cannot stage eslint 10\u003ccode\u003e@types/esrecurse\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3fb739de44b81c69431947d54fbfc18998dd6d72\"\u003e\u003ccode\u003e3fb739d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] retry \u003ccode\u003enpm install\u003c/code\u003e on Windows to survive npm 2/3 staging-rename flake \u003ca href=\"https://github.com/ljharb/shell-quote/commit/abe0163293c82963fa8a16cfaa87181846d5aced\"\u003e\u003ccode\u003eabe0163\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] Windows + node 5/7: install deps with a modern node \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b4bafa2e7e58d53d9839b1c24976f61e54b43326\"\u003e\u003ccode\u003eb4bafa2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape leading \u003ccode\u003e~\u003c/code\u003e to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7a76c1a12d8461c2234a1c655b943cee84cbff91\"\u003e\u003ccode\u003e7a76c1a\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7184b4458b65c17b931e126d8cb5f586c6717dc8\"\u003e\u003ccode\u003e7184b44\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] apparently \u003ccode\u003ejackspeak\u003c/code\u003e is no longer in the graph \u003ca href=\"https://github.com/ljharb/shell-quote/commit/9ba368a4057b9f498b0fef23b5b15543ef81b98c\"\u003e\u003ccode\u003e9ba368a\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/64988d9a0e73a2ae710488952e3614958ef289d4\"\u003e\u003ccode\u003e64988d9\u003c/code\u003e\u003c/a\u003e v1.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c\"\u003e\u003ccode\u003e617d119\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003equote\u003c/code\u003e: the tilde test escapes every \u003ccode\u003e~\u003c/code\u003e, not just a leading one (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/9\"\u003e#9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba\"\u003e\u003ccode\u003e59bbf8b\u003c/code\u003e\u003c/a\u003e [types] fix an error TS v6 ignores but v7 fails on\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71\"\u003e\u003ccode\u003e190e236\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003equote\u003c/code\u003e: pin that a backslash with whitespace is not doubled in singl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc\"\u003e\u003ccode\u003ea04d475\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@arethetypeswrong/cli\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b9545b39f4de17aa169410823c98acf58387e474\"\u003e\u003ccode\u003eb9545b3\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: add opt-in \u003ccode\u003esplitUnquoted\u003c/code\u003e option for shell field-splitting of...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5\"\u003e\u003ccode\u003e1b36468\u003c/code\u003e\u003c/a\u003e [readme] \u003ccode\u003equote\u003c/code\u003e: use output verbatim; do not re-quote it (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/11\"\u003e#11\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e\"\u003e\u003ccode\u003e1c36f3f\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003equote\u003c/code\u003e: pin conservative escaping of \u003ccode\u003e=\u003c/code\u003e, \u003ccode\u003e@\u003c/code\u003e, \u003ccode\u003e^\u003c/code\u003e, \u003ccode\u003e,\u003c/code\u003e, \u003ccode\u003e:\u003c/code\u003e, \u003ccode\u003e!\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/11\"\u003e#11\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb\"\u003e\u003ccode\u003ee1c75cd\u003c/code\u003e\u003c/a\u003e [readme] document \u003ccode\u003eparse\u003c/code\u003e's supported parameter-expansion subset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c\"\u003e\u003ccode\u003ec0842c8\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eparse\u003c/code\u003e: match nested \u003ccode\u003e${...}\u003c/code\u003e braces so nested parameter expansion is ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.5.16 to 7.5.20\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/ebbb72094159d003f428dcd1cb28255d37ea4873\"\u003e\u003ccode\u003eebbb720\u003c/code\u003e\u003c/a\u003e 7.5.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2f271963a7fe5a5960aee5dd6adf9647a1e266fd\"\u003e\u003ccode\u003e2f27196\u003c/code\u003e\u003c/a\u003e fix: fully disable and dispose of unzip when aborting parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.16...v7.5.20\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `webpack-dev-server` from 5.2.5 to 5.2.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/webpack/webpack-dev-server/releases\"\u003ewebpack-dev-server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003efix: allow \u003ccode\u003eundefined\u003c/code\u003e as the \u003ccode\u003eServer\u003c/code\u003e constructor \u003ccode\u003eoptions\u003c/code\u003e argument again (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5695\"\u003e#5695\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eRestores accepting \u003ccode\u003eundefined\u003c/code\u003e (defaulting it to \u003ccode\u003e{}\u003c/code\u003e) for the \u003ccode\u003eoptions\u003c/code\u003e\nargument, so passing a webpack config's optional \u003ccode\u003edevServer\u003c/code\u003e field type-checks and works as before.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProtect the built-in state-changing routes (\u003ccode\u003e/webpack-dev-server/invalidate\u003c/code\u003e and \u003ccode\u003e/webpack-dev-server/open-editor\u003c/code\u003e) against cross-site request forgery. Requests are now checked with \u003ccode\u003eSec-Fetch-Site\u003c/code\u003e (falling back to an \u003ccode\u003eOrigin\u003c/code\u003e/\u003ccode\u003eHost\u003c/code\u003e comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5698\"\u003e#5698\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHandle malformed \u003ccode\u003eHost\u003c/code\u003e and \u003ccode\u003eOrigin\u003c/code\u003e header values gracefully when validating requests. (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5699\"\u003e#5699\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/webpack/webpack-dev-server/blob/v5.2.6/CHANGELOG.md\"\u003ewebpack-dev-server's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.2.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003efix: allow \u003ccode\u003eundefined\u003c/code\u003e as the \u003ccode\u003eServer\u003c/code\u003e constructor \u003ccode\u003eoptions\u003c/code\u003e argument again (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5695\"\u003e#5695\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eRestores accepting \u003ccode\u003eundefined\u003c/code\u003e (defaulting it to \u003ccode\u003e{}\u003c/code\u003e) for the \u003ccode\u003eoptions\u003c/code\u003e\nargument, so passing a webpack config's optional \u003ccode\u003edevServer\u003c/code\u003e field type-checks and works as before.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProtect the built-in state-changing routes (\u003ccode\u003e/webpack-dev-server/invalidate\u003c/code\u003e and \u003ccode\u003e/webpack-dev-server/open-editor\u003c/code\u003e) against cross-site request forgery. Requests are now checked with \u003ccode\u003eSec-Fetch-Site\u003c/code\u003e (falling back to an \u003ccode\u003eOrigin\u003c/code\u003e/\u003ccode\u003eHost\u003c/code\u003e comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5698\"\u003e#5698\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHandle malformed \u003ccode\u003eHost\u003c/code\u003e and \u003ccode\u003eOrigin\u003c/code\u003e header values gracefully when validating requests. (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5699\"\u003e#5699\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/8a37b0ed89d07ca81532188fe19f080a2ee51475\"\u003e\u003ccode\u003e8a37b0e\u003c/code\u003e\u003c/a\u003e chore(release): new release (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5697\"\u003e#5697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/f21ed0f44aceb6132abb591ee8b60d770b6e489f\"\u003e\u003ccode\u003ef21ed0f\u003c/code\u003e\u003c/a\u003e fix: handle malformed Host and Origin headers (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5699\"\u003e#5699\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/80cd9eea54975fe632a518d8bd902a260f374e7c\"\u003e\u003ccode\u003e80cd9ee\u003c/code\u003e\u003c/a\u003e fix: reject cross-site requests to open-editor and invalidate endpoints (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5698\"\u003e#5698\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/308e853808fc8f5d0722276e1a87aa73c91859a5\"\u003e\u003ccode\u003e308e853\u003c/code\u003e\u003c/a\u003e fix: handle undefined options in Server constructor (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5695\"\u003e#5695\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/8b2b9151f41e0d6157c8bd051cf5f16bce5dba17\"\u003e\u003ccode\u003e8b2b915\u003c/code\u003e\u003c/a\u003e chore: update branch references from v4 to v5 in workflow configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/870ed2258dda612c8feeaf8d971afd08233696ad\"\u003e\u003ccode\u003e870ed22\u003c/code\u003e\u003c/a\u003e chore: add v5 branch to release workflow triggers\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.5...v5.2.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/EelcoLos/nx-tinkering/pull/1465","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/EelcoLos%2Fnx-tinkering/issues/1465","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1465/packages"}},{"old_version":"7.5.11","new_version":"7.5.20","update_type":"patch","path":null,"pr_created_at":"2026-07-18T20:05:36.000Z","version_change":"7.5.11 → 7.5.20","issue":{"uuid":"4919857184","node_id":"PR_kwDOTcsI0M7zZnKk","number":1,"state":"open","title":"chore(deps): bump the npm-dependencies group with 120 updates","user":"dependabot[bot]","labels":["size/XL"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-18T20:05:36.000Z","updated_at":"2026-07-18T20:07:09.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm-dependencies","update_count":120,"packages":[{"name":"simple-git","old_version":"3.28.0","new_version":"3.36.0","repository_url":"https://github.com/steveukx/git-js"},{"name":"@agentclientprotocol/sdk","old_version":"0.16.1","new_version":"1.2.1","repository_url":"https://github.com/agentclientprotocol/typescript-sdk"},{"name":"read-package-up","old_version":"11.0.0","new_version":"12.0.0","repository_url":"https://github.com/sindresorhus/read-package-up"},{"name":"@octokit/rest","old_version":"22.0.0","new_version":"22.0.1","repository_url":"https://github.com/octokit/rest.js"},{"name":"@types/minimatch","old_version":"5.1.2","new_version":"6.0.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@vitest/coverage-v8","old_version":"3.2.4","new_version":"4.1.10","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"@vitest/eslint-plugin","old_version":"1.3.4","new_version":"1.6.23","repository_url":"https://github.com/vitest-dev/eslint-plugin-vitest"},{"name":"cross-env","old_version":"7.0.3","new_version":"10.1.0","repository_url":"https://github.com/kentcdodds/cross-env"},{"name":"esbuild","old_version":"0.25.0","new_version":"0.28.1","repository_url":"https://github.com/evanw/esbuild"},{"name":"eslint","old_version":"9.24.0","new_version":"10.7.0","repository_url":"https://github.com/eslint/eslint"},{"name":"eslint-config-prettier","old_version":"10.1.2","new_version":"10.1.8","repository_url":"https://github.com/prettier/eslint-config-prettier"},{"name":"eslint-plugin-headers","old_version":"1.3.3","new_version":"1.3.4","repository_url":"https://github.com/robmisasi/eslint-plugin-headers"},{"name":"eslint-plugin-react-hooks","old_version":"5.2.0","new_version":"7.1.1","repository_url":"https://github.com/facebook/react"},{"name":"glob","old_version":"12.0.0","new_version":"13.0.6","repository_url":"https://github.com/isaacs/node-glob"},{"name":"globals","old_version":"16.0.0","new_version":"17.7.0","repository_url":"https://github.com/sindresorhus/globals"},{"name":"google-artifactregistry-auth","old_version":"3.4.0","new_version":"3.5.0","repository_url":"https://github.com/GoogleCloudPlatform/artifact-registry-npm-tools"},{"name":"lint-staged","old_version":"16.1.6","new_version":"17.1.0","repository_url":"https://github.com/lint-staged/lint-staged"},{"name":"memfs","old_version":"4.42.0","new_version":"4.64.0","repository_url":"https://github.com/streamich/memfs"},{"name":"mnemonist","old_version":"0.40.3","new_version":"0.40.4","repository_url":"https://github.com/yomguithereal/mnemonist"},{"name":"msw","old_version":"2.3.4","new_version":"2.15.0","repository_url":"https://github.com/mswjs/msw"},{"name":"prettier","old_version":"3.5.3","new_version":"3.9.5","repository_url":"https://github.com/prettier/prettier"},{"name":"react-devtools-core","old_version":"6.1.2","new_version":"7.0.1","repository_url":"https://github.com/facebook/react"},{"name":"react-dom","old_version":"19.2.4","new_version":"19.2.7","repository_url":"https://github.com/facebook/react"},{"name":"@types/react-dom","old_version":"19.2.0","new_version":"19.2.3","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"semver","old_version":"7.7.2","new_version":"7.8.5","repository_url":"https://github.com/npm/node-semver"},{"name":"@types/semver","old_version":"7.7.0","new_version":"7.7.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"strip-ansi","old_version":"7.1.0","new_version":"7.2.0","repository_url":"https://github.com/chalk/strip-ansi"},{"name":"tsx","old_version":"4.20.3","new_version":"4.23.1","repository_url":"https://github.com/privatenumber/tsx"},{"name":"typescript","old_version":"5.8.3","new_version":"7.0.2","repository_url":"https://github.com/microsoft/TypeScript"},{"name":"typescript-eslint","old_version":"8.30.1","new_version":"8.64.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"vitest","old_version":"3.1.1","new_version":"4.1.10","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"yargs","old_version":"17.7.2","new_version":"18.0.0","repository_url":"https://github.com/yargs/yargs"},{"name":"node-pty","old_version":"1.0.0","new_version":"1.1.0","repository_url":"https://github.com/microsoft/node-pty"},{"name":"@a2a-js/sdk","old_version":"0.3.11","new_version":"0.3.14","repository_url":"https://github.com/a2aproject/a2a-js"},{"name":"@google-cloud/storage","old_version":"7.19.0","new_version":"7.21.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"express","old_version":"5.1.0","new_version":"5.2.1","repository_url":"https://github.com/expressjs/express"},{"name":"@types/express","old_version":"5.0.3","new_version":"5.0.6","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"fs-extra","old_version":"11.3.0","new_version":"11.3.6","repository_url":"https://github.com/jprichardson/node-fs-extra"},{"name":"strip-json-comments","old_version":"3.1.1","new_version":"5.0.3","repository_url":"https://github.com/sindresorhus/strip-json-comments"},{"name":"tar","old_version":"7.5.11","new_version":"7.5.20","repository_url":"https://github.com/isaacs/node-tar"},{"name":"@types/tar","old_version":"6.1.13","new_version":"7.0.87","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"uuid","old_version":"13.0.0","new_version":"14.0.1","repository_url":"https://github.com/uuidjs/uuid"},{"name":"winston","old_version":"3.17.0","new_version":"3.19.0","repository_url":"https://github.com/winstonjs/winston"},{"name":"@google/genai","old_version":"1.30.0","new_version":"2.12.0","repository_url":"https://github.com/googleapis/js-genai"},{"name":"dotenv","old_version":"16.4.5","new_version":"17.4.2","repository_url":"https://github.com/motdotla/dotenv"},{"name":"supertest","old_version":"7.1.4","new_version":"7.2.2","repository_url":"https://github.com/ladjs/supertest"},{"name":"@types/supertest","old_version":"6.0.3","new_version":"7.2.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@modelcontextprotocol/sdk","old_version":"1.23.0","new_version":"1.29.0","repository_url":"https://github.com/modelcontextprotocol/typescript-sdk"},{"name":"chalk","old_version":"4.1.2","new_version":"5.6.2","repository_url":"https://github.com/chalk/chalk"},{"name":"cli-spinners","old_version":"2.9.2","new_version":"3.4.0","repository_url":"https://github.com/sindresorhus/cli-spinners"},{"name":"clipboardy","old_version":"5.2.1","new_version":"5.3.1","repository_url":"https://github.com/sindresorhus/clipboardy"},{"name":"color-convert","old_version":"2.0.1","new_version":"3.1.3","repository_url":"https://github.com/Qix-/color-convert"},{"name":"comment-json","old_version":"4.2.5","new_version":"5.0.0","repository_url":"https://github.com/kaelzhang/node-comment-json"},{"name":"diff","old_version":"8.0.3","new_version":"9.0.0","repository_url":"https://github.com/kpdecker/jsdiff"},{"name":"ink-gradient","old_version":"3.0.0","new_version":"4.0.1","repository_url":"https://github.com/sindresorhus/ink-gradient"},{"name":"open","old_version":"10.1.2","new_version":"11.0.0","repository_url":"https://github.com/sindresorhus/open"},{"name":"react","old_version":"19.2.4","new_version":"19.2.7","repository_url":"https://github.com/facebook/react"},{"name":"@types/react","old_version":"19.2.0","new_version":"19.2.17","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.10.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"string-width","old_version":"8.1.0","new_version":"8.2.2","repository_url":"https://github.com/sindresorhus/string-width"},{"name":"tinygradient","old_version":"1.1.5","new_version":"2.0.1","repository_url":"https://github.com/mistic100/tinygradient"},{"name":"undici","old_version":"7.10.0","new_version":"8.7.0","repository_url":"https://github.com/nodejs/undici"},{"name":"ws","old_version":"8.16.0","new_version":"8.21.1","repository_url":"https://github.com/websockets/ws"},{"name":"@types/ws","old_version":"8.5.10","new_version":"8.18.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"zod","old_version":"3.25.76","new_version":"4.4.3","repository_url":"https://github.com/colinhacks/zod"},{"name":"@types/hast","old_version":"3.0.4","new_version":"3.0.5","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/node","old_version":"20.11.24","new_version":"26.1.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/yargs","old_version":"17.0.32","new_version":"17.0.35","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@xterm/headless","old_version":"5.5.0","new_version":"6.0.0","repository_url":"https://github.com/xtermjs/xterm.js"},{"name":"@bufbuild/protobuf","old_version":"2.11.0","new_version":"2.12.1","repository_url":"https://github.com/bufbuild/protobuf-es"},{"name":"@google-cloud/logging","old_version":"11.2.1","new_version":"11.3.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"@grpc/grpc-js","old_version":"1.14.3","new_version":"1.14.4","repository_url":"https://github.com/grpc/grpc-node"},{"name":"@opentelemetry/api","old_version":"1.9.0","new_version":"1.9.1","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/api-logs","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/core","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/exporter-logs-otlp-grpc","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/exporter-logs-otlp-http","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/exporter-metrics-otlp-grpc","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/exporter-metrics-otlp-http","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/exporter-trace-otlp-grpc","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/exporter-trace-otlp-http","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/instrumentation-http","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/otlp-exporter-base","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/resources","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-logs","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-metrics","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-node","old_version":"0.218.0","new_version":"0.220.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-trace-base","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-trace-node","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/semantic-conventions","old_version":"1.39.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"ajv","old_version":"8.17.1","new_version":"8.20.0","repository_url":"https://github.com/ajv-validator/ajv"},{"name":"dotenv-expand","old_version":"12.0.3","new_version":"13.0.0","repository_url":"https://github.com/motdotla/dotenv-expand"},{"name":"execa","old_version":"9.6.1","new_version":"10.0.0","repository_url":"https://github.com/sindresorhus/execa"},{"name":"fast-levenshtein","old_version":"2.0.6","new_version":"3.0.0","repository_url":"https://github.com/hiddentao/fast-levenshtein"},{"name":"fdir","old_version":"6.4.6","new_version":"6.5.0","repository_url":"https://github.com/thecodrr/fdir"},{"name":"google-auth-library","old_version":"9.11.0","new_version":"10.9.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"html-to-text","old_version":"9.0.5","new_version":"10.0.0","repository_url":"https://github.com/html-to-text/node-html-to-text"},{"name":"http-proxy-agent","old_version":"7.0.2","new_version":"9.1.0","repository_url":"https://github.com/TooTallNate/proxy-agents"},{"name":"https-proxy-agent","old_version":"7.0.6","new_version":"9.1.0","repository_url":"https://github.com/TooTallNate/proxy-agents"},{"name":"ignore","old_version":"7.0.0","new_version":"7.0.6","repository_url":"https://github.com/kaelzhang/node-ignore"},{"name":"ipaddr.js","old_version":"1.9.1","new_version":"2.4.0","repository_url":"https://github.com/whitequark/ipaddr.js"},{"name":"isbinaryfile","old_version":"5.0.7","new_version":"6.0.0","repository_url":"https://github.com/gjtorikian/isBinaryFile"},{"name":"js-yaml","old_version":"4.1.1","new_version":"5.2.1","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"marked","old_version":"15.0.12","new_version":"18.0.6","repository_url":"https://github.com/markedjs/marked"},{"name":"mime","old_version":"4.0.7","new_version":"4.1.0","repository_url":"https://github.com/broofa/mime"},{"name":"picomatch","old_version":"4.0.1","new_version":"4.0.5","repository_url":"https://github.com/micromatch/picomatch"},{"name":"@types/picomatch","old_version":"4.0.1","new_version":"4.0.3","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"puppeteer-core","old_version":"24.0.0","new_version":"25.3.0","repository_url":"https://github.com/puppeteer/puppeteer"},{"name":"systeminformation","old_version":"5.25.11","new_version":"5.31.17","repository_url":"https://github.com/sebhildebrandt/systeminformation"},{"name":"tree-sitter-bash","old_version":"0.25.0","new_version":"0.25.1","repository_url":"https://github.com/tree-sitter/tree-sitter-bash"},{"name":"web-tree-sitter","old_version":"0.25.10","new_version":"0.26.11","repository_url":"https://github.com/tree-sitter/tree-sitter"},{"name":"zod-to-json-schema","old_version":"3.25.1","new_version":"3.25.2","repository_url":"https://github.com/StefanTerdell/zod-to-json-schema"},{"name":"@types/json-stable-stringify","old_version":"1.1.0","new_version":"1.2.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"chrome-devtools-mcp","old_version":"0.19.0","new_version":"1.6.0","repository_url":"https://github.com/ChromeDevTools/chrome-devtools-mcp"},{"name":"cors","old_version":"2.8.5","new_version":"2.8.6","repository_url":"https://github.com/expressjs/cors"},{"name":"@types/vscode","old_version":"1.99.0","new_version":"1.125.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@typescript-eslint/eslint-plugin","old_version":"8.31.1","new_version":"8.64.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/parser","old_version":"8.31.1","new_version":"8.64.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@vscode/vsce","old_version":"3.6.0","new_version":"3.9.2","repository_url":"https://github.com/Microsoft/vsce"},{"name":"npm-run-all2","old_version":"8.0.2","new_version":"9.0.2","repository_url":"https://github.com/bcomnes/npm-run-all2"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-dependencies group with 120 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.28.0` | `3.36.0` |\n| [@agentclientprotocol/sdk](https://github.com/agentclientprotocol/typescript-sdk) | `0.16.1` | `1.2.1` |\n| [read-package-up](https://github.com/sindresorhus/read-package-up) | `11.0.0` | `12.0.0` |\n| [@octokit/rest](https://github.com/octokit/rest.js) | `22.0.0` | `22.0.1` |\n| [@types/minimatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/minimatch) | `5.1.2` | `6.0.0` |\n| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `3.2.4` | `4.1.10` |\n| [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.3.4` | `1.6.23` |\n| [cross-env](https://github.com/kentcdodds/cross-env) | `7.0.3` | `10.1.0` |\n| [esbuild](https://github.com/evanw/esbuild) | `0.25.0` | `0.28.1` |\n| [eslint](https://github.com/eslint/eslint) | `9.24.0` | `10.7.0` |\n| [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) | `10.1.2` | `10.1.8` |\n| [eslint-plugin-headers](https://github.com/robmisasi/eslint-plugin-headers) | `1.3.3` | `1.3.4` |\n| [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `5.2.0` | `7.1.1` |\n| [glob](https://github.com/isaacs/node-glob) | `12.0.0` | `13.0.6` |\n| [globals](https://github.com/sindresorhus/globals) | `16.0.0` | `17.7.0` |\n| [google-artifactregistry-auth](https://github.com/GoogleCloudPlatform/artifact-registry-npm-tools) | `3.4.0` | `3.5.0` |\n| [lint-staged](https://github.com/lint-staged/lint-staged) | `16.1.6` | `17.1.0` |\n| [memfs](https://github.com/streamich/memfs) | `4.42.0` | `4.64.0` |\n| [mnemonist](https://github.com/yomguithereal/mnemonist) | `0.40.3` | `0.40.4` |\n| [msw](https://github.com/mswjs/msw) | `2.3.4` | `2.15.0` |\n| [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.9.5` |\n| [react-devtools-core](https://github.com/facebook/react/tree/HEAD/packages/react-devtools-core) | `6.1.2` | `7.0.1` |\n| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.7` |\n| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.0` | `19.2.3` |\n| [semver](https://github.com/npm/node-semver) | `7.7.2` | `7.8.5` |\n| [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.0` | `7.7.1` |\n| [strip-ansi](https://github.com/chalk/strip-ansi) | `7.1.0` | `7.2.0` |\n| [tsx](https://github.com/privatenumber/tsx) | `4.20.3` | `4.23.1` |\n| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `7.0.2` |\n| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.30.1` | `8.64.0` |\n| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.1.1` | `4.1.10` |\n| [yargs](https://github.com/yargs/yargs) | `17.7.2` | `18.0.0` |\n| [node-pty](https://github.com/microsoft/node-pty) | `1.0.0` | `1.1.0` |\n| [@a2a-js/sdk](https://github.com/a2aproject/a2a-js) | `0.3.11` | `0.3.14` |\n| [@google-cloud/storage](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/storage) | `7.19.0` | `7.21.0` |\n| [express](https://github.com/expressjs/express) | `5.1.0` | `5.2.1` |\n| [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `5.0.3` | `5.0.6` |\n| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.0` | `11.3.6` |\n| [strip-json-comments](https://github.com/sindresorhus/strip-json-comments) | `3.1.1` | `5.0.3` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.11` | `7.5.20` |\n| [@types/tar](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/tar) | `6.1.13` | `7.0.87` |\n| [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.1` |\n| [winston](https://github.com/winstonjs/winston) | `3.17.0` | `3.19.0` |\n| [@google/genai](https://github.com/googleapis/js-genai) | `1.30.0` | `2.12.0` |\n| [dotenv](https://github.com/motdotla/dotenv) | `16.4.5` | `17.4.2` |\n| [supertest](https://github.com/ladjs/supertest) | `7.1.4` | `7.2.2` |\n| [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest) | `6.0.3` | `7.2.1` |\n| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.23.0` | `1.29.0` |\n| [chalk](https://github.com/chalk/chalk) | `4.1.2` | `5.6.2` |\n| [cli-spinners](https://github.com/sindresorhus/cli-spinners) | `2.9.2` | `3.4.0` |\n| [clipboardy](https://github.com/sindresorhus/clipboardy) | `5.2.1` | `5.3.1` |\n| [color-convert](https://github.com/Qix-/color-convert) | `2.0.1` | `3.1.3` |\n| [comment-json](https://github.com/kaelzhang/node-comment-json) | `4.2.5` | `5.0.0` |\n| [diff](https://github.com/kpdecker/jsdiff) | `8.0.3` | `9.0.0` |\n| [ink-gradient](https://github.com/sindresorhus/ink-gradient) | `3.0.0` | `4.0.1` |\n| [open](https://github.com/sindresorhus/open) | `10.1.2` | `11.0.0` |\n| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.7` |\n| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.0` | `19.2.17` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.10.0` |\n| [string-width](https://github.com/sindresorhus/string-width) | `8.1.0` | `8.2.2` |\n| [tinygradient](https://github.com/mistic100/tinygradient) | `1.1.5` | `2.0.1` |\n| [undici](https://github.com/nodejs/undici) | `7.10.0` | `8.7.0` |\n| [ws](https://github.com/websockets/ws) | `8.16.0` | `8.21.1` |\n| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.5.10` | `8.18.1` |\n| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.3` |\n| [@types/hast](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/hast) | `3.0.4` | `3.0.5` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.11.24` | `26.1.1` |\n| [@types/yargs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/yargs) | `17.0.32` | `17.0.35` |\n| [@xterm/headless](https://github.com/xtermjs/xterm.js) | `5.5.0` | `6.0.0` |\n| [@bufbuild/protobuf](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protobuf) | `2.11.0` | `2.12.1` |\n| [@google-cloud/logging](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/logging) | `11.2.1` | `11.3.0` |\n| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.14.3` | `1.14.4` |\n| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` |\n| [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/exporter-logs-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/exporter-logs-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/exporter-metrics-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/otlp-exporter-base](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |\n| [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.39.0` | `1.43.0` |\n| [ajv](https://github.com/ajv-validator/ajv) | `8.17.1` | `8.20.0` |\n| [dotenv-expand](https://github.com/motdotla/dotenv-expand) | `12.0.3` | `13.0.0` |\n| [execa](https://github.com/sindresorhus/execa) | `9.6.1` | `10.0.0` |\n| [fast-levenshtein](https://github.com/hiddentao/fast-levenshtein) | `2.0.6` | `3.0.0` |\n| [fdir](https://github.com/thecodrr/fdir) | `6.4.6` | `6.5.0` |\n| [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `9.11.0` | `10.9.0` |\n| [html-to-text](https://github.com/html-to-text/node-html-to-text) | `9.0.5` | `10.0.0` |\n| [http-proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/http-proxy-agent) | `7.0.2` | `9.1.0` |\n| [https-proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/https-proxy-agent) | `7.0.6` | `9.1.0` |\n| [ignore](https://github.com/kaelzhang/node-ignore) | `7.0.0` | `7.0.6` |\n| [ipaddr.js](https://github.com/whitequark/ipaddr.js) | `1.9.1` | `2.4.0` |\n| [isbinaryfile](https://github.com/gjtorikian/isBinaryFile) | `5.0.7` | `6.0.0` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `5.2.1` |\n| [marked](https://github.com/markedjs/marked) | `15.0.12` | `18.0.6` |\n| [mime](https://github.com/broofa/mime) | `4.0.7` | `4.1.0` |\n| [picomatch](https://github.com/micromatch/picomatch) | `4.0.1` | `4.0.5` |\n| [@types/picomatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/picomatch) | `4.0.1` | `4.0.3` |\n| [puppeteer-core](https://github.com/puppeteer/puppeteer) | `24.0.0` | `25.3.0` |\n| [systeminformation](https://github.com/sebhildebrandt/systeminformation) | `5.25.11` | `5.31.17` |\n| [tree-sitter-bash](https://github.com/tree-sitter/tree-sitter-bash) | `0.25.0` | `0.25.1` |\n| [web-tree-sitter](https://github.com/tree-sitter/tree-sitter/tree/HEAD/lib/binding_web) | `0.25.10` | `0.26.11` |\n| [zod-to-json-schema](https://github.com/StefanTerdell/zod-to-json-schema) | `3.25.1` | `3.25.2` |\n| [@types/json-stable-stringify](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/json-stable-stringify) | `1.1.0` | `1.2.0` |\n| [chrome-devtools-mcp](https://github.com/ChromeDevTools/chrome-devtools-mcp) | `0.19.0` | `1.6.0` |\n| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |\n| [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) | `1.99.0` | `1.125.0` |\n| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.31.1` | `8.64.0` |\n| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.31.1` | `8.64.0` |\n| [@vscode/vsce](https://github.com/Microsoft/vsce) | `3.6.0` | `3.9.2` |\n| [npm-run-all2](https://github.com/bcomnes/npm-run-all2) | `8.0.2` | `9.0.2` |\n\nUpdates `simple-git` from 3.28.0 to 3.36.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/steveukx/git-js/releases\"\u003esimple-git's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esimple-git@3.36.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e89a2294: Extend known exploitable configuration keys and per-task environment variables.\u003c/p\u003e\n\u003cp\u003eNote - \u003ccode\u003eParsedVulnerabilities\u003c/code\u003e from \u003ccode\u003eargv-parser\u003c/code\u003e is removed in favour of a readonly array of \u003ccode\u003eVulnerability\u003c/code\u003e to match usage in \u003ccode\u003esimple-git\u003c/code\u003e, rolled into the new \u003ccode\u003evulnerabilityCheck\u003c/code\u003e for simpler access to the identified issues.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/zebbern\"\u003e\u003ccode\u003e@​zebbern\u003c/code\u003e\u003c/a\u003e for identifying the need to block \u003ccode\u003ecore.fsmonitor\u003c/code\u003e.\nThanks to \u003ca href=\"https://github.com/kodareef5\"\u003e\u003ccode\u003e@​kodareef5\u003c/code\u003e\u003c/a\u003e for identifying the need to block \u003ccode\u003eGIT_CONFIG_COUNT\u003c/code\u003e environment variables and \u003ccode\u003e--template\u003c/code\u003e / \u003ccode\u003emerge\u003c/code\u003e related config.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e1ad57e8: Remove conflicting node:buffer import\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [89a2294]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [675570a]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.1.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/args-pathspec\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esimple-git@3.35.2\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e0cf9d8c: Improvements for mono-repo publishing pipeline\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [0cf9d8c]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/args-pathspec\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.2\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esimple-git@3.35.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e0de400e: Update monorepo version handling during publish\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [0de400e]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esimple-git@3.33.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ea263635: Use \u003ccode\u003epathspec\u003c/code\u003e wrappers for remote and local paths when running either \u003ccode\u003egit.clone\u003c/code\u003e or \u003ccode\u003egit.mirror\u003c/code\u003e to\navoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ee253a0d: Enhanced \u003ccode\u003egit -c\u003c/code\u003e checks in \u003ccode\u003eunsafe\u003c/code\u003e plugin.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/JohannesLks\"\u003e\u003ccode\u003e@​JohannesLks\u003c/code\u003e\u003c/a\u003e for identifying the issue\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esimple-git@3.32.3\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ef704208: Enhanced \u003ccode\u003eprotocol.allow\u003c/code\u003e checks in \u003ccode\u003eallowUnsafeExtProtocol\u003c/code\u003e handling.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md\"\u003esimple-git's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.36.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e89a2294: Extend known exploitable configuration keys and per-task environment variables.\u003c/p\u003e\n\u003cp\u003eNote - \u003ccode\u003eParsedVulnerabilities\u003c/code\u003e from \u003ccode\u003eargv-parser\u003c/code\u003e is removed in favour of a readonly array of \u003ccode\u003eVulnerability\u003c/code\u003e to match usage in \u003ccode\u003esimple-git\u003c/code\u003e, rolled into the new \u003ccode\u003evulnerabilityCheck\u003c/code\u003e for simpler access to the identified issues.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/zebbern\"\u003e\u003ccode\u003e@​zebbern\u003c/code\u003e\u003c/a\u003e for identifying the need to block \u003ccode\u003ecore.fsmonitor\u003c/code\u003e.\nThanks to \u003ca href=\"https://github.com/kodareef5\"\u003e\u003ccode\u003e@​kodareef5\u003c/code\u003e\u003c/a\u003e for identifying the need to block \u003ccode\u003eGIT_CONFIG_COUNT\u003c/code\u003e environment variables and \u003ccode\u003e--template\u003c/code\u003e / \u003ccode\u003emerge\u003c/code\u003e related config.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e1ad57e8: Remove conflicting node:buffer import\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [89a2294]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [675570a]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.1.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/args-pathspec\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.35.2\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e0cf9d8c: Improvements for mono-repo publishing pipeline\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [0cf9d8c]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/args-pathspec\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.2\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.35.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e0de400e: Update monorepo version handling during publish\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [0de400e]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.35.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e3d8708b: Updating publish config\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [3d8708b]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/args-pathspec\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​simple-git/argv-parser\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.34.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/7dc1a532a9ec92fb08c93202954be73175b07d83\"\u003e\u003ccode\u003e7dc1a53\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/76f5376bd418cb8baf5ec32757af442d47128e22\"\u003e\u003ccode\u003e76f5376\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1061\"\u003e#1061\u003c/a\u003e from Vinzent03/fix/buffer-import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/89a2294febed5dfe737c4c735d936bb6018746a8\"\u003e\u003ccode\u003e89a2294\u003c/code\u003e\u003c/a\u003e Environment Parsing (\u003ca href=\"https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1156\"\u003e#1156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/1b91b762f047777ca6686f34ac3f7b8a543a4780\"\u003e\u003ccode\u003e1b91b76\u003c/code\u003e\u003c/a\u003e fix: remove explicit node:buffer import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/e390685960a3461875dce89d87ab80e3143d79fe\"\u003e\u003ccode\u003ee390685\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/3c9e4b8309667d0cb4102cda770f92075fc781dd\"\u003e\u003ccode\u003e3c9e4b8\u003c/code\u003e\u003c/a\u003e Pin version of \u003ccode\u003e@​simple-git/args-pathspec\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/94ee21fd5a2a6182fbf0f218a5efca2057b567cd\"\u003e\u003ccode\u003e94ee21f\u003c/code\u003e\u003c/a\u003e Export \u003ccode\u003epathspec\u003c/code\u003e types through \u003ccode\u003esimple-git\u003c/code\u003e for backward compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/6d7cb5174273aa33d131172d3770cb386e795171\"\u003e\u003ccode\u003e6d7cb51\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/0de400e7b014a48113acf673b3409a95b9c87a15\"\u003e\u003ccode\u003e0de400e\u003c/code\u003e\u003c/a\u003e Switch to semver from workspace revisions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/2264722abcb637042dd4cc50d903d69e4ee14b38\"\u003e\u003ccode\u003e2264722\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/steveukx/git-js/commits/simple-git@3.36.0/simple-git\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for simple-git since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@agentclientprotocol/sdk` from 0.16.1 to 1.2.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/releases\"\u003e@​agentclientprotocol/sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v1.2.0...v1.2.1\"\u003e1.2.1\u003c/a\u003e (2026-07-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehttp:\u003c/strong\u003e make SSE close and response delivery deterministic (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/209\"\u003e#209\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/2adee0f5071bd1201c84b7d8a2836cfe011d4c9a\"\u003e2adee0f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve extensible union semantics in TS schemas (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/215\"\u003e#215\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/e3232216ac172283e4f77f9d75c12f820952b5e9\"\u003ee323221\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v1.1.0...v1.2.0\"\u003e1.2.0\u003c/a\u003e (2026-07-06)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate schema to 1.17.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/204\"\u003e#204\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/fa8b5bd426fec07a85203d6a6e4b83d173243cf1\"\u003efa8b5bd\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate schema to 1.19.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/213\"\u003e#213\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/6599433640feb8e36372a767554869fd5097fdd3\"\u003e6599433\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake ndJsonStream receive path linear in message size (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/210\"\u003e#210\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/2fc41d2822579f754042db4d4f8c53b7c9b9ad2f\"\u003e2fc41d2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eunify JSON-RPC message validation policy across transports (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/212\"\u003e#212\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/5e01eb2ac2cd72c8c6ebff1015874366c781eaa5\"\u003e5e01eb2\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/211\"\u003e#211\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v1.0.0...v1.1.0\"\u003e1.1.0\u003c/a\u003e (2026-06-29)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eExpose request ids in handler contexts (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/202\"\u003e#202\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/eda849ca7894f32e4ed11df81eb5b024e5512e5b\"\u003eeda849c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v0.29.0...v1.0.0\"\u003e1.0.0\u003c/a\u003e (2026-06-24)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eschema:\u003c/strong\u003e Update to v1.16.0 of the schema (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/199\"\u003e#199\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/de5879100c1bb5e2fdaebc957c1ca01364eb33cc\"\u003ede58791\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erelease 1.0.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/201\"\u003e#201\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/008fc2861adc3f87edc4daa12eb78b81a6fd7161\"\u003e008fc28\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.29.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v0.28.1...v0.29.0\"\u003e0.29.0\u003c/a\u003e (2026-06-22)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/blob/main/CHANGELOG.md\"\u003e@​agentclientprotocol/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v1.2.0...v1.2.1\"\u003e1.2.1\u003c/a\u003e (2026-07-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehttp:\u003c/strong\u003e make SSE close and response delivery deterministic (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/209\"\u003e#209\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/2adee0f5071bd1201c84b7d8a2836cfe011d4c9a\"\u003e2adee0f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve extensible union semantics in TS schemas (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/215\"\u003e#215\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/e3232216ac172283e4f77f9d75c12f820952b5e9\"\u003ee323221\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v1.1.0...v1.2.0\"\u003e1.2.0\u003c/a\u003e (2026-07-06)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate schema to 1.17.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/204\"\u003e#204\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/fa8b5bd426fec07a85203d6a6e4b83d173243cf1\"\u003efa8b5bd\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate schema to 1.19.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/213\"\u003e#213\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/6599433640feb8e36372a767554869fd5097fdd3\"\u003e6599433\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake ndJsonStream receive path linear in message size (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/210\"\u003e#210\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/2fc41d2822579f754042db4d4f8c53b7c9b9ad2f\"\u003e2fc41d2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eunify JSON-RPC message validation policy across transports (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/212\"\u003e#212\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/5e01eb2ac2cd72c8c6ebff1015874366c781eaa5\"\u003e5e01eb2\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/211\"\u003e#211\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v1.0.0...v1.1.0\"\u003e1.1.0\u003c/a\u003e (2026-06-29)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eExpose request ids in handler contexts (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/202\"\u003e#202\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/eda849ca7894f32e4ed11df81eb5b024e5512e5b\"\u003eeda849c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v0.29.0...v1.0.0\"\u003e1.0.0\u003c/a\u003e (2026-06-24)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eschema:\u003c/strong\u003e Update to v1.16.0 of the schema (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/199\"\u003e#199\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/de5879100c1bb5e2fdaebc957c1ca01364eb33cc\"\u003ede58791\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erelease 1.0.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/201\"\u003e#201\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/008fc2861adc3f87edc4daa12eb78b81a6fd7161\"\u003e008fc28\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v0.28.1...v0.29.0\"\u003e0.29.0\u003c/a\u003e (2026-06-22)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eunstable:\u003c/strong\u003e Add support for request cancellation (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/195\"\u003e#195\u003c/a\u003e) (\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/d5197f9f6346a4b57084552e0bdf3c71ccf64412\"\u003ed5197f9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v0.28.0...v0.28.1\"\u003e0.28.1\u003c/a\u003e (2026-06-19)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/26da1ae7ab66fae0f5e77272dee3e5d562d24aee\"\u003e\u003ccode\u003e26da1ae\u003c/code\u003e\u003c/a\u003e chore(main): release 1.2.1 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/214\"\u003e#214\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/e3232216ac172283e4f77f9d75c12f820952b5e9\"\u003e\u003ccode\u003ee323221\u003c/code\u003e\u003c/a\u003e fix: Preserve extensible union semantics in TS schemas (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/215\"\u003e#215\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/2adee0f5071bd1201c84b7d8a2836cfe011d4c9a\"\u003e\u003ccode\u003e2adee0f\u003c/code\u003e\u003c/a\u003e fix(http): make SSE close and response delivery deterministic (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/f587c0be568b0ca6f4cd3d4973f28f2860efb21e\"\u003e\u003ccode\u003ef587c0b\u003c/code\u003e\u003c/a\u003e chore(main): release 1.2.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/6599433640feb8e36372a767554869fd5097fdd3\"\u003e\u003ccode\u003e6599433\u003c/code\u003e\u003c/a\u003e feat: Update schema to 1.19.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/5e01eb2ac2cd72c8c6ebff1015874366c781eaa5\"\u003e\u003ccode\u003e5e01eb2\u003c/code\u003e\u003c/a\u003e fix: unify JSON-RPC message validation policy across transports (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/212\"\u003e#212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/2fc41d2822579f754042db4d4f8c53b7c9b9ad2f\"\u003e\u003ccode\u003e2fc41d2\u003c/code\u003e\u003c/a\u003e fix: make ndJsonStream receive path linear in message size (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/e73e42af1fa3223437a2bc7772d051313820e3ae\"\u003e\u003ccode\u003ee73e42a\u003c/code\u003e\u003c/a\u003e chore(deps): bump crate-ci/typos from 1.47.2 to 1.48.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/207\"\u003e#207\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/f733390ebecadf4cc00e20bdcb590f58b4dabc95\"\u003e\u003ccode\u003ef733390\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the minor group with 8 updates (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/commit/fa8b5bd426fec07a85203d6a6e4b83d173243cf1\"\u003e\u003ccode\u003efa8b5bd\u003c/code\u003e\u003c/a\u003e feat: Update schema to 1.17.0 (\u003ca href=\"https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/agentclientprotocol/typescript-sdk/compare/v0.16.1...v1.2.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `read-package-up` from 11.0.0 to 12.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sindresorhus/read-package-up/releases\"\u003eread-package-up's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev12.0.0\u003c/h2\u003e\n\u003ch3\u003eBreaking\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Node.js 20  7b5b52a\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate dependencies  7b5b52a\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/read-package-up/compare/v11.0.0...v12.0.0\"\u003ehttps://github.com/sindresorhus/read-package-up/compare/v11.0.0...v12.0.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/read-package-up/commit/a9236d35b77d34d22a33e5efeec823ff305e5e3c\"\u003e\u003ccode\u003ea9236d3\u003c/code\u003e\u003c/a\u003e 12.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/read-package-up/commit/7b5b52a4cfebc19484c13f8fcffb5fb568ad74be\"\u003e\u003ccode\u003e7b5b52a\u003c/code\u003e\u003c/a\u003e Require Node.js 20\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sindresorhus/read-package-up/compare/v11.0.0...v12.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@octokit/rest` from 22.0.0 to 22.0.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/octokit/rest.js/releases\"\u003e@​octokit/rest's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev22.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/octokit/rest.js/compare/v22.0.0...v22.0.1\"\u003e22.0.1\u003c/a\u003e (2025-10-31)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update octokit monorepo (major) (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/538\"\u003e#538\u003c/a\u003e) (\u003ca href=\"https://github.com/octokit/rest.js/commit/ded2f177625fc1ac6b42a85b36930b46f47012ee\"\u003eded2f17\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/daa3ec945e9f1bb77e7ee14ea80d3e823b6d31ca\"\u003e\u003ccode\u003edaa3ec9\u003c/code\u003e\u003c/a\u003e ci(action): update actions/setup-node action to v6 (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/534\"\u003e#534\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/1dec0c790a4fd2906fb8b52d6eed1be497de1783\"\u003e\u003ccode\u003e1dec0c7\u003c/code\u003e\u003c/a\u003e ci(action): update peter-evans/create-or-update-comment action to v5 (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/531\"\u003e#531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/ded2f177625fc1ac6b42a85b36930b46f47012ee\"\u003e\u003ccode\u003eded2f17\u003c/code\u003e\u003c/a\u003e fix(deps): update octokit monorepo (major) (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/538\"\u003e#538\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/0e0eaea0f259a9b9b5145457f7f8457dae08521b\"\u003e\u003ccode\u003e0e0eaea\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency \u003ccode\u003e@​types/node\u003c/code\u003e to v24 (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/537\"\u003e#537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/c04acc897f017c2a37ee75f1a193c35903b465f1\"\u003e\u003ccode\u003ec04acc8\u003c/code\u003e\u003c/a\u003e chore(deps): update vitest monorepo to v4 (major) (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/536\"\u003e#536\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/e6dd3063e552cd884b0c86e40ba6cfdc374304e7\"\u003e\u003ccode\u003ee6dd306\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency undici to v7 (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/474\"\u003e#474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/5f380d04bbb71a9c2d3d241438378e6ebffe2597\"\u003e\u003ccode\u003e5f380d0\u003c/code\u003e\u003c/a\u003e build(deps-dev): Bump form-data from 4.0.2 to 4.0.4 in /docs (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/520\"\u003e#520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/octokit/rest.js/commit/dc6827d06231ae01ba85608b64d0c7e4b9bd6e04\"\u003e\u003ccode\u003edc6827d\u003c/code\u003e\u003c/a\u003e build(deps-dev): Bump tar-fs from 2.1.2 to 2.1.3 in /docs (\u003ca href=\"https://redirect.github.com/octokit/rest.js/issues/516\"\u003e#516\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/octokit/rest.js/compare/v22.0.0...v22.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@types/minimatch` from 5.1.2 to 6.0.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/minimatch\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@vitest/coverage-v8` from 3.2.4 to 4.1.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003e@​vitest/coverage-v8's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.10\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Check fs access in builtin commands [backport to v4]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eOpenCode (claude-opus-4-8)\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10680\"\u003evitest-dev/vitest#10680\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5c18dd267\"\u003e\u003c!-- raw HTML omitted --\u003e(5c18d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evm\u003c/strong\u003e: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by \u003ca href=\"https://github.com/SveLil\"\u003e\u003ccode\u003e@​SveLil\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10661\"\u003evitest-dev/vitest#10661\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/bae52b511\"\u003e\u003c!-- raw HTML omitted --\u003e(bae52)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.9\u003c/h2\u003e\n\u003ch3\u003e🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eimportOriginal\u003c/code\u003e with optimizer and query import [backport to v4] - by \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e, \u003cstrong\u003eDavid Harris\u003c/strong\u003e, \u003cstrong\u003eCodex\u003c/strong\u003eand \u003cstrong\u003eVladimir\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10546\"\u003evitest-dev/vitest#10546\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a5180190c\"\u003e\u003c!-- raw HTML omitted --\u003e(a5180)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eWait for orchestrator readiness before resolving browser sessions [backport to v4] - by \u003cstrong\u003eVladimir\u003c/strong\u003e and \u003cstrong\u003eSéamus O'Connor\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10555\"\u003evitest-dev/vitest#10555\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/7fb29651a\"\u003e\u003c!-- raw HTML omitted --\u003e(7fb29)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWait for iframe tester readiness before preparing  [backport to v4] - by \u003cstrong\u003eVladimir\u003c/strong\u003e and \u003cstrong\u003eSéamus O'Connor\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10497\"\u003evitest-dev/vitest#10497\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10556\"\u003evitest-dev/vitest#10556\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/fbc626c40\"\u003e\u003c!-- raw HTML omitted --\u003e(fbc62)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emocker\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eHoist vi.mock() for vite-plus/test imports [backport to v4] - by \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e, \u003cstrong\u003eLongYinan\u003c/strong\u003e, \u003cstrong\u003eClaude Opus 4.8\u003c/strong\u003e and \u003cstrong\u003eVladimir\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10548\"\u003evitest-dev/vitest#10548\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/2c9559c02\"\u003e\u003c!-- raw HTML omitted --\u003e(2c955)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epool\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePrevent test run hang on worker crash  [backport to v4] - by \u003cstrong\u003eAri Perkkiö\u003c/strong\u003e and \u003cstrong\u003eJattioui Ismail\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10543\"\u003evitest-dev/vitest#10543\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10564\"\u003evitest-dev/vitest#10564\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/934b0f587\"\u003e\u003c!-- raw HTML omitted --\u003e(934b0)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.8...v4.1.9\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.8\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eDisable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [backport to v4]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCodex\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10450\"\u003evitest-dev/vitest#10450\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e4067b3b1\"\u003e\u003c!-- raw HTML omitted --\u003e(e4067)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by \u003ca href=\"https://github.com/toxik\"\u003e\u003ccode\u003e@​toxik\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Zelys-DFKH\"\u003e\u003ccode\u003e@​Zelys-DFKH\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10474\"\u003evitest-dev/vitest#10474\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/675b4343f\"\u003e\u003c!-- raw HTML omitted --\u003e(675b4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.7...v4.1.8\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.7\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erunner\u003c/strong\u003e: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10384\"\u003evitest-dev/vitest#10384\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4f0f2a1ee\"\u003e\u003c!-- raw HTML omitted --\u003e(4f0f2)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.6...v4.1.7\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.6\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Provide project reference in \u003ccode\u003eToMatchScreenshotResolvePath\u003c/code\u003e  -  by \u003ca href=\"https://github.com/macarie\"\u003e\u003ccode\u003e@​macarie\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10138\"\u003evitest-dev/vitest#10138\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/31882607c\"\u003e\u003c!-- raw HTML omitted --\u003e(31882)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGlobal \u003ccode\u003esequence.concurrent: true\u003c/code\u003e with top-level \u003ccode\u003etest(..., { concurrent: false })\u003c/code\u003e + depreacte \u003ccode\u003esequential\u003c/code\u003e test API and options  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eCodex\u003c/strong\u003e and \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10196\"\u003evitest-dev/vitest#10196\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/2847dfa2a\"\u003e\u003c!-- raw HTML omitted --\u003e(2847d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Simplify orchestrator otel carrier  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10285\"\u003evitest-dev/vitest#10285\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/18af98cee\"\u003e\u003c!-- raw HTML omitted --\u003e(18af9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🏎 Performance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eStringify diff objects only once  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10276\"\u003evitest-dev/vitest#10276\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9f7b1528c\"\u003e\u003c!-- raw HTML omitted --\u003e(9f7b1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.5...v4.1.6\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46\"\u003e\u003ccode\u003edb616d2\u003c/code\u003e\u003c/a\u003e chore: release v4.1.10 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/10718\"\u003e#10718\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a7a61e78c7d0718f00173cff6800a91a344457d4\"\u003e\u003ccode\u003ea7a61e7\u003c/code\u003e\u003c/a\u003e chore: release v4.1.9 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/10598\"\u003e#10598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/e61f2dd2a0ba0a266c1c5e0334aad3799fee527f\"\u003e\u003ccode\u003ee61f2dd\u003c/code\u003e\u003c/a\u003e chore: release v4.1.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/e4067b3b150005fd42cf75f994300119245806b9\"\u003e\u003ccode\u003ee4067b3\u003c/code\u003e\u003c/a\u003e fix(browser): disable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a09d47236e19fd3151351080c667036ca6164dc4\"\u003e\u003ccode\u003ea09d472\u003c/code\u003e\u003c/a\u003e chore: release v4.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a8fd24c1cad2320b19fcc651413c7d928423bdc1\"\u003e\u003ccode\u003ea8fd24c\u003c/code\u003e\u003c/a\u003e chore: release v4.1.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/e399846850fedf10b8228cbe46a419628998acd9\"\u003e\u003ccode\u003ee399846\u003c/code\u003e\u003c/a\u003e chore: release v4.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/ac04bac206f49d793e7277084f707aee718aa936\"\u003e\u003ccode\u003eac04bac\u003c/code\u003e\u003c/a\u003e chore: release v4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/2dc0d62eaf08d8acb1f5042fdb8ac5b4a19fdc73\"\u003e\u003ccode\u003e2dc0d62\u003c/code\u003e\u003c/a\u003e chore: release v4.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/fc6f482f4c54bf6a766a0ff502b9843994af5bf5\"\u003e\u003ccode\u003efc6f482\u003c/code\u003e\u003c/a\u003e chore: release v4.1.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​vitest/coverage-v8\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@vitest/eslint-plugin` from 1.3.4 to 1.6.23\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/releases\"\u003e@​vitest/eslint-plugin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.6.23\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eprefer-expect-assertions\u003c/strong\u003e: Add disallowHasAssertions option  -  by \u003ca href=\"https://github.com/ssssota\"\u003e\u003ccode\u003e@​ssssota\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/929\"\u003evitest-dev/eslint-plugin-vitest#929\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/5e1e140\"\u003e\u003c!-- raw HTML omitted --\u003e(5e1e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e8 warnings for unexpected node version input  -  by \u003ca href=\"https://github.com/hirehamir\"\u003e\u003ccode\u003e@​hirehamir\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/928\"\u003evitest-dev/eslint-plugin-vitest#928\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/394ddb6\"\u003e\u003c!-- raw HTML omitted --\u003e(394dd)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evalid-expect\u003c/strong\u003e: Handle static expect APIs  -  by \u003ca href=\"https://github.com/w3lld1\"\u003e\u003ccode\u003e@​w3lld1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/930\"\u003evitest-dev/eslint-plugin-vitest#930\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/792320a\"\u003e\u003c!-- raw HTML omitted --\u003e(79232)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.6.22...v1.6.23\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev1.6.22\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eHandle expect.any separately from Chai any flag  -  by \u003ca href=\"https://github.com/nami8824\"\u003e\u003ccode\u003e@​nami8824\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/925\"\u003evitest-dev/eslint-plugin-vitest#925\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/3415709\"\u003e\u003c!-- raw HTML omitted --\u003e(34157)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.6.21...v1.6.22\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev1.6.21\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport Chai-style expect chains  -  by \u003ca href=\"https://github.com/nami8824\"\u003e\u003ccode\u003e@​nami8824\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/920\"\u003evitest-dev/eslint-plugin-vitest#920\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/52692a4\"\u003e\u003c!-- raw HTML omitted --\u003e(52692)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eprefer-called-with\u003c/strong\u003e: Map calledOnce matcher to exact once with  -  by \u003ca href=\"https://github.com/nami8824\"\u003e\u003ccode\u003e@​nami8824\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/918\"\u003evitest-dev/eslint-plugin-vitest#918\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/8f671ac\"\u003e\u003c!-- raw HTML omitted --\u003e(8f671)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.6.20...v1.6.21\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev1.6.20\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehoisted-apis-on-top\u003c/strong\u003e: Detect vitest.mock and aliased vi/vitest mock calls  -  by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/909\"\u003evitest-dev/eslint-plugin-vitest#909\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/8fff969\"\u003e\u003c!-- raw HTML omitted --\u003e(8fff9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003erequire-test-timeout\u003c/strong\u003e: Treat imported bindings as explicit timeouts  -  by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/906\"\u003evitest-dev/eslint-plugin-vitest#906\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/bd82c7d\"\u003e\u003c!-- raw HTML omitted --\u003e(bd82c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evalid-expect\u003c/strong\u003e: Treat .finally() as part of async assertion promise chains  -  by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/908\"\u003evitest-dev/eslint-plugin-vitest#908\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/7c697f8\"\u003e\u003c!-- raw HTML omitted --\u003e(7c697)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.6.19...v1.6.20\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev1.6.19\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eNo significant changes\u003c/em\u003e\u003c/p\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.6.18...v1.6.19\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev1.6.18\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect \u003ccode\u003erequiresTypeChecking\u003c/code\u003e metadata for four rules  -  by \u003ca href=\"https://github.com/inglec-arista\"\u003e\u003ccode\u003e@​inglec-arista\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/905\"\u003evitest-dev/eslint-plugin-vitest#905\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/e06a3dc\"\u003e\u003c!-- raw HTML omitted --\u003e(e06a3)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.6.17...v1.6.18\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev1.6.17\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/8ce98573b45c2ddd6d1f6302bf51417649862cce\"\u003e\u003ccode\u003e8ce9857\u003c/code\u003e\u003c/a\u003e chore: release v1.6.23\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/5e1e140db75417a983cd694261872b620f2a3652\"\u003e\u003ccode\u003e5e1e140\u003c/code\u003e\u003c/a\u003e feat(prefer-expect-assertions): add disallowHasAssertions option (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/929\"\u003e#929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/792320aa7c811cef52e682802e3f27ab32822dbf\"\u003e\u003ccode\u003e792320a\u003c/code\u003e\u003c/a\u003e fix(valid-expect): handle static expect APIs (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/930\"\u003e#930\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/394ddb6c9afb1e99fcf791027fb550c7e665b0a9\"\u003e\u003ccode\u003e394ddb6\u003c/code\u003e\u003c/a\u003e fix: 8 warnings for unexpected node version input (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/928\"\u003e#928\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/61bc715e893742f6030e325c6b647530305b3012\"\u003e\u003ccode\u003e61bc715\u003c/code\u003e\u003c/a\u003e chore: release v1.6.22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/34157096f6a1aafee152ac88bd4e2ba845a9d377\"\u003e\u003ccode\u003e3415709\u003c/code\u003e\u003c/a\u003e fix: handle expect.any separately from Chai any flag (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/925\"\u003e#925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/ffe3299c5073878b18765c97c858417f3bbf7ca9\"\u003e\u003ccode\u003effe3299\u003c/code\u003e\u003c/a\u003e chore: release v1.6.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/af7ac0c0ab0d48a7165e8517fdd9cbc241dc3019\"\u003e\u003ccode\u003eaf7ac0c\u003c/code\u003e\u003c/a\u003e Initial support for aroundEach  and aroundAll hooks (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/923\"\u003e#923\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/52692a40e27129e36f6bbbb1327c12f21581355d\"\u003e\u003ccode\u003e52692a4\u003c/code\u003e\u003c/a\u003e fix: support Chai-style expect chains (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/920\"\u003e#920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/commit/8f671acaad21a9cdc0b254c977cbb849eb46c451\"\u003e\u003ccode\u003e8f671ac\u003c/code\u003e\u003c/a\u003e fix(prefer-called-with): map calledOnce matcher to exact once with (\u003ca href=\"https://redirect.github.com/vitest-dev/eslint-plugin-vitest/issues/918\"\u003e#918\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/eslint-plugin-vitest/compare/v1.3.4...v1.6.23\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `cross-env` from 7.0.3 to 10.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/kentcdodds/cross-env/releases\"\u003ecross-env's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.1.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/compare/v10.0.0...v10.1.0\"\u003e10.1.0\u003c/a\u003e (2025-09-29)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd support for default value syntax (\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/152ae6a85b5725ac3c725a8a3e471aee79acc712\"\u003e152ae6a\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFor example:\u003c/p\u003e\n\u003cpre lang=\"json\"\u003e\u003ccode\u003e\u0026quot;dev:server\u0026quot;: \u0026quot;cross-env wrangler dev --port ${PORT:-8787}\u0026quot;,\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eIf \u003ccode\u003ePORT\u003c/code\u003e is already set, use that value, otherwise fallback to \u003ccode\u003e8787\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eLearn more about \u003ca href=\"https://www.gnu.org/software/bash/manual/html_node/Shell-Parameter-Expansion.html\"\u003eShell Parameter Expansion\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.0.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/compare/v9.0.0...v10.0.0\"\u003e10.0.0\u003c/a\u003e (2025-07-25)\u003c/h1\u003e\n\u003cp\u003eTL;DR: You should probably not have to change anything if:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eYou're using a modern maintained version of Node.js (v20+ is tested)\u003c/li\u003e\n\u003cli\u003eYou're only using the CLI (most of you are as that's the intended purpose)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn this release (which should have been v8 except I had some issues with automated releases 🙈), I've updated all the things and modernized the package. This happened in \u003ca href=\"https://redirect.github.com/kentcdodds/cross-env/issues/261\"\u003e#261\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWas this needed? Not really, but I just thought it'd be fun to modernize this package.\u003c/p\u003e\n\u003cp\u003eHere's the highlights of what was done.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eReplace Jest with Vitest for testing\u003c/li\u003e\n\u003cli\u003eConvert all source files from .js to .ts with proper TypeScript types\u003c/li\u003e\n\u003cli\u003eUse zshy for ESM-only builds (removes CJS support)\u003c/li\u003e\n\u003cli\u003eAdopt \u003ccode\u003e@​epic-web/config\u003c/code\u003e for TypeScript, ESLint, and Prettier\u003c/li\u003e\n\u003cli\u003eUpdate to Node.js \u0026gt;=20 requirement\u003c/li\u003e\n\u003cli\u003eRemove kcd-scripts dependency\u003c/li\u003e\n\u003cli\u003eAdd comprehensive e2e tests with GitHub Actions matrix testing\u003c/li\u003e\n\u003cli\u003eUpdate GitHub workflow with caching and cross-platform testing\u003c/li\u003e\n\u003cli\u003eModernize documentation and remove outdated sections\u003c/li\u003e\n\u003cli\u003eUpdate all dependencies to latest versions\u003c/li\u003e\n\u003cli\u003eAdd proper TypeScript declarations and exports\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe tool maintains its original functionality while being completely modernized with the latest tooling and best practices\u003c/p\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThis is a major rewrite that changes the module format from CommonJS to ESM-only. The package now requires Node.js \u0026gt;=20 and only exports ESM modules (not relevant in most cases).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/152ae6a85b5725ac3c725a8a3e471aee79acc712\"\u003e\u003ccode\u003e152ae6a\u003c/code\u003e\u003c/a\u003e feat: add support ofr default value syntax\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/bd70d1ab25b0e0b9b2926b048bf8ca52668a393c\"\u003e\u003ccode\u003ebd70d1a\u003c/code\u003e\u003c/a\u003e chore: upgrade zshy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/8e0b190df9f90266c720aafe6f24d43eee93fa1b\"\u003e\u003ccode\u003e8e0b190\u003c/code\u003e\u003c/a\u003e chore(ci): get coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/8635e80e81080f3e8f83b514565dc6bfecf6760c\"\u003e\u003ccode\u003e8635e80\u003c/code\u003e\u003c/a\u003e fix(release): manually release a major version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/3a58f2236009b2f52479f2927c7790129450ec63\"\u003e\u003ccode\u003e3a58f22\u003c/code\u003e\u003c/a\u003e chore: fix npmrc registry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/b70bfff5ecff5c92f2462cd6334378ef5bd84db0\"\u003e\u003ccode\u003eb70bfff\u003c/code\u003e\u003c/a\u003e chore(ci): add names to steps and workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/cc5759dc36012c4b13b3d3b1af5e0a645d3c55f6\"\u003e\u003ccode\u003ecc5759d\u003c/code\u003e\u003c/a\u003e fix(release): manually release a major version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/080a8591909665f42592d73e1149d0a061164045\"\u003e\u003ccode\u003e080a859\u003c/code\u003e\u003c/a\u003e chore: remove publish script\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/31e5bc70e726dee8e453dd64d54ad02eeb66e23a\"\u003e\u003ccode\u003e31e5bc7\u003c/code\u003e\u003c/a\u003e chore(ci): restore built files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kentcdodds/cross-env/commit/81e9c34f55c483dc1f568696db36267748b3740d\"\u003e\u003ccode\u003e81e9c34\u003c/code\u003e\u003c/a\u003e chore(ci): add back semantic-release\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kentcdodds/cross-env/compare/v7.0.3...v10.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `esbuild` from 0.25.0 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evanw/esbuild/releases\"\u003eesbuild's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDisallow \u003ccode\u003e\\\u003c/code\u003e in local development server HTTP requests (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr\"\u003eGHSA-g7r4-m6w7-qqqr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThis release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \u003ccode\u003e\\\u003c/code\u003e backslash character. It happened due to the use of Go's \u003ccode\u003epath.Clean()\u003c/code\u003e function, which only handles Unix-style \u003ccode\u003e/\u003c/code\u003e characters. HTTP requests with paths containing \u003ccode\u003e\\\u003c/code\u003e are no longer allowed.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/dellalibera\"\u003e\u003ccode\u003e@​dellalibera\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd integrity checks to the Deno API (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr\"\u003eGHSA-gv7w-rqvm-qjhr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.\u003c/p\u003e\n\u003cp\u003eNote that esbuild's Deno API installs from \u003ccode\u003eregistry.npmjs.org\u003c/code\u003e by default, but allows the \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e environment variable to override this with a custom package registry. This change means that the esbuild executable served by \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e must now match the expected content.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/sondt99\"\u003e\u003ccode\u003e@​sondt99\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAvoid inlining \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild's minifier sometimes incorrectly inlined \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for \u003ccode\u003elet\u003c/code\u003e and \u003ccode\u003econst\u003c/code\u003e declarations by avoiding doing it for \u003ccode\u003evar\u003c/code\u003e declarations, which no longer worked when more declaration types were added. Here's an example:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\r\n{\r\n  using x = new Resource()\r\n  x.activate()\r\n}\r\n\u003cp\u003e// Old output (with --minify)\u003cbr /\u003e\nnew Resource().activate();\u003c/p\u003e\n\u003cp\u003e// New output (with --minify)\u003cbr /\u003e\n{using e=new Resource;e.activate()}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix module evaluation when an error is thrown (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4461\"\u003e#4461\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/pull/4467\"\u003e#4467\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eIf an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e is used to import a module multiple times. The thrown error is supposed to be thrown by every call to \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e, not just the first. With this release, esbuild will now throw the same error every time you call \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e on a module that throws during its evaluation.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix some edge cases around the \u003ccode\u003enew\u003c/code\u003e operator (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4477\"\u003e#4477\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a \u003ccode\u003enew\u003c/code\u003e expression (specifically an optional chain and/or a tagged template literal). The generated code for the \u003ccode\u003enew\u003c/code\u003e target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the \u003ccode\u003enew\u003c/code\u003e target in parentheses. Here is an example of some affected code:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\r\nnew (foo()`bar`)()\r\nnew (foo()?.bar)()\r\n\u003cp\u003e// Old output\u003cbr /\u003e\nnew foo()\u003ccode\u003ebar\u003c/code\u003e();\u003cbr /\u003e\nnew (foo())?.bar();\u003c/p\u003e\n\u003cp\u003e\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md\"\u003eesbuild's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog: 2025\u003c/h1\u003e\n\u003cp\u003eThis changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).\u003c/p\u003e\n\u003ch2\u003e0.27.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAllow import path specifiers starting with \u003ccode\u003e#/\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/evanw/esbuild/pull/4361\"\u003e#4361\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously the specification for \u003ccode\u003epackage.json\u003c/code\u003e disallowed import path specifiers starting with \u003ccode\u003e#/\u003c/code\u003e, but this restriction \u003ca href=\"https://redirect.github.com/nodejs/node/pull/60864\"\u003ehas recently been relaxed\u003c/a\u003e and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping \u003ccode\u003e#/*\u003c/code\u003e to \u003ccode\u003e./src/*\u003c/code\u003e (previously you had to use another character such as \u003ccode\u003e#_*\u003c/code\u003e instead, which was more confusing). There is some more context in \u003ca href=\"https://redirect.github.com/nodejs/node/issues/49182\"\u003enodejs/node#49182\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThis change was contributed by \u003ca href=\"https://github.com/hybrist\"\u003e\u003ccode\u003e@​hybrist\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAutomatically add the \u003ccode\u003e-webkit-mask\u003c/code\u003e prefix (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4357\"\u003e#4357\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4358\"\u003e#4358\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThis release automatically adds the \u003ccode\u003e-webkit-\u003c/code\u003e vendor prefix for the \u003ca href=\"https://developer.mozilla.org/en-US/docs/Web/CSS/Reference/Properties/mask\"\u003e\u003ccode\u003emask\u003c/code\u003e\u003c/a\u003e CSS shorthand property:\u003c/p\u003e\n\u003cpre lang=\"css\"\u003e\u003ccode\u003e/* Original code */\nmain {\n  mask: url(x.png) center/5rem no-repeat\n}\n\u003cp\u003e/* Old output (with --target=chrome110) */\u003cbr /\u003e\nmain {\u003cbr /\u003e\nmask: url(x.png) center/5rem no-repeat;\u003cbr /\u003e\n}\u003c/p\u003e\n\u003cp\u003e/* New output (with --target=chrome110) */\u003cbr /\u003e\nmain {\u003cbr /\u003e\n-webkit-mask: url(x.png) center/5rem no-repeat;\u003cbr /\u003e\nmask: url(x.png) center/5rem no-repeat;\u003cbr /\u003e\n}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eThis change was contributed by \u003ca href=\"https://github.com/BPJEnnova\"\u003e\u003ccode\u003e@​BPJEnnova\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdditional minification of \u003ccode\u003eswitch\u003c/code\u003e statements (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4176\"\u003e#4176\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4359\"\u003e#4359\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThis release contains additional minification patterns for reducing \u003ccode\u003eswitch\u003c/code\u003e statements. Here is an example:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\nswitch (x) {\n  case 0:\n    foo()\n    break\n  case 1:\n  default:\n    bar()\n}\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/bb9db84c02433fbe37b3509f53f9f3e3cc48725e\"\u003e\u003ccode\u003ebb9db84\u003c/code\u003e\u003c/a\u003e publish 0.28.1 to npm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/9ff053e53b8eeb990f59355dbea365277ac45ee2\"\u003e\u003ccode\u003e9ff053e\u003c/code\u003e\u003c/a\u003e security: add integrity checks to the Deno API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/0a9bf2135b67c7e28989a5ba19f0f000805a5ab5\"\u003e\u003ccode\u003e0a9bf21\u003c/code\u003e\u003c/a\u003e enforce non-negative size in gzip parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/e2a1a7132058ee067fe736eac15f695861b8654e\"\u003e\u003ccode\u003ee2a1a71\u003c/code\u003e\u003c/a\u003e security: forbid \u003ccode\u003e\\\\\u003c/code\u003e in local dev server requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/83a2cbfc35809f4fd5152da59572d7bed7739d78\"\u003e\u003ccode\u003e83a2cbf\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e: don't inline \u003ccode\u003eusing\u003c/code\u003e declarations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/308ad745d824c77bc607603451b257d0f2fd9a38\"\u003e\u003ccode\u003e308ad74\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4471\"\u003e#4471\u003c/a\u003e: renaming of nested \u003ccode\u003evar\u003c/code\u003e declarations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.c...\n\n_Description has been truncated_","html_url":"https://github.com/helis-d/waylou/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/helis-d%2Fwaylou/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"}},{"old_version":"7.5.9","new_version":"7.5.20","update_type":"patch","path":null,"pr_created_at":"2026-07-18T04:13:19.000Z","version_change":"7.5.9 → 7.5.20","issue":{"uuid":"4916648607","node_id":"PR_kwDOFRr9wM7zP0Id","number":1596,"state":"closed","title":"build(deps): bump the all-monorepo-security group across 3 directories with 20 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-07-18T04:14:56.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-18T04:13:19.000Z","updated_at":"2026-07-18T04:15:54.000Z","time_to_close":97,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"all-monorepo-security","update_count":20,"packages":[{"name":"@angular/common","old_version":"20.3.16","new_version":"20.3.25","repository_url":"https://github.com/angular/angular"},{"name":"@angular/compiler","old_version":"20.3.16","new_version":"20.3.25","repository_url":"https://github.com/angular/angular"},{"name":"@angular/core","old_version":"20.3.16","new_version":"22.0.7","repository_url":"https://github.com/angular/angular"},{"name":"hono","old_version":"4.11.7","new_version":"4.12.30","repository_url":"https://github.com/honojs/hono"},{"name":"qs","old_version":"6.14.2","new_version":"6.15.3","repository_url":"https://github.com/ljharb/qs"},{"name":"tar","old_version":"7.5.9","new_version":"7.5.20","repository_url":"https://github.com/isaacs/node-tar"},{"name":"tmp","old_version":"0.2.5","new_version":"0.2.7","repository_url":"https://github.com/raszi/node-tmp"},{"name":"ws","old_version":"8.18.3","new_version":"8.21.1","repository_url":"https://github.com/websockets/ws"}],"path":null,"ecosystem":"npm"},"body":"Bumps the all-monorepo-security group with 8 updates in the /angular directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `20.3.16` | `20.3.25` |\n| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `20.3.16` | `20.3.25` |\n| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `20.3.16` | `22.0.7` |\n| [hono](https://github.com/honojs/hono) | `4.11.7` | `4.12.30` |\n| [qs](https://github.com/ljharb/qs) | `6.14.2` | `6.15.3` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.9` | `7.5.20` |\n| [tmp](https://github.com/raszi/node-tmp) | `0.2.5` | `0.2.7` |\n| [ws](https://github.com/websockets/ws) | `8.18.3` | `8.21.1` |\n\nBumps the all-monorepo-security group with 5 updates in the /express directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.0.0` | `4.3.0` |\n| [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.15.3` |\n| [axios](https://github.com/axios/axios) | `1.13.5` | `1.16.0` |\n| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.0.1` | `2.9.0` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n\nBumps the all-monorepo-security group with 12 updates in the /next directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.24.7` | `7.29.7` |\n| [hono](https://github.com/honojs/hono) | `4.11.7` | `4.12.30` |\n| [qs](https://github.com/ljharb/qs) | `6.14.1` | `6.15.3` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.1` | `1.10.0` |\n| [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.19` |\n| [ws](https://github.com/websockets/ws) | `8.18.0` | `8.21.1` |\n| [ws](https://github.com/websockets/ws) | `7.5.10` | `7.5.13` |\n| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.5.0` | `2.9.0` |\n| [form-data](https://github.com/form-data/form-data) | `3.0.1` | `3.0.5` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.2.4` | `3.4.11` |\n| [js-cookie](https://github.com/js-cookie/js-cookie) | `3.0.5` | `3.0.7` |\n| [next](https://github.com/vercel/next.js) | `15.5.12` | `15.5.18` |\n| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `6.30.3` | `7.18.1` |\n\n\nUpdates `@angular/common` from 20.3.16 to 20.3.25\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/releases\"\u003e@​angular/common's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.3.25\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e\u003cimg src=\"https://img.shields.io/badge/9f443bc24c-fix-green\" alt=\"fix - 9f443bc24c\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003cimg src=\"https://img.shields.io/badge/566ad05f20-fix-green\" alt=\"fix - 566ad05f20\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003cimg src=\"https://img.shields.io/badge/1a62130a6b-fix-green\" alt=\"fix - 1a62130a6b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003e\u003cimg src=\"https://img.shields.io/badge/a68ec702a0-fix-green\" alt=\"fix - a68ec702a0\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e\u003cimg src=\"https://img.shields.io/badge/768a349e6e-fix-green\" alt=\"fix - 768a349e6e\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003e\u003cimg src=\"https://img.shields.io/badge/ca48b4728d-fix-green\" alt=\"fix - ca48b4728d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/common/issues/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e\u003cimg src=\"https://img.shields.io/badge/06be298267-fix-green\" alt=\"fix - 06be298267\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003e\u003cimg src=\"https://img.shields.io/badge/fa940e1f4d-fix-green\" alt=\"fix - fa940e1f4d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003e\u003cimg src=\"https://img.shields.io/badge/e2ef1ce72a-fix-green\" alt=\"fix - e2ef1ce72a\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e\u003cimg src=\"https://img.shields.io/badge/49368c1859-fix-green\" alt=\"fix - 49368c1859\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003e\u003cimg src=\"https://img.shields.io/badge/d55c94ad81-refactor-yellow\" alt=\"refactor - d55c94ad81\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/common/issues/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d65a5f457b-fix-green\" alt=\"fix - d65a5f457b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e20.3.24\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/6ca433e56bcf74fdb6ad01d3afdf59628fba69b6\"\u003e\u003cimg src=\"https://img.shields.io/badge/6ca433e56b-fix-green\" alt=\"fix - 6ca433e56b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003ethrow on suspicious URLs and restrict protocol-relative URLs\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/8680b5152fe58ebde81e331b74ba806fc86514cc\"\u003e\u003cimg src=\"https://img.shields.io/badge/8680b5152f-fix-green\" alt=\"fix - 8680b5152f\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eupdate domino to latest version\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.23\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d40acc6431997b304ec54c951e55d2e52ed6f6dc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d40acc6431-fix-green\" alt=\"fix - d40acc6431\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent namespaced SVG \u003c!-- raw HTML omitted --\u003e elements from being stripped\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.22\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/blob/main/CHANGELOG.md\"\u003e@​angular/common's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e20.3.25 (2026-06-10)\u003c/h1\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e9f443bc24c\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e566ad05f20\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e1a62130a6b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003ea68ec702a0\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e768a349e6e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003eca48b4728d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e06be298267\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003efa940e1f4d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003ee2ef1ce72a\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e49368c1859\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003ed55c94ad81\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003erefactor\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003ed65a5f457b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e22.0.0 (2026-06-03)\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://goo.gle/angular-v22-blog\"\u003eBlog post \u0026quot;Announcing Angular v22\u0026quot;\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eBreaking Changes\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThis change will trigger the \u003ccode\u003enullishCoalescingNotNullable\u003c/code\u003e and \u003ccode\u003eoptionalChainNotNullable\u003c/code\u003e diagnostics on exisiting projects.\nYou might want to disable those 2 diagnotiscs in your \u003ccode\u003etsconfig\u003c/code\u003e temporarily.\u003c/li\u003e\n\u003cli\u003edata prefixed attribute no-longer bind inputs nor outputs.\u003c/li\u003e\n\u003cli\u003eThe compiler will throw when there a when inputs, outputs or model are binding to the same input/outputs.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ein\u003c/code\u003e variables will throw in template expressions.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e\u003ccode\u003e06be298\u003c/code\u003e\u003c/a\u003e fix(http): preserve empty referrer option in HttpRequest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e\u003ccode\u003e9f443bc\u003c/code\u003e\u003c/a\u003e fix(common): Limits date format string length\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003e\u003ccode\u003efa940e1\u003c/code\u003e\u003c/a\u003e fix(http): Rejects non-HTTP(S) URLs in JSONP requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003ccode\u003e1a62130\u003c/code\u003e\u003c/a\u003e fix(common): use cryptographically secure SHA-256 for transfer cache key gene...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003ccode\u003e566ad05\u003c/code\u003e\u003c/a\u003e fix(common): skip transfer cache for uncacheable HTTP traffic\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003e\u003ccode\u003ee2ef1ce\u003c/code\u003e\u003c/a\u003e fix(http): skip transfer cache for fetch credentialed requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/3d135ce59bbf7426825bc493bc681f266846ac79\"\u003e\u003ccode\u003e3d135ce\u003c/code\u003e\u003c/a\u003e fix(common): add upper bounds for digitsInfo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/39a4b4cc8e8d101a566a70658707bc9f53dd5883\"\u003e\u003ccode\u003e39a4b4c\u003c/code\u003e\u003c/a\u003e fix(common): sanitize placeholder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/de7b2a62e7eded747c2a520c177cd41f60a96dcd\"\u003e\u003ccode\u003ede7b2a6\u003c/code\u003e\u003c/a\u003e fix(http): exclude withCredentials requests from transfer cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/4233188d8e70283190ea87dbaa5a872269291b4a\"\u003e\u003ccode\u003e4233188\u003c/code\u003e\u003c/a\u003e fix(http): skip TransferCache for cookie-bearing requests by default\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/angular/angular/commits/v20.3.25/packages/common\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@angular/compiler` from 20.3.16 to 20.3.25\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/releases\"\u003e@​angular/compiler's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.3.25\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e\u003cimg src=\"https://img.shields.io/badge/9f443bc24c-fix-green\" alt=\"fix - 9f443bc24c\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003cimg src=\"https://img.shields.io/badge/566ad05f20-fix-green\" alt=\"fix - 566ad05f20\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003cimg src=\"https://img.shields.io/badge/1a62130a6b-fix-green\" alt=\"fix - 1a62130a6b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003e\u003cimg src=\"https://img.shields.io/badge/a68ec702a0-fix-green\" alt=\"fix - a68ec702a0\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e\u003cimg src=\"https://img.shields.io/badge/768a349e6e-fix-green\" alt=\"fix - 768a349e6e\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003e\u003cimg src=\"https://img.shields.io/badge/ca48b4728d-fix-green\" alt=\"fix - ca48b4728d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e\u003cimg src=\"https://img.shields.io/badge/06be298267-fix-green\" alt=\"fix - 06be298267\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003e\u003cimg src=\"https://img.shields.io/badge/fa940e1f4d-fix-green\" alt=\"fix - fa940e1f4d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003e\u003cimg src=\"https://img.shields.io/badge/e2ef1ce72a-fix-green\" alt=\"fix - e2ef1ce72a\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e\u003cimg src=\"https://img.shields.io/badge/49368c1859-fix-green\" alt=\"fix - 49368c1859\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003e\u003cimg src=\"https://img.shields.io/badge/d55c94ad81-refactor-yellow\" alt=\"refactor - d55c94ad81\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d65a5f457b-fix-green\" alt=\"fix - d65a5f457b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e20.3.24\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/6ca433e56bcf74fdb6ad01d3afdf59628fba69b6\"\u003e\u003cimg src=\"https://img.shields.io/badge/6ca433e56b-fix-green\" alt=\"fix - 6ca433e56b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003ethrow on suspicious URLs and restrict protocol-relative URLs\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/8680b5152fe58ebde81e331b74ba806fc86514cc\"\u003e\u003cimg src=\"https://img.shields.io/badge/8680b5152f-fix-green\" alt=\"fix - 8680b5152f\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eupdate domino to latest version\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.23\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d40acc6431997b304ec54c951e55d2e52ed6f6dc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d40acc6431-fix-green\" alt=\"fix - d40acc6431\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent namespaced SVG \u003c!-- raw HTML omitted --\u003e elements from being stripped\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.22\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/blob/main/CHANGELOG.md\"\u003e@​angular/compiler's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e20.3.25 (2026-06-10)\u003c/h1\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e9f443bc24c\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e566ad05f20\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e1a62130a6b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003ea68ec702a0\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e768a349e6e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003eca48b4728d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e06be298267\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003efa940e1f4d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003ee2ef1ce72a\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e49368c1859\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003ed55c94ad81\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003erefactor\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003ed65a5f457b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e22.0.0 (2026-06-03)\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://goo.gle/angular-v22-blog\"\u003eBlog post \u0026quot;Announcing Angular v22\u0026quot;\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eBreaking Changes\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThis change will trigger the \u003ccode\u003enullishCoalescingNotNullable\u003c/code\u003e and \u003ccode\u003eoptionalChainNotNullable\u003c/code\u003e diagnostics on exisiting projects.\nYou might want to disable those 2 diagnotiscs in your \u003ccode\u003etsconfig\u003c/code\u003e temporarily.\u003c/li\u003e\n\u003cli\u003edata prefixed attribute no-longer bind inputs nor outputs.\u003c/li\u003e\n\u003cli\u003eThe compiler will throw when there a when inputs, outputs or model are binding to the same input/outputs.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ein\u003c/code\u003e variables will throw in template expressions.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003e\u003ccode\u003ea68ec70\u003c/code\u003e\u003c/a\u003e fix(compiler): sanitize two-way properties\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/d40acc6431997b304ec54c951e55d2e52ed6f6dc\"\u003e\u003ccode\u003ed40acc6\u003c/code\u003e\u003c/a\u003e fix(compiler): prevent namespaced SVG \u0026lt;style\u0026gt; elements from being stripped\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/7ae6381a4845ad4b13a7a5574c5433b077c93c5c\"\u003e\u003ccode\u003e7ae6381\u003c/code\u003e\u003c/a\u003e test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/36200bd81a3420d8222dfe10767437c383a20fe8\"\u003e\u003ccode\u003e36200bd\u003c/code\u003e\u003c/a\u003e test(core): update spec files to match 20.3.x limits and actual contexts (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68\"\u003e#68\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/823b37f0468f7c8b38637ce93e26fc8db791b282\"\u003e\u003ccode\u003e823b37f\u003c/code\u003e\u003c/a\u003e test(compiler): remove obsolete schema_extractor import (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68926\"\u003e#68926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/e345a58069ede97250af449f5b7e9b94f828d30c\"\u003e\u003ccode\u003ee345a58\u003c/code\u003e\u003c/a\u003e fix(core): normalize tag names in runtime i18n attribute security context loo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/8f35b182b1479ed80d652f185c2c3ee5a82ea34c\"\u003e\u003ccode\u003e8f35b18\u003c/code\u003e\u003c/a\u003e fix(compiler): normalize tag names with custom namespaces in DomElementSchema...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/64a89e917a0794a3d74713bdb4c9c63d703b317b\"\u003e\u003ccode\u003e64a89e9\u003c/code\u003e\u003c/a\u003e fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/6404edfe0af3f27cb96737e72907553fb924d88a\"\u003e\u003ccode\u003e6404edf\u003c/code\u003e\u003c/a\u003e fix(compiler): strip namespaced SVG script elements during template compilati...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/dc631efa96e787bee1277f324208f21c36c1fa71\"\u003e\u003ccode\u003edc631ef\u003c/code\u003e\u003c/a\u003e fix(core): support prefix-insensitive DOM schema lookups and compile-time i18...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/angular/angular/commits/v20.3.25/packages/compiler\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@angular/core` from 20.3.16 to 22.0.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/releases\"\u003e@​angular/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e22.0.7\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d\"\u003e\u003cimg src=\"https://img.shields.io/badge/91e33aa1de-fix-green\" alt=\"fix - 91e33aa1de\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eavoid prototype lookups in date format caches\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1\"\u003e\u003cimg src=\"https://img.shields.io/badge/5b516e3a58-fix-green\" alt=\"fix - 5b516e3a58\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eparsing of an empty template literal interpolation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58\"\u003e\u003cimg src=\"https://img.shields.io/badge/c88ddde1c9-fix-green\" alt=\"fix - c88ddde1c9\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003ere-tag SourceFiles after TsCreateProgramDriver.updateFiles()\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81\"\u003e\u003cimg src=\"https://img.shields.io/badge/94d9591b51-fix-green\" alt=\"fix - 94d9591b51\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eallow static attributes for explicit input transforms\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb\"\u003e\u003cimg src=\"https://img.shields.io/badge/c89f71a74c-fix-green\" alt=\"fix - c89f71a74c\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eignore processing instruction syntax in templates\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397\"\u003e\u003cimg src=\"https://img.shields.io/badge/70500e4067-fix-green\" alt=\"fix - 70500e4067\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003epreserve explicit input transform write type\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eforms\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae\"\u003e\u003cimg src=\"https://img.shields.io/badge/1b9964675f-fix-green\" alt=\"fix - 1b9964675f\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eallow multiple async validators\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4\"\u003e\u003cimg src=\"https://img.shields.io/badge/64d6d47a0c-fix-green\" alt=\"fix - 64d6d47a0c\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003epreserve intermediate number values in signal forms\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157\"\u003e\u003cimg src=\"https://img.shields.io/badge/6cf7446afa-fix-green\" alt=\"fix - 6cf7446afa\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent stale CVA writeback during debounce\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/20b7dc3023df9ccde232cf9fef1d2b1d3ae68b23\"\u003e\u003cimg src=\"https://img.shields.io/badge/20b7dc3023-fix-green\" alt=\"fix - 20b7dc3023\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent interceptor signal reads from leaking into calling reactive contexts\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003elocalize\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/22d5a091d10ac70ece469a4bf69b03c51805614b\"\u003e\u003cimg src=\"https://img.shields.io/badge/22d5a091d1-fix-green\" alt=\"fix - 22d5a091d1\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003ebuild runtime translations map with a null prototype\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/8ce1fcf7faef3ef4b3612e0faeac2701a82c5434\"\u003e\u003cimg src=\"https://img.shields.io/badge/8ce1fcf7fa-fix-green\" alt=\"fix - 8ce1fcf7fa\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003euse Object.hasOwn for placeholder lookup in translate\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-browser\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/b34bf0dce855bca3c6dfcf7e19d38b3b39288a16\"\u003e\u003cimg src=\"https://img.shields.io/badge/b34bf0dce8-fix-green\" alt=\"fix - b34bf0dce8\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent ReDoS in SOURCEMAP_URL_REGEXP\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e22.0.6\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fd4ddcafed340dbc116df9718f03ee9e16c41c18\"\u003e\u003cimg src=\"https://img.shields.io/badge/fd4ddcafed-fix-green\" alt=\"fix - fd4ddcafed\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003euse regular optional chaining expression for safe function calls in TCBs\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/534fe81a8904408f252cbbbd90ca3e46bf5df3c9\"\u003e\u003cimg src=\"https://img.shields.io/badge/534fe81a89-fix-green\" alt=\"fix - 534fe81a89\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eapply debugName transform to required signal queries\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/3b08201bfb63227b9a30e7c40b966412496f115d\"\u003e\u003cimg src=\"https://img.shields.io/badge/3b08201bfb-fix-green\" alt=\"fix - 3b08201bfb\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003edetect uninvoked signals in bound expressions using ternary\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eforms/signals\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/blob/main/CHANGELOG.md\"\u003e@​angular/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e22.0.7 (2026-07-15)\u003c/h1\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d\"\u003e91e33aa1de\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eavoid prototype lookups in date format caches\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1\"\u003e5b516e3a58\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eparsing of an empty template literal interpolation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58\"\u003ec88ddde1c9\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003ere-tag SourceFiles after TsCreateProgramDriver.updateFiles()\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81\"\u003e94d9591b51\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eallow static attributes for explicit input transforms\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb\"\u003ec89f71a74c\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eignore processing instruction syntax in templates\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397\"\u003e70500e4067\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003epreserve explicit input transform write type\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eforms\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae\"\u003e1b9964675f\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eallow multiple async validators\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4\"\u003e64d6d47a0c\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003epreserve intermediate number values in signal forms\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157\"\u003e6cf7446afa\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eprevent stale CVA writeback during debounce\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/20b7dc3023df9ccde232cf9fef1d2b1d3ae68b23\"\u003e20b7dc3023\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eprevent interceptor signal reads from leaking into calling reactive contexts\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003elocalize\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/22d5a091d10ac70ece469a4bf69b03c51805614b\"\u003e22d5a091d1\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003ebuild runtime translations map with a null prototype\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/8ce1fcf7faef3ef4b3612e0faeac2701a82c5434\"\u003e8ce1fcf7fa\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003euse Object.hasOwn for placeholder lookup in translate\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-browser\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/b34bf0dce855bca3c6dfcf7e19d38b3b39288a16\"\u003eb34bf0dce8\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eprevent ReDoS in SOURCEMAP_URL_REGEXP\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e20.3.26 (2026-07-08)\u003c/h1\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/406aaa31e6ac4d3c155f5ab76e315ccd8d0387fe\"\u003e406aaa31e6\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eupdate babel dependencies to latest v7\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/829d98e9ae08b12a2c4a624a64f87660d6dfde26\"\u003e\u003ccode\u003e829d98e\u003c/code\u003e\u003c/a\u003e build: update cross-repo angular dependencies to v22.0.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397\"\u003e\u003ccode\u003e70500e4\u003c/code\u003e\u003c/a\u003e fix(core): preserve explicit input transform write type\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/e881b962cc45ddc7d60da095bac496a7709f25cb\"\u003e\u003ccode\u003ee881b96\u003c/code\u003e\u003c/a\u003e refactor(core): move signal debug graph interfaces to primitives/devtools\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/1046fd9e56b607ddc3f22ffd86af7c3bddec40ce\"\u003e\u003ccode\u003e1046fd9\u003c/code\u003e\u003c/a\u003e refactor(core): remove deprecated \u003ccode\u003eunregisterTool\u003c/code\u003e from \u003ccode\u003eModelContext\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/5936ffb80cf729667951a43b2da479d663fb5c98\"\u003e\u003ccode\u003e5936ffb\u003c/code\u003e\u003c/a\u003e refactor(core): update WebMCP tool registration to be asynchronous\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/c82ae67e3d866daea488c9cb312c45bbb19c7b33\"\u003e\u003ccode\u003ec82ae67\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;fix(core): allow static attributes for explicit input transforms\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/ec9b4793e88828257cae38ac75b8e1c5392022ff\"\u003e\u003ccode\u003eec9b479\u003c/code\u003e\u003c/a\u003e build: update cross-repo angular dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81\"\u003e\u003ccode\u003e94d9591\u003c/code\u003e\u003c/a\u003e fix(core): allow static attributes for explicit input transforms\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae\"\u003e\u003ccode\u003e1b99646\u003c/code\u003e\u003c/a\u003e fix(forms): allow multiple async validators\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/748faa4f95dfdae1570057f7af1bc7031e80a94a\"\u003e\u003ccode\u003e748faa4\u003c/code\u003e\u003c/a\u003e docs(docs-infra): Add build-time validation for API and guide links using rou...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/angular/angular/commits/v22.0.7/packages/core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@babel/plugin-transform-modules-systemjs` from 7.28.5 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/plugin-transform-modules-systemjs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/a458f66074b97d54773db8159af673d23b26079b\"\u003e\u003ccode\u003ea458f66\u003c/code\u003e\u003c/a\u003e v7.29.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/32ebd5aaf2526ddd176fd6a3d1e3dc594abdc8d9\"\u003e\u003ccode\u003e32ebd5a\u003c/code\u003e\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17974\"\u003e#17974\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/aa8394e454337d118ac3d40bfa3ee1a3cb3f3ed2\"\u003e\u003ccode\u003eaa8394e\u003c/code\u003e\u003c/a\u003e v7.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/0053db620c05acf0036f593b5aaf4e372daa79d0\"\u003e\u003ccode\u003e0053db6\u003c/code\u003e\u003c/a\u003e Update polyfill packages (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17727\"\u003e#17727\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/61647ae2397c82c3c71f077b5ab109106a5cac0f\"\u003e\u003ccode\u003e61647ae\u003c/code\u003e\u003c/a\u003e v7.28.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/a177d551adba99773f4ff00ea9bf46550def6132\"\u003e\u003ccode\u003ea177d55\u003c/code\u003e\u003c/a\u003e [Babel 8] Use \u003ccode\u003et.traverseFast\u003c/code\u003e to replace some \u003ccode\u003epath.traverse\u003c/code\u003e (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17518\"\u003e#17518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/eebd3a06021c13d335b5b0bd79734df3abbea678\"\u003e\u003ccode\u003eeebd3a0\u003c/code\u003e\u003c/a\u003e v7.27.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/317e332e650bc04907bc787ab79f930288a3e71e\"\u003e\u003ccode\u003e317e332\u003c/code\u003e\u003c/a\u003e Enforce node protocol import (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17207\"\u003e#17207\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/fdc0fb59e119ee0b38bced63867a344a5b4bc2f3\"\u003e\u003ccode\u003efdc0fb5\u003c/code\u003e\u003c/a\u003e [Babel 8] Bump nodejs requirements to \u003ccode\u003e^20.19.0 || \u0026gt;= 22.12.0\u003c/code\u003e (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17204\"\u003e#17204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-modules-systemjs\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​babel/plugin-transform-modules-systemjs\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `hono` from 4.11.7 to 4.12.30\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/honojs/hono/releases\"\u003ehono's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.12.30\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(benchmark/routers): bump deps in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5107\"\u003ehonojs/hono#5107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(benchmark): remove not used benchmarks in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5108\"\u003ehonojs/hono#5108\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update to ts6 in prep for ts7 in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5104\"\u003ehonojs/hono#5104\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cache): deduplicate Cache-Control directives case-insensitively in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5025\"\u003ehonojs/hono#5025\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(compress): do not compress 206 Partial Content responses in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5020\"\u003ehonojs/hono#5020\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(client): replaceUrlParam should not match a param that prefixes another in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5096\"\u003ehonojs/hono#5096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(method-override): set duplex when forwarding a stream body in query mode in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5110\"\u003ehonojs/hono#5110\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.12.29...v4.12.30\"\u003ehttps://github.com/honojs/hono/compare/v4.12.29...v4.12.30\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.12.29\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(client): merge function headers with per-request headers by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5092\"\u003ehonojs/hono#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: fix no-op tsc in test script by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5093\"\u003ehonojs/hono#5093\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(lambda-edge): resolve the handler with the value passed to the callback by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5094\"\u003ehonojs/hono#5094\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(language): add JSDoc \u003ca href=\"https://github.com/example\"\u003e\u003ccode\u003e@​example\u003c/code\u003e\u003c/a\u003e to languageDetector by \u003ca href=\"https://github.com/codebybilal18\"\u003e\u003ccode\u003e@​codebybilal18\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5081\"\u003ehonojs/hono#5081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(workerd): add \u003ccode\u003ecompatibilityDate\u003c/code\u003e by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5100\"\u003ehonojs/hono#5100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(lambda-edge): base64 encode content-encoded response bodies by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5099\"\u003ehonojs/hono#5099\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(aws-lambda): treat any non-identity content-encoding as binary by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5101\"\u003ehonojs/hono#5101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(types): strip extra properties from array types in JSONParsed by \u003ca href=\"https://github.com/Arman-Luthra\"\u003e\u003ccode\u003e@​Arman-Luthra\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5103\"\u003ehonojs/hono#5103\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(trie-router): match empty wildcard remainder after regexp param by \u003ca href=\"https://github.com/usualoma\"\u003e\u003ccode\u003e@​usualoma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5102\"\u003ehonojs/hono#5102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(etag): treat If-None-Match: \u003ccode\u003e*\u003c/code\u003e as a match by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5084\"\u003ehonojs/hono#5084\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/codebybilal18\"\u003e\u003ccode\u003e@​codebybilal18\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5081\"\u003ehonojs/hono#5081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Arman-Luthra\"\u003e\u003ccode\u003e@​Arman-Luthra\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5103\"\u003ehonojs/hono#5103\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.12.28...v4.12.29\"\u003ehttps://github.com/honojs/hono/compare/v4.12.28...v4.12.29\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.12.28\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(serve-static): treat empty string content as found by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5062\"\u003ehonojs/hono#5062\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(MIGRATION): fix req.raw.headers reference (property, not method) by \u003ca href=\"https://github.com/EduardF1\"\u003e\u003ccode\u003e@​EduardF1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5047\"\u003ehonojs/hono#5047\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: don't publish \u003ccode\u003e*.tsbuildinfo\u003c/code\u003e by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5066\"\u003ehonojs/hono#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(utils/body,validator): normalize Content-Type media type for case-insensitive matching by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5067\"\u003ehonojs/hono#5067\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid circular dependency between body.ts and request.ts by \u003ca href=\"https://github.com/usualoma\"\u003e\u003ccode\u003e@​usualoma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5071\"\u003ehonojs/hono#5071\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(bun): report the requested subprotocol on WSContext.protocol by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5059\"\u003ehonojs/hono#5059\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump \u003ccode\u003edevDependencies\u003c/code\u003e by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5085\"\u003ehonojs/hono#5085\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(aws-lambda): detect V2 events by request context, not rawPath alone by \u003ca href=\"https://github.com/VihaanAgarwal\"\u003e\u003ccode\u003e@​VihaanAgarwal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5033\"\u003ehonojs/hono#5033\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(context-storage): fix JSDoc by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5086\"\u003ehonojs/hono#5086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/EduardF1\"\u003e\u003ccode\u003e@​EduardF1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5047\"\u003ehonojs/hono#5047\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5059\"\u003ehonojs/hono#5059\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/VihaanAgarwal\"\u003e\u003ccode\u003e@​VihaanAgarwal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5033\"\u003ehonojs/hono#5033\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.12.27...v4.12.28\"\u003ehttps://github.com/honojs/hono/compare/v4.12.27...v4.12.28\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/b2ae3a2204a48ce15a26448fd746d39745eb1837\"\u003e\u003ccode\u003eb2ae3a2\u003c/code\u003e\u003c/a\u003e 4.12.30\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/e0cdeb0a89e777e6b2d75c59f516962670fb47dc\"\u003e\u003ccode\u003ee0cdeb0\u003c/code\u003e\u003c/a\u003e fix(method-override): set duplex when forwarding a stream body in query mode ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/653025e5c3a5eaf3b0e50d338250f601d7a5e56a\"\u003e\u003ccode\u003e653025e\u003c/code\u003e\u003c/a\u003e fix(client): replaceUrlParam should not match a param that prefixes another (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/67efb27f7bcba7a99cae7779b7eb71c3fcada8d8\"\u003e\u003ccode\u003e67efb27\u003c/code\u003e\u003c/a\u003e fix(compress): do not compress 206 Partial Content responses (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5020\"\u003e#5020\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/a48c8bf248eec5c2ecd468be5054c0d260a0dbfe\"\u003e\u003ccode\u003ea48c8bf\u003c/code\u003e\u003c/a\u003e fix(cache): deduplicate Cache-Control directives case-insensitively (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5025\"\u003e#5025\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/3bb9a0e3a7dc0083061e91e885b2e9308585ee40\"\u003e\u003ccode\u003e3bb9a0e\u003c/code\u003e\u003c/a\u003e chore: update to ts6 in prep for ts7 (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5104\"\u003e#5104\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/d3f97caa29bba1f1ae31a4e023c25224aa2a4261\"\u003e\u003ccode\u003ed3f97ca\u003c/code\u003e\u003c/a\u003e chore(benchmark): remove not used benchmarks (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5108\"\u003e#5108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/29a3f73fd5ebab6c96c08e0607e801efa99bb954\"\u003e\u003ccode\u003e29a3f73\u003c/code\u003e\u003c/a\u003e chore(benchmark/routers): bump deps (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5107\"\u003e#5107\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/cda1af200256fa9a014bbcc2fdf79db201a627b6\"\u003e\u003ccode\u003ecda1af2\u003c/code\u003e\u003c/a\u003e 4.12.29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/2126289c15b0f87fb928645c4ed92d0f81d21cd4\"\u003e\u003ccode\u003e2126289\u003c/code\u003e\u003c/a\u003e fix(etag): treat If-None-Match: \u003ccode\u003e*\u003c/code\u003e as a match (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5084\"\u003e#5084\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/honojs/hono/compare/v4.11.7...v4.12.30\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for hono since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda\"\u003e\u003ccode\u003e33d05b5\u003c/code\u003e\u003c/a\u003e 4.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb\"\u003e\u003ccode\u003e663bfab\u003c/code\u003e\u003c/a\u003e Drop demo publish, to not override new v5 one.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986\"\u003e\u003ccode\u003e1cb8c7b\u003c/code\u003e\u003c/a\u003e Add v4-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157\"\u003e\u003ccode\u003e02f27af\u003c/code\u003e\u003c/a\u003e Restore umd builds back to es5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb\"\u003e\u003ccode\u003e8be84ed\u003c/code\u003e\u003c/a\u003e Fix es5 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4\"\u003e\u003ccode\u003e59423c6\u003c/code\u003e\u003c/a\u003e Replace \u003ccode\u003emaxMergeSeqLength\u003c/code\u003e option with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (more robust). Ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d\"\u003e\u003ccode\u003e6842ef6\u003c/code\u003e\u003c/a\u003e doc polish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/590dbabadd172b099c07654fab2eabec8c7a07b9\"\u003e\u003ccode\u003e590dbab\u003c/code\u003e\u003c/a\u003e 4.2.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f944dc5cd132251752499bdb157f33027d362177\"\u003e\u003ccode\u003ef944dc5\u003c/code\u003e\u003c/a\u003e Add package.json funding field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f6927192223355b64f2a6e19f3071ccc579ee718\"\u003e\u003ccode\u003ef692719\u003c/code\u003e\u003c/a\u003e Changelog update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/4.0.0...4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `piscina` from 5.1.3 to 5.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/piscinajs/piscina/releases\"\u003episcina's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Backport v5] chore(docs): remove duplicated by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/846\"\u003episcinajs/piscina#846\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] refactor: tweaks by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/847\"\u003episcinajs/piscina#847\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] chore: pin actions by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/849\"\u003episcinajs/piscina#849\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] chore(deps): Bump on-headers and compression in /docs by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/855\"\u003episcinajs/piscina#855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] refactor: TaskInfo by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/859\"\u003episcinajs/piscina#859\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] refactor: small adjustments over WorkerInfo by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/865\"\u003episcinajs/piscina#865\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): Bump \u003ccode\u003e@​napi-rs/nice\u003c/code\u003e from 1.0.4 to 1.1.1 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/883\"\u003episcinajs/piscina#883\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: add provenance by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/885\"\u003episcinajs/piscina#885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: fix taskDone duplicate listener by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/896\"\u003episcinajs/piscina#896\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] chore(deps-dev): Bump tsx from 4.20.3 to 4.20.6 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/910\"\u003episcinajs/piscina#910\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] chore(deps): Bump actions/checkout from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/912\"\u003episcinajs/piscina#912\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v5] chore(deps): Bump actions/stale from 9.1.0 to 10.1.0 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/911\"\u003episcinajs/piscina#911\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add sponsors section by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/917\"\u003episcinajs/piscina#917\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: standardize normalize calculation of stddev by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/piscinajs/piscina/pull/924\"\u003episcinajs/piscina#924\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/piscinajs/piscina/compare/v5.1.3...v5.1.4\"\u003ehttps://github.com/piscinajs/piscina/compare/v5.1.3...v5.1.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/piscinajs/piscina/blob/v5.2.0/CHANGELOG.md\"\u003episcina's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/piscinajs/piscina/compare/v5.1.4...v5.2.0\"\u003e5.2.0\u003c/a\u003e (2026-06-12)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd idleThreads getter (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/1059\"\u003e#1059\u003c/a\u003e) (\u003ca href=\"https://github.com/piscinajs/piscina/commit/6beabe0ef395a4d086a81ce8162f7b77c9a6d180\"\u003e6beabe0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eeagerly spawn workers up to maxThreads on cold-pool burst (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/1043\"\u003e#1043\u003c/a\u003e) (\u003ca href=\"https://github.com/piscinajs/piscina/commit/779c6402dc09b8746679fae56843d2898c4607ec\"\u003e779c640\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einclude skipQueue in queueSize calculation (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/1030\"\u003e#1030\u003c/a\u003e) (\u003ca href=\"https://github.com/piscinajs/piscina/commit/b7d4d614450bdaf8a833c9fc5ebe7ccd6d81f6f6\"\u003eb7d4d61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einterface name and add missing curly brace (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/951\"\u003e#9...\n\n_Description has been truncated_","html_url":"https://github.com/sentry-demos/empower/pull/1596","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sentry-demos%2Fempower/issues/1596","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1596/packages"}},{"old_version":"^7.5.19","new_version":"^7.5.20","update_type":"patch","path":"/backend","pr_created_at":"2026-07-13T05:06:04.000Z","version_change":"^7.5.19 → ^7.5.20","issue":{"uuid":"4870574785","node_id":"PR_kwDONS7uwc7w6FSH","number":224,"state":"closed","title":"chore(deps): update tar requirement from ^7.5.19 to ^7.5.20 in /backend","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-07-13T05:06:47.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-13T05:06:04.000Z","updated_at":"2026-07-13T05:06:48.000Z","time_to_close":43,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): update","packages":[{"name":"tar","old_version":"^7.5.19","new_version":"^7.5.20","repository_url":"https://github.com/isaacs/node-tar"}],"path":"/backend","ecosystem":"npm"},"body":"Updates the requirements on [tar](https://github.com/isaacs/node-tar) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/ebbb72094159d003f428dcd1cb28255d37ea4873\"\u003e\u003ccode\u003eebbb720\u003c/code\u003e\u003c/a\u003e 7.5.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2f271963a7fe5a5960aee5dd6adf9647a1e266fd\"\u003e\u003ccode\u003e2f27196\u003c/code\u003e\u003c/a\u003e fix: fully disable and dispose of unzip when aborting parser\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.19...v7.5.20\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/mbakgun/DockerFlex/pull/224","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mbakgun%2FDockerFlex/issues/224","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/224/packages"}},{"old_version":"7.5.13","new_version":"7.5.19","update_type":"patch","path":null,"pr_created_at":"2026-07-11T01:53:07.000Z","version_change":"7.5.13 → 7.5.19","issue":{"uuid":"4859984495","node_id":"PR_kwDOSS18Gc7waq8D","number":2,"state":"closed","title":"chore(deps): bump the npm-minor-patch group with 401 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-07-18T01:38:20.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-11T01:53:07.000Z","updated_at":"2026-07-18T01:38:22.000Z","time_to_close":603913,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm-minor-patch","update_count":401,"packages":[{"name":"@applemusic-like-lyrics/vue","old_version":"0.3.2","new_version":"0.5.2","repository_url":"https://github.com/amll-dev/applemusic-like-lyrics"},{"name":"@neteasecloudmusicapienhanced/api","old_version":"4.32.0","new_version":"4.36.1","repository_url":"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced"},{"name":"@simplewebauthn/server","old_version":"13.3.0","new_version":"13.3.2","repository_url":"https://github.com/MasterKale/SimpleWebAuthn"},{"name":"axios","old_version":"1.15.2","new_version":"1.18.1","repository_url":"https://github.com/axios/axios"},{"name":"dayjs","old_version":"1.11.20","new_version":"1.11.21","repository_url":"https://github.com/iamkun/dayjs"},{"name":"multer","old_version":"2.1.1","new_version":"2.2.0","repository_url":"https://github.com/expressjs/multer"},{"name":"@types/multer","old_version":"2.1.0","new_version":"2.2.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"nodemailer","old_version":"8.0.6","new_version":"8.0.11","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"@types/nodemailer","old_version":"6.4.23","new_version":"8.0.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"nuxt","old_version":"4.4.2","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"sass","old_version":"1.99.0","new_version":"1.101.0","repository_url":"https://github.com/sass/dart-sass"},{"name":"tsx","old_version":"4.21.0","new_version":"4.23.0","repository_url":"https://github.com/privatenumber/tsx"},{"name":"vue","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"zod","old_version":"4.3.6","new_version":"4.4.3","repository_url":"https://github.com/colinhacks/zod"},{"name":"@nuxt/eslint","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/nuxt/eslint"},{"name":"eslint","old_version":"9.39.4","new_version":"9.39.5","repository_url":"https://github.com/eslint/eslint"},{"name":"prettier","old_version":"3.8.3","new_version":"3.9.5","repository_url":"https://github.com/prettier/prettier"},{"name":"@applemusic-like-lyrics/core","old_version":"0.3.2","new_version":"0.5.2","repository_url":"https://github.com/amll-dev/applemusic-like-lyrics"},{"name":"@babel/code-frame","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/compat-data","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/core","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/generator","old_version":"7.29.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-annotate-as-pure","old_version":"7.27.3","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-compilation-targets","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-create-class-features-plugin","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-create-regexp-features-plugin","old_version":"7.28.5","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-globals","old_version":"7.28.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-member-expression-to-functions","old_version":"7.28.5","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-module-imports","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-module-transforms","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-optimise-call-expression","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-plugin-utils","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-remap-async-to-generator","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-replace-supers","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-skip-transparent-expression-wrappers","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-string-parser","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-validator-identifier","old_version":"7.28.5","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-validator-option","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-wrap-function","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helpers","old_version":"7.29.2","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/parser","old_version":"7.29.2","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-bugfix-firefox-class-in-computed-class-key","old_version":"7.28.5","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-bugfix-safari-class-field-initializer-scope","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-import-assertions","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-import-attributes","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-jsx","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-typescript","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-arrow-functions","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-async-generator-functions","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-async-to-generator","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-block-scoped-functions","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-block-scoping","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-class-properties","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-class-static-block","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-classes","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-computed-properties","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-destructuring","old_version":"7.28.5","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-dotall-regex","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-duplicate-keys","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-duplicate-named-capturing-groups-regex","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-dynamic-import","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-explicit-resource-management","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-exponentiation-operator","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-export-namespace-from","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-for-of","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-function-name","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-json-strings","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-literals","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-logical-assignment-operators","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-member-expression-literals","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-modules-amd","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-modules-commonjs","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-modules-systemjs","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-modules-umd","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-named-capturing-groups-regex","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-new-target","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-nullish-coalescing-operator","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-numeric-separator","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-object-rest-spread","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-object-super","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-optional-catch-binding","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-optional-chaining","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-parameters","old_version":"7.27.7","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-private-methods","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-private-property-in-object","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-property-literals","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-regenerator","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-regexp-modifiers","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-reserved-words","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-shorthand-properties","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-spread","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-sticky-regex","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-template-literals","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-typeof-symbol","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-typescript","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-unicode-escapes","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-unicode-property-regex","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-unicode-regex","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-unicode-sets-regex","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/preset-env","old_version":"7.29.2","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/template","old_version":"7.28.6","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/traverse","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/types","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@bomb.sh/tab","old_version":"0.0.14","new_version":"0.0.17","repository_url":"https://github.com/bombshell-dev/tab"},{"name":"@clack/core","old_version":"1.2.0","new_version":"1.4.3","repository_url":"https://github.com/bombshell-dev/clack"},{"name":"@clack/prompts","old_version":"1.2.0","new_version":"1.7.0","repository_url":"https://github.com/bombshell-dev/clack"},{"name":"@colordx/core","old_version":"5.4.2","new_version":"5.5.0","repository_url":"https://github.com/dkryaklin/colordx"},{"name":"@es-joy/jsdoccomment","old_version":"0.86.0","new_version":"0.88.0","repository_url":"https://github.com/es-joy/jsdoccomment"},{"name":"@eslint/compat","old_version":"2.0.5","new_version":"2.1.0","repository_url":"https://github.com/eslint/rewrite"},{"name":"@eslint/config-inspector","old_version":"1.5.0","new_version":"3.0.4","repository_url":"https://github.com/eslint/config-inspector"},{"name":"@eslint/eslintrc","old_version":"3.3.5","new_version":"3.3.6","repository_url":"https://github.com/eslint/eslintrc"},{"name":"@eslint/js","old_version":"9.39.4","new_version":"9.39.5","repository_url":"https://github.com/eslint/eslint"},{"name":"@ioredis/commands","old_version":"1.5.1","new_version":"1.10.0","repository_url":"https://github.com/ioredis/commands"},{"name":"@napi-rs/wasm-runtime","old_version":"0.2.12","new_version":"1.1.6","repository_url":"https://github.com/napi-rs/napi-rs"},{"name":"@neteasecloudmusicapienhanced/unblockmusic-utils","old_version":"0.2.4","new_version":"0.3.4"},{"name":"@nuxt/cli","old_version":"3.34.0","new_version":"3.36.1","repository_url":"https://github.com/nuxt/cli"},{"name":"@nuxt/eslint-config","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/nuxt/eslint"},{"name":"@nuxt/eslint-plugin","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/nuxt/eslint"},{"name":"@nuxt/nitro-server","old_version":"4.4.2","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@nuxt/schema","old_version":"4.4.2","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@nuxt/vite-builder","old_version":"4.4.2","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@oxc-minify/binding-android-arm-eabi","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-android-arm64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-darwin-arm64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-darwin-x64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-freebsd-x64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-arm-gnueabihf","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-arm-musleabihf","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-arm64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-arm64-musl","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-ppc64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-riscv64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-riscv64-musl","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-s390x-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-x64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-linux-x64-musl","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-openharmony-arm64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-wasm32-wasi","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-win32-arm64-msvc","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-win32-ia32-msvc","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-minify/binding-win32-x64-msvc","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-android-arm-eabi","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-android-arm64","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-darwin-arm64","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-darwin-x64","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-freebsd-x64","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm-gnueabihf","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm-musleabihf","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm64-gnu","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm64-musl","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-ppc64-gnu","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-riscv64-gnu","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-riscv64-musl","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-s390x-gnu","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-x64-gnu","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-x64-musl","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-openharmony-arm64","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-wasm32-wasi","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-win32-arm64-msvc","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-win32-ia32-msvc","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-win32-x64-msvc","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-project/types","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-android-arm-eabi","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-android-arm64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-darwin-arm64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-darwin-x64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-freebsd-x64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-arm-gnueabihf","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-arm-musleabihf","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-arm64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-arm64-musl","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-ppc64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-riscv64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-riscv64-musl","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-s390x-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-x64-gnu","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-linux-x64-musl","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-openharmony-arm64","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-wasm32-wasi","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-win32-arm64-msvc","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-win32-ia32-msvc","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-transform/binding-win32-x64-msvc","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@peculiar/asn1-android","old_version":"2.6.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-cms","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-csr","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-ecc","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-pfx","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-pkcs8","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-pkcs9","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-rsa","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-schema","old_version":"2.6.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-x509-attr","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-x509","old_version":"2.6.1","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@rolldown/pluginutils","old_version":"1.0.0-rc.13","new_version":"1.0.1","repository_url":"https://github.com/rolldown/plugins"},{"name":"@rollup/plugin-commonjs","old_version":"29.0.2","new_version":"29.0.3","repository_url":"https://github.com/rollup/plugins"},{"name":"@rollup/rollup-android-arm-eabi","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-android-arm64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-darwin-arm64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-darwin-x64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-freebsd-arm64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-freebsd-x64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm-gnueabihf","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm-musleabihf","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm64-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm64-musl","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-loong64-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-loong64-musl","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-ppc64-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-ppc64-musl","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-riscv64-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-riscv64-musl","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-s390x-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-x64-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-x64-musl","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-openbsd-x64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-openharmony-arm64","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-arm64-msvc","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-ia32-msvc","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-x64-gnu","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-x64-msvc","old_version":"4.60.2","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@speed-highlight/core","old_version":"1.2.15","new_version":"1.2.17","repository_url":"https://github.com/speed-highlight/core"},{"name":"@tybys/wasm-util","old_version":"0.10.1","new_version":"0.10.3","repository_url":"https://github.com/toyobayashi/wasm-util"},{"name":"@types/express-serve-static-core","old_version":"5.1.1","new_version":"5.1.2","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/qs","old_version":"6.15.0","new_version":"6.15.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@typescript-eslint/eslint-plugin","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/parser","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/project-service","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/scope-manager","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/tsconfig-utils","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/type-utils","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/types","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/typescript-estree","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/utils","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/visitor-keys","old_version":"8.59.0","new_version":"8.63.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@unhead/vue","old_version":"2.1.13","new_version":"2.1.15","repository_url":"https://github.com/unjs/unhead"},{"name":"@unrs/resolver-binding-android-arm-eabi","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-android-arm64","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-darwin-arm64","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-darwin-x64","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-freebsd-x64","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-arm-gnueabihf","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-arm-musleabihf","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-arm64-gnu","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-arm64-musl","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-ppc64-gnu","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-riscv64-gnu","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-riscv64-musl","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-s390x-gnu","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-x64-gnu","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-linux-x64-musl","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-wasm32-wasi","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-win32-arm64-msvc","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-win32-ia32-msvc","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@unrs/resolver-binding-win32-x64-msvc","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"@vercel/nft","old_version":"1.5.0","new_version":"1.10.2","repository_url":"https://github.com/vercel/nft"},{"name":"@vitejs/plugin-vue-jsx","old_version":"5.1.5","new_version":"5.1.6","repository_url":"https://github.com/vitejs/vite-plugin-vue"},{"name":"@vitejs/plugin-vue","old_version":"6.0.6","new_version":"6.0.7","repository_url":"https://github.com/vitejs/vite-plugin-vue"},{"name":"@vue/compiler-core","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/compiler-dom","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/compiler-sfc","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/compiler-ssr","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/devtools-core","old_version":"8.1.1","new_version":"8.1.5","repository_url":"https://github.com/vuejs/devtools"},{"name":"@vue/devtools-kit","old_version":"8.1.1","new_version":"8.1.5","repository_url":"https://github.com/vuejs/devtools"},{"name":"@vue/devtools-shared","old_version":"8.1.1","new_version":"8.1.5","repository_url":"https://github.com/vuejs/devtools"},{"name":"@vue/reactivity","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/runtime-core","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/runtime-dom","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/server-renderer","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/shared","old_version":"3.5.33","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"acorn","old_version":"8.16.0","new_version":"8.17.0","repository_url":"https://github.com/acornjs/acorn"},{"name":"agent-base","old_version":"7.1.4","new_version":"6.0.2","repository_url":"https://github.com/TooTallNate/proxy-agents"},{"name":"ansis","old_version":"4.2.0","new_version":"4.3.1","repository_url":"https://github.com/webdiscus/ansis"},{"name":"ast-walker-scope","old_version":"0.8.3","new_version":"0.9.0","repository_url":"https://github.com/sxzz/ast-walker-scope"},{"name":"b4a","old_version":"1.8.0","new_version":"1.8.1","repository_url":"https://github.com/holepunchto/b4a"},{"name":"bare-events","old_version":"2.8.2","new_version":"2.9.1","repository_url":"https://github.com/holepunchto/bare-events"},{"name":"bare-fs","old_version":"4.7.1","new_version":"4.7.4","repository_url":"https://github.com/holepunchto/bare-fs"},{"name":"bare-path","old_version":"3.0.0","new_version":"3.1.1","repository_url":"https://github.com/holepunchto/bare-path"},{"name":"bare-stream","old_version":"2.13.0","new_version":"2.13.3","repository_url":"https://github.com/holepunchto/bare-stream"},{"name":"bare-url","old_version":"2.4.2","new_version":"2.4.5","repository_url":"https://github.com/holepunchto/bare-url"},{"name":"basic-ftp","old_version":"5.3.0","new_version":"5.3.1","repository_url":"https://github.com/patrickjuchli/basic-ftp"},{"name":"body-parser","old_version":"1.20.5","new_version":"1.20.6","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.14","new_version":"1.1.16","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"builtin-modules","old_version":"5.1.0","new_version":"5.3.0","repository_url":"https://github.com/sindresorhus/builtin-modules"},{"name":"caniuse-api","old_version":"3.0.0","new_version":"4.0.0","repository_url":"https://github.com/MoOx/caniuse-api"},{"name":"cluster-key-slot","old_version":"1.1.2","new_version":"1.1.1","repository_url":"https://github.com/Salakar/cluster-key-slot"},{"name":"comment-parser","old_version":"1.4.6","new_version":"1.4.7","repository_url":"https://github.com/yavorskiy/comment-parser"},{"name":"cssnano-preset-default","old_version":"7.0.15","new_version":"8.0.2","repository_url":"https://github.com/cssnano/cssnano"},{"name":"cssnano-utils","old_version":"5.0.2","new_version":"6.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"cssnano","old_version":"7.1.7","new_version":"8.0.2","repository_url":"https://github.com/cssnano/cssnano"},{"name":"devalue","old_version":"5.7.1","new_version":"5.8.1","repository_url":"https://github.com/sveltejs/devalue"},{"name":"es-module-lexer","old_version":"2.1.0","new_version":"2.3.0","repository_url":"https://github.com/guybedford/es-module-lexer"},{"name":"es-object-atoms","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/ljharb/es-object-atoms"},{"name":"es-to-primitive","old_version":"1.3.0","new_version":"1.3.4","repository_url":"https://github.com/ljharb/es-to-primitive"},{"name":"eslint-flat-config-utils","old_version":"3.1.0","new_version":"3.2.0","repository_url":"https://github.com/antfu/eslint-flat-config-utils"},{"name":"eslint-plugin-import-lite","old_version":"0.5.2","new_version":"0.6.0","repository_url":"https://github.com/9romise/eslint-plugin-import-lite"},{"name":"eslint-plugin-import-x","old_version":"4.16.2","new_version":"4.17.1","repository_url":"https://github.com/un-ts/eslint-plugin-import-x"},{"name":"eslint-plugin-jsdoc","old_version":"62.9.0","new_version":"63.0.13","repository_url":"https://github.com/gajus/eslint-plugin-jsdoc"},{"name":"eslint-plugin-regexp","old_version":"3.1.0","new_version":"3.1.1","repository_url":"https://github.com/ota-meshi/eslint-plugin-regexp"},{"name":"eslint-plugin-unicorn","old_version":"63.0.0","new_version":"65.0.1","repository_url":"https://github.com/sindresorhus/eslint-plugin-unicorn"},{"name":"eslint-plugin-vue","old_version":"10.9.0","new_version":"10.9.2","repository_url":"https://github.com/vuejs/eslint-plugin-vue"},{"name":"express","old_version":"4.22.1","new_version":"4.22.2","repository_url":"https://github.com/expressjs/express"},{"name":"exsolve","old_version":"1.0.8","new_version":"1.1.0","repository_url":"https://github.com/unjs/exsolve"},{"name":"fast-npm-meta","old_version":"1.5.0","new_version":"1.5.1","repository_url":"https://github.com/antfu/fast-npm-meta"},{"name":"fast-string-truncated-width","old_version":"1.2.1","new_version":"3.0.3","repository_url":"https://github.com/fabiospampinato/fast-string-truncated-width"},{"name":"fast-string-width","old_version":"1.1.0","new_version":"3.0.2","repository_url":"https://github.com/fabiospampinato/fast-string-width"},{"name":"fast-uri","old_version":"3.1.0","new_version":"3.1.3","repository_url":"https://github.com/fastify/fast-uri"},{"name":"fast-wrap-ansi","old_version":"0.1.6","new_version":"0.2.2","repository_url":"https://github.com/43081j/fast-wrap-ansi"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"function.prototype.name","old_version":"1.1.8","new_version":"1.2.0","repository_url":"https://github.com/es-shims/Function.prototype.name"},{"name":"fuse.js","old_version":"7.3.0","new_version":"7.4.2","repository_url":"https://github.com/krisk/Fuse"},{"name":"get-east-asian-width","old_version":"1.5.0","new_version":"1.6.0","repository_url":"https://github.com/sindresorhus/get-east-asian-width"},{"name":"globby","old_version":"16.2.0","new_version":"16.2.1","repository_url":"https://github.com/sindresorhus/globby"},{"name":"hasown","old_version":"2.0.3","new_version":"2.0.4","repository_url":"https://github.com/inspect-js/hasOwn"},{"name":"https-proxy-agent","old_version":"7.0.6","new_version":"5.0.1","repository_url":"https://github.com/TooTallNate/proxy-agents"},{"name":"httpxy","old_version":"0.5.1","new_version":"0.5.5","repository_url":"https://github.com/unjs/httpxy"},{"name":"immutable","old_version":"5.1.5","new_version":"5.1.9","repository_url":"https://github.com/immutable-js/immutable-js"},{"name":"ioredis","old_version":"5.10.1","new_version":"5.11.1","repository_url":"https://github.com/luin/ioredis"},{"name":"ip-address","old_version":"10.1.0","new_version":"10.2.0","repository_url":"https://github.com/beaugunderson/ip-address"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"launch-editor","old_version":"2.13.2","new_version":"2.14.1","repository_url":"https://github.com/vitejs/launch-editor"},{"name":"listhen","old_version":"1.9.1","new_version":"1.10.0","repository_url":"https://github.com/unjs/listhen"},{"name":"local-pkg","old_version":"1.1.2","new_version":"1.2.1","repository_url":"https://github.com/antfu-collective/local-pkg"},{"name":"magic-regexp","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/unjs/magic-regexp"},{"name":"magicast","old_version":"0.5.2","new_version":"0.5.3","repository_url":"https://github.com/unjs/magicast"},{"name":"music-metadata","old_version":"11.12.3","new_version":"11.13.0","repository_url":"https://github.com/Borewit/music-metadata"},{"name":"nitropack","old_version":"2.13.3","new_version":"2.13.4","repository_url":"https://github.com/nitrojs/nitro"},{"name":"nypm","old_version":"0.6.6","new_version":"0.6.8","repository_url":"https://github.com/unjs/nypm"},{"name":"object-deep-merge","old_version":"2.0.0","new_version":"2.0.1","repository_url":"https://github.com/forcir/object-deep-merge"},{"name":"obug","old_version":"2.1.1","new_version":"2.1.3","repository_url":"https://github.com/sxzz/obug"},{"name":"oxc-minify","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"oxc-parser","old_version":"0.117.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"oxc-transform","old_version":"0.117.0","new_version":"0.133.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"oxc-walker","old_version":"0.7.0","new_version":"1.0.0","repository_url":"https://github.com/oxc-project/oxc-walker"},{"name":"package-manager-detector","old_version":"1.6.0","new_version":"1.7.0","repository_url":"https://github.com/antfu-collective/package-manager-detector"},{"name":"postcss-colormin","old_version":"7.0.9","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-convert-values","old_version":"7.0.11","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-comments","old_version":"7.0.7","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-duplicates","old_version":"7.0.3","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-empty","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-overridden","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-merge-longhand","old_version":"7.0.6","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-merge-rules","old_version":"7.0.10","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-font-values","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-gradients","old_version":"7.0.4","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-params","old_version":"7.0.8","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-selectors","old_version":"7.1.0","new_version":"8.0.2","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-charset","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-display-values","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-positions","old_version":"7.0.3","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-repeat-style","old_version":"7.0.3","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-string","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-timing-functions","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-unicode","old_version":"7.0.8","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-url","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-whitespace","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-ordered-values","old_version":"7.0.3","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-reduce-initial","old_version":"7.0.8","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-reduce-transforms","old_version":"7.0.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-svgo","old_version":"7.1.2","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-unique-selectors","old_version":"7.0.6","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"qs","old_version":"6.14.2","new_version":"6.15.3","repository_url":"https://github.com/ljharb/qs"},{"name":"regjsparser","old_version":"0.13.1","new_version":"0.13.2","repository_url":"https://github.com/jviereck/regjsparser"},{"name":"seroval","old_version":"1.5.2","new_version":"1.5.5","repository_url":"https://github.com/lxsmnsyc/seroval"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.10.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"side-channel","old_version":"1.1.0","new_version":"1.1.1","repository_url":"https://github.com/ljharb/side-channel"},{"name":"signal-exit","old_version":"4.1.0","new_version":"3.0.7","repository_url":"https://github.com/tapjs/signal-exit"},{"name":"smob","old_version":"1.6.1","new_version":"1.6.2","repository_url":"https://github.com/Tada5hi/smob"},{"name":"socks","old_version":"2.8.7","new_version":"2.8.9","repository_url":"https://github.com/JoshGlazebrook/socks"},{"name":"srvx","old_version":"0.11.15","new_version":"0.11.21","repository_url":"https://github.com/h3js/srvx"},{"name":"std-env","old_version":"3.10.0","new_version":"4.2.0","repository_url":"https://github.com/unjs/std-env"},{"name":"streamx","old_version":"2.25.0","new_version":"2.28.0","repository_url":"https://github.com/mafintosh/streamx"},{"name":"string.prototype.trim","old_version":"1.2.10","new_version":"1.2.11","repository_url":"https://github.com/es-shims/String.prototype.trim"},{"name":"string.prototype.trimend","old_version":"1.0.9","new_version":"1.0.10","repository_url":"https://github.com/es-shims/String.prototype.trimEnd"},{"name":"stylehacks","old_version":"7.0.10","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"tar-stream","old_version":"3.1.8","new_version":"3.2.0","repository_url":"https://github.com/mafintosh/tar-stream"},{"name":"tar","old_version":"7.5.13","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"},{"name":"terser","old_version":"5.46.2","new_version":"5.49.0","repository_url":"https://github.com/terser/terser"},{"name":"tinyclip","old_version":"0.1.12","new_version":"0.1.15","repository_url":"https://github.com/tinylibs/tinyclip"},{"name":"tinyexec","old_version":"1.1.1","new_version":"1.2.4","repository_url":"https://github.com/tinylibs/tinyexec"},{"name":"tinyglobby","old_version":"0.2.16","new_version":"0.2.17","repository_url":"https://github.com/SuperchupuDev/tinyglobby"},{"name":"typed-array-length","old_version":"1.0.7","new_version":"1.0.8","repository_url":"https://github.com/inspect-js/typed-array-length"},{"name":"ultrahtml","old_version":"1.6.0","new_version":"1.7.0","repository_url":"https://github.com/natemoo-re/ultrahtml"},{"name":"unhead","old_version":"2.1.13","new_version":"2.1.15","repository_url":"https://github.com/unjs/unhead"},{"name":"unimport","old_version":"5.7.0","new_version":"6.3.0","repository_url":"https://github.com/unjs/unimport"},{"name":"unplugin-utils","old_version":"0.3.1","new_version":"0.3.2","repository_url":"https://github.com/sxzz/unplugin-utils"},{"name":"unrs-resolver","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"vite-dev-rpc","old_version":"1.1.0","new_version":"2.0.0","repository_url":"https://github.com/antfu/vite-dev-rpc"},{"name":"vite-hot-client","old_version":"2.1.0","new_version":"2.2.0","repository_url":"https://github.com/antfu/vite-hot-client"},{"name":"vite-plugin-checker","old_version":"0.12.0","new_version":"0.14.4","repository_url":"https://github.com/fi3ework/vite-plugin-checker"},{"name":"vite-plugin-inspect","old_version":"11.3.3","new_version":"11.4.1","repository_url":"https://github.com/antfu-collective/vite-plugin-inspect"},{"name":"vite-plugin-vue-tracer","old_version":"1.3.0","new_version":"1.4.0","repository_url":"https://github.com/antfu/vite-plugin-vue-tracer"},{"name":"vite","old_version":"7.3.2","new_version":"7.3.6","repository_url":"https://github.com/vitejs/vite"},{"name":"vue-bundle-renderer","old_version":"2.2.0","new_version":"2.3.1","repository_url":"https://github.com/nuxt-contrib/vue-bundle-renderer"},{"name":"vue-eslint-parser","old_version":"10.4.0","new_version":"10.4.1","repository_url":"https://github.com/vuejs/vue-eslint-parser"},{"name":"which-typed-array","old_version":"1.1.20","new_version":"1.1.22","repository_url":"https://github.com/inspect-js/which-typed-array"},{"name":"ws","old_version":"8.20.0","new_version":"8.21.0","repository_url":"https://github.com/websockets/ws"},{"name":"wsl-utils","old_version":"0.1.0","new_version":"0.3.1","repository_url":"https://github.com/sindresorhus/wsl-utils"},{"name":"yaml","old_version":"2.8.3","new_version":"2.9.0","repository_url":"https://github.com/eemeli/yaml"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-minor-patch group with 401 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@applemusic-like-lyrics/vue](https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/vue) | `0.3.2` | `0.5.2` |\n| [@neteasecloudmusicapienhanced/api](https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced) | `4.32.0` | `4.36.1` |\n| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.0` | `13.3.2` |\n| [axios](https://github.com/axios/axios) | `1.15.2` | `1.18.1` |\n| [dayjs](https://github.com/iamkun/dayjs) | `1.11.20` | `1.11.21` |\n| [multer](https://github.com/expressjs/multer) | `2.1.1` | `2.2.0` |\n| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.1.0` | `2.2.0` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.6` | `8.0.11` |\n| [@types/nodemailer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/nodemailer) | `6.4.23` | `8.0.1` |\n| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.4.2` | `4.4.8` |\n| [sass](https://github.com/sass/dart-sass) | `1.99.0` | `1.101.0` |\n| [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.0` |\n| [vue](https://github.com/vuejs/core) | `3.5.33` | `3.5.39` |\n| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` |\n| [@nuxt/eslint](https://github.com/nuxt/eslint/tree/HEAD/packages/module) | `1.15.2` | `1.16.0` |\n| [eslint](https://github.com/eslint/eslint) | `9.39.4` | `9.39.5` |\n| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.5` |\n| [@applemusic-like-lyrics/core](https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/core) | `0.3.2` | `0.5.2` |\n| [@babel/code-frame](https://github.com/babel/babel/tree/HEAD/packages/babel-code-frame) | `7.29.0` | `7.29.7` |\n| [@babel/compat-data](https://github.com/babel/babel/tree/HEAD/packages/babel-compat-data) | `7.29.0` | `7.29.7` |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` |\n| [@babel/generator](https://github.com/babel/babel/tree/HEAD/packages/babel-generator) | `7.29.1` | `7.29.7` |\n| [@babel/helper-annotate-as-pure](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-annotate-as-pure) | `7.27.3` | `7.29.7` |\n| [@babel/helper-compilation-targets](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-compilation-targets) | `7.28.6` | `7.29.7` |\n| [@babel/helper-create-class-features-plugin](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-create-class-features-plugin) | `7.28.6` | `7.29.7` |\n| [@babel/helper-create-regexp-features-plugin](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-create-regexp-features-plugin) | `7.28.5` | `7.29.7` |\n| [@babel/helper-globals](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-globals) | `7.28.0` | `7.29.7` |\n| [@babel/helper-member-expression-to-functions](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-member-expression-to-functions) | `7.28.5` | `7.29.7` |\n| [@babel/helper-module-imports](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-module-imports) | `7.28.6` | `7.29.7` |\n| [@babel/helper-module-transforms](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-module-transforms) | `7.28.6` | `7.29.7` |\n| [@babel/helper-optimise-call-expression](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-optimise-call-expression) | `7.27.1` | `7.29.7` |\n| [@babel/helper-plugin-utils](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-plugin-utils) | `7.28.6` | `7.29.7` |\n| [@babel/helper-remap-async-to-generator](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-remap-async-to-generator) | `7.27.1` | `7.29.7` |\n| [@babel/helper-replace-supers](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-replace-supers) | `7.28.6` | `7.29.7` |\n| [@babel/helper-skip-transparent-expression-wrappers](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-skip-transparent-expression-wrappers) | `7.27.1` | `7.29.7` |\n| [@babel/helper-string-parser](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-string-parser) | `7.27.1` | `7.29.7` |\n| [@babel/helper-validator-identifier](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-validator-identifier) | `7.28.5` | `7.29.7` |\n| [@babel/helper-validator-option](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-validator-option) | `7.27.1` | `7.29.7` |\n| [@babel/helper-wrap-function](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-wrap-function) | `7.28.6` | `7.29.7` |\n| [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) | `7.29.2` | `7.29.7` |\n| [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `7.29.2` | `7.29.7` |\n| [@babel/plugin-bugfix-firefox-class-in-computed-class-key](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-bugfix-firefox-class-in-computed-class-key) | `7.28.5` | `7.29.7` |\n| [@babel/plugin-bugfix-safari-class-field-initializer-scope](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-bugfix-safari-class-field-initializer-scope) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-bugfix-v8-static-class-fields-redefine-readonly) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-syntax-import-assertions](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-import-assertions) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-syntax-import-attributes](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-import-attributes) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-syntax-jsx](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-jsx) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-syntax-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-typescript) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-arrow-functions](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-arrow-functions) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-async-generator-functions](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-async-generator-functions) | `7.29.0` | `7.29.7` |\n| [@babel/plugin-transform-async-to-generator](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-async-to-generator) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-block-scoped-functions](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-block-scoped-functions) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-block-scoping](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-block-scoping) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-class-properties](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-class-properties) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-class-static-block](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-class-static-block) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-classes](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-classes) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-computed-properties](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-computed-properties) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-destructuring](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-destructuring) | `7.28.5` | `7.29.7` |\n| [@babel/plugin-transform-dotall-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-dotall-regex) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-duplicate-keys](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-duplicate-keys) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-duplicate-named-capturing-groups-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-duplicate-named-capturing-groups-regex) | `7.29.0` | `7.29.7` |\n| [@babel/plugin-transform-dynamic-import](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-dynamic-import) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-explicit-resource-management](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-explicit-resource-management) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-exponentiation-operator](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-exponentiation-operator) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-export-namespace-from](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-export-namespace-from) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-for-of](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-for-of) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-function-name](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-function-name) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-json-strings](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-json-strings) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-literals](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-literals) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-logical-assignment-operators](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-logical-assignment-operators) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-member-expression-literals](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-member-expression-literals) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-modules-amd](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-amd) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-modules-commonjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-commonjs) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.29.0` | `7.29.7` |\n| [@babel/plugin-transform-modules-umd](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-umd) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-named-capturing-groups-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-named-capturing-groups-regex) | `7.29.0` | `7.29.7` |\n| [@babel/plugin-transform-new-target](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-new-target) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-nullish-coalescing-operator](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-nullish-coalescing-operator) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-numeric-separator](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-numeric-separator) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-object-rest-spread](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-object-rest-spread) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-object-super](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-object-super) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-optional-catch-binding](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-optional-catch-binding) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-optional-chaining](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-optional-chaining) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-parameters](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-parameters) | `7.27.7` | `7.29.7` |\n| [@babel/plugin-transform-private-methods](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-private-methods) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-private-property-in-object](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-private-property-in-object) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-property-literals](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-property-literals) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-regenerator](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-regenerator) | `7.29.0` | `7.29.7` |\n| [@babel/plugin-transform-regexp-modifiers](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-regexp-modifiers) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-reserved-words](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-reserved-words) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-shorthand-properties](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-shorthand-properties) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-spread](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-spread) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-sticky-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-sticky-regex) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-template-literals](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-template-literals) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-typeof-symbol](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-typeof-symbol) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-typescript) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-unicode-escapes](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-unicode-escapes) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-unicode-property-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-unicode-property-regex) | `7.28.6` | `7.29.7` |\n| [@babel/plugin-transform-unicode-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-unicode-regex) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-transform-unicode-sets-regex](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-unicode-sets-regex) | `7.28.6` | `7.29.7` |\n| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.29.2` | `7.29.7` |\n| [@babel/template](https://github.com/babel/babel/tree/HEAD/packages/babel-template) | `7.28.6` | `7.29.7` |\n| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.29.0` | `7.29.7` |\n| [@babel/types](https://github.com/babel/babel/tree/HEAD/packages/babel-types) | `7.29.0` | `7.29.7` |\n| [@bomb.sh/tab](https://github.com/bombshell-dev/tab) | `0.0.14` | `0.0.17` |\n| [@clack/core](https://github.com/bombshell-dev/clack/tree/HEAD/packages/core) | `1.2.0` | `1.4.3` |\n| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.2.0` | `1.7.0` |\n| [@colordx/core](https://github.com/dkryaklin/colordx) | `5.4.2` | `5.5.0` |\n| [@es-joy/jsdoccomment](https://github.com/es-joy/jsdoccomment) | `0.86.0` | `0.88.0` |\n| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.5` | `2.1.0` |\n| [@eslint/config-inspector](https://github.com/eslint/config-inspector) | `1.5.0` | `3.0.4` |\n| [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.5` | `3.3.6` |\n| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `9.39.5` |\n| [@ioredis/commands](https://github.com/ioredis/commands) | `1.5.1` | `1.10.0` |\n| [@napi-rs/wasm-runtime](https://github.com/napi-rs/napi-rs/tree/HEAD/wasm-runtime) | `0.2.12` | `1.1.6` |\n| @neteasecloudmusicapienhanced/unblockmusic-utils | `0.2.4` | `0.3.4` |\n| [@nuxt/cli](https://github.com/nuxt/cli/tree/HEAD/packages/nuxt-cli) | `3.34.0` | `3.36.1` |\n| [@nuxt/eslint-config](https://github.com/nuxt/eslint/tree/HEAD/packages/eslint-config) | `1.15.2` | `1.16.0` |\n| [@nuxt/eslint-plugin](https://github.com/nuxt/eslint/tree/HEAD/packages/eslint-plugin) | `1.15.2` | `1.16.0` |\n| [@nuxt/nitro-server](https://github.com/nuxt/nuxt/tree/HEAD/packages/nitro-server) | `4.4.2` | `4.4.8` |\n| [@nuxt/schema](https://github.com/nuxt/nuxt/tree/HEAD/packages/schema) | `4.4.2` | `4.4.8` |\n| [@nuxt/vite-builder](https://github.com/nuxt/nuxt/tree/HEAD/packages/vite) | `4.4.2` | `4.4.8` |\n| [@oxc-minify/binding-android-arm-eabi](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-android-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-darwin-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-darwin-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-freebsd-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-arm-gnueabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-arm-musleabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-arm64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-arm64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-ppc64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-riscv64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-riscv64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-s390x-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-x64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-linux-x64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-openharmony-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-wasm32-wasi](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-win32-arm64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-win32-ia32-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-minify/binding-win32-x64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [@oxc-parser/binding-android-arm-eabi](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-android-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-darwin-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-darwin-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-freebsd-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm-gnueabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm-musleabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-ppc64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-riscv64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-riscv64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-s390x-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-x64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-x64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-openharmony-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-wasm32-wasi](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-win32-arm64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-win32-ia32-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-parser/binding-win32-x64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [@oxc-project/types](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxc-types) | `0.117.0` | `0.132.0` |\n| [@oxc-transform/binding-android-arm-eabi](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-android-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-darwin-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-darwin-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-freebsd-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-arm-gnueabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-arm-musleabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-arm64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-arm64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-ppc64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-riscv64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-riscv64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-s390x-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-x64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-linux-x64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-openharmony-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-wasm32-wasi](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-win32-arm64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-win32-ia32-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@oxc-transform/binding-win32-x64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [@peculiar/asn1-android](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/android) | `2.6.0` | `2.8.0` |\n| [@peculiar/asn1-cms](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/cms) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-csr](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/csr) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-ecc](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/ecc) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-pfx](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/pfx) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-pkcs8](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/pkcs8) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-pkcs9](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/pkcs9) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-rsa](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/rsa) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-schema](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/schema) | `2.6.0` | `2.8.0` |\n| [@peculiar/asn1-x509-attr](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/x509-attr) | `2.6.1` | `2.8.0` |\n| [@peculiar/asn1-x509](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/x509) | `2.6.1` | `2.8.0` |\n| [@rolldown/pluginutils](https://github.com/rolldown/plugins/tree/HEAD/packages/pluginutils) | `1.0.0-rc.13` | `1.0.1` |\n| [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) | `29.0.2` | `29.0.3` |\n| [@rollup/rollup-android-arm-eabi](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-android-arm64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-darwin-arm64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-darwin-x64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-freebsd-arm64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-freebsd-x64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-arm-gnueabihf](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-arm-musleabihf](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-arm64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-arm64-musl](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-loong64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-loong64-musl](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-ppc64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-ppc64-musl](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-riscv64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-riscv64-musl](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-s390x-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-linux-x64-musl](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-openbsd-x64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-openharmony-arm64](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-win32-arm64-msvc](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-win32-ia32-msvc](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-win32-x64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@rollup/rollup-win32-x64-msvc](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` |\n| [@speed-highlight/core](https://github.com/speed-highlight/core) | `1.2.15` | `1.2.17` |\n| [@tybys/wasm-util](https://github.com/toyobayashi/wasm-util) | `0.10.1` | `0.10.3` |\n| [@types/express-serve-static-core](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express-serve-static-core) | `5.1.1` | `5.1.2` |\n| [@types/qs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/qs) | `6.15.0` | `6.15.1` |\n| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/project-service](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/project-service) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/scope-manager](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/scope-manager) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/tsconfig-utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/tsconfig-utils) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/type-utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/type-utils) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/types](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/types) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/typescript-estree](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-estree) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/utils) | `8.59.0` | `8.63.0` |\n| [@typescript-eslint/visitor-keys](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/visitor-keys) | `8.59.0` | `8.63.0` |\n| [@unhead/vue](https://github.com/unjs/unhead/tree/HEAD/packages/vue) | `2.1.13` | `2.1.15` |\n| [@unrs/resolver-binding-android-arm-eabi](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-android-arm64](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-darwin-arm64](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-darwin-x64](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-freebsd-x64](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-arm-gnueabihf](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-arm-musleabihf](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-arm64-gnu](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-arm64-musl](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-ppc64-gnu](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-riscv64-gnu](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-riscv64-musl](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-s390x-gnu](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-x64-gnu](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-linux-x64-musl](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-wasm32-wasi](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-win32-arm64-msvc](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-win32-ia32-msvc](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@unrs/resolver-binding-win32-x64-msvc](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [@vercel/nft](https://github.com/vercel/nft) | `1.5.0` | `1.10.2` |\n| [@vitejs/plugin-vue-jsx](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue-jsx) | `5.1.5` | `5.1.6` |\n| [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue) | `6.0.6` | `6.0.7` |\n| [@vue/compiler-core](https://github.com/vuejs/core/tree/HEAD/packages/compiler-core) | `3.5.33` | `3.5.39` |\n| [@vue/compiler-dom](https://github.com/vuejs/core/tree/HEAD/packages/compiler-dom) | `3.5.33` | `3.5.39` |\n| [@vue/compiler-sfc](https://github.com/vuejs/core/tree/HEAD/packages/compiler-sfc) | `3.5.33` | `3.5.39` |\n| [@vue/compiler-ssr](https://github.com/vuejs/core/tree/HEAD/packages/compiler-ssr) | `3.5.33` | `3.5.39` |\n| [@vue/devtools-core](https://github.com/vuejs/devtools/tree/HEAD/packages/core) | `8.1.1` | `8.1.5` |\n| [@vue/devtools-kit](https://github.com/vuejs/devtools/tree/HEAD/packages/devtools-kit) | `8.1.1` | `8.1.5` |\n| [@vue/devtools-shared](https://github.com/vuejs/devtools/tree/HEAD/packages/shared) | `8.1.1` | `8.1.5` |\n| [@vue/reactivity](https://github.com/vuejs/core/tree/HEAD/packages/reactivity) | `3.5.33` | `3.5.39` |\n| [@vue/runtime-core](https://github.com/vuejs/core/tree/HEAD/packages/runtime-core) | `3.5.33` | `3.5.39` |\n| [@vue/runtime-dom](https://github.com/vuejs/core/tree/HEAD/packages/runtime-dom) | `3.5.33` | `3.5.39` |\n| [@vue/server-renderer](https://github.com/vuejs/core/tree/HEAD/packages/server-renderer) | `3.5.33` | `3.5.39` |\n| [@vue/shared](https://github.com/vuejs/core/tree/HEAD/packages/shared) | `3.5.33` | `3.5.39` |\n| [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.17.0` |\n| [agent-base](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/agent-base) | `7.1.4` | `6.0.2` |\n| [ansis](https://github.com/webdiscus/ansis) | `4.2.0` | `4.3.1` |\n| [ast-walker-scope](https://github.com/sxzz/ast-walker-scope) | `0.8.3` | `0.9.0` |\n| [b4a](https://github.com/holepunchto/b4a) | `1.8.0` | `1.8.1` |\n| [bare-events](https://github.com/holepunchto/bare-events) | `2.8.2` | `2.9.1` |\n| [bare-fs](https://github.com/holepunchto/bare-fs) | `4.7.1` | `4.7.4` |\n| [bare-path](https://github.com/holepunchto/bare-path) | `3.0.0` | `3.1.1` |\n| [bare-stream](https://github.com/holepunchto/bare-stream) | `2.13.0` | `2.13.3` |\n| [bare-url](https://github.com/holepunchto/bare-url) | `2.4.2` | `2.4.5` |\n| [basic-ftp](https://github.com/patrickjuchli/basic-ftp) | `5.3.0` | `5.3.1` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.5` | `1.20.6` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.14` | `1.1.16` |\n| [builtin-modules](https://github.com/sindresorhus/builtin-modules) | `5.1.0` | `5.3.0` |\n| [caniuse-api](https://github.com/MoOx/caniuse-api) | `3.0.0` | `4.0.0` |\n| [cluster-key-slot](https://github.com/Salakar/cluster-key-slot) | `1.1.2` | `1.1.1` |\n| [comment-parser](https://github.com/yavorskiy/comment-parser) | `1.4.6` | `1.4.7` |\n| [cssnano-preset-default](https://github.com/cssnano/cssnano) | `7.0.15` | `8.0.2` |\n| [cssnano-utils](https://github.com/cssnano/cssnano) | `5.0.2` | `6.0.1` |\n| [cssnano](https://github.com/cssnano/cssnano) | `7.1.7` | `8.0.2` |\n| [devalue](https://github.com/sveltejs/devalue) | `5.7.1` | `5.8.1` |\n| [es-module-lexer](https://github.com/guybedford/es-module-lexer) | `2.1.0` | `2.3.0` |\n| [es-object-atoms](https://github.com/ljharb/es-object-atoms) | `1.1.1` | `1.1.2` |\n| [es-to-primitive](https://github.com/ljharb/es-to-primitive) | `1.3.0` | `1.3.4` |\n| [eslint-flat-config-utils](https://github.com/antfu/eslint-flat-config-utils) | `3.1.0` | `3.2.0` |\n| [eslint-plugin-import-lite](https://github.com/9romise/eslint-plugin-import-lite) | `0.5.2` | `0.6.0` |\n| [eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x) | `4.16.2` | `4.17.1` |\n| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `62.9.0` | `63.0.13` |\n| [eslint-plugin-regexp](https://github.com/ota-meshi/eslint-plugin-regexp) | `3.1.0` | `3.1.1` |\n| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | `63.0.0` | `65.0.1` |\n| [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue) | `10.9.0` | `10.9.2` |\n| [express](https://github.com/expressjs/express) | `4.22.1` | `4.22.2` |\n| [exsolve](https://github.com/unjs/exsolve) | `1.0.8` | `1.1.0` |\n| [fast-npm-meta](https://github.com/antfu/fast-npm-meta) | `1.5.0` | `1.5.1` |\n| [fast-string-truncated-width](https://github.com/fabiospampinato/fast-string-truncated-width) | `1.2.1` | `3.0.3` |\n| [fast-string-width](https://github.com/fabiospampinato/fast-string-width) | `1.1.0` | `3.0.2` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.3` |\n| [fast-wrap-ansi](https://github.com/43081j/fast-wrap-ansi) | `0.1.6` | `0.2.2` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [function.prototype.name](https://github.com/es-shims/Function.prototype.name) | `1.1.8` | `1.2.0` |\n| [fuse.js](https://github.com/krisk/Fuse) | `7.3.0` | `7.4.2` |\n| [get-east-asian-width](https://github.com/sindresorhus/get-east-asian-width) | `1.5.0` | `1.6.0` |\n| [globby](https://github.com/sindresorhus/globby) | `16.2.0` | `16.2.1` |\n| [hasown](https://github.com/inspect-js/hasOwn) | `2.0.3` | `2.0.4` |\n| [https-proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/https-proxy-agent) | `7.0.6` | `5.0.1` |\n| [httpxy](https://github.com/unjs/httpxy) | `0.5.1` | `0.5.5` |\n| [immutable](https://github.com/immutable-js/immutable-js) | `5.1.5` | `5.1.9` |\n| [ioredis](https://github.com/luin/ioredis) | `5.10.1` | `5.11.1` |\n| [ip-address](https://github.com/beaugunderson/ip-address) | `10.1.0` | `10.2.0` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.3.0` |\n| [launch-editor](https://github.com/vitejs/launch-editor) | `2.13.2` | `2.14.1` |\n| [listhen](https://github.com/unjs/listhen) | `1.9.1` | `1.10.0` |\n| [local-pkg](https://github.com/antfu-collective/local-pkg) | `1.1.2` | `1.2.1` |\n| [magic-regexp](https://github.com/unjs/magic-regexp) | `0.10.0` | `0.11.0` |\n| [magicast](https://github.com/unjs/magicast) | `0.5.2` | `0.5.3` |\n| [music-metadata](https://github.com/Borewit/music-metadata) | `11.12.3` | `11.13.0` |\n| [nitropack](https://github.com/nitrojs/nitro) | `2.13.3` | `2.13.4` |\n| [nypm](https://github.com/unjs/nypm) | `0.6.6` | `0.6.8` |\n| [object-deep-merge](https://github.com/forcir/object-deep-merge) | `2.0.0` | `2.0.1` |\n| [obug](https://github.com/sxzz/obug) | `2.1.1` | `2.1.3` |\n| [oxc-minify](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.117.0` | `0.133.0` |\n| [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.117.0` | `0.132.0` |\n| [oxc-transform](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.117.0` | `0.133.0` |\n| [oxc-walker](https://github.com/oxc-project/oxc-walker) | `0.7.0` | `1.0.0` |\n| [package-manager-detector](https://github.com/antfu-collective/package-manager-detector) | `1.6.0` | `1.7.0` |\n| [postcss-colormin](https://github.com/cssnano/cssnano) | `7.0.9` | `8.0.1` |\n| [postcss-convert-values](https://github.com/cssnano/cssnano) | `7.0.11` | `8.0.1` |\n| [postcss-discard-comments](https://github.com/cssnano/cssnano) | `7.0.7` | `8.0.1` |\n| [postcss-discard-duplicates](https://github.com/cssnano/cssnano) | `7.0.3` | `8.0.1` |\n| [postcss-discard-empty](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-discard-overridden](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-merge-longhand](https://github.com/cssnano/cssnano) | `7.0.6` | `8.0.1` |\n| [postcss-merge-rules](https://github.com/cssnano/cssnano) | `7.0.10` | `8.0.1` |\n| [postcss-minify-font-values](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-minify-gradients](https://github.com/cssnano/cssnano) | `7.0.4` | `8.0.1` |\n| [postcss-minify-params](https://github.com/cssnano/cssnano) | `7.0.8` | `8.0.1` |\n| [postcss-minify-selectors](https://github.com/cssnano/cssnano) | `7.1.0` | `8.0.2` |\n| [postcss-normalize-charset](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-normalize-display-values](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-normalize-positions](https://github.com/cssnano/cssnano) | `7.0.3` | `8.0.1` |\n| [postcss-normalize-repeat-style](https://github.com/cssnano/cssnano) | `7.0.3` | `8.0.1` |\n| [postcss-normalize-string](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-normalize-timing-functions](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-normalize-unicode](https://github.com/cssnano/cssnano) | `7.0.8` | `8.0.1` |\n| [postcss-normalize-url](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-normalize-whitespace](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-ordered-values](https://github.com/cssnano/cssnano) | `7.0.3` | `8.0.1` |\n| [postcss-reduce-initial](https://github.com/cssnano/cssnano) | `7.0.8` | `8.0.1` |\n| [postcss-reduce-transforms](https://github.com/cssnano/cssnano) | `7.0.2` | `8.0.1` |\n| [postcss-svgo](https://github.com/cssnano/cssnano) | `7.1.2` | `8.0.1` |\n| [postcss-unique-selectors](https://github.com/cssnano/cssnano) | `7.0.6` | `8.0.1` |\n| [qs](https://github.com/ljharb/qs) | `6.14.2` | `6.15.3` |\n| [regjsparser](https://github.com/jviereck/regjsparser) | `0.13.1` | `0.13.2` |\n| [seroval](https://github.com/lxsmnsyc/seroval) | `1.5.2` | `1.5.5` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.10.0` |\n| [side-channel](https://github.com/ljharb/side-channel) | `1.1.0` | `1.1.1` |\n| [signal-exit](https://github.com/tapjs/signal-exit) | `4.1.0` | `3.0.7` |\n| [smob](https://github.com/Tada5hi/smob) | `1.6.1` | `1.6.2` |\n| [socks](https://github.com/JoshGlazebrook/socks) | `2.8.7` | `2.8.9` |\n| [srvx](https://github.com/h3js/srvx) | `0.11.15` | `0.11.21` |\n| [std-env](https://github.com/unjs/std-env) | `3.10.0` | `4.2.0` |\n| [streamx](https://github.com/mafintosh/streamx) | `2.25.0` | `2.28.0` |\n| [string.prototype.trim](https://github.com/es-shims/String.prototype.trim) | `1.2.10` | `1.2.11` |\n| [string.prototype.trimend](https://github.com/es-shims/String.prototype.trimEnd) | `1.0.9` | `1.0.10` |\n| [stylehacks](https://github.com/cssnano/cssnano) | `7.0.10` | `8.0.1` |\n| [tar-stream](https://github.com/mafintosh/tar-stream) | `3.1.8` | `3.2.0` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.13` | `7.5.19` |\n| [terser](https://github.com/terser/terser) | `5.46.2` | `5.49.0` |\n| [tinyclip](https://github.com/tinylibs/tinyclip) | `0.1.12` | `0.1.15` |\n| [tinyexec](https://github.com/tinylibs/tinyexec) | `1.1.1` | `1.2.4` |\n| [tinyglobby](https://github.com/SuperchupuDev/tinyglobby) | `0.2.16` | `0.2.17` |\n| [typed-array-length](https://github.com/inspect-js/typed-array-length) | `1.0.7` | `1.0.8` |\n| [ultrahtml](https://github.com/natemoo-re/ultrahtml) | `1.6.0` | `1.7.0` |\n| [unhead](https://github.com/unjs/unhead/tree/HEAD/packages/unhead) | `2.1.13` | `2.1.15` |\n| [unimport](https://github.com/unjs/unimport) | `5.7.0` | `6.3.0` |\n| [unplugin-utils](https://github.com/sxzz/unplugin-utils) | `0.3.1` | `0.3.2` |\n| [unrs-resolver](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [vite-dev-rpc](https://github.com/antfu/vite-dev-rpc) | `1.1.0` | `2.0.0` |\n| [vite-hot-client](https://github.com/antfu/vite-hot-client) | `2.1.0` | `2.2.0` |\n| [vite-plugin-checker](https://github.com/fi3ework/vite-plugin-checker) | `0.12.0` | `0.14.4` |\n| [vite-plugin-inspect](https://github.com/antfu-collective/vite-plugin-inspect) | `11.3.3` | `11.4.1` |\n| [vite-plugin-vue-tracer](https://github.com/antfu/vite-plugin-vue-tracer) | `1.3.0` | `1.4.0` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.2` | `7.3.6` |\n| [vue-bundle-renderer](https://github.com/nuxt-contrib/vue-bundle-renderer) | `2.2.0` | `2.3.1` |\n| [vue-eslint-parser](https://github.com/vuejs/vue-eslint-parser) | `10.4.0` | `10.4.1` |\n| [which-typed-array](https://github.com/inspect-js/which-typed-array) | `1.1.20` | `1.1.22` |\n| [ws](https://github.com/websockets/ws) | `8.20.0` | `8.21.0` |\n| [wsl-utils](https://github.com/sindresorhus/wsl-utils) | `0.1.0` | `0.3.1` |\n| [yaml](https://github.com/eemeli/yaml) | `2.8.3` | `2.9.0` |\n\nUpdates `@applemusic-like-lyrics/vue` from 0.3.2 to 0.5.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/releases\"\u003e@​applemusic-like-lyrics/vue's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.0 - 兼容 NCM 3.0.0！原生音频可视化！\u003c/h2\u003e\n\u003cp\u003e匆忙做了兼容性支持，有部分功能消失了是因为暂时没找到合适的办法移植，敬请期待！\n当前版本开始会同时兼容 2.9.X 和 3.0.0+ 的网易云，不过未来的某一天可能会中断对 2.9.X 版本的支持，所以请大家尽快升级版本哦！\u003c/p\u003e\n\u003ch2\u003e关于 3.0.0 版本的歌词页面访问方式变化（重要）\u003c/h2\u003e\n\u003cp\u003e（如果你正在使用 2.9.X 版本的网易云，则没有变化）\n从新版开始，打开歌词页面的方法变更为点击右下角的苹果歌词图标：\n\u003cimg src=\"https://github.com/Steve-xmh/applemusic-like-lyrics/assets/39523898/79507c04-d5c3-44fc-8632-9d99d12a0ee1\" alt=\"image\" /\u003e\n且如果需要退出歌词页面，则需要打开菜单并点击底部的“退出歌词页面”：\n\u003cimg src=\"https://github.com/Steve-xmh/applemusic-like-lyrics/assets/39523898/c6c417d9-2c6b-455f-87c1-0d9dde292cc0\" alt=\"image\" /\u003e\u003c/p\u003e\n\u003cp\u003e以下是更新记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e兼容 3.0.0 网易云，有一部分功能由于 3.0.0 架构大改暂时被移除。\u003c/li\u003e\n\u003cli\u003e支持 3.0.0 提供的音频可视化接口实现可视化动画。\u003c/li\u003e\n\u003cli\u003e重构背景渲染中，目前会对性能较差的显卡造成降维打击，还请多多注意！\u003c/li\u003e\n\u003cli\u003e部分细节优化。\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.6.1 (v1.6.0)\u003c/h2\u003e\n\u003ch2\u003e更新\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e基本实现了私人 FM 的歌词显示\u003c/li\u003e\n\u003cli\u003e初步支持和实现和 \u003ca href=\"https://github.com/BetterNCM/LibFrontendPlay\"\u003eLibFrontendPlay\u003c/a\u003e 插件联动的音频可视化效果\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e修正与改进\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e现在会在逐词歌词和默认歌词之间选择合适的原始歌词了\u003c/li\u003e\n\u003cli\u003e缓解了因为回调问题导致歌词无法滚动的问题\u003c/li\u003e\n\u003cli\u003e修正了歌手和专辑标签无法隐藏的问题\u003c/li\u003e\n\u003cli\u003e调优了构建脚本\u003c/li\u003e\n\u003cli\u003e调优了开发重载能力\u003c/li\u003e\n\u003cli\u003e防止搜索函数搜索到自身\u003c/li\u003e\n\u003cli\u003e用 Rome 做了一遍格式化\u003c/li\u003e\n\u003cli\u003e似乎也不再需要 Hook 函数了\u003c/li\u003e\n\u003cli\u003e对工作线程做了一些特判\u003c/li\u003e\n\u003cli\u003e整理了代码结构\u003c/li\u003e\n\u003cli\u003e其他细节修正\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e最新 main 分支开发调试构建\u003c/h2\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e修正工作流 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/4e586361026cd31b79d7d60ce41a6d3c5106d666\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e修正工作流 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/f9fa644e4726d5dec5f661036aa0a22cac58fa22\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e修正工作流 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/f090519d8393abb8fff76ed048e68b432917f214\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e修正顶栏 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/44ada57bc07f57f532bb7289c1dd0d42b7acb542\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e增加文档页面列表 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/6c2115fee0a4a0653c238ec125d13ea5d86e3b00\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e增加代码高亮，修改排版和样式 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/6b1c1f9deabfce77b4b218cf1bae84e24d44c871\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e增加表格和其他样式支持 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/a47b5db16ccf67d31185457188292d9247d45a10\"\u003eSteveXMH\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e优化样式 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/6c91b4b70a75e69635e7ee62b11d45de8caafa3e\"\u003eSteveXMH\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e增加歌词编辑器文档（感谢 \u003ca href=\"https://github.com/Xionghaizi001\"\u003e\u003ccode\u003e@​Xionghaizi001\u003c/code\u003e\u003c/a\u003e ） (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/4cddb8666f83da2d256127ba1fab694e03311216\"\u003eSteve-xmh\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eCommits\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e解耦部分模块 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/804a0de7b6626b4982c55a2f0a875e2274423406\"\u003eSteveXMH\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e支持调节背景帧数和渲染精度 (\u003ca href=\"https://github.com/Steve-xmh/applemusic-like-lyrics/commit/f4dd4e1eada165482c76fa3d73290118fd3b1c55\"\u003eSteveXMH\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/blob/main/packages/vue/CHANGELOG.md\"\u003e@​applemusic-like-lyrics/vue's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.5.2 (2026-07-09)\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erefactor(core):\u003c/strong\u003e 将点击相关事件和样式由歌词行上移至歌词组 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/538\"\u003e#538\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003echore(core):\u003c/strong\u003e 一些简单的代码优化避免样式重新计算 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/540\"\u003e#540\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003echore(core):\u003c/strong\u003e 简单优化一点Mesh着色器的代码 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003echore:\u003c/strong\u003e 修复 linter 警告 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/539\"\u003e#539\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eapoint123 \u003ca href=\"https://github.com/apoint123\"\u003e\u003ccode\u003e@​apoint123\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLinho\u003c/li\u003e\n\u003cli\u003eSteveXMH \u003ca href=\"https://github.com/Steve-xmh\"\u003e\u003ccode\u003e@​Steve-xmh\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.5.1 (2026-05-17)\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efix:\u003c/strong\u003e 修复含对唱时歌词错误提前导致的多行高亮 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/521\"\u003e#521\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003erefactor:\u003c/strong\u003e 引入歌词组来包装主歌词和背景人声 \u0026amp; 前置背景人声 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/531\"\u003e#531\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003echore:\u003c/strong\u003e 更正 package.json 协议声明 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/534\"\u003e#534\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003e仓库根目录的 LICENSE 文件为 AGPL v3.0 协议，但是 package.json 中的 \u003ccode\u003elicense\u003c/code\u003e 字段为 \u003ccode\u003eGPL-3.0\u003c/code\u003e。经与原开发者确认，package.json 中的 \u003ccode\u003elicense\u003c/code\u003e 字段有误。仓库与其所有产出的 npm 包均应为 AGPL v3 only 协议，SPDX: \u003ccode\u003eAGPL-3.0-only\u003c/code\u003e。因此，更正各包 \u003ccode\u003epackage.json\u003c/code\u003e 的 \u003ccode\u003elicense\u003c/code\u003e 字段为 \u003ccode\u003eAGPL-3.0-only\u003c/code\u003e。\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003echore(core):\u003c/strong\u003e 优化类型定义 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/519\"\u003e#519\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eapoint123 \u003ca href=\"https://github.com/apoint123\"\u003e\u003ccode\u003e@​apoint123\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLinho \u003ca href=\"https://github.com/Linho1219\"\u003e\u003ccode\u003e@​Linho1219\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.5.0 (2026-05-12)\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erefactor:\u003c/strong\u003e 整理核心播放器代码结构，将抽象接口部分集中到统一目录 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/508\"\u003e#508\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003erefactor:\u003c/strong\u003e 整理核心播放器抽象类中时间线、滚动与单行布局部分的结构与状态管理 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/509\"\u003e#509\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e 修复 setCurrentTime 在提供 isSeek 标志时，实际排版未遵守标志导致布局异常漂移的问题 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/509\"\u003e#509\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e 修复在同一行时间内拖拽进度条时逐字动画不同步的问题 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/509\"\u003e#509\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e 修复暂停状态下点击行跳转时仍播放逐字动画的问题 (\u003ca href=\"https://redirect.github.com/amll-dev/applemusic-like-lyrics/pull/509\"\u003e#509\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLinho \u003ca href=\"https://github.com/Linho1219\"\u003e\u003ccode\u003e@​Linho1219\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.4.2 (2026-05-01)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/fd7ec2d597daa2a66a37ca5f3214d6757ec17cfa\"\u003e\u003ccode\u003efd7ec2d\u003c/code\u003e\u003c/a\u003e chore(release): publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/36e57035a735596479abe943f78846b8d1e78afc\"\u003e\u003ccode\u003e36e5703\u003c/code\u003e\u003c/a\u003e chore(release): publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/251e1fbe4f709365b5eb3ec96f18deed2faebe74\"\u003e\u003ccode\u003e251e1fb\u003c/code\u003e\u003c/a\u003e chore: 更正错误的 package.json 协议声明 (\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/vue/issues/534\"\u003e#534\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/0af2d978e670640cc6c1b8383d55d60c8dd6590c\"\u003e\u003ccode\u003e0af2d97\u003c/code\u003e\u003c/a\u003e chore: 映射真实源代码 (\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/vue/issues/519\"\u003e#519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/366164c117225b627c09208865098ac7c541ecca\"\u003e\u003ccode\u003e366164c\u003c/code\u003e\u003c/a\u003e docs: 补齐 changelog 链接 (\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/vue/issues/518\"\u003e#518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/c38969e801d18bfa3955b16b5e8f53ee3d152c83\"\u003e\u003ccode\u003ec38969e\u003c/code\u003e\u003c/a\u003e chore(release): publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/ab07d7205dd43bf3a0523eaeed9bd8ce589b9199\"\u003e\u003ccode\u003eab07d72\u003c/code\u003e\u003c/a\u003e chore(release): publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/48ec944509271f9eebf5a45433645f5296c41584\"\u003e\u003ccode\u003e48ec944\u003c/code\u003e\u003c/a\u003e chore(release): publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/de5c5705666f6d2ebeafb987372564155ba9e036\"\u003e\u003ccode\u003ede5c570\u003c/code\u003e\u003c/a\u003e fix(vue): 修复掩码模式错误的类型 (\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/vue/issues/496\"\u003e#496\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commit/f1c8309d314640893a3141c2a9eb6b04e428e874\"\u003e\u003ccode\u003ef1c8309\u003c/code\u003e\u003c/a\u003e build: 内联 CSS 中的 url (\u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/tree/HEAD/packages/vue/issues/493\"\u003e#493\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/amll-dev/applemusic-like-lyrics/commits/core-bundle@0.5.2/packages/vue\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@neteasecloudmusicapienhanced/api` from 4.32.0 to 4.36.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/releases\"\u003e@​neteasecloudmusicapienhanced/api's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eRelease v4.36.1\u003c/h1\u003e\n\u003ch2\u003e更新内容 / Changelog\u003c/h2\u003e\n\u003cp\u003e从 \u003ccode\u003ev4.35.2\u003c/code\u003e 到 \u003ccode\u003ev4.36.1\u003c/code\u003e 的提交记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: 请求异常 (83ee2cda34a20f64c6d343f7dfe22aa6a1c84b3d) (1454ee2)\u003c/li\u003e\n\u003cli\u003efeat: add NCBL encrypted scrobble interface and update related documentation (83ee2cd)\u003c/li\u003e\n\u003cli\u003efeat: 新增听歌打卡示例页面 (3c352b5)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e自动发布 via GitHub Actions\u003c/p\u003e\n\u003ch1\u003eRelease v4.35.2\u003c/h1\u003e\n\u003ch2\u003e更新内容 / Changelog\u003c/h2\u003e\n\u003cp\u003e从 \u003ccode\u003ev4.35.1\u003c/code\u003e 到 \u003ccode\u003ev4.35.2\u003c/code\u003e 的提交记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: 修复听歌打卡接口 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/167\"\u003e#167\u003c/a\u003e) (60ee927)\u003c/li\u003e\n\u003cli\u003efeat: 支持显示加密方式 (eb07a52)\u003c/li\u003e\n\u003cli\u003efeat(docs-format): 增加文档格式化工具 (6fc4231)\u003c/li\u003e\n\u003cli\u003erevert: some changes (fa69736)\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;feat: 增加文档格式化工具\u0026quot; (73a5e9d)\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;fix(deploy): 修复部分启动失败 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/196\"\u003e#196\u003c/a\u003e)\u0026quot; (dc6f56e)\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;refactor: 优化serverless入口文件\u0026quot; (2c9da85)\u003c/li\u003e\n\u003cli\u003erefactor: 优化serverless入口文件 (1db3544)\u003c/li\u003e\n\u003cli\u003efix(deploy): 修复部分启动失败 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/196\"\u003e#196\u003c/a\u003e) (395a80e)\u003c/li\u003e\n\u003cli\u003efeat: 增加文档格式化工具 (6550c7c)\u003c/li\u003e\n\u003cli\u003efeat: 增强配置生成逻辑，添加重试机制和日志记录 (c959866)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e自动发布 via GitHub Actions\u003c/p\u003e\n\u003ch1\u003eRelease v4.35.1\u003c/h1\u003e\n\u003ch2\u003e更新内容 / Changelog\u003c/h2\u003e\n\u003cp\u003e从 \u003ccode\u003ev4.35.0\u003c/code\u003e 到 \u003ccode\u003ev4.35.1\u003c/code\u003e 的提交记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: 修复游客登陆接口 (e3a1c04)\u003c/li\u003e\n\u003cli\u003ebuild(packages): bump \u003ccode\u003e@​types/node\u003c/code\u003e from 25.5.0 to 25.9.2 (0300c1b)\u003c/li\u003e\n\u003cli\u003echore(deps): bump docker/login-action from 3 to 4 (a9c33de)\u003c/li\u003e\n\u003cli\u003echore(deps): bump aormsby/Fork-Sync-With-Upstream-action (6175d55)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e自动发布 via GitHub Actions\u003c/p\u003e\n\u003ch1\u003eRelease v4.35.0\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commits/v4.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​neteasecloudmusicapienhanced/api\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@simplewebauthn/server` from 13.3.0 to 13.3.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/releases\"\u003e@​simplewebauthn/server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev13.3.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v4 Low (2.0) security vulnerability identified in \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e. See the security advisory linked below for more information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e allowing a maliciously-crafted attestation statement's \u003ccode\u003ex5c\u003c/code\u003e to contain a self-signed \u0026quot;root certificate\u0026quot; instead of chaining back to an RP-specified trust anchor (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-6hxq-p678-4hr2\"\u003eGHSA-6hxq-p678-4hr2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.3.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e failing to verify some Packed and SafetyNet statements (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md\"\u003e@​simplewebauthn/server's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev13.3.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v4 Low (2.0) security vulnerability identified in\n\u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e. See the security advisory linked below for more information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e allowing a maliciously-crafted\nattestation statement's \u003ccode\u003ex5c\u003c/code\u003e to contain a self-signed \u0026quot;root certificate\u0026quot; instead of chaining back\nto an RP-specified trust anchor\n(\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-6hxq-p678-4hr2\"\u003eGHSA-6hxq-p678-4hr2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.3.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e failing to verify some Packed and\nSafetyNet statements (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/84656fff764256609193b9e0a0661c82dd379ebb\"\u003e\u003ccode\u003e84656ff\u003c/code\u003e\u003c/a\u003e Update version to 13.3.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/dd0d73c716a528e6645efafbd43a972b64df71f9\"\u003e\u003ccode\u003edd0d73c\u003c/code\u003e\u003c/a\u003e Fail cert path validation closed instead\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/213e9ba052632c9915704edbab48d4667141c3f2\"\u003e\u003ccode\u003e213e9ba\u003c/code\u003e\u003c/a\u003e Add test for failure to chain to trust anchor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/989507a62d23960933b44018c1b090da0e73c803\"\u003e\u003ccode\u003e989507a\u003c/code\u003e\u003c/a\u003e Add tests for notAfter enforcement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/b55f4b957881ca6a0c93d05aebca6cdf6424fffb\"\u003e\u003ccode\u003eb55f4b9\u003c/code\u003e\u003c/a\u003e Move explanation into test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/7bed04ce33a8fc2e4b0c2f8c84d7c171f001905f\"\u003e\u003ccode\u003e7bed04c\u003c/code\u003e\u003c/a\u003e Update comments around cert chain validity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/6ee964484ad9bb9365c45c95b32e0065db45ed96\"\u003e\u003ccode\u003e6ee9644\u003c/code\u003e\u003c/a\u003e Add new tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/c23890af1a0e741b0451461eb713eb0d4607d096\"\u003e\u003ccode\u003ec23890a\u003c/code\u003e\u003c/a\u003e Update existing test to use helpers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/8d02ed4e546859aaf3d0816bfe35917efcef88a7\"\u003e\u003ccode\u003e8d02ed4\u003c/code\u003e\u003c/a\u003e Add X.509 cert helpers for tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/8a53d70f42bcbb7c744ef1b90e6db35bc4b26d06\"\u003e\u003ccode\u003e8a53d70\u003c/code\u003e\u003c/a\u003e Use X509ChainBuilder for chain validation\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.2/packages/server\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.15.2 to 1.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.18.1 — June 21, 2026\u003c/h2\u003e\n\u003cp\u003eThis release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10913\"\u003e#10913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10917\"\u003e#10917\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10930\"\u003e#10930\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10942\"\u003e#10942\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10993\"\u003e#10993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRuntime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10959\"\u003e#10959\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11021\"\u003e#11021\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAxiosURLSearchParams: Switched the encoder callback to an arrow function so \u003ccode\u003eencoder.call(this)\u003c/code\u003e receives the \u003ccode\u003eAxiosURLSearchParams\u003c/code\u003e instance correctly. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDocumentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11007\"\u003e#11007\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11010\"\u003e#11010\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11023\"\u003e#11023\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11025\"\u003e#11025\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eDependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11011\"\u003e#11011\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11012\"\u003e#11012\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11013\"\u003e#11013\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11014\"\u003e#11014\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11015\"\u003e#11015\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11016\"\u003e#11016\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11017\"\u003e#11017\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11026\"\u003e#11026\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webdevelopersrinu\"\u003e\u003ccode\u003e@​webdevelopersrinu\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10913\"\u003e#10913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sijie-Z\"\u003e\u003ccode\u003e@​sijie-Z\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10993\"\u003e#10993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bartlomieju\"\u003e\u003ccode\u003e@​bartlomieju\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11023\"\u003e#11023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JSap0914\"\u003e\u003ccode\u003e@​JSap0914\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.18.0...v1.18.1\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.0 — June 13, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eRedirect Header Safety:\u003c/strong\u003e Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10892\"\u003e#10892\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eURL And ...\n\n_Description has been truncated_","html_url":"https://github.com/gvbhj111/VoiceHub-for-XWYZ/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/gvbhj111%2FVoiceHub-for-XWYZ/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}},{"old_version":"7.5.15","new_version":"7.5.19","update_type":"patch","path":null,"pr_created_at":"2026-07-09T18:24:52.000Z","version_change":"7.5.15 → 7.5.19","issue":{"uuid":"4848842704","node_id":"PR_kwDOSjRKBs7v273C","number":22,"state":"closed","title":"build(deps): bump the npm_and_yarn group across 1 directory with 9 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-07-09T21:51:07.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-09T18:24:52.000Z","updated_at":"2026-07-09T21:51:13.000Z","time_to_close":12375,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"npm_and_yarn","update_count":9,"packages":[{"name":"undici","old_version":"6.26.0","new_version":"6.27.0","repository_url":"https://github.com/nodejs/undici"},{"name":"js-yaml","old_version":"3.14.2","new_version":"3.15.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"hono","old_version":"4.12.23","new_version":"4.12.28","repository_url":"https://github.com/honojs/hono"},{"name":"tar","old_version":"7.5.15","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [undici](https://github.com/nodejs/undici) | `6.26.0` | `6.27.0` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.0` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [hono](https://github.com/honojs/hono) | `4.12.23` | `4.12.28` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.15` | `7.5.19` |\n\n\nUpdates `undici` from 6.26.0 to 6.27.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.27.0\u003c/h2\u003e\n\u003ch1\u003e⚠️ Security Release\u003c/h1\u003e\n\u003cp\u003eThis release line addresses \u003cstrong\u003e4 security advisories\u003c/strong\u003e.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eAction required:\u003c/strong\u003e Upgrade to \u003cstrong\u003eundici 6.27.0\u003c/strong\u003e or later.\u003c/p\u003e\n\u003cpre lang=\"sh\"\u003e\u003ccode\u003enpm install undici@^6.27.0\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eNote on patched version:\u003c/strong\u003e the v6 fixes shipped in \u003cstrong\u003ev6.27.0\u003c/strong\u003e, not \u003ccode\u003e6.26.0\u003c/code\u003e\n— \u003ccode\u003ev6.26.0\u003c/code\u003e contains only the chunked-EOF fix (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5308\"\u003e#5308\u003c/a\u003e) and the version bump, none\nof the security fixes below.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThe v6 line is \u003cstrong\u003enot\u003c/strong\u003e affected by the SOCKS5 advisories (GHSA-vmh5-mc38-953g,\nGHSA-hm92-r4w5-c3mj), the shared-cache disclosure (GHSA-pr7r-676h-xcf6), or the\n8.x-only WebSocket regression (GHSA-38rv-x7px-6hhq).\u003c/p\u003e\n\u003ch2\u003eSummary\u003c/h2\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eAdvisory\u003c/th\u003e\n\u003cth\u003eCVE\u003c/th\u003e\n\u003cth\u003eSeverity (CVSS)\u003c/th\u003e\n\u003cth\u003eFixed in\u003c/th\u003e\n\u003cth\u003eFix commit\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q\"\u003eGHSA-vxpw-j846-p89q\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-12151\u003c/td\u003e\n\u003ctd\u003eHigh (7.5)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/b7f252e7\"\u003e\u003ccode\u003eb7f252e7\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-p88m-4jfj-68fv\"\u003eGHSA-p88m-4jfj-68fv\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-9679\u003c/td\u003e\n\u003ctd\u003eModerate (5.9)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/25efa447\"\u003e\u003ccode\u003e25efa447\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m\"\u003eGHSA-g8m3-5g58-fq7m\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-11525\u003c/td\u003e\n\u003ctd\u003eLow (3.7)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/25efa447\"\u003e\u003ccode\u003e25efa447\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52\"\u003eGHSA-35p6-xmwp-9g52\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-6733\u003c/td\u003e\n\u003ctd\u003eLow (3.7)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/f4c31d60\"\u003e\u003ccode\u003ef4c31d60\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003chr /\u003e\n\u003ch2\u003eHigh severity\u003c/h2\u003e\n\u003ch3\u003eWebSocket DoS via fragment count bypass — CVE-2026-12151\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q\"\u003eGHSA-vxpw-j846-p89q\u003c/a\u003e\u003c/strong\u003e · CWE-400, CWE-770\n\u003cstrong\u003eFix:\u003c/strong\u003e \u003ca href=\"https://github.com/nodejs/undici/commit/b7f252e7\"\u003e\u003ccode\u003eb7f252e7\u003c/code\u003e\u003c/a\u003e \u003cem\u003eBackport WebSocket maxPayloadSize fixes\u003c/em\u003e (\u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5423\"\u003e#5423\u003c/a\u003e, backported to v6 in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5428\"\u003e#5428\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eA malicious WebSocket server can stream a large number of small or empty\ncontinuation frames. Undici enforced a limit on cumulative payload size but did\nnot limit the \u003cem\u003enumber\u003c/em\u003e of fragments per message, leading to unbounded memory\ngrowth and denial of service. All releases from 6.17.0 onward are affected.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eAffected:\u003c/strong\u003e applications using \u003ccode\u003enew WebSocket(...)\u003c/code\u003e or \u003ccode\u003eWebSocketStream\u003c/code\u003e\nagainst untrusted endpoints.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eWorkaround:\u003c/strong\u003e none — upgrade is required.\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003eModerate severity\u003c/h2\u003e\n\u003ch3\u003eHTTP header injection via Set-Cookie percent-decoding — CVE-2026-9679\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/551138cbc1742c92242a68216167761075e8a82c\"\u003e\u003ccode\u003e551138c\u003c/code\u003e\u003c/a\u003e Bumped v6.27.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5431\"\u003e#5431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/b7f252e7c0841418fb9d95cd297bdd9fad9d2a53\"\u003e\u003ccode\u003eb7f252e\u003c/code\u003e\u003c/a\u003e Backport WebSocket maxPayloadSize fixes to v7.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5423\"\u003e#5423\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5428\"\u003e#5428\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/25efa447997f74d5881edd144525c3fd7db945a4\"\u003e\u003ccode\u003e25efa44\u003c/code\u003e\u003c/a\u003e fix(cookies): preserve values and parse SameSite strictly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/f4c31d60c42d0385bca6ad602c112706b0695212\"\u003e\u003ccode\u003ef4c31d6\u003c/code\u003e\u003c/a\u003e fix: guard idle socket validation to skip fresh sockets (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5400\"\u003e#5400\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nodejs/undici/compare/v6.26.0...v6.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@xhmikosr/decompress` from 11.1.2 to 11.1.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/XhmikosR/decompress/releases\"\u003e@​xhmikosr/decompress's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev11.1.3\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cp\u003eFixes a crafted archive being able to read or write files outside the extraction directory:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eValidate symlink and hardlink targets against the output directory\u003c/li\u003e\n\u003cli\u003eReplace the prefix-based containment check with \u003ccode\u003epath.relative\u003c/code\u003e, fixing a sibling-directory bypass\u003c/li\u003e\n\u003cli\u003eStrip setuid, setgid, and sticky bits from extracted files\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAdvisory: \u003ca href=\"https://github.com/XhmikosR/decompress/security/advisories/GHSA-mp2f-45pm-3cg9\"\u003eGHSA-mp2f-45pm-3cg9\u003c/a\u003e (CVE-2026-53486)\u003c/p\u003e\n\u003ch2\u003eOther changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eWrite regular files before hardlinks so a hardlink to an extracted file resolves\u003c/li\u003e\n\u003cli\u003eInternal refactoring of the extraction code\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/XhmikosR/decompress/compare/v11.1.2...v11.1.3\"\u003ehttps://github.com/XhmikosR/decompress/compare/v11.1.2...v11.1.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/921c957ca09437139599d86d5f4aa963f1b3fa82\"\u003e\u003ccode\u003e921c957\u003c/code\u003e\u003c/a\u003e 11.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/4a2e46f914cd2c25f9199bcbf1332a9ff7c0ce92\"\u003e\u003ccode\u003e4a2e46f\u003c/code\u003e\u003c/a\u003e extractFile: write files before hardlinks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/44bc4bed3023d385185cb8099d9243b24b596cc9\"\u003e\u003ccode\u003e44bc4be\u003c/code\u003e\u003c/a\u003e runPlugins: use Array.flat()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/eab194d37d853d1450b9fe8a72225b7cc0bc082f\"\u003e\u003ccode\u003eeab194d\u003c/code\u003e\u003c/a\u003e refactor: hoist umask and timestamp out of the extraction loop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/3796c879582ea991438c6083e0b8610970bf3e9d\"\u003e\u003ccode\u003e3796c87\u003c/code\u003e\u003c/a\u003e Rename variables\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/2612bd5f75d3b8fcdaf4d7aa308111c173d6bf53\"\u003e\u003ccode\u003e2612bd5\u003c/code\u003e\u003c/a\u003e Settle all entries before propagating a failure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/b7d172672fa5e172c165dee26842277983765f0d\"\u003e\u003ccode\u003eb7d1726\u003c/code\u003e\u003c/a\u003e Resolve the output path once per extraction\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/60b5299402e72b0b53ca2e55222e9a1ccb44afae\"\u003e\u003ccode\u003e60b5299\u003c/code\u003e\u003c/a\u003e Strip setuid/setgid/sticky bits from extracted files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/281cefa00cd4275c10479bc5f1abba6b14dee8bd\"\u003e\u003ccode\u003e281cefa\u003c/code\u003e\u003c/a\u003e Validate link targets to prevent escaping the output directory\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XhmikosR/decompress/commit/aca5aac415dc04a6fae5200e51368cff436a09dd\"\u003e\u003ccode\u003eaca5aac\u003c/code\u003e\u003c/a\u003e Fix sibling-prefix path traversal via \u003ccode\u003epath.relative\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/XhmikosR/decompress/compare/v11.1.2...v11.1.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `devalue` from 5.6.3 to 5.8.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sveltejs/devalue/releases\"\u003edevalue's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.8.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e206ca67: fix: force sparse arrays to allocate sparsely\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.8.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ec5115b0: feat: add \u003ccode\u003estringifyAsync\u003c/code\u003e for async serialization\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.7.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e8becc7c: fix: handle regexes consistently in uneval's value and reference formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.7.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edf2e284: feat: use native alternatives to encode/decode base64\u003c/li\u003e\n\u003cli\u003e498656e: feat: add \u003ccode\u003eDataView\u003c/code\u003e support\u003c/li\u003e\n\u003cli\u003ea210130: feat: whitelist \u003ccode\u003eFloat16Array\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003edf2e284: feat: simplify TypedArray slices\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e5590634: fix: get \u003ccode\u003euneval\u003c/code\u003e type handling up to parity with \u003ccode\u003estringify\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e57f73fc: fix: correctly support boxed bigints and sentinel values\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.6.4\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e87c1f3c: fix: reject \u003ccode\u003e__proto__\u003c/code\u003e keys in malformed \u003ccode\u003eObject\u003c/code\u003e wrapper payloads\u003c/p\u003e\n\u003cp\u003eThis validates the \u003ccode\u003e\u0026quot;Object\u0026quot;\u003c/code\u003e parse path and throws when the wrapped value has an own \u003ccode\u003e__proto__\u003c/code\u003e key.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e40f1db1: fix: ensure sparse array indices are integers\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e87c1f3c: fix: disallow \u003ccode\u003e__proto__\u003c/code\u003e keys in null-prototype object parsing\u003c/p\u003e\n\u003cp\u003eThis disallows \u003ccode\u003e__proto__\u003c/code\u003e keys in the \u003ccode\u003e\u0026quot;null\u0026quot;\u003c/code\u003e parse path so null-prototype object hydration cannot carry that key through parse/unflatten.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md\"\u003edevalue's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.8.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e206ca67: fix: force sparse arrays to allocate sparsely\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.8.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ec5115b0: feat: add \u003ccode\u003estringifyAsync\u003c/code\u003e for async serialization\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.7.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e8becc7c: fix: handle regexes consistently in uneval's value and reference formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.7.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edf2e284: feat: use native alternatives to encode/decode base64\u003c/li\u003e\n\u003cli\u003e498656e: feat: add \u003ccode\u003eDataView\u003c/code\u003e support\u003c/li\u003e\n\u003cli\u003ea210130: feat: whitelist \u003ccode\u003eFloat16Array\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003edf2e284: feat: simplify TypedArray slices\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e5590634: fix: get \u003ccode\u003euneval\u003c/code\u003e type handling up to parity with \u003ccode\u003estringify\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e57f73fc: fix: correctly support boxed bigints and sentinel values\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.6.4\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e87c1f3c: fix: reject \u003ccode\u003e__proto__\u003c/code\u003e keys in malformed \u003ccode\u003eObject\u003c/code\u003e wrapper payloads\u003c/p\u003e\n\u003cp\u003eThis validates the \u003ccode\u003e\u0026quot;Object\u0026quot;\u003c/code\u003e parse path and throws when the wrapped value has an own \u003ccode\u003e__proto__\u003c/code\u003e key.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e40f1db1: fix: ensure sparse array indices are integers\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e87c1f3c: fix: disallow \u003ccode\u003e__proto__\u003c/code\u003e keys in null-prototype object parsing\u003c/p\u003e\n\u003cp\u003eThis disallows \u003ccode\u003e__proto__\u003c/code\u003e keys in the \u003ccode\u003e\u0026quot;null\u0026quot;\u003c/code\u003e parse path so null-prototype object hydration cannot carry that key through parse/unflatten.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/796ea83a76eb7e0f2af376f9c2c875f1d057f50f\"\u003e\u003ccode\u003e796ea83\u003c/code\u003e\u003c/a\u003e Version Packages (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/152\"\u003e#152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/206ca6712fbc380a4571c59de9ab04b91110792d\"\u003e\u003ccode\u003e206ca67\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/14933f78ff6b712829162628682b0a1993e75d19\"\u003e\u003ccode\u003e14933f7\u003c/code\u003e\u003c/a\u003e Version Packages (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/151\"\u003e#151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/c5115b0074ec298fb4077f6cee5616cefbd13902\"\u003e\u003ccode\u003ec5115b0\u003c/code\u003e\u003c/a\u003e feat: \u003ccode\u003estringifyAsync\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/150\"\u003e#150\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/67dad450b5db18ea9aa3059d334d8b0ee6704d9e\"\u003e\u003ccode\u003e67dad45\u003c/code\u003e\u003c/a\u003e docs: update README to reflect serialization stability non-goal (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/147\"\u003e#147\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/6eb920a7db6fe388f24f640d0e4e874a57f148fb\"\u003e\u003ccode\u003e6eb920a\u003c/code\u003e\u003c/a\u003e Version Packages (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/8becc7c436f0d4f85e2e5b32cb49dcfdf4fdec42\"\u003e\u003ccode\u003e8becc7c\u003c/code\u003e\u003c/a\u003e fix: handle regexes consistently in uneval's value and reference formats (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/145\"\u003e#145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/2eee2e435ea0ea3d495dc7a266486df95a4eb6ed\"\u003e\u003ccode\u003e2eee2e4\u003c/code\u003e\u003c/a\u003e Version Packages (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/144\"\u003e#144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/498656e75d36dfc63a386240722bdeac63337b25\"\u003e\u003ccode\u003e498656e\u003c/code\u003e\u003c/a\u003e DataView support (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/143\"\u003e#143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sveltejs/devalue/commit/5590634db53ed555d3ce2e2024924b30352a6afc\"\u003e\u003ccode\u003e5590634\u003c/code\u003e\u003c/a\u003e Improve platform types support (\u003ca href=\"https://redirect.github.com/sveltejs/devalue/issues/142\"\u003e#142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sveltejs/devalue/compare/v5.6.3...v5.8.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `esbuild` from 0.27.7 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evanw/esbuild/releases\"\u003eesbuild's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDisallow \u003ccode\u003e\\\u003c/code\u003e in local development server HTTP requests (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr\"\u003eGHSA-g7r4-m6w7-qqqr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThis release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \u003ccode\u003e\\\u003c/code\u003e backslash character. It happened due to the use of Go's \u003ccode\u003epath.Clean()\u003c/code\u003e function, which only handles Unix-style \u003ccode\u003e/\u003c/code\u003e characters. HTTP requests with paths containing \u003ccode\u003e\\\u003c/code\u003e are no longer allowed.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/dellalibera\"\u003e\u003ccode\u003e@​dellalibera\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd integrity checks to the Deno API (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr\"\u003eGHSA-gv7w-rqvm-qjhr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.\u003c/p\u003e\n\u003cp\u003eNote that esbuild's Deno API installs from \u003ccode\u003eregistry.npmjs.org\u003c/code\u003e by default, but allows the \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e environment variable to override this with a custom package registry. This change means that the esbuild executable served by \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e must now match the expected content.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/sondt99\"\u003e\u003ccode\u003e@​sondt99\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAvoid inlining \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild's minifier sometimes incorrectly inlined \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for \u003ccode\u003elet\u003c/code\u003e and \u003ccode\u003econst\u003c/code\u003e declarations by avoiding doing it for \u003ccode\u003evar\u003c/code\u003e declarations, which no longer worked when more declaration types were added. Here's an example:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\r\n{\r\n  using x = new Resource()\r\n  x.activate()\r\n}\r\n\u003cp\u003e// Old output (with --minify)\u003cbr /\u003e\nnew Resource().activate();\u003c/p\u003e\n\u003cp\u003e// New output (with --minify)\u003cbr /\u003e\n{using e=new Resource;e.activate()}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix module evaluation when an error is thrown (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4461\"\u003e#4461\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/pull/4467\"\u003e#4467\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eIf an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e is used to import a module multiple times. The thrown error is supposed to be thrown by every call to \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e, not just the first. With this release, esbuild will now throw the same error every time you call \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e on a module that throws during its evaluation.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix some edge cases around the \u003ccode\u003enew\u003c/code\u003e operator (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4477\"\u003e#4477\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a \u003ccode\u003enew\u003c/code\u003e expression (specifically an optional chain and/or a tagged template literal). The generated code for the \u003ccode\u003enew\u003c/code\u003e target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the \u003ccode\u003enew\u003c/code\u003e target in parentheses. Here is an example of some affected code:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\r\nnew (foo()`bar`)()\r\nnew (foo()?.bar)()\r\n\u003cp\u003e// Old output\u003cbr /\u003e\nnew foo()\u003ccode\u003ebar\u003c/code\u003e();\u003cbr /\u003e\nnew (foo())?.bar();\u003c/p\u003e\n\u003cp\u003e\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evanw/esbuild/blob/main/CHANGELOG.md\"\u003eesbuild's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDisallow \u003ccode\u003e\\\u003c/code\u003e in local development server HTTP requests (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr\"\u003eGHSA-g7r4-m6w7-qqqr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThis release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \u003ccode\u003e\\\u003c/code\u003e backslash character. It happened due to the use of Go's \u003ccode\u003epath.Clean()\u003c/code\u003e function, which only handles Unix-style \u003ccode\u003e/\u003c/code\u003e characters. HTTP requests with paths containing \u003ccode\u003e\\\u003c/code\u003e are no longer allowed.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/dellalibera\"\u003e\u003ccode\u003e@​dellalibera\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd integrity checks to the Deno API (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr\"\u003eGHSA-gv7w-rqvm-qjhr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.\u003c/p\u003e\n\u003cp\u003eNote that esbuild's Deno API installs from \u003ccode\u003eregistry.npmjs.org\u003c/code\u003e by default, but allows the \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e environment variable to override this with a custom package registry. This change means that the esbuild executable served by \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e must now match the expected content.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/sondt99\"\u003e\u003ccode\u003e@​sondt99\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAvoid inlining \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild's minifier sometimes incorrectly inlined \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for \u003ccode\u003elet\u003c/code\u003e and \u003ccode\u003econst\u003c/code\u003e declarations by avoiding doing it for \u003ccode\u003evar\u003c/code\u003e declarations, which no longer worked when more declaration types were added. Here's an example:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\n{\n  using x = new Resource()\n  x.activate()\n}\n\u003cp\u003e// Old output (with --minify)\u003cbr /\u003e\nnew Resource().activate();\u003c/p\u003e\n\u003cp\u003e// New output (with --minify)\u003cbr /\u003e\n{using e=new Resource;e.activate()}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix module evaluation when an error is thrown (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4461\"\u003e#4461\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/pull/4467\"\u003e#4467\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eIf an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e is used to import a module multiple times. The thrown error is supposed to be thrown by every call to \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e, not just the first. With this release, esbuild will now throw the same error every time you call \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e on a module that throws during its evaluation.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix some edge cases around the \u003ccode\u003enew\u003c/code\u003e operator (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4477\"\u003e#4477\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a \u003ccode\u003enew\u003c/code\u003e expression (specifically an optional chain and/or a tagged template literal). The generated code for the \u003ccode\u003enew\u003c/code\u003e target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the \u003ccode\u003enew\u003c/code\u003e target in parentheses. Here is an example of some affected code:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\nnew (foo()`bar`)()\nnew (foo()?.bar)()\n\u003cp\u003e// Old output\u003cbr /\u003e\nnew foo()\u003ccode\u003ebar\u003c/code\u003e();\u003cbr /\u003e\nnew (foo())?.bar();\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/bb9db84c02433fbe37b3509f53f9f3e3cc48725e\"\u003e\u003ccode\u003ebb9db84\u003c/code\u003e\u003c/a\u003e publish 0.28.1 to npm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/9ff053e53b8eeb990f59355dbea365277ac45ee2\"\u003e\u003ccode\u003e9ff053e\u003c/code\u003e\u003c/a\u003e security: add integrity checks to the Deno API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/0a9bf2135b67c7e28989a5ba19f0f000805a5ab5\"\u003e\u003ccode\u003e0a9bf21\u003c/code\u003e\u003c/a\u003e enforce non-negative size in gzip parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/e2a1a7132058ee067fe736eac15f695861b8654e\"\u003e\u003ccode\u003ee2a1a71\u003c/code\u003e\u003c/a\u003e security: forbid \u003ccode\u003e\\\\\u003c/code\u003e in local dev server requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/83a2cbfc35809f4fd5152da59572d7bed7739d78\"\u003e\u003ccode\u003e83a2cbf\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e: don't inline \u003ccode\u003eusing\u003c/code\u003e declarations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/308ad745d824c77bc607603451b257d0f2fd9a38\"\u003e\u003ccode\u003e308ad74\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4471\"\u003e#4471\u003c/a\u003e: renaming of nested \u003ccode\u003evar\u003c/code\u003e declarations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/f013f5f99a015bce92ec48d49181d4ad3177b29b\"\u003e\u003ccode\u003ef013f5f\u003c/code\u003e\u003c/a\u003e fix some typos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/aafd6e48b1088336a5f5a17e930be7e840d43d8c\"\u003e\u003ccode\u003eaafd6e4\u003c/code\u003e\u003c/a\u003e chore: fix some minor issues in comments (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4462\"\u003e#4462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/15300c30b5e22f7cfcbed850c246d35095658386\"\u003e\u003ccode\u003e15300c3\u003c/code\u003e\u003c/a\u003e follow up: cjs evaluation fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/1bda0c31d7697c0af44b3ab39b81e599e559a395\"\u003e\u003ccode\u003e1bda0c3\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4461\"\u003e#4461\u003c/a\u003e, fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4467\"\u003e#4467\u003c/a\u003e: esm evaluation fixes\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/evanw/esbuild/compare/v0.27.7...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.14.2 to 3.15.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/d8ff750b0130e4e4b4062fb0dbd32027e41d4c51\"\u003e\u003ccode\u003ed8ff750\u003c/code\u003e\u003c/a\u003e Add package lock\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7\"\u003e\u003ccode\u003e24f13e7\u003c/code\u003e\u003c/a\u003e Added \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option (v5 backport)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.2...3.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `form-data` from 4.0.5 to 4.0.6\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/form-data/form-data/blob/master/CHANGELOG.md\"\u003eform-data's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ev4.0.6\u003c/a\u003e - 2026-06-12\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames \u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435\"\u003e\u003ccode\u003e64190db\u003c/code\u003e\u003c/a\u003e v4.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e [Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `hono` from 4.12.23 to 4.12.28\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/honojs/hono/releases\"\u003ehono's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.12.28\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(serve-static): treat empty string content as found by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5062\"\u003ehonojs/hono#5062\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(MIGRATION): fix req.raw.headers reference (property, not method) by \u003ca href=\"https://github.com/EduardF1\"\u003e\u003ccode\u003e@​EduardF1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5047\"\u003ehonojs/hono#5047\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: don't publish \u003ccode\u003e*.tsbuildinfo\u003c/code\u003e by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5066\"\u003ehonojs/hono#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(utils/body,validator): normalize Content-Type media type for case-insensitive matching by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5067\"\u003ehonojs/hono#5067\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid circular dependency between body.ts and request.ts by \u003ca href=\"https://github.com/usualoma\"\u003e\u003ccode\u003e@​usualoma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5071\"\u003ehonojs/hono#5071\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(bun): report the requested subprotocol on WSContext.protocol by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5059\"\u003ehonojs/hono#5059\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump \u003ccode\u003edevDependencies\u003c/code\u003e by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5085\"\u003ehonojs/hono#5085\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(aws-lambda): detect V2 events by request context, not rawPath alone by \u003ca href=\"https://github.com/VihaanAgarwal\"\u003e\u003ccode\u003e@​VihaanAgarwal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5033\"\u003ehonojs/hono#5033\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(context-storage): fix JSDoc by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5086\"\u003ehonojs/hono#5086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/EduardF1\"\u003e\u003ccode\u003e@​EduardF1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5047\"\u003ehonojs/hono#5047\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5059\"\u003ehonojs/hono#5059\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/VihaanAgarwal\"\u003e\u003ccode\u003e@​VihaanAgarwal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5033\"\u003ehonojs/hono#5033\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.12.27...v4.12.28\"\u003ehttps://github.com/honojs/hono/compare/v4.12.27...v4.12.28\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.12.27\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cp\u003eThis release includes fixes for the following security issues:\u003c/p\u003e\n\u003ch3\u003ehono/jsx does not isolate context per request\u003c/h3\u003e\n\u003cp\u003eAffects: \u003ccode\u003ehono/jsx\u003c/code\u003e, \u003ccode\u003ehono/jsx-renderer\u003c/code\u003e. During SSR, context was stored process-wide instead of per request, so \u003ccode\u003euseContext()\u003c/code\u003e/\u003ccode\u003euseRequestContext()\u003c/code\u003e read after an \u003ccode\u003eawait\u003c/code\u003e in an async component could return another concurrent request's value — leading to cross-request data disclosure or authorization checks against the wrong request. GHSA-hvrm-45r6-mjfj\u003c/p\u003e\n\u003ch3\u003eServer-Side XSS via JSX escaping bypass in cx()\u003c/h3\u003e\n\u003cp\u003eAffects: \u003ccode\u003ehono/css\u003c/code\u003e. \u003ccode\u003ecx()\u003c/code\u003e marked its composed class name as already-escaped without escaping the input, so untrusted input passed as a class name could break out of the JSX \u003ccode\u003eclass\u003c/code\u003e attribute during SSR and inject markup (XSS). GHSA-w62v-xxxg-mg59\u003c/p\u003e\n\u003ch3\u003eAPI Gateway v1 adapter can drop a repeated request header value\u003c/h3\u003e\n\u003cp\u003eAffects: \u003ccode\u003ehono/aws-lambda\u003c/code\u003e. The API Gateway v1 (and VPC Lattice) adapter de-duplicated repeated header values by substring instead of exact match, dropping a value that is a substring of another (e.g. \u003ccode\u003e203.0.113.1\u003c/code\u003e dropped when \u003ccode\u003e203.0.113.10\u003c/code\u003e is present) — affecting logic such as \u003ccode\u003eX-Forwarded-For\u003c/code\u003e-based IP restriction. GHSA-xgm2-5f3f-mvvc\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003eUsers of \u003ccode\u003ehono/jsx\u003c/code\u003e/\u003ccode\u003ehono/jsx-renderer\u003c/code\u003e, \u003ccode\u003ehono/css\u003c/code\u003e (\u003ccode\u003ecx()\u003c/code\u003e), or the \u003ccode\u003ehono/aws-lambda\u003c/code\u003e API Gateway v1 / VPC Lattice adapters are encouraged to upgrade.\u003c/p\u003e\n\u003ch2\u003ev4.12.26\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(lambda-edge): satisfy Deno lib types for Content-Length body encoding by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5013\"\u003ehonojs/hono#5013\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: publish to npm from CI with OIDC trusted publishing by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5028\"\u003ehonojs/hono#5028\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove unused devcontainer and gitpod configs by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5029\"\u003ehonojs/hono#5029\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: replace arg and glob with Bun native APIs in build script by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5030\"\u003ehonojs/hono#5030\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.12.25...v4.12.26\"\u003ehttps://github.com/honojs/hono/compare/v4.12.25...v4.12.26\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/626b185d0e80fa1c2a3cc1a8945afd0df6aaf3ec\"\u003e\u003ccode\u003e626b185\u003c/code\u003e\u003c/a\u003e 4.12.28\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/d6b1d32a697ef9ba9f5036753fe9bde1121c0ff9\"\u003e\u003ccode\u003ed6b1d32\u003c/code\u003e\u003c/a\u003e docs(context-storage): fix JSDoc (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5086\"\u003e#5086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/45b081b9b90244a03444f9781d7777cbe620e6b4\"\u003e\u003ccode\u003e45b081b\u003c/code\u003e\u003c/a\u003e fix(aws-lambda): detect V2 events by request context, not rawPath alone (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5033\"\u003e#5033\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/a05813c0586cd8ee7873dab8158c08a5f772a9ed\"\u003e\u003ccode\u003ea05813c\u003c/code\u003e\u003c/a\u003e chore: bump \u003ccode\u003edevDependencies\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5085\"\u003e#5085\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/872997d2836dad3849817b6270d857d92f3dee85\"\u003e\u003ccode\u003e872997d\u003c/code\u003e\u003c/a\u003e fix(bun): report the requested subprotocol on WSContext.protocol (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5059\"\u003e#5059\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/82b321b5b0e7a57cdaab45f2f90671ec0737795b\"\u003e\u003ccode\u003e82b321b\u003c/code\u003e\u003c/a\u003e fix: avoid circular dependency between body.ts and request.ts (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5071\"\u003e#5071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/b20d4225c9aa9e615717ca74e437852cc9fd5b94\"\u003e\u003ccode\u003eb20d422\u003c/code\u003e\u003c/a\u003e fix(utils/body,validator): normalize Content-Type media type for case-insensi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/9728702911073aec5a63a3ba2840b7240e5d3205\"\u003e\u003ccode\u003e9728702\u003c/code\u003e\u003c/a\u003e chore: don't publish \u003ccode\u003e*.tsbuildinfo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5066\"\u003e#5066\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/ed8795e5cc49e83649c1ebbf4b72154a87abba19\"\u003e\u003ccode\u003eed8795e\u003c/code\u003e\u003c/a\u003e docs(MIGRATION): fix req.raw.headers reference (property, not method) (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5047\"\u003e#5047\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/03a9416a13a681028011e23841ba89d1dd6c9a62\"\u003e\u003ccode\u003e03a9416\u003c/code\u003e\u003c/a\u003e fix(serve-static): treat empty string content as found (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5062\"\u003e#5062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/honojs/hono/compare/v4.12.23...v4.12.28\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for hono since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `piscina` from 4.9.2 to 4.9.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/piscinajs/piscina/blob/v4.9.3/CHANGELOG.md\"\u003episcina's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/piscinajs/piscina/compare/v4.9.2...v4.9.3\"\u003e4.9.3\u003c/a\u003e (2026-06-12)\u003c/h3\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/4440ae15037b2462549943ba9ab66da0b87f906d\"\u003e\u003ccode\u003e4440ae1\u003c/code\u003e\u003c/a\u003e chore(release): 4.9.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/8703d3e353936c05dd3386508955e0e30c2ffc57\"\u003e\u003ccode\u003e8703d3e\u003c/code\u003e\u003c/a\u003e Merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/63532c5a7595dba7647f4c521d9aed39475a6d0f\"\u003e\u003ccode\u003e63532c5\u003c/code\u003e\u003c/a\u003e docs: Update Fastify listen() calls to use { port: 3000 } in docs and example...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/67591a20a78c894de9170f782a038365784874bc\"\u003e\u003ccode\u003e67591a2\u003c/code\u003e\u003c/a\u003e chores: gh actions least privilege (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/1013\"\u003e#1013\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/1014\"\u003e#1014\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/7c4220706fa45ff1ea629891854ef45ed0ecdc30\"\u003e\u003ccode\u003e7c42207\u003c/code\u003e\u003c/a\u003e chore: enhance contributing guidelines (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/972\"\u003e#972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/04c2c52b7c7bdfd7471668d2c052848fd91d9347\"\u003e\u003ccode\u003e04c2c52\u003c/code\u003e\u003c/a\u003e chore: pin actions (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/848\"\u003e#848\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/850\"\u003e#850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/piscinajs/piscina/commit/d157099670fbb55a5a6f8d730d44bff131d04387\"\u003e\u003ccode\u003ed157099\u003c/code\u003e\u003c/a\u003e [Backport v4] chore: edit ignore files (\u003ca href=\"https://redirect.github.com/piscinajs/piscina/issues/826\"\u003e#826\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/piscinajs/piscina/compare/v4.9.2...v4.9.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.5.15 to 7.5.19\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.15...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/HENRYIXDJ/HENRY-IX/pull/22","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/HENRYIXDJ%2FHENRY-IX/issues/22","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/22/packages"}},{"old_version":"7.5.13","new_version":"7.5.19","update_type":"patch","path":null,"pr_created_at":"2026-07-05T01:21:50.000Z","version_change":"7.5.13 → 7.5.19","issue":{"uuid":"4811170562","node_id":"PR_kwDOSIskQM7t9a5Y","number":307,"state":"open","title":"chore(deps): bump the minor-and-patch group across 1 directory with 15 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-05T01:21:50.000Z","updated_at":"2026-07-05T01:22:13.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"minor-and-patch","update_count":15,"packages":[{"name":"@biomejs/biome","old_version":"2.4.13","new_version":"2.5.2","repository_url":"https://github.com/biomejs/biome"},{"name":"lefthook","old_version":"2.1.6","new_version":"2.1.9","repository_url":"https://github.com/evilmartians/lefthook"},{"name":"turbo","old_version":"2.9.6","new_version":"2.10.3","repository_url":"https://github.com/vercel/turborepo"},{"name":"@clerk/tanstack-react-start","old_version":"1.4.10","new_version":"1.4.12","repository_url":"https://github.com/clerk/javascript"},{"name":"@stripe/react-stripe-js","old_version":"6.6.0","new_version":"6.7.0","repository_url":"https://github.com/stripe/react-stripe-js"},{"name":"@stripe/stripe-js","old_version":"9.8.0","new_version":"9.9.0","repository_url":"https://github.com/stripe/stripe-js"},{"name":"@tanstack/react-router","old_version":"1.170.16","new_version":"1.170.17","repository_url":"https://github.com/TanStack/router"},{"name":"@tanstack/react-start","old_version":"1.168.26","new_version":"1.168.27","repository_url":"https://github.com/TanStack/router"},{"name":"nuqs","old_version":"2.8.9","new_version":"2.9.0","repository_url":"https://github.com/47ng/nuqs"},{"name":"posthog-js","old_version":"1.373.4","new_version":"1.396.6","repository_url":"https://github.com/PostHog/posthog-js"},{"name":"@tanstack/router-cli","old_version":"1.167.17","new_version":"1.167.18","repository_url":"https://github.com/TanStack/router"},{"name":"@types/node","old_version":"22.19.17","new_version":"22.20.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"vite","old_version":"8.1.0","new_version":"8.1.3","repository_url":"https://github.com/vitejs/vite"},{"name":"@clack/prompts","old_version":"1.2.0","new_version":"1.7.0","repository_url":"https://github.com/bombshell-dev/clack"},{"name":"tar","old_version":"7.5.13","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps the minor-and-patch group with 15 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.13` | `2.5.2` |\n| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.6` | `2.1.9` |\n| [turbo](https://github.com/vercel/turborepo) | `2.9.6` | `2.10.3` |\n| [@clerk/tanstack-react-start](https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start) | `1.4.10` | `1.4.12` |\n| [@stripe/react-stripe-js](https://github.com/stripe/react-stripe-js) | `6.6.0` | `6.7.0` |\n| [@stripe/stripe-js](https://github.com/stripe/stripe-js) | `9.8.0` | `9.9.0` |\n| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.16` | `1.170.17` |\n| [@tanstack/react-start](https://github.com/TanStack/router/tree/HEAD/packages/react-start) | `1.168.26` | `1.168.27` |\n| [nuqs](https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs) | `2.8.9` | `2.9.0` |\n| [posthog-js](https://github.com/PostHog/posthog-js) | `1.373.4` | `1.396.6` |\n| [@tanstack/router-cli](https://github.com/TanStack/router/tree/HEAD/packages/router-cli) | `1.167.17` | `1.167.18` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.17` | `22.20.0` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.0` | `8.1.3` |\n| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.2.0` | `1.7.0` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.13` | `7.5.19` |\n\n\nUpdates `@biomejs/biome` from 2.4.13 to 2.5.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/biomejs/biome/releases\"\u003e@​biomejs/biome's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eBiome CLI v2.5.2\u003c/h2\u003e\n\u003ch2\u003e2.5.2\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10595\"\u003e#10595\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f4580289094a8fe5c85252adc3399c060bab811e\"\u003e\u003ccode\u003ef458028\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/pkallos\"\u003e\u003ccode\u003e@​pkallos\u003c/code\u003e\u003c/a\u003e! - Added the option \u003ccode\u003eignoreBooleanCoercion\u003c/code\u003e to \u003ca href=\"https://biomejs.dev/linter/rules/use-nullish-coalescing/\"\u003euseNullishCoalescing\u003c/a\u003e. When enabled, Biome ignores \u003ccode\u003e||\u003c/code\u003e and \u003ccode\u003e||=\u003c/code\u003e used inside a \u003ccode\u003eBoolean()\u003c/code\u003e call, where coalescing on falsy values is intentional.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10798\"\u003e#10798\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/4a32b63eb41f144dc8faf6b5cdb05e1de5dbcb63\"\u003e\u003ccode\u003e4a32b63\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/pkallos\"\u003e\u003ccode\u003e@​pkallos\u003c/code\u003e\u003c/a\u003e! - Added the option \u003ccode\u003eignorePrimitives\u003c/code\u003e to \u003ca href=\"https://biomejs.dev/linter/rules/use-nullish-coalescing/\"\u003euseNullishCoalescing\u003c/a\u003e. When enabled, Biome ignores \u003ccode\u003e||\u003c/code\u003e, \u003ccode\u003e||=\u003c/code\u003e, and ternary expressions whose non-nullish operands are all primitives the option opts out of. Use \u003ccode\u003etrue\u003c/code\u003e to ignore all primitives, or an object selecting \u003ccode\u003estring\u003c/code\u003e, \u003ccode\u003enumber\u003c/code\u003e, \u003ccode\u003eboolean\u003c/code\u003e, or \u003ccode\u003ebigint\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10545\"\u003e#10545\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f3d4c0082676c5188e9a6aa516318c7e3d59bda6\"\u003e\u003ccode\u003ef3d4c00\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Mokto\"\u003e\u003ccode\u003e@​Mokto\u003c/code\u003e\u003c/a\u003e! - Added the new nursery rule \u003ca href=\"https://biomejs.dev/linter/rules/no-svelte-unnecessary-state-wrap/\"\u003e\u003ccode\u003enoSvelteUnnecessaryStateWrap\u003c/code\u003e\u003c/a\u003e, which reports unnecessary \u003ccode\u003e$state()\u003c/code\u003e wrapping of classes from \u003ccode\u003esvelte/reactivity\u003c/code\u003e that are already reactive.\u003c/p\u003e\n\u003cpre lang=\"svelte\"\u003e\u003ccode\u003e\u0026lt;script\u0026gt;\nimport { SvelteMap } from \u0026quot;svelte/reactivity\u0026quot;;\nconst map = $state(new SvelteMap()); // redundant\n\u0026lt;/script\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10752\"\u003e#10752\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f62fb8b53092fe85e16f9d4ea0e584fee7031ab5\"\u003e\u003ccode\u003ef62fb8b\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ematipico\"\u003e\u003ccode\u003e@​ematipico\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/10739\"\u003e#10739\u003c/a\u003e. Now the rule \u003ca href=\"https://biomejs.dev/linter/rules/use-valid-autocomplete/\"\u003e\u003ccode\u003euseValidAutocomplete\u003c/code\u003e\u003c/a\u003e correctly flags the \u003ccode\u003eautoComplete\u003c/code\u003e attribute.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10796\"\u003e#10796\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f1b3ab2c09522a52c93f669ce679675237b96813\"\u003e\u003ccode\u003ef1b3ab2\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ematipico\"\u003e\u003ccode\u003e@​ematipico\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/10768\"\u003e#10768\u003c/a\u003e. Improved the performance of the Biome Language Server by cancelling certain in-flight operations when there are fast updates.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10719\"\u003e#10719\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/aa649b586a2221bf058af7ce80af6faa11faf846\"\u003e\u003ccode\u003eaa649b5\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/minseong0324\"\u003e\u003ccode\u003e@​minseong0324\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://biomejs.dev/linter/rules/no-misleading-return-type/\"\u003e\u003ccode\u003enoMisleadingReturnType\u003c/code\u003e\u003c/a\u003e false positive on returns that use a widening type assertion: \u003ccode\u003e\u0026quot;a\u0026quot; as string\u003c/code\u003e is no longer reported as misleading. The rule now also reports a literal-pinning assertion such as \u003ccode\u003efalse as false\u003c/code\u003e, matching the existing \u003ccode\u003eas const\u003c/code\u003e behavior.\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003e// No longer flagged (returns are `string`):\nfunction getValue(b: boolean): string {\n  if (b) return \u0026quot;a\u0026quot; as string;\n  return \u0026quot;b\u0026quot; as string;\n}\n\u003cp\u003e// Now also reported, like \u003ccode\u003eas const\u003c/code\u003e (returns \u003ccode\u003efalse\u003c/code\u003e):\u003cbr /\u003e\nfunction isReady(): boolean {\u003cbr /\u003e\nreturn false as false;\u003cbr /\u003e\n}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10678\"\u003e#10678\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/8f073a7cd72b4cf46c2ebf2bc08f4068fc4b5e34\"\u003e\u003ccode\u003e8f073a7\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/PranavAchar01\"\u003e\u003ccode\u003e@​PranavAchar01\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/7718\"\u003e#7718\u003c/a\u003e: Biome now correctly parses CSS nesting selectors when \u003ccode\u003e\u0026amp;\u003c/code\u003e appears as a trailing sub-selector after a type selector, e.g. \u003ccode\u003eh1\u0026amp; { color: red; }\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10756\"\u003e#10756\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/5ec965a2620dec7cb40aa4946ba1d41408b11fd9\"\u003e\u003ccode\u003e5ec965a\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/denbezrukov\"\u003e\u003ccode\u003e@​denbezrukov\u003c/code\u003e\u003c/a\u003e! - Fixed CSS formatter output for selector lists with \u003ccode\u003eallowWrongLineComments\u003c/code\u003e and \u003ccode\u003e//\u003c/code\u003e comments after a selector comma. Biome now keeps the selector before the line comment inline instead of breaking it across descendant combinators.\u003c/p\u003e\n\u003cpre lang=\"diff\"\u003e\u003ccode\u003e-.powerPathNavigator\n-  .helm\n-  button.pressedButton, // pressed\n+.powerPathNavigator .helm button.pressedButton, // pressed\n .powerPathNavigator .helm button:active:not(.disabledButton) {\n }\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md\"\u003e@​biomejs/biome's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.5.2\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10595\"\u003e#10595\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f4580289094a8fe5c85252adc3399c060bab811e\"\u003e\u003ccode\u003ef458028\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/pkallos\"\u003e\u003ccode\u003e@​pkallos\u003c/code\u003e\u003c/a\u003e! - Added the option \u003ccode\u003eignoreBooleanCoercion\u003c/code\u003e to \u003ca href=\"https://biomejs.dev/linter/rules/use-nullish-coalescing/\"\u003euseNullishCoalescing\u003c/a\u003e. When enabled, Biome ignores \u003ccode\u003e||\u003c/code\u003e and \u003ccode\u003e||=\u003c/code\u003e used inside a \u003ccode\u003eBoolean()\u003c/code\u003e call, where coalescing on falsy values is intentional.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10798\"\u003e#10798\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/4a32b63eb41f144dc8faf6b5cdb05e1de5dbcb63\"\u003e\u003ccode\u003e4a32b63\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/pkallos\"\u003e\u003ccode\u003e@​pkallos\u003c/code\u003e\u003c/a\u003e! - Added the option \u003ccode\u003eignorePrimitives\u003c/code\u003e to \u003ca href=\"https://biomejs.dev/linter/rules/use-nullish-coalescing/\"\u003euseNullishCoalescing\u003c/a\u003e. When enabled, Biome ignores \u003ccode\u003e||\u003c/code\u003e, \u003ccode\u003e||=\u003c/code\u003e, and ternary expressions whose non-nullish operands are all primitives the option opts out of. Use \u003ccode\u003etrue\u003c/code\u003e to ignore all primitives, or an object selecting \u003ccode\u003estring\u003c/code\u003e, \u003ccode\u003enumber\u003c/code\u003e, \u003ccode\u003eboolean\u003c/code\u003e, or \u003ccode\u003ebigint\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10545\"\u003e#10545\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f3d4c0082676c5188e9a6aa516318c7e3d59bda6\"\u003e\u003ccode\u003ef3d4c00\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Mokto\"\u003e\u003ccode\u003e@​Mokto\u003c/code\u003e\u003c/a\u003e! - Added the new nursery rule \u003ca href=\"https://biomejs.dev/linter/rules/no-svelte-unnecessary-state-wrap/\"\u003e\u003ccode\u003enoSvelteUnnecessaryStateWrap\u003c/code\u003e\u003c/a\u003e, which reports unnecessary \u003ccode\u003e$state()\u003c/code\u003e wrapping of classes from \u003ccode\u003esvelte/reactivity\u003c/code\u003e that are already reactive.\u003c/p\u003e\n\u003cpre lang=\"svelte\"\u003e\u003ccode\u003e\u0026lt;script\u0026gt;\nimport { SvelteMap } from \u0026quot;svelte/reactivity\u0026quot;;\nconst map = $state(new SvelteMap()); // redundant\n\u0026lt;/script\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10752\"\u003e#10752\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f62fb8b53092fe85e16f9d4ea0e584fee7031ab5\"\u003e\u003ccode\u003ef62fb8b\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ematipico\"\u003e\u003ccode\u003e@​ematipico\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/10739\"\u003e#10739\u003c/a\u003e. Now the rule \u003ca href=\"https://biomejs.dev/linter/rules/use-valid-autocomplete/\"\u003e\u003ccode\u003euseValidAutocomplete\u003c/code\u003e\u003c/a\u003e correctly flags the \u003ccode\u003eautoComplete\u003c/code\u003e attribute.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10796\"\u003e#10796\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/f1b3ab2c09522a52c93f669ce679675237b96813\"\u003e\u003ccode\u003ef1b3ab2\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ematipico\"\u003e\u003ccode\u003e@​ematipico\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/10768\"\u003e#10768\u003c/a\u003e. Improved the performance of the Biome Language Server by cancelling certain in-flight operations when there are fast updates.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10719\"\u003e#10719\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/aa649b586a2221bf058af7ce80af6faa11faf846\"\u003e\u003ccode\u003eaa649b5\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/minseong0324\"\u003e\u003ccode\u003e@​minseong0324\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://biomejs.dev/linter/rules/no-misleading-return-type/\"\u003e\u003ccode\u003enoMisleadingReturnType\u003c/code\u003e\u003c/a\u003e false positive on returns that use a widening type assertion: \u003ccode\u003e\u0026quot;a\u0026quot; as string\u003c/code\u003e is no longer reported as misleading. The rule now also reports a literal-pinning assertion such as \u003ccode\u003efalse as false\u003c/code\u003e, matching the existing \u003ccode\u003eas const\u003c/code\u003e behavior.\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003e// No longer flagged (returns are `string`):\nfunction getValue(b: boolean): string {\n  if (b) return \u0026quot;a\u0026quot; as string;\n  return \u0026quot;b\u0026quot; as string;\n}\n\u003cp\u003e// Now also reported, like \u003ccode\u003eas const\u003c/code\u003e (returns \u003ccode\u003efalse\u003c/code\u003e):\u003cbr /\u003e\nfunction isReady(): boolean {\u003cbr /\u003e\nreturn false as false;\u003cbr /\u003e\n}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10678\"\u003e#10678\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/8f073a7cd72b4cf46c2ebf2bc08f4068fc4b5e34\"\u003e\u003ccode\u003e8f073a7\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/PranavAchar01\"\u003e\u003ccode\u003e@​PranavAchar01\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/7718\"\u003e#7718\u003c/a\u003e: Biome now correctly parses CSS nesting selectors when \u003ccode\u003e\u0026amp;\u003c/code\u003e appears as a trailing sub-selector after a type selector, e.g. \u003ccode\u003eh1\u0026amp; { color: red; }\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10756\"\u003e#10756\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/5ec965a2620dec7cb40aa4946ba1d41408b11fd9\"\u003e\u003ccode\u003e5ec965a\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/denbezrukov\"\u003e\u003ccode\u003e@​denbezrukov\u003c/code\u003e\u003c/a\u003e! - Fixed CSS formatter output for selector lists with \u003ccode\u003eallowWrongLineComments\u003c/code\u003e and \u003ccode\u003e//\u003c/code\u003e comments after a selector comma. Biome now keeps the selector before the line comment inline instead of breaking it across descendant combinators.\u003c/p\u003e\n\u003cpre lang=\"diff\"\u003e\u003ccode\u003e-.powerPathNavigator\n-  .helm\n-  button.pressedButton, // pressed\n+.powerPathNavigator .helm button.pressedButton, // pressed\n .powerPathNavigator .helm button:active:not(.disabledButton) {\n }\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/biomejs/biome/pull/10757\"\u003e#10757\u003c/a\u003e \u003ca href=\"https://github.com/biomejs/biome/commit/6232fcdef77471e6a6a74bcc33ff7b2b2a9f85a2\"\u003e\u003ccode\u003e6232fcd\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/PranavAchar01\"\u003e\u003ccode\u003e@​PranavAchar01\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ca href=\"https://redirect.github.com/biomejs/biome/issues/8269\"\u003e#8269\u003c/a\u003e: the CSS parser now accepts Tailwind \u003ccode\u003e@variant\u003c/code\u003e and \u003ccode\u003e@utility\u003c/code\u003e names that start with a digit, such as the \u003ccode\u003e2xl\u003c/code\u003e breakpoint.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/e64919850ceb7571673b81665a54051510e84925\"\u003e\u003ccode\u003ee649198\u003c/code\u003e\u003c/a\u003e ci: release (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10747\"\u003e#10747\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/4a32b63eb41f144dc8faf6b5cdb05e1de5dbcb63\"\u003e\u003ccode\u003e4a32b63\u003c/code\u003e\u003c/a\u003e feat(lint): add ignorePrimitives option to useNullishCoalescing (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10798\"\u003e#10798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/f3d4c0082676c5188e9a6aa516318c7e3d59bda6\"\u003e\u003ccode\u003ef3d4c00\u003c/code\u003e\u003c/a\u003e feat(js/nursery): add noSvelteNoUnnecessaryStateWrap rule (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10545\"\u003e#10545\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/f4580289094a8fe5c85252adc3399c060bab811e\"\u003e\u003ccode\u003ef458028\u003c/code\u003e\u003c/a\u003e feat(lint): add ignoreBooleanCoercion option to useNullishCoalescing (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10595\"\u003e#10595\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/ffe7d33212f7cb89162bb222ce29e3468b75488d\"\u003e\u003ccode\u003effe7d33\u003c/code\u003e\u003c/a\u003e chore: revert\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/564d660150ea153cb8383f2331313a294d465c05\"\u003e\u003ccode\u003e564d660\u003c/code\u003e\u003c/a\u003e chore: revert\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/0abf1a582fd4dfeb13f508d3d3ef0ff583989a41\"\u003e\u003ccode\u003e0abf1a5\u003c/code\u003e\u003c/a\u003e ci: release (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10627\"\u003e#10627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/23814f1ad8430df906a39323ee31d27d7b9ca17b\"\u003e\u003ccode\u003e23814f1\u003c/code\u003e\u003c/a\u003e chore(biome_configuration): add allowTrailingCommas to json-schema to make VS...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/a0f197eb1a6974539927f105ff1dde1f51d07d74\"\u003e\u003ccode\u003ea0f197e\u003c/code\u003e\u003c/a\u003e chore: dead and old links (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10668\"\u003e#10668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/biomejs/biome/commit/c0b98327a3b14e44d8fbd9a11481bf56c505b8ed\"\u003e\u003ccode\u003ec0b9832\u003c/code\u003e\u003c/a\u003e ci: release (\u003ca href=\"https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10499\"\u003e#10499\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.2/packages/@biomejs/biome\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lefthook` from 2.1.6 to 2.1.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evilmartians/lefthook/releases\"\u003elefthook's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.9\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e1d35cbabe1ebaf2a5ed4d2186caa0402de6448e2 chore: add pretty gradient (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1432\"\u003e#1432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e22be6c50e1412c748f3c6b60e9c61cd056dc693b deps: May 2026 (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1415\"\u003e#1415\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e1bae568f03dfb88af9185031fa44e9fee285e917 fix: update hooks path after resetting (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1431\"\u003e#1431\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.1.8\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e488a5f99a5a496e5837f757f8ce3e6c6d1415792 fix: do not warn if local hooks path is equal to default hooks path (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1421\"\u003e#1421\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.1.7\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ef415a9d3fce1d4f6af62622cf96c72e04ecf7bd3 chore: go mod tidy\u003c/li\u003e\n\u003cli\u003ecf4ab9ea4580f5aeb0d4b61d4dd169533e5bb0c9 fix: always restore unstaged changes (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1416\"\u003e#1416\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e4c0e000d6fe9f35f42efefb9263b0b4cb5dfbd49 fix: apply stage_fixed only if it is safe (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1418\"\u003e#1418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e76aa843ef5ceb6970f61cd2ff28d16dd2ec82272 fix: linter, sacrifice optimization for readability\u003c/li\u003e\n\u003cli\u003e9d53c36ed9a26d3bf66e341a9650a0ecac9b6a37 fix: separate fallback push branch from pathspecs (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1396\"\u003e#1396\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e22c9f773cf93b59005bd244c5b00caab2947a755 fix: try to always restore unstaged changes (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1417\"\u003e#1417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e37d83986d8e6d6bf6792f57e22e7cbb1a9e28064 fix: use contrast colors (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1420\"\u003e#1420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eeb1064d0b8c6248627960bea1abf6891db5a21b1 refactor: add new logger without a global state (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1385\"\u003e#1385\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md\"\u003elefthook's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.1.9 (2026-05-29)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: update hooks path after resetting (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1431\"\u003e#1431\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: May 2026 (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1415\"\u003e#1415\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.1.8 (2026-05-19)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: do not warn if local hooks path is equal to default hooks path (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1421\"\u003e#1421\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.1.7 (2026-05-19)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: use contrast colors (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1420\"\u003e#1420\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: apply stage_fixed only if it is safe (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1418\"\u003e#1418\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: try to always restore unstaged changes (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1417\"\u003e#1417\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: always restore unstaged changes (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1416\"\u003e#1416\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: add new logger without a global state (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1385\"\u003e#1385\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: linter, sacrifice optimization for readability by \u003ca href=\"\"\u003e\u003ccode\u003e@​mrexox\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: separate fallback push branch from pathspecs (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/pull/1396\"\u003e#1396\u003c/a\u003e) by \u003ca href=\"\"\u003e\u003ccode\u003e@​lawrence3699\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/75f99ff325a731c296b572292dd1c855cd970b93\"\u003e\u003ccode\u003e75f99ff\u003c/code\u003e\u003c/a\u003e 2.1.9: fix install with --reset-hooks-path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/1d35cbabe1ebaf2a5ed4d2186caa0402de6448e2\"\u003e\u003ccode\u003e1d35cba\u003c/code\u003e\u003c/a\u003e chore: add pretty gradient (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1432\"\u003e#1432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/1bae568f03dfb88af9185031fa44e9fee285e917\"\u003e\u003ccode\u003e1bae568\u003c/code\u003e\u003c/a\u003e fix: update hooks path after resetting (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1431\"\u003e#1431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/22be6c50e1412c748f3c6b60e9c61cd056dc693b\"\u003e\u003ccode\u003e22be6c5\u003c/code\u003e\u003c/a\u003e deps: May 2026 (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1415\"\u003e#1415\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/9e75b2138b4d31b156d3256c2b0617851377aaf2\"\u003e\u003ccode\u003e9e75b21\u003c/code\u003e\u003c/a\u003e 2.1.8: reduce warning for core.hooksPath if it matches the default\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/488a5f99a5a496e5837f757f8ce3e6c6d1415792\"\u003e\u003ccode\u003e488a5f9\u003c/code\u003e\u003c/a\u003e fix: do not warn if local hooks path is equal to default hooks path (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1421\"\u003e#1421\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/b5c8310e174489a3705dbbe240eea035058a9128\"\u003e\u003ccode\u003eb5c8310\u003c/code\u003e\u003c/a\u003e 2.1.7: restore unstaged changes when possible\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/37d83986d8e6d6bf6792f57e22e7cbb1a9e28064\"\u003e\u003ccode\u003e37d8398\u003c/code\u003e\u003c/a\u003e fix: use contrast colors (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1420\"\u003e#1420\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/4c0e000d6fe9f35f42efefb9263b0b4cb5dfbd49\"\u003e\u003ccode\u003e4c0e000\u003c/code\u003e\u003c/a\u003e fix: apply stage_fixed only if it is safe (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1418\"\u003e#1418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evilmartians/lefthook/commit/22c9f773cf93b59005bd244c5b00caab2947a755\"\u003e\u003ccode\u003e22c9f77\u003c/code\u003e\u003c/a\u003e fix: try to always restore unstaged changes (\u003ca href=\"https://redirect.github.com/evilmartians/lefthook/issues/1417\"\u003e#1417\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/evilmartians/lefthook/compare/v2.1.6...v2.1.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `turbo` from 2.9.6 to 2.10.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/turborepo/releases\"\u003eturbo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eTurborepo v2.10.3\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eChangelog\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Add nub to create-turbo options by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13173\"\u003evercel/turborepo#13173\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13174\"\u003evercel/turborepo#13174\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.1 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13176\"\u003evercel/turborepo#13176\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Normalize package manager versions by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13177\"\u003evercel/turborepo#13177\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Use singular workspace in package resolution error by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13178\"\u003evercel/turborepo#13178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Support nub native lockfiles by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13179\"\u003evercel/turborepo#13179\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(build): Enable thin LTO + codegen-units=1 for release builds by \u003ca href=\"https://github.com/lukesandberg\"\u003e\u003ccode\u003e@​lukesandberg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13160\"\u003evercel/turborepo#13160\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13181\"\u003evercel/turborepo#13181\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Add aube package manager support by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13183\"\u003evercel/turborepo#13183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.3 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13184\"\u003evercel/turborepo#13184\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Normalize package manager version output by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13185\"\u003evercel/turborepo#13185\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.4 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13186\"\u003evercel/turborepo#13186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Richer internal dependency data by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13188\"\u003evercel/turborepo#13188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(repository): honor semver ranges in devEngines.packageManager.version by \u003ca href=\"https://github.com/colinhacks\"\u003e\u003ccode\u003e@​colinhacks\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13189\"\u003evercel/turborepo#13189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Skip node_modules in boundaries checks by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13191\"\u003evercel/turborepo#13191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Add token exchange recovery guidance by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13192\"\u003evercel/turborepo#13192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Add --production flag to turbo prune by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13190\"\u003evercel/turborepo#13190\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.5 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13193\"\u003evercel/turborepo#13193\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Accept Bun lockfile version 2 by \u003ca href=\"https://github.com/tsushanth\"\u003e\u003ccode\u003e@​tsushanth\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13119\"\u003evercel/turborepo#13119\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Handle task executor join errors as internal errors by \u003ca href=\"https://github.com/gwagjiug\"\u003e\u003ccode\u003e@​gwagjiug\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13148\"\u003evercel/turborepo#13148\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Tweaks for nub support by \u003ca href=\"https://github.com/colinhacks\"\u003e\u003ccode\u003e@​colinhacks\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13187\"\u003evercel/turborepo#13187\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.6 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13194\"\u003evercel/turborepo#13194\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.7 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13195\"\u003evercel/turborepo#13195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Upgrade TypeScript to 7.0.1-rc by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13144\"\u003evercel/turborepo#13144\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: Add filtered installs to Vercel guide by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13196\"\u003evercel/turborepo#13196\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexamples: add with-mcp-servers by \u003ca href=\"https://github.com/Nishant-Chaudhary5338\"\u003e\u003ccode\u003e@​Nishant-Chaudhary5338\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/12997\"\u003evercel/turborepo#12997\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Report malformed JSON parse errors instead of panicking by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13198\"\u003evercel/turborepo#13198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Improve error messaging when platform binary is missing by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13199\"\u003evercel/turborepo#13199\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease(turborepo): 2.10.3-canary.8 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13200\"\u003evercel/turborepo#13200\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(watch): Recover from slow initial hash instead of timing out by \u003ca href=\"https://github.com/lukesandberg\"\u003e\u003ccode\u003e@​lukesandberg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13159\"\u003evercel/turborepo#13159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Update vitest example to vitest 4 and use native test merging by \u003ca href=\"https://github.com/abhiaagarwal\"\u003e\u003ccode\u003e@​abhiaagarwal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13202\"\u003evercel/turborepo#13202\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Toggle between the TUI and streamed logs by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13203\"\u003evercel/turborepo#13203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Resolve Bun scoped package deps that share a name with a dependency by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13207\"\u003evercel/turborepo#13207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Select tasks by clicking rows in the TUI task list by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13206\"\u003evercel/turborepo#13206\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: Avoid deep-cloning dependency maps in lockfile closure cache by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13209\"\u003evercel/turborepo#13209\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: Cache root internal dependencies in package graph by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13211\"\u003evercel/turborepo#13211\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Automatically copy TUI selection to clipboard on mouse release by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13208\"\u003evercel/turborepo#13208\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: Cache env wildcard matches across tasks during hashing by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13210\"\u003evercel/turborepo#13210\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: Replace per-package graph traversals in scope filtering by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13212\"\u003evercel/turborepo#13212\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: Derive dirty hash from repo index by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13213\"\u003evercel/turborepo#13213\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Include untracked symlinks in repo-index dirty hash by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13218\"\u003evercel/turborepo#13218\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Use upstream libghostty-vt crates instead of vendored bindings by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13205\"\u003evercel/turborepo#13205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Remove devtools feature flag by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13219\"\u003evercel/turborepo#13219\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Harden TUI terminal restore during shutdown by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13220\"\u003evercel/turborepo#13220\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Correct gitignore precedence in untracked walk and memoize matcher chains by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/13221\"\u003evercel/turborepo#13221\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/9980449cabac759906a66b29fa2b0aacffec4cfc\"\u003e\u003ccode\u003e9980449\u003c/code\u003e\u003c/a\u003e publish 2.10.3 to registry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/bc32fccf931a1408df2c3870721e89a56db0b9b6\"\u003e\u003ccode\u003ebc32fcc\u003c/code\u003e\u003c/a\u003e fix: Correct gitignore precedence in untracked walk and memoize matcher chain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/dccab936ec0f674f2c46f2e0f2f13552b892bbc6\"\u003e\u003ccode\u003edccab93\u003c/code\u003e\u003c/a\u003e fix: Harden TUI terminal restore during shutdown (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13220\"\u003e#13220\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/65efe27d23a1bf4635592a008f4e757fdd02a87e\"\u003e\u003ccode\u003e65efe27\u003c/code\u003e\u003c/a\u003e fix: Remove devtools feature flag (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13219\"\u003e#13219\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/c2115dc21d871c1799b91b0249bf335a8fc4074b\"\u003e\u003ccode\u003ec2115dc\u003c/code\u003e\u003c/a\u003e refactor: Use upstream libghostty-vt crates instead of vendored bindings (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13\"\u003e#13\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/c3c91abddfba2407657ed66a3133914a4d5b5877\"\u003e\u003ccode\u003ec3c91ab\u003c/code\u003e\u003c/a\u003e fix: Include untracked symlinks in repo-index dirty hash (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13218\"\u003e#13218\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/b521d3262aa743b3e40edf67b19715662f9ec417\"\u003e\u003ccode\u003eb521d32\u003c/code\u003e\u003c/a\u003e perf: Derive dirty hash from repo index (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13213\"\u003e#13213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/28d18711988dac293d10530fffdc42ee460ed8d6\"\u003e\u003ccode\u003e28d1871\u003c/code\u003e\u003c/a\u003e perf: Replace per-package graph traversals in scope filtering (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13212\"\u003e#13212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/148b1ddf840c8a49ca0707c791c1eace644aa563\"\u003e\u003ccode\u003e148b1dd\u003c/code\u003e\u003c/a\u003e perf: Cache env wildcard matches across tasks during hashing (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13210\"\u003e#13210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/61d6013d4647677b6b5d890f6b50c7fea071edbf\"\u003e\u003ccode\u003e61d6013\u003c/code\u003e\u003c/a\u003e feat: Automatically copy TUI selection to clipboard on mouse release (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/13208\"\u003e#13208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/turborepo/compare/v2.9.6...v2.10.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@clerk/tanstack-react-start` from 1.4.10 to 1.4.12\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/clerk/javascript/releases\"\u003e@​clerk/tanstack-react-start's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​clerk/tanstack-react-start\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.4.12\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/f42aad99389fa219588a3f450cdaa8fb6b55acda\"\u003e\u003ccode\u003ef42aad9\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/backend\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.10.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/react\u003c/code\u003e\u003ca href=\"https://github.com/6\"\u003e\u003ccode\u003e@​6\u003c/code\u003e\u003c/a\u003e.11.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​clerk/tanstack-react-start\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.4.11\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/2914c2c5dd8e2ce46be37a6645642f4cb32e7909\"\u003e\u003ccode\u003e2914c2c\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/430614605666c4ad387c3f945700c08df1e774c0\"\u003e\u003ccode\u003e4306146\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/07e1b067dc0c6b52ccc23d0a5f0988c4b731959a\"\u003e\u003ccode\u003e07e1b06\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/533f0b17e48bc326310df80a9d4a53234548b915\"\u003e\u003ccode\u003e533f0b1\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/6a9bb609050ed498c66db9087ed96350f91ed5df\"\u003e\u003ccode\u003e6a9bb60\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/backend\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.9.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/shared\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.23.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/react\u003c/code\u003e\u003ca href=\"https://github.com/6\"\u003e\u003ccode\u003e@​6\u003c/code\u003e\u003c/a\u003e.11.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/clerk/javascript/blob/main/packages/tanstack-react-start/CHANGELOG.md\"\u003e@​clerk/tanstack-react-start's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.12\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/f42aad99389fa219588a3f450cdaa8fb6b55acda\"\u003e\u003ccode\u003ef42aad9\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/backend\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.10.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/react\u003c/code\u003e\u003ca href=\"https://github.com/6\"\u003e\u003ccode\u003e@​6\u003c/code\u003e\u003c/a\u003e.11.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.4.11\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/2914c2c5dd8e2ce46be37a6645642f4cb32e7909\"\u003e\u003ccode\u003e2914c2c\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/430614605666c4ad387c3f945700c08df1e774c0\"\u003e\u003ccode\u003e4306146\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/07e1b067dc0c6b52ccc23d0a5f0988c4b731959a\"\u003e\u003ccode\u003e07e1b06\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/533f0b17e48bc326310df80a9d4a53234548b915\"\u003e\u003ccode\u003e533f0b1\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/6a9bb609050ed498c66db9087ed96350f91ed5df\"\u003e\u003ccode\u003e6a9bb60\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/backend\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.9.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/shared\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.23.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/react\u003c/code\u003e\u003ca href=\"https://github.com/6\"\u003e\u003ccode\u003e@​6\u003c/code\u003e\u003c/a\u003e.11.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/8842511de0874c7b33f794f4367ffa2d4c833c6a\"\u003e\u003ccode\u003e8842511\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/9050\"\u003e#9050\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/59d245686b1a8fede4b3318fde9ba74978cbe1e1\"\u003e\u003ccode\u003e59d2456\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/9035\"\u003e#9035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/773acc2ad2fdaf03e6e713a86faedf247b4480cd\"\u003e\u003ccode\u003e773acc2\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/9013\"\u003e#9013\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/34c653a6f2f7d35e9db81a86f24045da33e4e3a9\"\u003e\u003ccode\u003e34c653a\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8993\"\u003e#8993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/d79852e4cabe9bb0681084a6e9653874cf5aa378\"\u003e\u003ccode\u003ed79852e\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8939\"\u003e#8939\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/e68a59a69becb0c4bd94fb9221bbcd7cd669fdf7\"\u003e\u003ccode\u003ee68a59a\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8938\"\u003e#8938\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/88525a6d3f4c58aaf69351c1c1a00adcb1497357\"\u003e\u003ccode\u003e88525a6\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8914\"\u003e#8914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/a49608d7d74fd681b6979ffe40f53fcf64d05441\"\u003e\u003ccode\u003ea49608d\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8910\"\u003e#8910\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/f4488f5b0cdf311e60026fc0815fd10ca5c047c0\"\u003e\u003ccode\u003ef4488f5\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8876\"\u003e#8876\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/9d7db809a7a7831e234002614c2e612f058b8724\"\u003e\u003ccode\u003e9d7db80\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/tanstack-react-start/issues/8836\"\u003e#8836\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/clerk/javascript/commits/@clerk/tanstack-react-start@1.4.12/packages/tanstack-react-start\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@stripe/react-stripe-js` from 6.6.0 to 6.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/stripe/react-stripe-js/releases\"\u003e@​stripe/react-stripe-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.7.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump stripe.js version to 9.9.0 (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/690\"\u003e#690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump js-yaml from 3.14.2 to 3.15.0 (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/689\"\u003e#689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​babel/core\u003c/code\u003e from 7.14.3 to 7.29.6 (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/688\"\u003e#688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClose project to external pull requests (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/687\"\u003e#687\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/react-stripe-js/commit/ff8771ead5473b2e6630e6e700ba113cc9dff97e\"\u003e\u003ccode\u003eff8771e\u003c/code\u003e\u003c/a\u003e v6.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/react-stripe-js/commit/40e7860f2d630bc83c628470732e20994f2d044e\"\u003e\u003ccode\u003e40e7860\u003c/code\u003e\u003c/a\u003e Bump stripe.js version to 9.9.0 (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/690\"\u003e#690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/react-stripe-js/commit/7f28d870a23ee56a455b06835dab8f016e4a985c\"\u003e\u003ccode\u003e7f28d87\u003c/code\u003e\u003c/a\u003e Bump js-yaml from 3.14.2 to 3.15.0 (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/689\"\u003e#689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/react-stripe-js/commit/dcf1bf20baa2bdbeb00249650033d7b8ca12693e\"\u003e\u003ccode\u003edcf1bf2\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003e@​babel/core\u003c/code\u003e from 7.14.3 to 7.29.6 (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/688\"\u003e#688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/react-stripe-js/commit/b6a55945106a04effcd6b7394087ce68e1e7fdc1\"\u003e\u003ccode\u003eb6a5594\u003c/code\u003e\u003c/a\u003e Close project to external pull requests (\u003ca href=\"https://redirect.github.com/stripe/react-stripe-js/issues/687\"\u003e#687\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/stripe/react-stripe-js/compare/v6.6.0...v6.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~alaycock-stripe\"\u003ealaycock-stripe\u003c/a\u003e, a new releaser for \u003ccode\u003e@​stripe/react-stripe-js\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@stripe/stripe-js` from 9.8.0 to 9.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/stripe/stripe-js/releases\"\u003e@​stripe/stripe-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev9.9.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump js-yaml from 3.14.2 to 3.15.0 in /examples/parcel (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/944\"\u003e#944\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​babel/core\u003c/code\u003e from 7.10.5 to 7.29.6 in /examples/parcel (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/943\"\u003e#943\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMove isProrated to StripeCheckoutRecurring (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eType updates for PE fields option (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/941\"\u003e#941\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClose project to external pull requests (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/942\"\u003e#942\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/stripe-js/commit/856fbe411e76f5be6018caa9c54e7c2ae8de3562\"\u003e\u003ccode\u003e856fbe4\u003c/code\u003e\u003c/a\u003e v9.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/stripe-js/commit/40800593ff3cb48a4c73d58774d0ec35a8409b02\"\u003e\u003ccode\u003e4080059\u003c/code\u003e\u003c/a\u003e Bump js-yaml from 3.14.2 to 3.15.0 in /examples/parcel (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/944\"\u003e#944\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/stripe-js/commit/48250eb528086156053d54b6d3582c129b0f3ae6\"\u003e\u003ccode\u003e48250eb\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003e@​babel/core\u003c/code\u003e from 7.10.5 to 7.29.6 in /examples/parcel (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/943\"\u003e#943\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/stripe-js/commit/7314dd8e450d256847aeb9d456297f4d1ac7576c\"\u003e\u003ccode\u003e7314dd8\u003c/code\u003e\u003c/a\u003e Move isProrated to StripeCheckoutRecurring (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/stripe-js/commit/2240e4ecbb2db2be1191de55193ab7bfcfe79d18\"\u003e\u003ccode\u003e2240e4e\u003c/code\u003e\u003c/a\u003e Type updates for PE fields option (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/941\"\u003e#941\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stripe/stripe-js/commit/67e538a4dc882d3ff35e3d5c6ecff682cb33cfca\"\u003e\u003ccode\u003e67e538a\u003c/code\u003e\u003c/a\u003e Close project to external pull requests (\u003ca href=\"https://redirect.github.com/stripe/stripe-js/issues/942\"\u003e#942\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/stripe/stripe-js/compare/v9.8.0...v9.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@tanstack/react-router` from 1.170.16 to 1.170.17\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/router/releases\"\u003e@​tanstack/react-router's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-router\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.17\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/9809a0619d4ed3fe8c2a393af5b9eca4b6c7695b\"\u003e\u003ccode\u003e9809a06\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.14\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md\"\u003e@​tanstack/react-router's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.170.17\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/9809a0619d4ed3fe8c2a393af5b9eca4b6c7695b\"\u003e\u003ccode\u003e9809a06\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.14\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/ecbbd9a8ec1d2433382cd30d13b0764e504e91cf\"\u003e\u003ccode\u003eecbbd9a\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/react-router/issues/7676\"\u003e#7676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.17/packages/react-router\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@tanstack/react-start` from 1.168.26 to 1.168.27\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/router/releases\"\u003e@​tanstack/react-start's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-start\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.168.27\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/ba52d2b8f9e95d6becd1be14c020b35f3231e02c\"\u003e\u003ccode\u003eba52d2b\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.13\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-router\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.17\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-start-client\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.168.15\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-start-rsc\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.1.26\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-start-server\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.21\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-plugin-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.19\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.16\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/router/blob/main/packages/react-start/CHANGELOG.md\"\u003e@​tanstack/react-start's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.168.27\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/ba52d2b8f9e95d6becd1be14c020b35f3231e02c\"\u003e\u003ccode\u003eba52d2b\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.13\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-router\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.17\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-start-client\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.168.15\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-start-rsc\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.1.26\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-start-server\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.21\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-plugin-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.19\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.16\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/ecbbd9a8ec1d2433382cd30d13b0764e504e91cf\"\u003e\u003ccode\u003eecbbd9a\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/react-start/issues/7676\"\u003e#7676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/TanStack/router/commits/@tanstack/react-start@1.168.27/packages/react-start\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nuqs` from 2.8.9 to 2.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/47ng/nuqs/releases\"\u003enuqs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.9.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1437\"\u003e#1437\u003c/a\u003e - add support for react-router v8, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1451\"\u003e#1451\u003c/a\u003e - add history to adapters \u003c!-- raw HTML omitted --\u003edefaultOptions\u003c!-- raw HTML omitted --\u003e, by \u003ca href=\"https://github.com/manojVivek\"\u003e\u003ccode\u003e@​manojVivek\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBug fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1318\"\u003e#1318\u003c/a\u003e - cross-page transitions in TanStack Router, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1433\"\u003e#1433\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1334\"\u003e#1334\u003c/a\u003e - stale URL value when revisiting a page under Next.js cacheComponents, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1273\"\u003e#1273\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1366\"\u003e#1366\u003c/a\u003e - prevent infinite re-renders with TSR viewport preloading, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1363\"\u003e#1363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1368\"\u003e#1368\u003c/a\u003e - wrong transient state in next/app when updating in useEffect, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1365\"\u003e#1365\u003c/a\u003e, \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1428\"\u003e#1428\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1445\"\u003e#1445\u003c/a\u003e - stale value under Activity, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1444\"\u003e#1444\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1450\"\u003e#1450\u003c/a\u003e - stale search params leaking across React Router navigation, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1358\"\u003e#1358\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1222\"\u003e#1222\u003c/a\u003e - add registry metadata, by \u003ca href=\"https://github.com/taro-yanagiya\"\u003e\u003ccode\u003e@​taro-yanagiya\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1221\"\u003e#1221\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1256\"\u003e#1256\u003c/a\u003e - add changelog page, by \u003ca href=\"https://github.com/rajanarahul93\"\u003e\u003ccode\u003e@​rajanarahul93\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1251\"\u003e#1251\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1351\"\u003e#1351\u003c/a\u003e - strip Fumadocs inline code syntax highlighting hints from LLM markdown, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1353\"\u003e#1353\u003c/a\u003e - update recharts \u0026amp; replace partialLine implementation, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1356\"\u003e#1356\u003c/a\u003e - add Sentry and Syntax.fm as sponsors 💖, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1357\"\u003e#1357\u003c/a\u003e - add 1771 Technologies as a sponsor 💖, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1362\"\u003e#1362\u003c/a\u003e - update images alt attributes, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1364\"\u003e#1364\u003c/a\u003e - extrapolate missing NPM stats data, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1376\"\u003e#1376\u003c/a\u003e - add attribution footer in LLM docs, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1383\"\u003e#1383\u003c/a\u003e - add 1771 Technologies as sidebar sponsor, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1400\"\u003e#1400\u003c/a\u003e - add redirect from /changelog to /docs/changelog, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1406\"\u003e#1406\u003c/a\u003e - add brand assets context menu, by \u003ca href=\"https://github.com/TheOrcDev\"\u003e\u003ccode\u003e@​TheOrcDev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1409\"\u003e#1409\u003c/a\u003e - add TradingGoose as a sponsor 💖, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1414\"\u003e#1414\u003c/a\u003e - add Upstash as a sponsor 💖, by \u003ca href=\"https://github.com/mezotv\"\u003e\u003ccode\u003e@​mezotv\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1415\"\u003e#1415\u003c/a\u003e - add CodeRabbit as a sponsor 💖, by \u003ca href=\"https://github.com/mezotv\"\u003e\u003ccode\u003e@​mezotv\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1416\"\u003e#1416\u003c/a\u003e - use \u003ca href=\"http://www.usenotra.com\"\u003ewww.usenotra.com\u003c/a\u003e for Notra sponsor link, by \u003ca href=\"https://github.com/mezotv\"\u003e\u003ccode\u003e@​mezotv\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1418\"\u003e#1418\u003c/a\u003e - tighter sponsors grid, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1432\"\u003e#1432\u003c/a\u003e - changelog reads DTO from releases, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1438\"\u003e#1438\u003c/a\u003e - add Deno \u0026amp; other package managers to install instructions, by \u003ca href=\"https://github.com/bartlomieju\"\u003e\u003ccode\u003e@​bartlomieju\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1441\"\u003e#1441\u003c/a\u003e - theme-aware shieldcn badges + wordmark header, by \u003ca href=\"https://github.com/jal-co\"\u003e\u003ccode\u003e@​jal-co\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1447\"\u003e#1447\u003c/a\u003e - trim down llm content, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1456\"\u003e#1456\u003c/a\u003e - add Loops as a sponsor 💖, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1457\"\u003e#1457\u003c/a\u003e - strip unreleased headings from the production ToC, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1461\"\u003e#1461\u003c/a\u003e - fix shallow updates \u0026quot;Invalid URL\u0026quot; crash, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1460\"\u003e#1460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e9cb051fc - reorder \u0026amp; tweak readme badges, by François Best\u003c/li\u003e\n\u003cli\u003ee9cd8f7c - fix contributors link in README, by François Best\u003c/li\u003e\n\u003cli\u003ef48b3908 - fix wordmark on npmx.dev \u0026amp; npmjs.com, by François Best\u003c/li\u003e\n\u003cli\u003e6722fe05 - fix react router logos in README, by François Best\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1154\"\u003e#1154\u003c/a\u003e - add Knip for upkeeping, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1176\"\u003e#1176\u003c/a\u003e - split debug logs to reduce bundle size, by \u003ca href=\"https://github.com/franky47\"\u003e\u003ccode\u003e@​franky47\u003c/code\u003e\u003c/a\u003e (closes \u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1149\"\u003e#1149\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/692687ba358e56fb78b887448392a54a22397559\"\u003e\u003ccode\u003e692687b\u003c/code\u003e\u003c/a\u003e fix: stale search params leaking across React Router navigation (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1450\"\u003e#1450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/8b2dee5eab9a53aab772fe4ba9bf9c965b3d2897\"\u003e\u003ccode\u003e8b2dee5\u003c/code\u003e\u003c/a\u003e feat: add history to adapter's \u003ccode\u003edefaultOptions\u003c/code\u003e (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1451\"\u003e#1451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/95dcb8309dd4e78c1e0d4c66bbd91f12754ec3ee\"\u003e\u003ccode\u003e95dcb83\u003c/code\u003e\u003c/a\u003e fix: stale URL value when revisiting a page under Next.js cacheComponents (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/af8ce38a2546ede9f421edaf9d9c94caea86bf1a\"\u003e\u003ccode\u003eaf8ce38\u003c/code\u003e\u003c/a\u003e ref: scope nullable useSearchParams defence to Next.js specific adapter (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1446\"\u003e#1446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/06be94ff1d2fa8dd5474570d30244350026c3f70\"\u003e\u003ccode\u003e06be94f\u003c/code\u003e\u003c/a\u003e ref: split debug logs to reduce bundle size (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1176\"\u003e#1176\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/2d5fa8eed3b0911902e64c5b8034520fcaad2940\"\u003e\u003ccode\u003e2d5fa8e\u003c/code\u003e\u003c/a\u003e fix: stale value under Activity (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1445\"\u003e#1445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/84ee2dfe11be1dbaa76b34519b4e2683da51d00c\"\u003e\u003ccode\u003e84ee2df\u003c/code\u003e\u003c/a\u003e feat: add support for react-router v8 (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1437\"\u003e#1437\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/54cbbd882cd0b125a98692b14ea0e501da243469\"\u003e\u003ccode\u003e54cbbd8\u003c/code\u003e\u003c/a\u003e fix: cross-page transitions in TanStack Router (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1318\"\u003e#1318\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/f57551f31fc6b00350a83eab7f6856850f51f849\"\u003e\u003ccode\u003ef57551f\u003c/code\u003e\u003c/a\u003e chore: pnpm dedupe (\u003ca href=\"https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1436\"\u003e#1436\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/47ng/nuqs/commit/281a0f04fa0e5490ae2eae5b328cc6585613ba25\"\u003e\u003ccode\u003e281a0f0\u003c/code\u003e\u003c/a\u003e chore(ci): keep npm --json stdout clean and harden stage-id parsing\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/47ng/nuqs/commits/v2.9.0/packages/nuqs\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `posthog-js` from 1.373.4 to 1.396.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/PostHog/posthog-js/releases\"\u003eposthog-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eposthog-js@1.396.6\u003c/h2\u003e\n\u003ch2\u003e1.396.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/PostHog/posthog-js/pull/4053\"\u003e#4053\u003c/a\u003e \u003ca href=\"https://github.com/PostHog/posthog-js/commit/45d1b36e517d9eeb3d68b0398d80599b88293386\"\u003e\u003ccode\u003e45d1b36\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/apps/posthog\"\u003e\u003ccode\u003e@​posthog\u003c/code\u003e\u003c/a\u003e! - feat(web): add a graceful \u003ccode\u003eshutdown()\u003c/code\u003e to the browser client for parity with posthog-node, so isomorphic teardown code (e.g. the Nuxt module) that calls \u003ccode\u003eposthog.shutdown()\u003c/code\u003e on the client no longer throws \u003ccode\u003eTypeError: shutdown is not a function\u003c/code\u003e. It best-effort flushes the queued events and always resolves.\n(2026-07-03)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/PostHog/posthog-js/pull/4054\"\u003e#4054\u003c/a\u003e \u003ca href=\"https://github.com/PostHog/posthog-js/commit/f0657eb867604175ed44f9f2f43762c93db7ebf6\"\u003e\u003ccode\u003ef0657eb\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/apps/posthog\"\u003e\u003ccode\u003e@​posthog\u003c/code\u003e\u003c/a\u003e! - fix(web): detect our own feature-flag request timeouts via a \u003ccode\u003etime...\n\n_Description has been truncated_","html_url":"https://github.com/Clawdi-AI/clawdi/pull/307","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Clawdi-AI%2Fclawdi/issues/307","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/307/packages"}},{"old_version":"7.5.16","new_version":"7.5.17","update_type":"patch","path":null,"pr_created_at":"2026-07-04T22:23:55.000Z","version_change":"7.5.16 → 7.5.17","issue":{"uuid":"4810746984","node_id":"PR_kwDOI0mVeM7t8Jn2","number":191,"state":"open","title":"deps: bump the dev-dependencies group across 1 directory with 10 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-04T22:23:55.000Z","updated_at":"2026-07-04T22:24:17.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps: bump","group_name":"dev-dependencies","update_count":10,"packages":[{"name":"@playwright/test","old_version":"1.60.0","new_version":"1.61.1","repository_url":"https://github.com/microsoft/playwright"},{"name":"conventional-changelog-conventionalcommits","old_version":"9.3.1","new_version":"10.2.0","repository_url":"https://github.com/conventional-changelog/conventional-changelog"},{"name":"eslint","old_version":"10.4.1","new_version":"10.6.0","repository_url":"https://github.com/eslint/eslint"},{"name":"eslint-plugin-import-x","old_version":"4.16.2","new_version":"4.17.0","repository_url":"https://github.com/un-ts/eslint-plugin-import-x"},{"name":"globals","old_version":"17.6.0","new_version":"17.7.0","repository_url":"https://github.com/sindresorhus/globals"},{"name":"playwright","old_version":"1.60.0","new_version":"1.61.1","repository_url":"https://github.com/microsoft/playwright"},{"name":"serialize-javascript","old_version":"7.0.5","new_version":"7.0.6","repository_url":"https://github.com/yahoo/serialize-javascript"},{"name":"tar","old_version":"7.5.16","new_version":"7.5.17","repository_url":"https://github.com/isaacs/node-tar"},{"name":"prettier","old_version":"3.8.4","new_version":"3.9.0","repository_url":"https://github.com/prettier/prettier"},{"name":"rollup","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"}],"path":null,"ecosystem":"npm"},"body":"Bumps the dev-dependencies group with 10 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` |\n| [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) | `9.3.1` | `10.2.0` |\n| [eslint](https://github.com/eslint/eslint) | `10.4.1` | `10.6.0` |\n| [eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x) | `4.16.2` | `4.17.0` |\n| [globals](https://github.com/sindresorhus/globals) | `17.6.0` | `17.7.0` |\n| [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` |\n| [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `7.0.5` | `7.0.6` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.16` | `7.5.17` |\n| [prettier](https://github.com/prettier/prettier) | `3.8.4` | `3.9.0` |\n| [rollup](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n\n\nUpdates `@playwright/test` from 1.60.0 to 1.61.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/microsoft/playwright/releases\"\u003e@​playwright/test's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.61.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41365\"\u003e#41365\u003c/a\u003e [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41351\"\u003e#41351\u003c/a\u003e [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41360\"\u003e#41360\u003c/a\u003e [Bug]: Trace viewer: message times in websockets are downscaled by 1000\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41311\"\u003e#41311\u003c/a\u003e [Bug]: [Regression]: Sync loader throws \u0026quot;context.conditions?.includes is not a function\u0026quot; on Node 22.15\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41371\"\u003e#41371\u003c/a\u003e [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.61.0\u003c/h2\u003e\n\u003ch2\u003e🔑 WebAuthn passkeys\u003c/h2\u003e\n\u003cp\u003eNew \u003ca href=\"https://playwright.dev/docs/api/class-credentials\"\u003eCredentials\u003c/a\u003e virtual authenticator, available via \u003ca href=\"https://playwright.dev/docs/api/class-browsercontext#browser-context-credentials\"\u003ebrowserContext.credentials\u003c/a\u003e, lets tests register passkeys and answer \u003ccode\u003enavigator.credentials.create()\u003c/code\u003e / \u003ccode\u003enavigator.credentials.get()\u003c/code\u003e ceremonies in the page — no real hardware key required, works in all browsers:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003econst context = await browser.newContext();\r\n\u003cp\u003e// Seed a passkey your backend provisioned for a test user.\nawait context.credentials.create('example.com', {\nid: credentialId,\nuserHandle,\nprivateKey,\npublicKey,\n});\nawait context.credentials.install();\u003c/p\u003e\n\u003cp\u003econst page = await context.newPage();\nawait page.goto('\u003ca href=\"https://example.com/login\"\u003ehttps://example.com/login\u003c/a\u003e');\n// The page's navigator.credentials.get() is answered with the seeded passkey.\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eYou can also let the app register a passkey once in a setup test, read it back with \u003ca href=\"https://playwright.dev/docs/api/class-credentials#credentials-get\"\u003ecredentials.get()\u003c/a\u003e, and seed it into later tests — see \u003ca href=\"https://playwright.dev/docs/api/class-credentials\"\u003eCredentials\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003e🗃️ Web Storage\u003c/h2\u003e\n\u003cp\u003eNew \u003ca href=\"https://playwright.dev/docs/api/class-webstorage\"\u003eWebStorage\u003c/a\u003e API, available via \u003ca href=\"https://playwright.dev/docs/api/class-page#page-local-storage\"\u003epage.localStorage\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-page#page-session-storage\"\u003epage.sessionStorage\u003c/a\u003e, reads and writes the page's storage for the current origin:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eawait page.localStorage.setItem('token', 'abc');\r\nconst token = await page.localStorage.getItem('token');\r\nconst items = await page.sessionStorage.items();\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eNew APIs\u003c/h2\u003e\n\u003ch3\u003eNetwork\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://playwright.dev/docs/api/class-apiresponse#api-response-security-details\"\u003eapiResponse.securityDetails()\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-apiresponse#api-response-server-addr\"\u003eapiResponse.serverAddr()\u003c/a\u003e mirror the browser-side \u003ca href=\"https://playwright.dev/docs/api/class-response#response-security-details\"\u003eresponse.securityDetails()\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-response#response-server-addr\"\u003eresponse.serverAddr()\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBrowser and Screencast\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/39e3553a4f283a41134d75d7e404484bd9e6865a\"\u003e\u003ccode\u003e39e3553\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41399\"\u003e#41399\u003c/a\u003e): fix(test): load require-reached files as commonjs in syn...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/4328122a0fa91df1be287f12d26f272f598ccca7\"\u003e\u003ccode\u003e4328122\u003c/code\u003e\u003c/a\u003e chore: mark v1.61.1 (\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41404\"\u003e#41404\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/2c29a94ed59a2dbb2cb2553ee7d1ba429f027826\"\u003e\u003ccode\u003e2c29a94\u003c/code\u003e\u003c/a\u003e fix(tracing): stop recording websocket frames outside of chunks (\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41398\"\u003e#41398\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/4324b1904199c58ae56d864390f5210df18e33f6\"\u003e\u003ccode\u003e4324b19\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41367\"\u003e#41367\u003c/a\u003e): fix(test): keep builtin expect matchers on base extend\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/041e7e30002e7c384e1918c29720b34c435145f4\"\u003e\u003ccode\u003e041e7e3\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41364\"\u003e#41364\u003c/a\u003e): fix(har): \u003ccode\u003eWebSocket\u003c/code\u003e message timestamps should be in mi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/b8a0fc33932399fc5cfcd211165cf16f8ca01d71\"\u003e\u003ccode\u003eb8a0fc3\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41309\"\u003e#41309\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43149\"\u003e#43149\u003c/a\u003e): Revert \u0026quot;fix(firefox): treat `navigationCommitted...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/b5a31759e6611397bf3afaaa6049a420a5f082bd\"\u003e\u003ccode\u003eb5a3175\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41319\"\u003e#41319\u003c/a\u003e): fix(loader): support other node versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/d4724a91b280ae1ee9a87c426e9d6a953c59756e\"\u003e\u003ccode\u003ed4724a9\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41290\"\u003e#41290\u003c/a\u003e): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/1cc5a90cfa3eaa430b1a991963100f95126caa47\"\u003e\u003ccode\u003e1cc5a90\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41295\"\u003e#41295\u003c/a\u003e): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/a6772bdede34028cbbd417a3b3d778801899e870\"\u003e\u003ccode\u003ea6772bd\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41280\"\u003e#41280\u003c/a\u003e): Revert \u0026quot;fix(trace-viewer): add keyboard navigation to `N...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `conventional-changelog-conventionalcommits` from 9.3.1 to 10.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/releases\"\u003econventional-changelog-conventionalcommits's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003econventional-changelog-conventionalcommits: v10.2.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport changelog preamble partial (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1491\"\u003e#1491\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/e93dbe4a16bb621c6ae9d1082dcd09d34c6f8136\"\u003ee93dbe4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003econventional-changelog-conventionalcommits: v10.1.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport changelog preamble (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1489\"\u003e#1489\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/7d9794ff7c4ca5e9bd916c400b7fb1e426319379\"\u003e7d9794f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003econventional-changelog-conventionalcommits: v10.0.0\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ethe commit type \u003ccode\u003eeffect\u003c/code\u003e property replaces the \u003ccode\u003ehidden\u003c/code\u003e commit type property and the \u003ccode\u003ebumpStrict\u003c/code\u003e preset option for controlling changelog visibility and version bumps.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits/issues/1476\"\u003e#1476\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eHandlebars template strings and partial files were replaced with render functions.\u003c/li\u003e\n\u003cli\u003epackages now require Node.js 22 or newer.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereplace handlebars templates with render functions (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1477\"\u003e#1477\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/55e6716e8f40c2a705bcb0cd343e1dcacd2f9459\"\u003e55e6716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erequire node 22 (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/de5e1368096ea0805e51e20df587ce528ca0575b\"\u003ede5e136\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport commit type effects (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1484\"\u003e#1484\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/78761ae19b4711260d015f599316f2558804cbbc\"\u003e78761ae\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eencode compare URL tags (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1483\"\u003e#1483\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/96bf2355e9f4316eaf54823d7359a6b4bd42da4a\"\u003e96bf235\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erender non-closing references separately (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1482\"\u003e#1482\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/adb2c697abe594d0b4cb6d858fcc3d2b46f21c30\"\u003eadb2c69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esort notes without compare-func (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1487\"\u003e#1487\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/dc78285784fd119994c2438bd0f4cdbbb827565a\"\u003edc78285\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md\"\u003econventional-changelog-conventionalcommits's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/compare/conventional-changelog-conventionalcommits-v10.1.0...conventional-changelog-conventionalcommits-v10.2.0\"\u003e10.2.0\u003c/a\u003e (2026-06-27)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport changelog preamble partial (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1491\"\u003e#1491\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/e93dbe4a16bb621c6ae9d1082dcd09d34c6f8136\"\u003ee93dbe4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/compare/conventional-changelog-conventionalcommits-v10.0.0...conventional-changelog-conventionalcommits-v10.1.0\"\u003e10.1.0\u003c/a\u003e (2026-06-27)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport changelog preamble (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1489\"\u003e#1489\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/7d9794ff7c4ca5e9bd916c400b7fb1e426319379\"\u003e7d9794f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/compare/conventional-changelog-conventionalcommits-v9.3.1...conventional-changelog-conventionalcommits-v10.0.0\"\u003e10.0.0\u003c/a\u003e (2026-06-26)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ethe commit type \u003ccode\u003eeffect\u003c/code\u003e property replaces the \u003ccode\u003ehidden\u003c/code\u003e commit type property and the \u003ccode\u003ebumpStrict\u003c/code\u003e preset option for controlling changelog visibility and version bumps.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits/issues/1476\"\u003e#1476\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eHandlebars template strings and partial files were replaced with render functions.\u003c/li\u003e\n\u003cli\u003epackages now require Node.js 22 or newer.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereplace handlebars templates with render functions (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1477\"\u003e#1477\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/55e6716e8f40c2a705bcb0cd343e1dcacd2f9459\"\u003e55e6716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erequire node 22 (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/de5e1368096ea0805e51e20df587ce528ca0575b\"\u003ede5e136\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport commit type effects (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1484\"\u003e#1484\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/78761ae19b4711260d015f599316f2558804cbbc\"\u003e78761ae\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eencode compare URL tags (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1483\"\u003e#1483\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/96bf2355e9f4316eaf54823d7359a6b4bd42da4a\"\u003e96bf235\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erender non-closing references separately (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1482\"\u003e#1482\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/adb2c697abe594d0b4cb6d858fcc3d2b46f21c30\"\u003eadb2c69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esort notes without compare-func (\u003ca href=\"https://redirect.github.com/conventional-changelog/conventional-changelog/issues/1487\"\u003e#1487\u003c/a\u003e) (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/dc78285784fd119994c2438bd0f4cdbbb827565a\"\u003edc78285\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/69b0d36212b7bb4e29cc26d3fcb9d691c5cb8719\"\u003e\u003ccode\u003e69b0d36\u003c/code\u003e\u003c/a\u003e chore(release): monorepo release (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits/issues/1492\"\u003e#1492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/e93dbe4a16bb621c6ae9d1082dcd09d34c6f8136\"\u003e\u003ccode\u003ee93dbe4\u003c/code\u003e\u003c/a\u003e feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/f72f5e2f3f795079f65b7681ddccff3d9532c6d1\"\u003e\u003ccode\u003ef72f5e2\u003c/code\u003e\u003c/a\u003e chore(release): monorepo release (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits/issues/1490\"\u003e#1490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/7d9794ff7c4ca5e9bd916c400b7fb1e426319379\"\u003e\u003ccode\u003e7d9794f\u003c/code\u003e\u003c/a\u003e feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/ed9862d289b351f1bb67fddb2bc1495b732a65bc\"\u003e\u003ccode\u003eed9862d\u003c/code\u003e\u003c/a\u003e chore(release): monorepo release (\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits/issues/1474\"\u003e#1474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/dc78285784fd119994c2438bd0f4cdbbb827565a\"\u003e\u003ccode\u003edc78285\u003c/code\u003e\u003c/a\u003e fix(conventional-changelog-angular,conventional-changelog-conventionalcommits...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/f9195d5d27642599a7737d46f98fe5f8be57dc48\"\u003e\u003ccode\u003ef9195d5\u003c/code\u003e\u003c/a\u003e fix(conventional-commits-parser,template): keep footers out of breaking notes...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/78761ae19b4711260d015f599316f2558804cbbc\"\u003e\u003ccode\u003e78761ae\u003c/code\u003e\u003c/a\u003e feat(conventional-changelog-conventionalcommits)!: support commit type effect...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/96bf2355e9f4316eaf54823d7359a6b4bd42da4a\"\u003e\u003ccode\u003e96bf235\u003c/code\u003e\u003c/a\u003e fix(template,conventional-changelog-angular,conventional-changelog-convention...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commit/adb2c697abe594d0b4cb6d858fcc3d2b46f21c30\"\u003e\u003ccode\u003eadb2c69\u003c/code\u003e\u003c/a\u003e fix(conventional-changelog-conventionalcommits): render non-closing reference...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v10.2.0/packages/conventional-changelog-conventionalcommits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `eslint` from 10.4.1 to 10.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/eslint/eslint/releases\"\u003eeslint's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.6.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/b1f910628e29a018c860e2352bc14cd07c853d67\"\u003e\u003ccode\u003eb1f9106\u003c/code\u003e\u003c/a\u003e feat: detect Symbol() and BigInt() in no-constant-binary-expression (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20981\"\u003e#20981\u003c/a\u003e) (Taejin Kim)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/f291007cb73f55c09cf3c2aa3a405df379a5c594\"\u003e\u003ccode\u003ef291007\u003c/code\u003e\u003c/a\u003e feat: add checkRelationalComparisons to no-constant-binary-expression (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20948\"\u003e#20948\u003c/a\u003e) (sethamus)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/6b05784eb271ac98ca3e1e2a48c4b14bb588c786\"\u003e\u003ccode\u003e6b05784\u003c/code\u003e\u003c/a\u003e fix: prefer-exponentiation-operator invalid autofix at statement start (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20997\"\u003e#20997\u003c/a\u003e) (Milos Djermanovic)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/bb9eb2ab28daf6e6dafc62daa6b5daf9c2b7046c\"\u003e\u003ccode\u003ebb9eb2a\u003c/code\u003e\u003c/a\u003e fix: account for shadowed \u003ccode\u003eBoolean\u003c/code\u003e in \u003ccode\u003eno-extra-boolean-cast\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21013\"\u003e#21013\u003c/a\u003e) (den$)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/8fd8741009a3ed7845c89bfe2fb3eaa2119b2d15\"\u003e\u003ccode\u003e8fd8741\u003c/code\u003e\u003c/a\u003e fix: don't report shadowed undefined in \u003ccode\u003eradix\u003c/code\u003e rule (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21011\"\u003e#21011\u003c/a\u003e) (Pixel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/5784980ce8ba99556db98907895d82ef49cd0a27\"\u003e\u003ccode\u003e5784980\u003c/code\u003e\u003c/a\u003e fix: don't report shadowed undefined in no-throw-literal (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21010\"\u003e#21010\u003c/a\u003e) (Pixel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9cd1e6de5bad487a9c713bdc9fda5af7ea0babcd\"\u003e\u003ccode\u003e9cd1e6d\u003c/code\u003e\u003c/a\u003e fix: suppress invalid class suggestion in no-promise-executor-return (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21008\"\u003e#21008\u003c/a\u003e) (Pixel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/d4eb2dc95f17cdf491edca91b7d9caf05b86253f\"\u003e\u003ccode\u003ed4eb2dc\u003c/code\u003e\u003c/a\u003e fix: don't report shadowed undefined in prefer-promise-reject-errors (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21006\"\u003e#21006\u003c/a\u003e) (Pixel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/23604646db6d987d01edb8aa5f4d2a88bd4c01d0\"\u003e\u003ccode\u003e2360464\u003c/code\u003e\u003c/a\u003e fix: prefer-promise-reject-errors false positives for shadowed Promise (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21003\"\u003e#21003\u003c/a\u003e) (den$)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/63d52d28de705ec46f328d18166e8b7170b3f024\"\u003e\u003ccode\u003e63d52d2\u003c/code\u003e\u003c/a\u003e fix: restore max-classes-per-file report range (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21002\"\u003e#21002\u003c/a\u003e) (Pixel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/7feaff0cfb8d6a6260d3ea56887c9161daf8c700\"\u003e\u003ccode\u003e7feaff0\u003c/code\u003e\u003c/a\u003e fix: callback detection logic for IIFEs in max-nested-callbacks (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20979\"\u003e#20979\u003c/a\u003e) (fnx)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/399a2ec81bcbcff2c67920db51d9276b20ac1025\"\u003e\u003ccode\u003e399a2ec\u003c/code\u003e\u003c/a\u003e fix: don't report inner non-callbacks in \u003ccode\u003emax-nested-callbacks\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20995\"\u003e#20995\u003c/a\u003e) (Milos Djermanovic)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/a83683db1c27193c2ad333fc5c0aedcc8a293db7\"\u003e\u003ccode\u003ea83683d\u003c/code\u003e\u003c/a\u003e docs: Update README (GitHub Actions Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/f5449f96c2caabbc1a28b15211873e2f672f5ae5\"\u003e\u003ccode\u003ef5449f9\u003c/code\u003e\u003c/a\u003e docs: document userland patterns for global assertionOptions in RuleT… (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20986\"\u003e#20986\u003c/a\u003e) (playgirl)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/bea49f7b2899ebf708482f977ef2ada41fd2c3f0\"\u003e\u003ccode\u003ebea49f7\u003c/code\u003e\u003c/a\u003e docs: Update README (GitHub Actions Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/e5f70f9b06683a887dd0d6dc1cc91a9c9bea816d\"\u003e\u003ccode\u003ee5f70f9\u003c/code\u003e\u003c/a\u003e docs: update code-path diagrams (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20984\"\u003e#20984\u003c/a\u003e) (Tanuj Kanti)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/8890c2d40880b195b9167735c24ec0cc5de5eb96\"\u003e\u003ccode\u003e8890c2d\u003c/code\u003e\u003c/a\u003e docs: add TypeScript config guidance for MCP server (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20796\"\u003e#20796\u003c/a\u003e) (Pierluigi Lenoci)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/3eb3d9b1b5edecc3fcae0519ddba0e3745e889e3\"\u003e\u003ccode\u003e3eb3d9b\u003c/code\u003e\u003c/a\u003e docs: Update README (GitHub Actions Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/c5bb59cf613dabafd550227b6adaa9327b1095f5\"\u003e\u003ccode\u003ec5bb59c\u003c/code\u003e\u003c/a\u003e docs: Update README (GitHub Actions Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/eb3c97c776731ce11b28cc99f0271f41b9994701\"\u003e\u003ccode\u003eeb3c97c\u003c/code\u003e\u003c/a\u003e docs: fix grammar in prefer-const rule description (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20983\"\u003e#20983\u003c/a\u003e) (lumir)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/6a42034a57a816b0a313720b3b9df09455bd0b5e\"\u003e\u003ccode\u003e6a42034\u003c/code\u003e\u003c/a\u003e ci: run ecosystem tests on main branch (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20891\"\u003e#20891\u003c/a\u003e) (sethamus)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/3dbacdbb31673c87ca86ecafbb18712d8d1daed8\"\u003e\u003ccode\u003e3dbacdb\u003c/code\u003e\u003c/a\u003e ci: bump actions/checkout from 6 to 7 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21014\"\u003e#21014\u003c/a\u003e) (dependabot[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/c3abfca7c96cc9a244f54eeb66e9971c59280354\"\u003e\u003ccode\u003ec3abfca\u003c/code\u003e\u003c/a\u003e chore: correct JSDoc param types in html formatter (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21018\"\u003e#21018\u003c/a\u003e) (Minseon Kim)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/a8323209cdbefefd540c5beeaa51418d8ec40f9e\"\u003e\u003ccode\u003ea832320\u003c/code\u003e\u003c/a\u003e ci: split ecosystem tests into separate jobs (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21001\"\u003e#21001\u003c/a\u003e) (xbinaryx)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/27166e78511db526688afc34bbfab1a458405f3f\"\u003e\u003ccode\u003e27166e7\u003c/code\u003e\u003c/a\u003e chore: update ecosystem plugins (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21005\"\u003e#21005\u003c/a\u003e) (ESLint Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/865d76e40107d4fa10a17fc3203b303eb8a88dc3\"\u003e\u003ccode\u003e865d76e\u003c/code\u003e\u003c/a\u003e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20989\"\u003e#20989\u003c/a\u003e) (dependabot[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/27a88c9fa7c040f4cd39e5a5e6e2d02441c408ef\"\u003e\u003ccode\u003e27a88c9\u003c/code\u003e\u003c/a\u003e chore: update dependency markdown-it to v14 in root (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20994\"\u003e#20994\u003c/a\u003e) (Milos Djermanovic)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/970cea62b295d931a4109abedeb21ba192d3f2be\"\u003e\u003ccode\u003e970cea6\u003c/code\u003e\u003c/a\u003e chore: update dependency markdown-it to v14 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20993\"\u003e#20993\u003c/a\u003e) (Milos Djermanovic)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/b482120bacb40204fbf16f3b20be7207057157a5\"\u003e\u003ccode\u003eb482120\u003c/code\u003e\u003c/a\u003e chore: update dependency prettier to v3.8.4 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20990\"\u003e#20990\u003c/a\u003e) (renovate[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/6993fb3173da84999fc208507b93f523aa657448\"\u003e\u003ccode\u003e6993fb3\u003c/code\u003e\u003c/a\u003e chore: update ecosystem plugins (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20985\"\u003e#20985\u003c/a\u003e) (ESLint Bot)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.5.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/5ca8c5278edea1fd84d3ba83d8ea3f52fb3831ad\"\u003e\u003ccode\u003e5ca8c52\u003c/code\u003e\u003c/a\u003e feat: correct stack tracking in max-nested-callbacks (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20973\"\u003e#20973\u003c/a\u003e) (Pixel998)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/b5657837604fa5e8cf1278074782025cadd34b6c\"\u003e\u003ccode\u003eb565783\u003c/code\u003e\u003c/a\u003e feat: report no-with violations at the with keyword (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20971\"\u003e#20971\u003c/a\u003e) (Pixel998)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/2ce032fbc72a1a80c024c084a4f382fb6dece684\"\u003e\u003ccode\u003e2ce032f\u003c/code\u003e\u003c/a\u003e feat: report max-lines-per-function violations at function head (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20966\"\u003e#20966\u003c/a\u003e) (Pixel998)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/732cb3e09d5b8b809b5f461d118a5d9fdcd6427f\"\u003e\u003ccode\u003e732cb3e\u003c/code\u003e\u003c/a\u003e feat: report max-nested-callbacks violations at function head (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20967\"\u003e#20967\u003c/a\u003e) (Pixel998)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/f9c138a0ba7d8e37aed39aef4a3ff1cae8c669f7\"\u003e\u003ccode\u003ef9c138a\u003c/code\u003e\u003c/a\u003e feat: report max-depth violations on keywords (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20943\"\u003e#20943\u003c/a\u003e) (Pixel998)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/bdb496cc0d54b6d0a023aef9abd5f040ccff2101\"\u003e\u003ccode\u003ebdb496c\u003c/code\u003e\u003c/a\u003e feat: correct max-depth handling for else-if chains (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20944\"\u003e#20944\u003c/a\u003e) (Pixel998)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/c29687354a7f96093f57f7d73eecb866ad5e2953\"\u003e\u003ccode\u003ec296873\u003c/code\u003e\u003c/a\u003e feat: update error loc in \u003ccode\u003emax-statements\u003c/code\u003e to function header (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20907\"\u003e#20907\u003c/a\u003e) (Taejin Kim)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/5d12a0419636abb71628b7e45063a943c454a7c7\"\u003e\u003ccode\u003e5d12a04\u003c/code\u003e\u003c/a\u003e 10.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/f7ca54b138c4ba7b8e65f83b7fe58cc8de50af8b\"\u003e\u003ccode\u003ef7ca54b\u003c/code\u003e\u003c/a\u003e Build: changelog update for 10.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/6a42034a57a816b0a313720b3b9df09455bd0b5e\"\u003e\u003ccode\u003e6a42034\u003c/code\u003e\u003c/a\u003e ci: run ecosystem tests on main branch (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20891\"\u003e#20891\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/b1f910628e29a018c860e2352bc14cd07c853d67\"\u003e\u003ccode\u003eb1f9106\u003c/code\u003e\u003c/a\u003e feat: detect Symbol() and BigInt() in no-constant-binary-expression (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20981\"\u003e#20981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/3dbacdbb31673c87ca86ecafbb18712d8d1daed8\"\u003e\u003ccode\u003e3dbacdb\u003c/code\u003e\u003c/a\u003e ci: bump actions/checkout from 6 to 7 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21014\"\u003e#21014\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/c3abfca7c96cc9a244f54eeb66e9971c59280354\"\u003e\u003ccode\u003ec3abfca\u003c/code\u003e\u003c/a\u003e chore: correct JSDoc param types in html formatter (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21018\"\u003e#21018\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/a83683db1c27193c2ad333fc5c0aedcc8a293db7\"\u003e\u003ccode\u003ea83683d\u003c/code\u003e\u003c/a\u003e docs: Update README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/a8323209cdbefefd540c5beeaa51418d8ec40f9e\"\u003e\u003ccode\u003ea832320\u003c/code\u003e\u003c/a\u003e ci: split ecosystem tests into separate jobs (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21001\"\u003e#21001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/6b05784eb271ac98ca3e1e2a48c4b14bb588c786\"\u003e\u003ccode\u003e6b05784\u003c/code\u003e\u003c/a\u003e fix: prefer-exponentiation-operator invalid autofix at statement start (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20997\"\u003e#20997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/bb9eb2ab28daf6e6dafc62daa6b5daf9c2b7046c\"\u003e\u003ccode\u003ebb9eb2a\u003c/code\u003e\u003c/a\u003e fix: account for shadowed \u003ccode\u003eBoolean\u003c/code\u003e in \u003ccode\u003eno-extra-boolean-cast\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21013\"\u003e#21013\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/eslint/eslint/compare/v10.4.1...v10.6.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `eslint-plugin-import-x` from 4.16.2 to 4.17.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/releases\"\u003eeslint-plugin-import-x's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.17.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/474\"\u003e#474\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/4b2c0c50577ba5b38823fb6d2b1f7e0e2cb9b760\"\u003e\u003ccode\u003e4b2c0c5\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/regseb\"\u003e\u003ccode\u003e@​regseb\u003c/code\u003e\u003c/a\u003e! - Support \u003ccode\u003eRegExp\u003c/code\u003e in the \u003ccode\u003eimport-x/ignore\u003c/code\u003e setting and the \u003ccode\u003eignore\u003c/code\u003e option of the \u003ccode\u003eno-unresolved\u003c/code\u003e rule.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/494\"\u003e#494\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/1c84235057e693f107352b2874c5e9bc6d974e75\"\u003e\u003ccode\u003e1c84235\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/morgan-coded\"\u003e\u003ccode\u003e@​morgan-coded\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ccode\u003eno-unresolved\u003c/code\u003e crashing when case-sensitive path checks encounter \u003ccode\u003eEACCES\u003c/code\u003e or \u003ccode\u003eEPERM\u003c/code\u003e on an ancestor directory.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/481\"\u003e#481\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/3e131214f1a027858ce87d146576b243f6acad0c\"\u003e\u003ccode\u003e3e13121\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/B4nan\"\u003e\u003ccode\u003e@​B4nan\u003c/code\u003e\u003c/a\u003e! - fix: memoize legacyNodeResolve resolver to avoid native memory leak\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/484\"\u003e#484\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/9a070094ac6e3c5891762acebe882281b022501d\"\u003e\u003ccode\u003e9a07009\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/sairus2k\"\u003e\u003ccode\u003e@​sairus2k\u003c/code\u003e\u003c/a\u003e! - Make the \u003ccode\u003eextensions\u003c/code\u003e rule check Node.js subpath imports (specifiers starting with \u003ccode\u003e#\u003c/code\u003e, e.g. \u003ccode\u003e#utils/helper\u003c/code\u003e). Previously \u003ccode\u003eparsePath\u003c/code\u003e treated a leading \u003ccode\u003e#\u003c/code\u003e as a URL hash fragment, so the rule skipped extension validation for these imports.\u003c/p\u003e\n\u003cp\u003eNote: single-segment subpath imports without a slash (e.g. \u003ccode\u003e#dep\u003c/code\u003e) are still skipped by the existing external-root-module classification; fixing that is deferred to avoid expanding scope.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/468\"\u003e#468\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/240ed58cb3d699c5107af065d8482a5c902a2f95\"\u003e\u003ccode\u003e240ed58\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/silverwind\"\u003e\u003ccode\u003e@​silverwind\u003c/code\u003e\u003c/a\u003e! - Make \u003ccode\u003eextensions\u003c/code\u003e handle \u003ccode\u003e.d.ts\u003c/code\u003e correctly\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/479\"\u003e#479\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/e3cc7e458fe8440fdac291beba9f09ab216ec682\"\u003e\u003ccode\u003ee3cc7e4\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/mrginglymus\"\u003e\u003ccode\u003e@​mrginglymus\u003c/code\u003e\u003c/a\u003e! - fix: strip querystrings and hash fragments when checking for file existence\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/476\"\u003e#476\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/fce29b1bb7c1f57f18beb5f0ac5636b14ab848dc\"\u003e\u003ccode\u003efce29b1\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/nbouvrette\"\u003e\u003ccode\u003e@​nbouvrette\u003c/code\u003e\u003c/a\u003e! - fix(deps): replace \u003ccode\u003e@​package-json/types\u003c/code\u003e with an inline minimal type\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/blob/master/CHANGELOG.md\"\u003eeslint-plugin-import-x's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.17.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/474\"\u003e#474\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/4b2c0c50577ba5b38823fb6d2b1f7e0e2cb9b760\"\u003e\u003ccode\u003e4b2c0c5\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/regseb\"\u003e\u003ccode\u003e@​regseb\u003c/code\u003e\u003c/a\u003e! - Support \u003ccode\u003eRegExp\u003c/code\u003e in the \u003ccode\u003eimport-x/ignore\u003c/code\u003e setting and the \u003ccode\u003eignore\u003c/code\u003e option of the \u003ccode\u003eno-unresolved\u003c/code\u003e rule.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/494\"\u003e#494\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/1c84235057e693f107352b2874c5e9bc6d974e75\"\u003e\u003ccode\u003e1c84235\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/morgan-coded\"\u003e\u003ccode\u003e@​morgan-coded\u003c/code\u003e\u003c/a\u003e! - Fixed \u003ccode\u003eno-unresolved\u003c/code\u003e crashing when case-sensitive path checks encounter \u003ccode\u003eEACCES\u003c/code\u003e or \u003ccode\u003eEPERM\u003c/code\u003e on an ancestor directory.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/481\"\u003e#481\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/3e131214f1a027858ce87d146576b243f6acad0c\"\u003e\u003ccode\u003e3e13121\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/B4nan\"\u003e\u003ccode\u003e@​B4nan\u003c/code\u003e\u003c/a\u003e! - fix: memoize legacyNodeResolve resolver to avoid native memory leak\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/484\"\u003e#484\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/9a070094ac6e3c5891762acebe882281b022501d\"\u003e\u003ccode\u003e9a07009\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/sairus2k\"\u003e\u003ccode\u003e@​sairus2k\u003c/code\u003e\u003c/a\u003e! - Make the \u003ccode\u003eextensions\u003c/code\u003e rule check Node.js subpath imports (specifiers starting with \u003ccode\u003e#\u003c/code\u003e, e.g. \u003ccode\u003e#utils/helper\u003c/code\u003e). Previously \u003ccode\u003eparsePath\u003c/code\u003e treated a leading \u003ccode\u003e#\u003c/code\u003e as a URL hash fragment, so the rule skipped extension validation for these imports.\u003c/p\u003e\n\u003cp\u003eNote: single-segment subpath imports without a slash (e.g. \u003ccode\u003e#dep\u003c/code\u003e) are still skipped by the existing external-root-module classification; fixing that is deferred to avoid expanding scope.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/468\"\u003e#468\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/240ed58cb3d699c5107af065d8482a5c902a2f95\"\u003e\u003ccode\u003e240ed58\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/silverwind\"\u003e\u003ccode\u003e@​silverwind\u003c/code\u003e\u003c/a\u003e! - Make \u003ccode\u003eextensions\u003c/code\u003e handle \u003ccode\u003e.d.ts\u003c/code\u003e correctly\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/479\"\u003e#479\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/e3cc7e458fe8440fdac291beba9f09ab216ec682\"\u003e\u003ccode\u003ee3cc7e4\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/mrginglymus\"\u003e\u003ccode\u003e@​mrginglymus\u003c/code\u003e\u003c/a\u003e! - fix: strip querystrings and hash fragments when checking for file existence\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/pull/476\"\u003e#476\u003c/a\u003e \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/fce29b1bb7c1f57f18beb5f0ac5636b14ab848dc\"\u003e\u003ccode\u003efce29b1\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/nbouvrette\"\u003e\u003ccode\u003e@​nbouvrette\u003c/code\u003e\u003c/a\u003e! - fix(deps): replace \u003ccode\u003e@​package-json/types\u003c/code\u003e with an inline minimal type\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/7578513a194ce4c05cce6ac520efa00b7adc249f\"\u003e\u003ccode\u003e7578513\u003c/code\u003e\u003c/a\u003e chore: release eslint-plugin-import-x (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/472\"\u003e#472\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/e3cc7e458fe8440fdac291beba9f09ab216ec682\"\u003e\u003ccode\u003ee3cc7e4\u003c/code\u003e\u003c/a\u003e fix: strip querystrings and hash fragments when checking for file existence (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/9a070094ac6e3c5891762acebe882281b022501d\"\u003e\u003ccode\u003e9a07009\u003c/code\u003e\u003c/a\u003e fix: make \u003ccode\u003eextensions\u003c/code\u003e rule check Node.js subpath imports (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/484\"\u003e#484\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/3e131214f1a027858ce87d146576b243f6acad0c\"\u003e\u003ccode\u003e3e13121\u003c/code\u003e\u003c/a\u003e fix: memoize legacyNodeResolve resolver to avoid native memory leak (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/481\"\u003e#481\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/fce29b1bb7c1f57f18beb5f0ac5636b14ab848dc\"\u003e\u003ccode\u003efce29b1\u003c/code\u003e\u003c/a\u003e fix(deps): replace \u003ccode\u003e@​package-json/types\u003c/code\u003e with an inline minimal type (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/476\"\u003e#476\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/1c84235057e693f107352b2874c5e9bc6d974e75\"\u003e\u003ccode\u003e1c84235\u003c/code\u003e\u003c/a\u003e fix: handle access errors during case checks (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/494\"\u003e#494\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/96222bf429d083213eededbfea9a1eaade1c4ba5\"\u003e\u003ccode\u003e96222bf\u003c/code\u003e\u003c/a\u003e chore: drop unused \u003ccode\u003etmp\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/487\"\u003e#487\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/4b2c0c50577ba5b38823fb6d2b1f7e0e2cb9b760\"\u003e\u003ccode\u003e4b2c0c5\u003c/code\u003e\u003c/a\u003e feat: support RegExp in ignore (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/474\"\u003e#474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/commit/240ed58cb3d699c5107af065d8482a5c902a2f95\"\u003e\u003ccode\u003e240ed58\u003c/code\u003e\u003c/a\u003e fix: make \u003ccode\u003eextensions\u003c/code\u003e rule handle \u003ccode\u003e.d.ts\u003c/code\u003e correctly (\u003ca href=\"https://redirect.github.com/un-ts/eslint-plugin-import-x/issues/468\"\u003e#468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/un-ts/eslint-plugin-import-x/compare/v4.16.2...v4.17.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `globals` from 17.6.0 to 17.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sindresorhus/globals/releases\"\u003eglobals's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev17.7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate globals (2026-06-22) (\u003ca href=\"https://redirect.github.com/sindresorhus/globals/issues/345\"\u003e#345\u003c/a\u003e)  33b75f9\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/globals/compare/v17.6.0...v17.7.0\"\u003ehttps://github.com/sindresorhus/globals/compare/v17.6.0...v17.7.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/globals/commit/a19670cc86c1218e915657c55ea02ba3e7623834\"\u003e\u003ccode\u003ea19670c\u003c/code\u003e\u003c/a\u003e 17.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/globals/commit/9611620bad0ea45531ae0261b986ce694374e42c\"\u003e\u003ccode\u003e9611620\u003c/code\u003e\u003c/a\u003e Update actions (\u003ca href=\"https://redirect.github.com/sindresorhus/globals/issues/346\"\u003e#346\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/globals/commit/33b75f9ddeb6f9ddd81251b043667eb8104a8d15\"\u003e\u003ccode\u003e33b75f9\u003c/code\u003e\u003c/a\u003e Update globals (2026-06-22) (\u003ca href=\"https://redirect.github.com/sindresorhus/globals/issues/345\"\u003e#345\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/globals/commit/887dd529bde24486b7f9e31d1b2c515df2b7cf5c\"\u003e\u003ccode\u003e887dd52\u003c/code\u003e\u003c/a\u003e Fix build script (\u003ca href=\"https://redirect.github.com/sindresorhus/globals/issues/344\"\u003e#344\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sindresorhus/globals/compare/v17.6.0...v17.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `playwright` from 1.60.0 to 1.61.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/microsoft/playwright/releases\"\u003eplaywright's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.61.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41365\"\u003e#41365\u003c/a\u003e [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41351\"\u003e#41351\u003c/a\u003e [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41360\"\u003e#41360\u003c/a\u003e [Bug]: Trace viewer: message times in websockets are downscaled by 1000\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41311\"\u003e#41311\u003c/a\u003e [Bug]: [Regression]: Sync loader throws \u0026quot;context.conditions?.includes is not a function\u0026quot; on Node 22.15\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41371\"\u003e#41371\u003c/a\u003e [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.61.0\u003c/h2\u003e\n\u003ch2\u003e🔑 WebAuthn passkeys\u003c/h2\u003e\n\u003cp\u003eNew \u003ca href=\"https://playwright.dev/docs/api/class-credentials\"\u003eCredentials\u003c/a\u003e virtual authenticator, available via \u003ca href=\"https://playwright.dev/docs/api/class-browsercontext#browser-context-credentials\"\u003ebrowserContext.credentials\u003c/a\u003e, lets tests register passkeys and answer \u003ccode\u003enavigator.credentials.create()\u003c/code\u003e / \u003ccode\u003enavigator.credentials.get()\u003c/code\u003e ceremonies in the page — no real hardware key required, works in all browsers:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003econst context = await browser.newContext();\r\n\u003cp\u003e// Seed a passkey your backend provisioned for a test user.\nawait context.credentials.create('example.com', {\nid: credentialId,\nuserHandle,\nprivateKey,\npublicKey,\n});\nawait context.credentials.install();\u003c/p\u003e\n\u003cp\u003econst page = await context.newPage();\nawait page.goto('\u003ca href=\"https://example.com/login\"\u003ehttps://example.com/login\u003c/a\u003e');\n// The page's navigator.credentials.get() is answered with the seeded passkey.\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eYou can also let the app register a passkey once in a setup test, read it back with \u003ca href=\"https://playwright.dev/docs/api/class-credentials#credentials-get\"\u003ecredentials.get()\u003c/a\u003e, and seed it into later tests — see \u003ca href=\"https://playwright.dev/docs/api/class-credentials\"\u003eCredentials\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003e🗃️ Web Storage\u003c/h2\u003e\n\u003cp\u003eNew \u003ca href=\"https://playwright.dev/docs/api/class-webstorage\"\u003eWebStorage\u003c/a\u003e API, available via \u003ca href=\"https://playwright.dev/docs/api/class-page#page-local-storage\"\u003epage.localStorage\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-page#page-session-storage\"\u003epage.sessionStorage\u003c/a\u003e, reads and writes the page's storage for the current origin:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eawait page.localStorage.setItem('token', 'abc');\r\nconst token = await page.localStorage.getItem('token');\r\nconst items = await page.sessionStorage.items();\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eNew APIs\u003c/h2\u003e\n\u003ch3\u003eNetwork\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://playwright.dev/docs/api/class-apiresponse#api-response-security-details\"\u003eapiResponse.securityDetails()\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-apiresponse#api-response-server-addr\"\u003eapiResponse.serverAddr()\u003c/a\u003e mirror the browser-side \u003ca href=\"https://playwright.dev/docs/api/class-response#response-security-details\"\u003eresponse.securityDetails()\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-response#response-server-addr\"\u003eresponse.serverAddr()\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBrowser and Screencast\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/39e3553a4f283a41134d75d7e404484bd9e6865a\"\u003e\u003ccode\u003e39e3553\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41399\"\u003e#41399\u003c/a\u003e): fix(test): load require-reached files as commonjs in syn...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/4328122a0fa91df1be287f12d26f272f598ccca7\"\u003e\u003ccode\u003e4328122\u003c/code\u003e\u003c/a\u003e chore: mark v1.61.1 (\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41404\"\u003e#41404\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/2c29a94ed59a2dbb2cb2553ee7d1ba429f027826\"\u003e\u003ccode\u003e2c29a94\u003c/code\u003e\u003c/a\u003e fix(tracing): stop recording websocket frames outside of chunks (\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41398\"\u003e#41398\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/4324b1904199c58ae56d864390f5210df18e33f6\"\u003e\u003ccode\u003e4324b19\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41367\"\u003e#41367\u003c/a\u003e): fix(test): keep builtin expect matchers on base extend\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/041e7e30002e7c384e1918c29720b34c435145f4\"\u003e\u003ccode\u003e041e7e3\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41364\"\u003e#41364\u003c/a\u003e): fix(har): \u003ccode\u003eWebSocket\u003c/code\u003e message timestamps should be in mi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/b8a0fc33932399fc5cfcd211165cf16f8ca01d71\"\u003e\u003ccode\u003eb8a0fc3\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41309\"\u003e#41309\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43149\"\u003e#43149\u003c/a\u003e): Revert \u0026quot;fix(firefox): treat `navigationCommitted...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/b5a31759e6611397bf3afaaa6049a420a5f082bd\"\u003e\u003ccode\u003eb5a3175\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41319\"\u003e#41319\u003c/a\u003e): fix(loader): support other node versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/d4724a91b280ae1ee9a87c426e9d6a953c59756e\"\u003e\u003ccode\u003ed4724a9\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41290\"\u003e#41290\u003c/a\u003e): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/1cc5a90cfa3eaa430b1a991963100f95126caa47\"\u003e\u003ccode\u003e1cc5a90\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41295\"\u003e#41295\u003c/a\u003e): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/a6772bdede34028cbbd417a3b3d778801899e870\"\u003e\u003ccode\u003ea6772bd\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/41280\"\u003e#41280\u003c/a\u003e): Revert \u0026quot;fix(trace-viewer): add keyboard navigation to `N...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `serialize-javascript` from 7.0.5 to 7.0.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/yahoo/serialize-javascript/releases\"\u003eserialize-javascript's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.0.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps-dev): bump lodash from 4.17.23 to 4.18.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/yahoo/serialize-javascript/pull/215\"\u003eyahoo/serialize-javascript#215\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject spoofed URL objects with non-string toString() result by \u003ca href=\"https://github.com/redonkulus\"\u003e\u003ccode\u003e@​redonkulus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/yahoo/serialize-javascript/pull/217\"\u003eyahoo/serialize-javascript#217\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease: v7.0.6 by \u003ca href=\"https://github.com/okuryu\"\u003e\u003ccode\u003e@​okuryu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/yahoo/serialize-javascript/pull/221\"\u003eyahoo/serialize-javascript#221\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/yahoo/serialize-javascript/compare/v7.0.5...v7.0.6\"\u003ehttps://github.com/yahoo/serialize-javascript/compare/v7.0.5...v7.0.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yahoo/serialize-javascript/commit/153eb437d45310f34f4b8414a4ac1f8658a622dd\"\u003e\u003ccode\u003e153eb43\u003c/code\u003e\u003c/a\u003e release: v7.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yahoo/serialize-javascript/commit/a83d2cb9e04a85726827a23c941f03177018774b\"\u003e\u003ccode\u003ea83d2cb\u003c/code\u003e\u003c/a\u003e fix: reject spoofed URL objects with non-string toString() result\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yahoo/serialize-javascript/commit/451af655bcf055489f39a2629673ae8f67023b90\"\u003e\u003ccode\u003e451af65\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump lodash from 4.17.23 to 4.18.1 (\u003ca href=\"https://redirect.github.com/yahoo/serialize-javascript/issues/215\"\u003e#215\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/yahoo/serialize-javascript/compare/v7.0.5...v7.0.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.5.16 to 7.5.17\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.16...v7.5.17\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `prettier` from 3.8.4 to 3.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prettier/prettier/releases\"\u003eprettier's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.9.0\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/prettier/prettier/compare/3.8.5...3.9.0\"\u003ediff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e🔗 \u003ca href=\"https://prettier.io/blog/2026/06/27/3.9.0\"\u003ePrettier 3.9: Major parser upgrades and Formatting improvements\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.8.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Flow variance annotation print (\u003ca href=\"https://redirect.github.com/prettier/prettier/pull/19022\"\u003e#19022\u003c/a\u003e by \u003ca href=\"https://github.com/marcoww6\"\u003e\u003ccode\u003e@​marcoww6\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e🔗 \u003ca href=\"https://github.com/prettier/prettier/blob/3.8.5/CHANGELOG.md#385\"\u003eChangelog\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prettier/prettier/blob/main/CHANGELOG.md\"\u003eprettier's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e3.9.0\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/prettier/prettier/compare/3.8.5...3.9.0\"\u003ediff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e🔗 \u003ca href=\"https://prettier.io/blog/2026/06/27/3.9.0\"\u003eRelease Notes\u003c/a\u003e\u003c/p\u003e\n\u003ch1\u003e3.8.5\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/prettier/prettier/compare/3.8.4...3.8.5\"\u003ediff\u003c/a\u003e\u003c/p\u003e\n\u003ch4\u003eFlow: Support \u003ccode\u003ereadonly\u003c/code\u003e as a variance annotation (\u003ca href=\"https://redirect.github.com/prettier/prettier/pull/19022\"\u003e#19022\u003c/a\u003e by \u003ca href=\"https://github.com/marcoww6\"\u003e\u003ccode\u003e@​marcoww6\u003c/code\u003e\u003c/a\u003e)\u003c/h4\u003e\n\u003cp\u003eFlow now accepts \u003ccode\u003ereadonly\u003c/code\u003e as a property variance annotation, equivalent to \u003ccode\u003e+\u003c/code\u003e (covariant/read-only).\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cpre lang=\"jsx\"\u003e\u003ccode\u003e// Input\ntype T = {\n  readonly foo: string,\n};\n\u003cp\u003e// Prettier 3.8.4\u003cbr /\u003e\nSyntaxError\u003c/p\u003e\n\u003cp\u003e// Prettier 3.8.5\u003cbr /\u003e\ntype T = {\u003cbr /\u003e\nreadonly foo: string,\u003cbr /\u003e\n};\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/8171cf4c119ed650f3d8c5e8b158891f65c67a2a\"\u003e\u003ccode\u003e8171cf4\u003c/code\u003e\u003c/a\u003e Release 3.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/165423ceb31639f05ef03bf36c9e90c93cb6e7f1\"\u003e\u003ccode\u003e165423c\u003c/code\u003e\u003c/a\u003e Fix linting failure on main branch (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19481\"\u003e#19481\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/70edc07c64111f13c4016980f7a2125eb4a89120\"\u003e\u003ccode\u003e70edc07\u003c/code\u003e\u003c/a\u003e Update actions/cache action to v6.1.0 (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19479\"\u003e#19479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/7503e0791b12e5aae3238b490599802fa883e18d\"\u003e\u003ccode\u003e7503e07\u003c/code\u003e\u003c/a\u003e Update dependency eslint to v10.6.0 (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19480\"\u003e#19480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/c193ea55238bb3077e86c6ea7c514bf3a744e4d6\"\u003e\u003ccode\u003ec193ea5\u003c/code\u003e\u003c/a\u003e Update dependency \u003ccode\u003e@​codemirror/view\u003c/code\u003e to v6.43.4 (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19460\"\u003e#19460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/bb51b20069ec386262b9f6624ccf3746ff98d7b5\"\u003e\u003ccode\u003ebb51b20\u003c/code\u003e\u003c/a\u003e Update dependency \u003ccode\u003e@​angular/compiler\u003c/code\u003e to v22.0.4 (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19478\"\u003e#19478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/fe040aeef90c7fc3db4514b92275e61cc5dd3b99\"\u003e\u003ccode\u003efe040ae\u003c/code\u003e\u003c/a\u003e Fix cache not invalidated when files are ignored or restored (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/18029\"\u003e#18029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/ae594b849f4431b166ec089c8c1297a2d6e8fbcc\"\u003e\u003ccode\u003eae594b8\u003c/code\u003e\u003c/a\u003e Fix mutiline opening inline html tag (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19477\"\u003e#19477\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/7eecbe3602182d33ae50f073c51021386fea163e\"\u003e\u003ccode\u003e7eecbe3\u003c/code\u003e\u003c/a\u003e Update dependency vue to v3.5.39 (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19474\"\u003e#19474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prettier/prettier/commit/226a1c8a1594b11aba0e7eb52541d55c72e19464\"\u003e\u003ccode\u003e226a1c8\u003c/code\u003e\u003c/a\u003e Update dependency webpack to v5.108.1 (\u003ca href=\"https://redirect.github.com/prettier/prettier/issues/19475\"\u003e#19475\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/prettier/prettier/compare/3.8.4...3.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `rollup` from 4.61.1 to 4.62.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/rollup/rollup/releases\"\u003erollup's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.62.2\u003c/h2\u003e\n\u003ch2\u003e4.62.2\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-19\u003c/em\u003e\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDo not add spurious side-effect-free external imports to chunks when using minChunkSize (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6411\"\u003e#6411\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePull Requests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6411\"\u003e#6411\u003c/a\u003e: Skip side-effect-free external imports when hoisting is disabled (\u003ca href=\"https://github.com/morgan-coded\"\u003e\u003ccode\u003e@​morgan-coded\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6416\"\u003e#6416\u003c/a\u003e: refactor(rust/parser_ast): extract property AstConverter write buffer kind logic to new method (\u003ca href=\"https://github.com/fabianbernhart\"\u003e\u003ccode\u003e@​fabianbernhart\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.62.1\u003c/h2\u003e\n\u003ch2\u003e4.62.1\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-19\u003c/em\u003e\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve multipart file extensions when deconflicting output chunks (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6408\"\u003e#6408\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an issue where getLogFilter would match additional logs (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6415\"\u003e#6415\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePull Requests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6393\"\u003e#6393\u003c/a\u003e: Use import attributes for importing JSON (\u003ca href=\"https://github.com/selfisekai\"\u003e\u003ccode\u003e@​selfisekai\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6408\"\u003e#6408\u003c/a\u003e: fix: insert conflict numbers before first extension in multi-extension filenames (\u003ca href=\"https://github.com/LeSingh1\"\u003e\u003ccode\u003e@​LeSingh1\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6415\"\u003e#6415\u003c/a\u003e: fix: advance value past wildcard prefix before suffix check in getLogFilter (\u003ca href=\"https://github.com/JSap0914\"\u003e\u003ccode\u003e@​JSap0914\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6417\"\u003e#6417\u003c/a\u003e: chore(deps): update msys2/setup-msys2 digest to 66cd2cc (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6418\"\u003e#6418\u003c/a\u003e: fix(deps): update minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot], \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6419\"\u003e#6419\u003c/a\u003e: chore(deps): update dependency eslint-plugin-unicorn to v66 (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6420\"\u003e#6420\u003c/a\u003e: chore(deps): lock file maintenance minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot], \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.62.0\u003c/h2\u003e\n\u003ch2\u003e4.62.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-13\u003c/em\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure that shared dependencies between manual chunks and entry points receive a serparate chunk (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6374\"\u003e#6374\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePull Requests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6374\"\u003e#6374\u003c/a\u003e: Extract the static dependencies imported by manual chunks into separate chunks (\u003ca href=\"https://github.com/TrickyPi\"\u003e\u003ccode\u003e@​TrickyPi\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6405\"\u003e#6405\u003c/a\u003e: fix(deps): update minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6406\"\u003e#6406\u003c/a\u003e: chore(deps): pin dependency concurrently to v9 (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot], \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6407\"\u003e#6407\u003c/a\u003e: chore(deps): lock file maintenance minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6409\"\u003e#6409\u003c/a\u003e: chore(deps): update minor/patch updates to v6.2.0 (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/rollup/rollup/blob/master/CHANGELOG.md\"\u003erollup's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.62.2\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-19\u003c/em\u003e\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDo not add spurious side-effect-free external imports to chunks when using minChunkSize (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6411\"\u003e#6411\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePull Requests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6411\"\u003e#6411\u003c/a\u003e: Skip side-effect-free external imports when hoisting is disabled (\u003ca href=\"https://github.com/morgan-coded\"\u003e\u003ccode\u003e@​morgan-coded\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6416\"\u003e#6416\u003c/a\u003e: refactor(rust/parser_ast): extract property AstConverter write buffer kind logic to new method (\u003ca href=\"https://github.com/fabianbernhart\"\u003e\u003ccode\u003e@​fabianbernhart\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.62.1\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-19\u003c/em\u003e\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve multipart file extensions when deconflicting output chunks (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6408\"\u003e#6408\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an issue where getLogFilter would match additional logs (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6415\"\u003e#6415\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePull Requests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6393\"\u003e#6393\u003c/a\u003e: Use import attributes for importing JSON (\u003ca href=\"https://github.com/selfisekai\"\u003e\u003ccode\u003e@​selfisekai\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6408\"\u003e#6408\u003c/a\u003e: fix: insert conflict numbers before first extension in multi-extension filenames (\u003ca href=\"https://github.com/LeSingh1\"\u003e\u003ccode\u003e@​LeSingh1\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6415\"\u003e#6415\u003c/a\u003e: fix: advance value past wildcard prefix before suffix check in getLogFilter (\u003ca href=\"https://github.com/JSap0914\"\u003e\u003ccode\u003e@​JSap0914\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6417\"\u003e#6417\u003c/a\u003e: chore(deps): update msys2/setup-msys2 digest to 66cd2cc (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6418\"\u003e#6418\u003c/a\u003e: fix(deps): update minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot], \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6419\"\u003e#6419\u003c/a\u003e: chore(deps): update dependency eslint-plugin-unicorn to v66 (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6420\"\u003e#6420\u003c/a\u003e: chore(deps): lock file maintenance minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot], \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.62.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-13\u003c/em\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure that shared dependencies between manual chunks and entry points receive a serparate chunk (\u003ca href=\"https://redirect.github.com/rollup/rollup/issues/6374\"\u003e#6374\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePull Requests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6374\"\u003e#6374\u003c/a\u003e: Extract the static dependencies imported by manual chunks into separate chunks (\u003ca href=\"https://github.com/TrickyPi\"\u003e\u003ccode\u003e@​TrickyPi\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukastaegert\"\u003e\u003ccode\u003e@​lukastaegert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6405\"\u003e#6405\u003c/a\u003e: fix(deps): update minor/patch updates (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e@​renovate\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/rollup/rollup/pull/6406\"\u003e#6406\u003c/a\u003e: chore(deps): pin dependency concurrently to v9 (\u003ca href=\"https://github.com/renovate\"\u003e\u003ccode\u003e...\n\n_Description has been truncated_","html_url":"https://github.com/theQRL/qrypto.js/pull/191","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/theQRL%2Fqrypto.js/issues/191","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/191/packages"}},{"old_version":"7.5.16","new_version":"7.5.19","update_type":"patch","path":null,"pr_created_at":"2026-07-04T01:48:29.000Z","version_change":"7.5.16 → 7.5.19","issue":{"uuid":"4807230827","node_id":"PR_kwDOSyklwc7txg2E","number":2,"state":"open","title":"chore(deps): bump the npm-minor-patch group with 191 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-04T01:48:29.000Z","updated_at":"2026-07-04T01:49:02.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm-minor-patch","update_count":191,"packages":[{"name":"@neteasecloudmusicapienhanced/api","old_version":"4.34.3","new_version":"4.36.1","repository_url":"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced"},{"name":"@sentry/node","old_version":"10.56.0","new_version":"10.63.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@sentry/vue","old_version":"10.56.0","new_version":"10.63.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@simplewebauthn/server","old_version":"13.3.1","new_version":"13.3.2","repository_url":"https://github.com/MasterKale/SimpleWebAuthn"},{"name":"axios","old_version":"1.17.0","new_version":"1.18.1","repository_url":"https://github.com/axios/axios"},{"name":"multer","old_version":"2.1.1","new_version":"2.2.0","repository_url":"https://github.com/expressjs/multer"},{"name":"@types/multer","old_version":"2.1.0","new_version":"2.2.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"nodemailer","old_version":"8.0.10","new_version":"8.0.11","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"@types/nodemailer","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"nuxt","old_version":"4.4.7","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"sass","old_version":"1.100.0","new_version":"1.101.0","repository_url":"https://github.com/sass/dart-sass"},{"name":"tsx","old_version":"4.22.4","new_version":"4.23.0","repository_url":"https://github.com/privatenumber/tsx"},{"name":"vue","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@nuxt/eslint","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/nuxt/eslint"},{"name":"prettier","old_version":"3.8.3","new_version":"3.9.4","repository_url":"https://github.com/prettier/prettier"},{"name":"@bomb.sh/tab","old_version":"0.0.15","new_version":"0.0.17","repository_url":"https://github.com/bombshell-dev/tab"},{"name":"@clack/core","old_version":"1.4.1","new_version":"1.4.3","repository_url":"https://github.com/bombshell-dev/clack"},{"name":"@clack/prompts","old_version":"1.5.1","new_version":"1.7.0","repository_url":"https://github.com/bombshell-dev/clack"},{"name":"@colordx/core","old_version":"5.4.3","new_version":"5.5.0","repository_url":"https://github.com/dkryaklin/colordx"},{"name":"@es-joy/jsdoccomment","old_version":"0.86.0","new_version":"0.87.0","repository_url":"https://github.com/es-joy/jsdoccomment"},{"name":"@eslint/config-inspector","old_version":"1.5.0","new_version":"3.0.4","repository_url":"https://github.com/eslint/config-inspector"},{"name":"@napi-rs/wasm-runtime","old_version":"1.1.4","new_version":"1.1.6","repository_url":"https://github.com/napi-rs/napi-rs"},{"name":"@neteasecloudmusicapienhanced/unblockmusic-utils","old_version":"0.3.2","new_version":"0.3.4"},{"name":"@nuxt/cli","old_version":"3.35.2","new_version":"3.36.1","repository_url":"https://github.com/nuxt/cli"},{"name":"@nuxt/eslint-config","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/nuxt/eslint"},{"name":"@nuxt/eslint-plugin","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/nuxt/eslint"},{"name":"@nuxt/nitro-server","old_version":"4.4.7","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@nuxt/schema","old_version":"4.4.7","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@nuxt/vite-builder","old_version":"4.4.7","new_version":"4.4.8","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@opentelemetry/core","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/resources","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-trace-base","old_version":"2.7.1","new_version":"2.9.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@oxc-parser/binding-android-arm-eabi","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-android-arm64","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-darwin-arm64","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-darwin-x64","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-freebsd-x64","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm-gnueabihf","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm-musleabihf","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm64-gnu","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-arm64-musl","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-ppc64-gnu","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-riscv64-gnu","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-riscv64-musl","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-s390x-gnu","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-x64-gnu","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-linux-x64-musl","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-openharmony-arm64","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-wasm32-wasi","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-win32-arm64-msvc","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-win32-ia32-msvc","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-parser/binding-win32-x64-msvc","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@oxc-project/types","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"@peculiar/asn1-android","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-cms","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-csr","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-ecc","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-pfx","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-pkcs8","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-pkcs9","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-rsa","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-schema","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-x509-attr","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@peculiar/asn1-x509","old_version":"2.7.0","new_version":"2.8.0","repository_url":"https://github.com/PeculiarVentures/asn1-schema"},{"name":"@rollup/rollup-android-arm-eabi","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-android-arm64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-darwin-arm64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-darwin-x64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-freebsd-arm64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-freebsd-x64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm-gnueabihf","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm-musleabihf","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm64-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-arm64-musl","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-loong64-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-loong64-musl","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-ppc64-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-ppc64-musl","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-riscv64-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-riscv64-musl","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-s390x-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-x64-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-linux-x64-musl","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-openbsd-x64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-openharmony-arm64","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-arm64-msvc","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-ia32-msvc","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-x64-gnu","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@rollup/rollup-win32-x64-msvc","old_version":"4.61.1","new_version":"4.62.2","repository_url":"https://github.com/rollup/rollup"},{"name":"@sentry/browser","old_version":"10.56.0","new_version":"10.63.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@sentry/core","old_version":"10.56.0","new_version":"10.63.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@sentry/node-core","old_version":"10.56.0","new_version":"10.63.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@sentry/opentelemetry","old_version":"10.56.0","new_version":"10.63.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@speed-highlight/core","old_version":"1.2.15","new_version":"1.2.17","repository_url":"https://github.com/speed-highlight/core"},{"name":"@tybys/wasm-util","old_version":"0.10.2","new_version":"0.10.3","repository_url":"https://github.com/toyobayashi/wasm-util"},{"name":"@typescript-eslint/eslint-plugin","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/parser","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/project-service","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/scope-manager","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/tsconfig-utils","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/type-utils","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/types","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/typescript-estree","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/utils","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/visitor-keys","old_version":"8.60.1","new_version":"8.62.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@vitejs/plugin-vue-jsx","old_version":"5.1.5","new_version":"5.1.6","repository_url":"https://github.com/vitejs/vite-plugin-vue"},{"name":"@vue/compiler-core","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/compiler-dom","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/compiler-sfc","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/compiler-ssr","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/devtools-core","old_version":"8.1.2","new_version":"8.1.5","repository_url":"https://github.com/vuejs/devtools"},{"name":"@vue/devtools-kit","old_version":"8.1.2","new_version":"8.1.5","repository_url":"https://github.com/vuejs/devtools"},{"name":"@vue/devtools-shared","old_version":"8.1.2","new_version":"8.1.5","repository_url":"https://github.com/vuejs/devtools"},{"name":"@vue/reactivity","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/runtime-core","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/runtime-dom","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/server-renderer","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"@vue/shared","old_version":"3.5.35","new_version":"3.5.39","repository_url":"https://github.com/vuejs/core"},{"name":"bare-fs","old_version":"4.7.2","new_version":"4.7.3","repository_url":"https://github.com/holepunchto/bare-fs"},{"name":"bare-os","old_version":"3.9.1","new_version":"3.9.3","repository_url":"https://github.com/holepunchto/bare-os"},{"name":"bare-stream","old_version":"2.13.1","new_version":"2.13.3","repository_url":"https://github.com/holepunchto/bare-stream"},{"name":"bare-url","old_version":"2.4.3","new_version":"2.4.5","repository_url":"https://github.com/holepunchto/bare-url"},{"name":"builtin-modules","old_version":"5.2.0","new_version":"5.3.0","repository_url":"https://github.com/sindresorhus/builtin-modules"},{"name":"caniuse-api","old_version":"3.0.0","new_version":"4.0.0","repository_url":"https://github.com/MoOx/caniuse-api"},{"name":"comment-parser","old_version":"1.4.6","new_version":"1.4.7","repository_url":"https://github.com/yavorskiy/comment-parser"},{"name":"cssnano-preset-default","old_version":"8.0.1","new_version":"8.0.2","repository_url":"https://github.com/cssnano/cssnano"},{"name":"cssnano-utils","old_version":"6.0.0","new_version":"6.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"cssnano","old_version":"8.0.1","new_version":"8.0.2","repository_url":"https://github.com/cssnano/cssnano"},{"name":"es-module-lexer","old_version":"2.1.0","new_version":"2.3.0","repository_url":"https://github.com/guybedford/es-module-lexer"},{"name":"es-to-primitive","old_version":"1.3.0","new_version":"1.3.4","repository_url":"https://github.com/ljharb/es-to-primitive"},{"name":"eslint-plugin-import-lite","old_version":"0.5.2","new_version":"0.6.0","repository_url":"https://github.com/9romise/eslint-plugin-import-lite"},{"name":"eslint-plugin-import-x","old_version":"4.16.2","new_version":"4.17.1","repository_url":"https://github.com/un-ts/eslint-plugin-import-x"},{"name":"eslint-plugin-jsdoc","old_version":"62.9.0","new_version":"63.0.10","repository_url":"https://github.com/gajus/eslint-plugin-jsdoc"},{"name":"eslint-plugin-regexp","old_version":"3.1.0","new_version":"3.1.1","repository_url":"https://github.com/ota-meshi/eslint-plugin-regexp"},{"name":"eslint-plugin-unicorn","old_version":"63.0.0","new_version":"65.0.1","repository_url":"https://github.com/sindresorhus/eslint-plugin-unicorn"},{"name":"exsolve","old_version":"1.0.8","new_version":"1.1.0","repository_url":"https://github.com/unjs/exsolve"},{"name":"fast-uri","old_version":"3.1.2","new_version":"3.1.3","repository_url":"https://github.com/fastify/fast-uri"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"function.prototype.name","old_version":"1.1.8","new_version":"1.2.0","repository_url":"https://github.com/es-shims/Function.prototype.name"},{"name":"fuse.js","old_version":"7.4.1","new_version":"7.4.2","repository_url":"https://github.com/krisk/Fuse"},{"name":"httpxy","old_version":"0.5.3","new_version":"0.5.4","repository_url":"https://github.com/unjs/httpxy"},{"name":"immutable","old_version":"5.1.6","new_version":"5.1.9","repository_url":"https://github.com/immutable-js/immutable-js"},{"name":"import-in-the-middle","old_version":"3.0.1","new_version":"3.3.0","repository_url":"https://github.com/nodejs/import-in-the-middle"},{"name":"music-metadata","old_version":"11.12.3","new_version":"11.13.0","repository_url":"https://github.com/Borewit/music-metadata"},{"name":"nypm","old_version":"0.6.6","new_version":"0.6.8","repository_url":"https://github.com/unjs/nypm"},{"name":"obug","old_version":"2.1.2","new_version":"2.1.3","repository_url":"https://github.com/sxzz/obug"},{"name":"oxc-parser","old_version":"0.133.0","new_version":"0.132.0","repository_url":"https://github.com/oxc-project/oxc"},{"name":"package-manager-detector","old_version":"1.6.0","new_version":"1.7.0","repository_url":"https://github.com/antfu-collective/package-manager-detector"},{"name":"postcss-colormin","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-convert-values","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-comments","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-duplicates","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-empty","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-discard-overridden","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-merge-longhand","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-merge-rules","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-font-values","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-gradients","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-params","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-minify-selectors","old_version":"8.0.1","new_version":"8.0.2","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-charset","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-display-values","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-positions","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-repeat-style","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-string","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-timing-functions","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-unicode","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-url","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-normalize-whitespace","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-ordered-values","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-reduce-initial","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-reduce-transforms","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-svgo","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"postcss-unique-selectors","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"qs","old_version":"6.15.2","new_version":"6.15.3","repository_url":"https://github.com/ljharb/qs"},{"name":"regjsparser","old_version":"0.13.1","new_version":"0.13.2","repository_url":"https://github.com/jviereck/regjsparser"},{"name":"shell-quote","old_version":"1.8.4","new_version":"1.9.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"side-channel","old_version":"1.1.0","new_version":"1.1.1","repository_url":"https://github.com/ljharb/side-channel"},{"name":"srvx","old_version":"0.11.16","new_version":"0.11.20","repository_url":"https://github.com/h3js/srvx"},{"name":"streamx","old_version":"2.26.0","new_version":"2.28.0","repository_url":"https://github.com/mafintosh/streamx"},{"name":"string.prototype.trim","old_version":"1.2.10","new_version":"1.2.11","repository_url":"https://github.com/es-shims/String.prototype.trim"},{"name":"string.prototype.trimend","old_version":"1.0.9","new_version":"1.0.10","repository_url":"https://github.com/es-shims/String.prototype.trimEnd"},{"name":"stylehacks","old_version":"8.0.0","new_version":"8.0.1","repository_url":"https://github.com/cssnano/cssnano"},{"name":"tar","old_version":"7.5.16","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"},{"name":"tinyclip","old_version":"0.1.14","new_version":"0.1.15","repository_url":"https://github.com/tinylibs/tinyclip"},{"name":"unimport","old_version":"5.7.0","new_version":"6.3.0","repository_url":"https://github.com/unjs/unimport"},{"name":"unplugin-utils","old_version":"0.3.1","new_version":"0.3.2","repository_url":"https://github.com/sxzz/unplugin-utils"},{"name":"vite-plugin-checker","old_version":"0.14.1","new_version":"0.14.4","repository_url":"https://github.com/fi3ework/vite-plugin-checker"},{"name":"vite","old_version":"7.3.5","new_version":"7.3.6","repository_url":"https://github.com/vitejs/vite"},{"name":"vue-bundle-renderer","old_version":"2.2.0","new_version":"2.3.1","repository_url":"https://github.com/nuxt-contrib/vue-bundle-renderer"},{"name":"which-typed-array","old_version":"1.1.21","new_version":"1.1.22","repository_url":"https://github.com/inspect-js/which-typed-array"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-minor-patch group with 191 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@neteasecloudmusicapienhanced/api](https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced) | `4.34.3` | `4.36.1` |\n| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.63.0` |\n| [@sentry/vue](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.63.0` |\n| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.1` | `13.3.2` |\n| [axios](https://github.com/axios/axios) | `1.17.0` | `1.18.1` |\n| [multer](https://github.com/expressjs/multer) | `2.1.1` | `2.2.0` |\n| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.1.0` | `2.2.0` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.10` | `8.0.11` |\n| [@types/nodemailer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/nodemailer) | `8.0.0` | `8.0.1` |\n| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.4.7` | `4.4.8` |\n| [sass](https://github.com/sass/dart-sass) | `1.100.0` | `1.101.0` |\n| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.0` |\n| [vue](https://github.com/vuejs/core) | `3.5.35` | `3.5.39` |\n| [@nuxt/eslint](https://github.com/nuxt/eslint/tree/HEAD/packages/module) | `1.15.2` | `1.16.0` |\n| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.4` |\n| [@bomb.sh/tab](https://github.com/bombshell-dev/tab) | `0.0.15` | `0.0.17` |\n| [@clack/core](https://github.com/bombshell-dev/clack/tree/HEAD/packages/core) | `1.4.1` | `1.4.3` |\n| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.5.1` | `1.7.0` |\n| [@colordx/core](https://github.com/dkryaklin/colordx) | `5.4.3` | `5.5.0` |\n| [@es-joy/jsdoccomment](https://github.com/es-joy/jsdoccomment) | `0.86.0` | `0.87.0` |\n| [@eslint/config-inspector](https://github.com/eslint/config-inspector) | `1.5.0` | `3.0.4` |\n| [@napi-rs/wasm-runtime](https://github.com/napi-rs/napi-rs/tree/HEAD/wasm-runtime) | `1.1.4` | `1.1.6` |\n| @neteasecloudmusicapienhanced/unblockmusic-utils | `0.3.2` | `0.3.4` |\n| [@nuxt/cli](https://github.com/nuxt/cli/tree/HEAD/packages/nuxt-cli) | `3.35.2` | `3.36.1` |\n| [@nuxt/eslint-config](https://github.com/nuxt/eslint/tree/HEAD/packages/eslint-config) | `1.15.2` | `1.16.0` |\n| [@nuxt/eslint-plugin](https://github.com/nuxt/eslint/tree/HEAD/packages/eslint-plugin) | `1.15.2` | `1.16.0` |\n| [@nuxt/nitro-server](https://github.com/nuxt/nuxt/tree/HEAD/packages/nitro-server) | `4.4.7` | `4.4.8` |\n| [@nuxt/schema](https://github.com/nuxt/nuxt/tree/HEAD/packages/schema) | `4.4.7` | `4.4.8` |\n| [@nuxt/vite-builder](https://github.com/nuxt/nuxt/tree/HEAD/packages/vite) | `4.4.7` | `4.4.8` |\n| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` |\n| [@oxc-parser/binding-android-arm-eabi](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-android-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-darwin-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-darwin-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-freebsd-x64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm-gnueabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm-musleabihf](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-arm64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-ppc64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-riscv64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-riscv64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-s390x-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-x64-gnu](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-linux-x64-musl](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-openharmony-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-wasm32-wasi](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-win32-arm64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-win32-ia32-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-parser/binding-win32-x64-msvc](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [@oxc-project/types](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxc-types) | `0.133.0` | `0.132.0` |\n| [@peculiar/asn1-android](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/android) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-cms](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/cms) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-csr](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/csr) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-ecc](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/ecc) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-pfx](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/pfx) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-pkcs8](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/pkcs8) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-pkcs9](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/pkcs9) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-rsa](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/rsa) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-schema](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/schema) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-x509-attr](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/x509-attr) | `2.7.0` | `2.8.0` |\n| [@peculiar/asn1-x509](https://github.com/PeculiarVentures/asn1-schema/tree/HEAD/packages/x509) | `2.7.0` | `2.8.0` |\n| [@rollup/rollup-android-arm-eabi](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-android-arm64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-darwin-arm64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-darwin-x64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-freebsd-arm64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-freebsd-x64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-arm-gnueabihf](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-arm-musleabihf](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-arm64-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-arm64-musl](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-loong64-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-loong64-musl](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-ppc64-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-ppc64-musl](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-riscv64-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-riscv64-musl](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-s390x-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-linux-x64-musl](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-openbsd-x64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-openharmony-arm64](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-win32-arm64-msvc](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-win32-ia32-msvc](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-win32-x64-gnu](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@rollup/rollup-win32-x64-msvc](https://github.com/rollup/rollup) | `4.61.1` | `4.62.2` |\n| [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.63.0` |\n| [@sentry/core](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.63.0` |\n| [@sentry/node-core](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.63.0` |\n| [@sentry/opentelemetry](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.63.0` |\n| [@speed-highlight/core](https://github.com/speed-highlight/core) | `1.2.15` | `1.2.17` |\n| [@tybys/wasm-util](https://github.com/toyobayashi/wasm-util) | `0.10.2` | `0.10.3` |\n| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/project-service](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/project-service) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/scope-manager](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/scope-manager) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/tsconfig-utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/tsconfig-utils) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/type-utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/type-utils) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/types](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/types) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/typescript-estree](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-estree) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/utils) | `8.60.1` | `8.62.1` |\n| [@typescript-eslint/visitor-keys](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/visitor-keys) | `8.60.1` | `8.62.1` |\n| [@vitejs/plugin-vue-jsx](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue-jsx) | `5.1.5` | `5.1.6` |\n| [@vue/compiler-core](https://github.com/vuejs/core/tree/HEAD/packages/compiler-core) | `3.5.35` | `3.5.39` |\n| [@vue/compiler-dom](https://github.com/vuejs/core/tree/HEAD/packages/compiler-dom) | `3.5.35` | `3.5.39` |\n| [@vue/compiler-sfc](https://github.com/vuejs/core/tree/HEAD/packages/compiler-sfc) | `3.5.35` | `3.5.39` |\n| [@vue/compiler-ssr](https://github.com/vuejs/core/tree/HEAD/packages/compiler-ssr) | `3.5.35` | `3.5.39` |\n| [@vue/devtools-core](https://github.com/vuejs/devtools/tree/HEAD/packages/core) | `8.1.2` | `8.1.5` |\n| [@vue/devtools-kit](https://github.com/vuejs/devtools/tree/HEAD/packages/devtools-kit) | `8.1.2` | `8.1.5` |\n| [@vue/devtools-shared](https://github.com/vuejs/devtools/tree/HEAD/packages/shared) | `8.1.2` | `8.1.5` |\n| [@vue/reactivity](https://github.com/vuejs/core/tree/HEAD/packages/reactivity) | `3.5.35` | `3.5.39` |\n| [@vue/runtime-core](https://github.com/vuejs/core/tree/HEAD/packages/runtime-core) | `3.5.35` | `3.5.39` |\n| [@vue/runtime-dom](https://github.com/vuejs/core/tree/HEAD/packages/runtime-dom) | `3.5.35` | `3.5.39` |\n| [@vue/server-renderer](https://github.com/vuejs/core/tree/HEAD/packages/server-renderer) | `3.5.35` | `3.5.39` |\n| [@vue/shared](https://github.com/vuejs/core/tree/HEAD/packages/shared) | `3.5.35` | `3.5.39` |\n| [bare-fs](https://github.com/holepunchto/bare-fs) | `4.7.2` | `4.7.3` |\n| [bare-os](https://github.com/holepunchto/bare-os) | `3.9.1` | `3.9.3` |\n| [bare-stream](https://github.com/holepunchto/bare-stream) | `2.13.1` | `2.13.3` |\n| [bare-url](https://github.com/holepunchto/bare-url) | `2.4.3` | `2.4.5` |\n| [builtin-modules](https://github.com/sindresorhus/builtin-modules) | `5.2.0` | `5.3.0` |\n| [caniuse-api](https://github.com/MoOx/caniuse-api) | `3.0.0` | `4.0.0` |\n| [comment-parser](https://github.com/yavorskiy/comment-parser) | `1.4.6` | `1.4.7` |\n| [cssnano-preset-default](https://github.com/cssnano/cssnano) | `8.0.1` | `8.0.2` |\n| [cssnano-utils](https://github.com/cssnano/cssnano) | `6.0.0` | `6.0.1` |\n| [cssnano](https://github.com/cssnano/cssnano) | `8.0.1` | `8.0.2` |\n| [es-module-lexer](https://github.com/guybedford/es-module-lexer) | `2.1.0` | `2.3.0` |\n| [es-to-primitive](https://github.com/ljharb/es-to-primitive) | `1.3.0` | `1.3.4` |\n| [eslint-plugin-import-lite](https://github.com/9romise/eslint-plugin-import-lite) | `0.5.2` | `0.6.0` |\n| [eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x) | `4.16.2` | `4.17.1` |\n| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `62.9.0` | `63.0.10` |\n| [eslint-plugin-regexp](https://github.com/ota-meshi/eslint-plugin-regexp) | `3.1.0` | `3.1.1` |\n| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | `63.0.0` | `65.0.1` |\n| [exsolve](https://github.com/unjs/exsolve) | `1.0.8` | `1.1.0` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.2` | `3.1.3` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [function.prototype.name](https://github.com/es-shims/Function.prototype.name) | `1.1.8` | `1.2.0` |\n| [fuse.js](https://github.com/krisk/Fuse) | `7.4.1` | `7.4.2` |\n| [httpxy](https://github.com/unjs/httpxy) | `0.5.3` | `0.5.4` |\n| [immutable](https://github.com/immutable-js/immutable-js) | `5.1.6` | `5.1.9` |\n| [import-in-the-middle](https://github.com/nodejs/import-in-the-middle) | `3.0.1` | `3.3.0` |\n| [music-metadata](https://github.com/Borewit/music-metadata) | `11.12.3` | `11.13.0` |\n| [nypm](https://github.com/unjs/nypm) | `0.6.6` | `0.6.8` |\n| [obug](https://github.com/sxzz/obug) | `2.1.2` | `2.1.3` |\n| [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.133.0` | `0.132.0` |\n| [package-manager-detector](https://github.com/antfu-collective/package-manager-detector) | `1.6.0` | `1.7.0` |\n| [postcss-colormin](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-convert-values](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-discard-comments](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-discard-duplicates](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-discard-empty](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-discard-overridden](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-merge-longhand](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-merge-rules](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-minify-font-values](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-minify-gradients](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-minify-params](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-minify-selectors](https://github.com/cssnano/cssnano) | `8.0.1` | `8.0.2` |\n| [postcss-normalize-charset](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-display-values](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-positions](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-repeat-style](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-string](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-timing-functions](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-unicode](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-url](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-normalize-whitespace](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-ordered-values](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-reduce-initial](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-reduce-transforms](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-svgo](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [postcss-unique-selectors](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [qs](https://github.com/ljharb/qs) | `6.15.2` | `6.15.3` |\n| [regjsparser](https://github.com/jviereck/regjsparser) | `0.13.1` | `0.13.2` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.4` | `1.9.0` |\n| [side-channel](https://github.com/ljharb/side-channel) | `1.1.0` | `1.1.1` |\n| [srvx](https://github.com/h3js/srvx) | `0.11.16` | `0.11.20` |\n| [streamx](https://github.com/mafintosh/streamx) | `2.26.0` | `2.28.0` |\n| [string.prototype.trim](https://github.com/es-shims/String.prototype.trim) | `1.2.10` | `1.2.11` |\n| [string.prototype.trimend](https://github.com/es-shims/String.prototype.trimEnd) | `1.0.9` | `1.0.10` |\n| [stylehacks](https://github.com/cssnano/cssnano) | `8.0.0` | `8.0.1` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.16` | `7.5.19` |\n| [tinyclip](https://github.com/tinylibs/tinyclip) | `0.1.14` | `0.1.15` |\n| [unimport](https://github.com/unjs/unimport) | `5.7.0` | `6.3.0` |\n| [unplugin-utils](https://github.com/sxzz/unplugin-utils) | `0.3.1` | `0.3.2` |\n| [vite-plugin-checker](https://github.com/fi3ework/vite-plugin-checker) | `0.14.1` | `0.14.4` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.5` | `7.3.6` |\n| [vue-bundle-renderer](https://github.com/nuxt-contrib/vue-bundle-renderer) | `2.2.0` | `2.3.1` |\n| [which-typed-array](https://github.com/inspect-js/which-typed-array) | `1.1.21` | `1.1.22` |\n\nUpdates `@neteasecloudmusicapienhanced/api` from 4.34.3 to 4.36.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/releases\"\u003e@​neteasecloudmusicapienhanced/api's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eRelease v4.36.1\u003c/h1\u003e\n\u003ch2\u003e更新内容 / Changelog\u003c/h2\u003e\n\u003cp\u003e从 \u003ccode\u003ev4.35.2\u003c/code\u003e 到 \u003ccode\u003ev4.36.1\u003c/code\u003e 的提交记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: 请求异常 (83ee2cda34a20f64c6d343f7dfe22aa6a1c84b3d) (1454ee2)\u003c/li\u003e\n\u003cli\u003efeat: add NCBL encrypted scrobble interface and update related documentation (83ee2cd)\u003c/li\u003e\n\u003cli\u003efeat: 新增听歌打卡示例页面 (3c352b5)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e自动发布 via GitHub Actions\u003c/p\u003e\n\u003ch1\u003eRelease v4.35.2\u003c/h1\u003e\n\u003ch2\u003e更新内容 / Changelog\u003c/h2\u003e\n\u003cp\u003e从 \u003ccode\u003ev4.35.1\u003c/code\u003e 到 \u003ccode\u003ev4.35.2\u003c/code\u003e 的提交记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: 修复听歌打卡接口 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/167\"\u003e#167\u003c/a\u003e) (60ee927)\u003c/li\u003e\n\u003cli\u003efeat: 支持显示加密方式 (eb07a52)\u003c/li\u003e\n\u003cli\u003efeat(docs-format): 增加文档格式化工具 (6fc4231)\u003c/li\u003e\n\u003cli\u003erevert: some changes (fa69736)\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;feat: 增加文档格式化工具\u0026quot; (73a5e9d)\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;fix(deploy): 修复部分启动失败 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/196\"\u003e#196\u003c/a\u003e)\u0026quot; (dc6f56e)\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;refactor: 优化serverless入口文件\u0026quot; (2c9da85)\u003c/li\u003e\n\u003cli\u003erefactor: 优化serverless入口文件 (1db3544)\u003c/li\u003e\n\u003cli\u003efix(deploy): 修复部分启动失败 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/196\"\u003e#196\u003c/a\u003e) (395a80e)\u003c/li\u003e\n\u003cli\u003efeat: 增加文档格式化工具 (6550c7c)\u003c/li\u003e\n\u003cli\u003efeat: 增强配置生成逻辑，添加重试机制和日志记录 (c959866)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e自动发布 via GitHub Actions\u003c/p\u003e\n\u003ch1\u003eRelease v4.35.1\u003c/h1\u003e\n\u003ch2\u003e更新内容 / Changelog\u003c/h2\u003e\n\u003cp\u003e从 \u003ccode\u003ev4.35.0\u003c/code\u003e 到 \u003ccode\u003ev4.35.1\u003c/code\u003e 的提交记录：\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: 修复游客登陆接口 (e3a1c04)\u003c/li\u003e\n\u003cli\u003ebuild(packages): bump \u003ccode\u003e@​types/node\u003c/code\u003e from 25.5.0 to 25.9.2 (0300c1b)\u003c/li\u003e\n\u003cli\u003echore(deps): bump docker/login-action from 3 to 4 (a9c33de)\u003c/li\u003e\n\u003cli\u003echore(deps): bump aormsby/Fork-Sync-With-Upstream-action (6175d55)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e自动发布 via GitHub Actions\u003c/p\u003e\n\u003ch1\u003eRelease v4.35.0\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/1454ee216ce9bb4133879bad333e4d2aed21c80b\"\u003e\u003ccode\u003e1454ee2\u003c/code\u003e\u003c/a\u003e fix: 请求异常 (83ee2cda34a20f64c6d343f7dfe22aa6a1c84b3d)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/83ee2cda34a20f64c6d343f7dfe22aa6a1c84b3d\"\u003e\u003ccode\u003e83ee2cd\u003c/code\u003e\u003c/a\u003e feat: add NCBL encrypted scrobble interface and update related documentation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/3c352b5752fc73e1322b692dbfafe06137317ff7\"\u003e\u003ccode\u003e3c352b5\u003c/code\u003e\u003c/a\u003e feat: 新增听歌打卡示例页面\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/60ee927e3224ab675679d023065225af11bdc693\"\u003e\u003ccode\u003e60ee927\u003c/code\u003e\u003c/a\u003e fix: 修复听歌打卡接口 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/167\"\u003e#167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/eb07a525eb72e2f369f27d03cbae8a96faf90c40\"\u003e\u003ccode\u003eeb07a52\u003c/code\u003e\u003c/a\u003e feat: 支持显示加密方式\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/6fc4231142e2a91913cdf54f27cc9722391e30c0\"\u003e\u003ccode\u003e6fc4231\u003c/code\u003e\u003c/a\u003e feat(docs-format): 增加文档格式化工具\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/fa69736300708fc753b1e3782841bedae8e4b190\"\u003e\u003ccode\u003efa69736\u003c/code\u003e\u003c/a\u003e revert: some changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/73a5e9d7886510613e16b1796058339800a647de\"\u003e\u003ccode\u003e73a5e9d\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat: 增加文档格式化工具\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/dc6f56e8a8e03308016ff540135b6f7061dea125\"\u003e\u003ccode\u003edc6f56e\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;fix(deploy): 修复部分启动失败 (\u003ca href=\"https://redirect.github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/196\"\u003e#196\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/commit/2c9da8507d960196c7b44d25056187d8c8528c86\"\u003e\u003ccode\u003e2c9da85\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;refactor: 优化serverless入口文件\u0026quot;\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/compare/v4.34.3...v4.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@sentry/node` from 10.56.0 to 10.63.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/getsentry/sentry-javascript/releases\"\u003e@​sentry/node's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e10.63.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(browser): Add \u003ccode\u003eurl.full\u003c/code\u003e attribute to resource spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21846\"\u003e#21846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eextendIntegration\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21759\"\u003e#21759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eisTracingSuppressed\u003c/code\u003e to the async context strategy (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21785\"\u003e#21785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Pass normalizedRequest to the sampling context for root spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21833\"\u003e#21833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Add lru-memoizer diagnostics-channel integration to experimentalUseDiagnosticsChannelInjection (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(browser): Defer sending session envelope until browser is idle (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21844\"\u003e#21844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Improve waiting for tracing channel bindings (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21815\"\u003e#21815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Serialize streamed span status message to \u003ccode\u003esentry.status.message\u003c/code\u003e attribute (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21811\"\u003e#21811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(nextjs): Don't inject trace meta tags when Cache Components is enabled (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21141\"\u003e#21141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(opentelemetry): Strip leading ? and # from inferred http.query and http.fragment (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21848\"\u003e#21848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(tanstackstart-react): Drop server transactions for tunnel route requests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21769\"\u003e#21769\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003echore: Add external contributor to CHANGELOG.md (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21832\"\u003e#21832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Hoist transitive imports for bundles (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21858\"\u003e#21858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Mark http.query/http.fragment stripping for v11 url.query migration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21852\"\u003e#21852\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: Use Cloudflare nodejs_compat flag (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21659\"\u003e#21659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Add lru-memoizer diagnostics-channel integration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Restore caller context for callback tracing channels (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21863\"\u003e#21863\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(core): Move \u003ccode\u003espanStreamingIntegration\u003c/code\u003e setup into \u003ccode\u003eServerRuntimeClient\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21814\"\u003e#21814\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Infer orchestrion integration names (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21834\"\u003e#21834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Move node-fetch instrumentation away from InstrumentBase (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21778\"\u003e#21778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline Prisma instrumentation (v6 and v7) (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21819\"\u003e#21819\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline vendored mysql instrumentation (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21568\"\u003e#21568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Ensure ts3.8 has diagnostics channel shim (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21845\"\u003e#21845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Move mysql orchestrion integration onto bindTracingChannelToSpan (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21865\"\u003e#21865\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Set error attributes on span and simplify error info extraction (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21822\"\u003e#21822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: Introduce .unordered in node-integration-tests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21697\"\u003e#21697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(cloudflare): Align CF types and compat flags (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21835\"\u003e#21835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(e2e/hono): Isolate request-data extraction tests onto a dedicated route (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21869\"\u003e#21869\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration): Harden knex mysql2 healthcheck to fix flaky test (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21868\"\u003e#21868\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Fix flaky postgresjs basic transaction/error ordering (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21870\"\u003e#21870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Retry transient docker compose up failures (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(nuxt): Test \u003ccode\u003emysql\u003c/code\u003e instrumentation with orchestrion bundler plugin (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21782\"\u003e#21782\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003eWork in this release was contributed by \u003ca href=\"https://github.com/suzunn\"\u003e\u003ccode\u003e@​suzunn\u003c/code\u003e\u003c/a\u003e. Thank you for your contribution!\u003c/p\u003e\n\u003ch2\u003eBundle size 📦\u003c/h2\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003ePath\u003c/th\u003e\n\u003cth\u003eSize\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@​sentry/browser\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e26.97 KB\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@​sentry/browser\u003c/code\u003e - with treeshaking flags\u003c/td\u003e\n\u003ctd\u003e25.44 KB\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md\"\u003e@​sentry/node's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e10.63.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(browser): Add \u003ccode\u003eurl.full\u003c/code\u003e attribute to resource spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21846\"\u003e#21846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eextendIntegration\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21759\"\u003e#21759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eisTracingSuppressed\u003c/code\u003e to the async context strategy (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21785\"\u003e#21785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Pass normalizedRequest to the sampling context for root spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21833\"\u003e#21833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Add lru-memoizer diagnostics-channel integration to experimentalUseDiagnosticsChannelInjection (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(browser): Defer sending session envelope until browser is idle (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21844\"\u003e#21844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Improve waiting for tracing channel bindings (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21815\"\u003e#21815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Serialize streamed span status message to \u003ccode\u003esentry.status.message\u003c/code\u003e attribute (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21811\"\u003e#21811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(nextjs): Don't inject trace meta tags when Cache Components is enabled (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21141\"\u003e#21141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(opentelemetry): Strip leading ? and # from inferred http.query and http.fragment (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21848\"\u003e#21848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(tanstackstart-react): Drop server transactions for tunnel route requests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21769\"\u003e#21769\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003echore: Add external contributor to CHANGELOG.md (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21832\"\u003e#21832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Hoist transitive imports for bundles (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21858\"\u003e#21858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Mark http.query/http.fragment stripping for v11 url.query migration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21852\"\u003e#21852\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: Use Cloudflare nodejs_compat flag (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21659\"\u003e#21659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Add lru-memoizer diagnostics-channel integration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Restore caller context for callback tracing channels (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21863\"\u003e#21863\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(core): Move \u003ccode\u003espanStreamingIntegration\u003c/code\u003e setup into \u003ccode\u003eServerRuntimeClient\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21814\"\u003e#21814\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Infer orchestrion integration names (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21834\"\u003e#21834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Move node-fetch instrumentation away from InstrumentBase (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21778\"\u003e#21778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline Prisma instrumentation (v6 and v7) (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21819\"\u003e#21819\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline vendored mysql instrumentation (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21568\"\u003e#21568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Ensure ts3.8 has diagnostics channel shim (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21845\"\u003e#21845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Move mysql orchestrion integration onto bindTracingChannelToSpan (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21865\"\u003e#21865\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Set error attributes on span and simplify error info extraction (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21822\"\u003e#21822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: Introduce .unordered in node-integration-tests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21697\"\u003e#21697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(cloudflare): Align CF types and compat flags (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21835\"\u003e#21835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(e2e/hono): Isolate request-data extraction tests onto a dedicated route (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21869\"\u003e#21869\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration): Harden knex mysql2 healthcheck to fix flaky test (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21868\"\u003e#21868\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Fix flaky postgresjs basic transaction/error ordering (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21870\"\u003e#21870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Retry transient docker compose up failures (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(nuxt): Test \u003ccode\u003emysql\u003c/code\u003e instrumentation with orchestrion bundler plugin (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21782\"\u003e#21782\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003eWork in this release was contributed by \u003ca href=\"https://github.com/suzunn\"\u003e\u003ccode\u003e@​suzunn\u003c/code\u003e\u003c/a\u003e. Thank you for your contribution!\u003c/p\u003e\n\u003ch2\u003e10.62.0\u003c/h2\u003e\n\u003ch3\u003eImportant Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efeat(server-runtimes): Add v7 support for \u003ccode\u003evercelAiIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21613\"\u003e#21613\u003c/a\u003e)\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/2362e9f4ff0c95566ab4a11e3b0296172e539bfd\"\u003e\u003ccode\u003e2362e9f\u003c/code\u003e\u003c/a\u003e release: 10.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/5b51d5e9e52f1d21bdfd92def461e92d505fbb8e\"\u003e\u003ccode\u003e5b51d5e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/21874\"\u003e#21874\u003c/a\u003e from getsentry/prepare-release/10.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/4e16503ad41814f2d2dc3d742a5e0a36caa1d237\"\u003e\u003ccode\u003e4e16503\u003c/code\u003e\u003c/a\u003e meta(changelog): Update changelog for 10.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/690f77853e425ce32fd47a4bd1ce0b8b3109d793\"\u003e\u003ccode\u003e690f778\u003c/code\u003e\u003c/a\u003e test(node-integration): Harden knex mysql2 healthcheck to fix flaky test (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/429cdafe8f43bcaec682a12465c202e9f012abde\"\u003e\u003ccode\u003e429cdaf\u003c/code\u003e\u003c/a\u003e test(node-integration-tests): Fix flaky postgresjs basic transaction/error or...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/35998e687165579ff3aed07a3bcf871dd05f0691\"\u003e\u003ccode\u003e35998e6\u003c/code\u003e\u003c/a\u003e test(e2e/hono): Isolate request-data extraction tests onto a dedicated route ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/88e7ad5444ece21f074e53768cb8633e00fa3a2b\"\u003e\u003ccode\u003e88e7ad5\u003c/code\u003e\u003c/a\u003e feat(server-utils): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/e3161515dd5324e664b97e69ddcb7fa8ef6cd838\"\u003e\u003ccode\u003ee316151\u003c/code\u003e\u003c/a\u003e ref(server-utils): Move mysql orchestrion integration onto bindTracingChannel...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/e7c24a57210b8ac99eef3514bce4097d9bae848c\"\u003e\u003ccode\u003ee7c24a5\u003c/code\u003e\u003c/a\u003e feat(server-utils): Restore caller context for callback tracing channels (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/bf21b16ffd8cecc6627ca7db35d8d65567d47273\"\u003e\u003ccode\u003ebf21b16\u003c/code\u003e\u003c/a\u003e fix(nextjs): Don't inject trace meta tags when Cache Components is enabled (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/getsentry/sentry-javascript/compare/10.56.0...10.63.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@sentry/vue` from 10.56.0 to 10.63.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/getsentry/sentry-javascript/releases\"\u003e@​sentry/vue's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e10.63.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(browser): Add \u003ccode\u003eurl.full\u003c/code\u003e attribute to resource spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21846\"\u003e#21846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eextendIntegration\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21759\"\u003e#21759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eisTracingSuppressed\u003c/code\u003e to the async context strategy (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21785\"\u003e#21785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Pass normalizedRequest to the sampling context for root spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21833\"\u003e#21833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Add lru-memoizer diagnostics-channel integration to experimentalUseDiagnosticsChannelInjection (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(browser): Defer sending session envelope until browser is idle (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21844\"\u003e#21844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Improve waiting for tracing channel bindings (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21815\"\u003e#21815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Serialize streamed span status message to \u003ccode\u003esentry.status.message\u003c/code\u003e attribute (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21811\"\u003e#21811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(nextjs): Don't inject trace meta tags when Cache Components is enabled (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21141\"\u003e#21141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(opentelemetry): Strip leading ? and # from inferred http.query and http.fragment (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21848\"\u003e#21848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(tanstackstart-react): Drop server transactions for tunnel route requests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21769\"\u003e#21769\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003echore: Add external contributor to CHANGELOG.md (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21832\"\u003e#21832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Hoist transitive imports for bundles (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21858\"\u003e#21858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Mark http.query/http.fragment stripping for v11 url.query migration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21852\"\u003e#21852\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: Use Cloudflare nodejs_compat flag (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21659\"\u003e#21659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Add lru-memoizer diagnostics-channel integration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Restore caller context for callback tracing channels (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21863\"\u003e#21863\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(core): Move \u003ccode\u003espanStreamingIntegration\u003c/code\u003e setup into \u003ccode\u003eServerRuntimeClient\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21814\"\u003e#21814\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Infer orchestrion integration names (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21834\"\u003e#21834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Move node-fetch instrumentation away from InstrumentBase (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21778\"\u003e#21778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline Prisma instrumentation (v6 and v7) (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21819\"\u003e#21819\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline vendored mysql instrumentation (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21568\"\u003e#21568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Ensure ts3.8 has diagnostics channel shim (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21845\"\u003e#21845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Move mysql orchestrion integration onto bindTracingChannelToSpan (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21865\"\u003e#21865\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Set error attributes on span and simplify error info extraction (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21822\"\u003e#21822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: Introduce .unordered in node-integration-tests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21697\"\u003e#21697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(cloudflare): Align CF types and compat flags (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21835\"\u003e#21835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(e2e/hono): Isolate request-data extraction tests onto a dedicated route (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21869\"\u003e#21869\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration): Harden knex mysql2 healthcheck to fix flaky test (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21868\"\u003e#21868\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Fix flaky postgresjs basic transaction/error ordering (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21870\"\u003e#21870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Retry transient docker compose up failures (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(nuxt): Test \u003ccode\u003emysql\u003c/code\u003e instrumentation with orchestrion bundler plugin (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21782\"\u003e#21782\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003eWork in this release was contributed by \u003ca href=\"https://github.com/suzunn\"\u003e\u003ccode\u003e@​suzunn\u003c/code\u003e\u003c/a\u003e. Thank you for your contribution!\u003c/p\u003e\n\u003ch2\u003eBundle size 📦\u003c/h2\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003ePath\u003c/th\u003e\n\u003cth\u003eSize\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@​sentry/browser\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e26.97 KB\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@​sentry/browser\u003c/code\u003e - with treeshaking flags\u003c/td\u003e\n\u003ctd\u003e25.44 KB\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md\"\u003e@​sentry/vue's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e10.63.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(browser): Add \u003ccode\u003eurl.full\u003c/code\u003e attribute to resource spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21846\"\u003e#21846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eextendIntegration\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21759\"\u003e#21759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Add \u003ccode\u003eisTracingSuppressed\u003c/code\u003e to the async context strategy (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21785\"\u003e#21785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(core): Pass normalizedRequest to the sampling context for root spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21833\"\u003e#21833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Add lru-memoizer diagnostics-channel integration to experimentalUseDiagnosticsChannelInjection (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(node): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(browser): Defer sending session envelope until browser is idle (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21844\"\u003e#21844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Improve waiting for tracing channel bindings (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21815\"\u003e#21815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(core): Serialize streamed span status message to \u003ccode\u003esentry.status.message\u003c/code\u003e attribute (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21811\"\u003e#21811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(nextjs): Don't inject trace meta tags when Cache Components is enabled (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21141\"\u003e#21141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(opentelemetry): Strip leading ? and # from inferred http.query and http.fragment (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21848\"\u003e#21848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(tanstackstart-react): Drop server transactions for tunnel route requests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21769\"\u003e#21769\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003echore: Add external contributor to CHANGELOG.md (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21832\"\u003e#21832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Hoist transitive imports for bundles (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21858\"\u003e#21858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: Mark http.query/http.fragment stripping for v11 url.query migration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21852\"\u003e#21852\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: Use Cloudflare nodejs_compat flag (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21659\"\u003e#21659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Add lru-memoizer diagnostics-channel integration (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21786\"\u003e#21786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21706\"\u003e#21706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(server-utils): Restore caller context for callback tracing channels (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21863\"\u003e#21863\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(core): Move \u003ccode\u003espanStreamingIntegration\u003c/code\u003e setup into \u003ccode\u003eServerRuntimeClient\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21814\"\u003e#21814\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Infer orchestrion integration names (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21834\"\u003e#21834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Move node-fetch instrumentation away from InstrumentBase (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21778\"\u003e#21778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline Prisma instrumentation (v6 and v7) (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21819\"\u003e#21819\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(node): Streamline vendored mysql instrumentation (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21568\"\u003e#21568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Ensure ts3.8 has diagnostics channel shim (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21845\"\u003e#21845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Move mysql orchestrion integration onto bindTracingChannelToSpan (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21865\"\u003e#21865\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eref(server-utils): Set error attributes on span and simplify error info extraction (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21822\"\u003e#21822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: Introduce .unordered in node-integration-tests (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21697\"\u003e#21697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(cloudflare): Align CF types and compat flags (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21835\"\u003e#21835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(e2e/hono): Isolate request-data extraction tests onto a dedicated route (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21869\"\u003e#21869\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration): Harden knex mysql2 healthcheck to fix flaky test (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21868\"\u003e#21868\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Fix flaky postgresjs basic transaction/error ordering (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21870\"\u003e#21870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(node-integration-tests): Retry transient docker compose up failures (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest(nuxt): Test \u003ccode\u003emysql\u003c/code\u003e instrumentation with orchestrion bundler plugin (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21782\"\u003e#21782\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003eWork in this release was contributed by \u003ca href=\"https://github.com/suzunn\"\u003e\u003ccode\u003e@​suzunn\u003c/code\u003e\u003c/a\u003e. Thank you for your contribution!\u003c/p\u003e\n\u003ch2\u003e10.62.0\u003c/h2\u003e\n\u003ch3\u003eImportant Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efeat(server-runtimes): Add v7 support for \u003ccode\u003evercelAiIntegration\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/21613\"\u003e#21613\u003c/a\u003e)\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/2362e9f4ff0c95566ab4a11e3b0296172e539bfd\"\u003e\u003ccode\u003e2362e9f\u003c/code\u003e\u003c/a\u003e release: 10.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/5b51d5e9e52f1d21bdfd92def461e92d505fbb8e\"\u003e\u003ccode\u003e5b51d5e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/21874\"\u003e#21874\u003c/a\u003e from getsentry/prepare-release/10.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/4e16503ad41814f2d2dc3d742a5e0a36caa1d237\"\u003e\u003ccode\u003e4e16503\u003c/code\u003e\u003c/a\u003e meta(changelog): Update changelog for 10.63.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/690f77853e425ce32fd47a4bd1ce0b8b3109d793\"\u003e\u003ccode\u003e690f778\u003c/code\u003e\u003c/a\u003e test(node-integration): Harden knex mysql2 healthcheck to fix flaky test (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/429cdafe8f43bcaec682a12465c202e9f012abde\"\u003e\u003ccode\u003e429cdaf\u003c/code\u003e\u003c/a\u003e test(node-integration-tests): Fix flaky postgresjs basic transaction/error or...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/35998e687165579ff3aed07a3bcf871dd05f0691\"\u003e\u003ccode\u003e35998e6\u003c/code\u003e\u003c/a\u003e test(e2e/hono): Isolate request-data extraction tests onto a dedicated route ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/88e7ad5444ece21f074e53768cb8633e00fa3a2b\"\u003e\u003ccode\u003e88e7ad5\u003c/code\u003e\u003c/a\u003e feat(server-utils): Expose channel-based, streamlined \u003ccode\u003efastifyIntegration\u003c/code\u003e (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/e3161515dd5324e664b97e69ddcb7fa8ef6cd838\"\u003e\u003ccode\u003ee316151\u003c/code\u003e\u003c/a\u003e ref(server-utils): Move mysql orchestrion integration onto bindTracingChannel...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/e7c24a57210b8ac99eef3514bce4097d9bae848c\"\u003e\u003ccode\u003ee7c24a5\u003c/code\u003e\u003c/a\u003e feat(server-utils): Restore caller context for callback tracing channels (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/bf21b16ffd8cecc6627ca7db35d8d65567d47273\"\u003e\u003ccode\u003ebf21b16\u003c/code\u003e\u003c/a\u003e fix(nextjs): Don't inject trace meta tags when Cache Components is enabled (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/getsentry/sentry-javascript/compare/10.56.0...10.63.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@simplewebauthn/server` from 13.3.1 to 13.3.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/releases\"\u003e@​simplewebauthn/server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev13.3.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v4 Low (2.0) security vulnerability identified in \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e. See the security advisory linked below for more information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e allowing a maliciously-crafted attestation statement's \u003ccode\u003ex5c\u003c/code\u003e to contain a self-signed \u0026quot;root certificate\u0026quot; instead of chaining back to an RP-specified trust anchor (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-6hxq-p678-4hr2\"\u003eGHSA-6hxq-p678-4hr2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md\"\u003e@​simplewebauthn/server's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev13.3.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v4 Low (2.0) security vulnerability identified in\n\u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e. See the security advisory linked below for more information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e allowing a maliciously-crafted\nattestation statement's \u003ccode\u003ex5c\u003c/code\u003e to contain a self-signed \u0026quot;root certificate\u0026quot; instead of chaining back\nto an RP-specified trust anchor\n(\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-6hxq-p678-4hr2\"\u003eGHSA-6hxq-p678-4hr2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/84656fff764256609193b9e0a0661c82dd379ebb\"\u003e\u003ccode\u003e84656ff\u003c/code\u003e\u003c/a\u003e Update version to 13.3.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/dd0d73c716a528e6645efafbd43a972b64df71f9\"\u003e\u003ccode\u003edd0d73c\u003c/code\u003e\u003c/a\u003e Fail cert path validation closed instead\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/213e9ba052632c9915704edbab48d4667141c3f2\"\u003e\u003ccode\u003e213e9ba\u003c/code\u003e\u003c/a\u003e Add test for failure to chain to trust anchor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/989507a62d23960933b44018c1b090da0e73c803\"\u003e\u003ccode\u003e989507a\u003c/code\u003e\u003c/a\u003e Add tests for notAfter enforcement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/b55f4b957881ca6a0c93d05aebca6cdf6424fffb\"\u003e\u003ccode\u003eb55f4b9\u003c/code\u003e\u003c/a\u003e Move explanation into test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/7bed04ce33a8fc2e4b0c2f8c84d7c171f001905f\"\u003e\u003ccode\u003e7bed04c\u003c/code\u003e\u003c/a\u003e Update comments around cert chain validity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/6ee964484ad9bb9365c45c95b32e0065db45ed96\"\u003e\u003ccode\u003e6ee9644\u003c/code\u003e\u003c/a\u003e Add new tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/c23890af1a0e741b0451461eb713eb0d4607d096\"\u003e\u003ccode\u003ec23890a\u003c/code\u003e\u003c/a\u003e Update existing test to use helpers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/8d02ed4e546859aaf3d0816bfe35917efcef88a7\"\u003e\u003ccode\u003e8d02ed4\u003c/code\u003e\u003c/a\u003e Add X.509 cert helpers for tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/8a53d70f42bcbb7c744ef1b90e6db35bc4b26d06\"\u003e\u003ccode\u003e8a53d70\u003c/code\u003e\u003c/a\u003e Use X509ChainBuilder for chain validation\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.2/packages/server\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.17.0 to 1.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.18.1 — June 21, 2026\u003c/h2\u003e\n\u003cp\u003eThis release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10913\"\u003e#10913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10917\"\u003e#10917\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10930\"\u003e#10930\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10942\"\u003e#10942\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10993\"\u003e#10993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRuntime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10959\"\u003e#10959\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11021\"\u003e#11021\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAxiosURLSearchParams: Switched the encoder callback to an arrow function so \u003ccode\u003eencoder.call(this)\u003c/code\u003e receives the \u003ccode\u003eAxiosURLSearchParams\u003c/code\u003e instance correctly. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDocumentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11007\"\u003e#11007\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11010\"\u003e#11010\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11023\"\u003e#11023\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11025\"\u003e#11025\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eDependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11011\"\u003e#11011\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11012\"\u003e#11012\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11013\"\u003e#11013\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11014\"\u003e#11014\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11015\"\u003e#11015\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11016\"\u003e#11016\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11017\"\u003e#11017\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11026\"\u003e#11026\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webdevelopersrinu\"\u003e\u003ccode\u003e@​webdevelopersrinu\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10913\"\u003e#10913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sijie-Z\"\u003e\u003ccode\u003e@​sijie-Z\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10993\"\u003e#10993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bartlomieju\"\u003e\u003ccode\u003e@​bartlomieju\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11023\"\u003e#11023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JSap0914\"\u003e\u003ccode\u003e@​JSap0914\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.18.0...v1.18.1\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.0 — June 13, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eRedirect Header Safety:\u003c/strong\u003e Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10892\"\u003e#10892\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eURL And Request Hardening:\u003c/strong\u003e Rejects malformed \u003ccode\u003ehttp:\u003c/code\u003e and \u003ccode\u003ehttps:\u003c/code\u003e URLs that omit \u003ccode\u003e//\u003c/code\u003e with \u003ccode\u003eERR_INVALID_URL\u003c/code\u003e, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local \u003ccode\u003eNO_PROXY\u003c/code\u003e matching. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/11000\"\u003e#11000\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eStatus Validation:\u003c/strong\u003e Added \u003ccode\u003etransitional.validateStatusUndefinedResolves\u003c/code\u003e so applications can opt in to treating \u003ccode\u003evalidateStatus: undefined\u003c/code\u003e like the option was omitted, while \u003ccode\u003evalidateStatus: null\u003c/code\u003e remains the explicit way to accept every status. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10899\"\u003e#10899\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDocumentation:\u003c/strong\u003e Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the \u003ccode\u003eproxy\u003c/code\u003e request config as Node.js-only in the advanced docs. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10984\"\u003e#10984\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10988\"\u003e#10988\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10992\"\u003e#10992\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10995\"\u003e#10995\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003e@babel/core\u003c/code\u003e, \u003ccode\u003e@babel/preset-env\u003c/code\u003e, \u003ccode\u003e@commitlint/cli\u003c/code\u003e, \u003ccode\u003e@commitlint/config-conventional\u003c/code\u003e, \u003ccode\u003e@rollup/plugin-babel\u003c/code\u003e, \u003ccode\u003e@rollup/plugin-commonjs\u003c/code\u003e, \u003ccode\u003e@vitest/browser\u003c/code\u003e, \u003ccode\u003e@vitest/browser-playwright\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003elint-staged\u003c/code\u003e, \u003ccode\u003erollup\u003c/code\u003e, \u003ccode\u003evitest\u003c/code\u003e, and \u003ccode\u003eactions/checkout\u003c/code\u003e. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10989\"\u003e#10989\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10996\"\u003e#10996\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10997\"\u003e#10997\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eRelease Metadata:\u003c/strong\u003e Prepared the 1.18.0 release by updating package metadata and the runtime \u003ccode\u003eVERSION\u003c/code\u003e value. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/11003\"\u003e#11003\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csumma...\n\n_Description has been truncated_","html_url":"https://github.com/QQXIAOZHOU/voicehub2/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/QQXIAOZHOU%2Fvoicehub2/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}},{"old_version":"6.0.5","new_version":"7.5.16","update_type":"major","path":null,"pr_created_at":"2026-07-03T22:55:36.000Z","version_change":"6.0.5 → 7.5.16","issue":{"uuid":"4806740855","node_id":"PR_kwDODgMeI87twAR6","number":46,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 30 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-03T22:55:36.000Z","updated_at":"2026-07-03T22:56:14.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":30,"packages":[{"name":"@babel/core","old_version":"7.11.1","new_version":"7.29.6","repository_url":"https://github.com/babel/babel"},{"name":"tar","old_version":"6.0.5","new_version":"7.5.16","repository_url":"https://github.com/isaacs/node-tar"},{"name":"webpack-dev-server","old_version":"3.11.0","new_version":"5.2.5","repository_url":"https://github.com/webpack/webpack-dev-server"},{"name":"json5","old_version":"1.0.1","new_version":"1.0.2","repository_url":"https://github.com/json5/json5"},{"name":"postcss","old_version":"7.0.13","new_version":"8.5.16","repository_url":"https://github.com/postcss/postcss"},{"name":"loader-utils","old_version":"1.2.3","new_version":"1.4.2","repository_url":"https://github.com/webpack/loader-utils"},{"name":"base-x","old_version":"3.0.5","new_version":"3.0.11","repository_url":"https://github.com/cryptocoinjs/base-x"},{"name":"bn.js","old_version":"4.11.9","new_version":"4.12.4","repository_url":"https://github.com/indutny/bn.js"},{"name":"qs","old_version":"6.5.2","new_version":"removed","repository_url":"https://github.com/ljharb/qs"},{"name":"braces","old_version":"3.0.2","new_version":"3.0.3","repository_url":"https://github.com/micromatch/braces"},{"name":"cipher-base","old_version":"1.0.4","new_version":"1.0.7","repository_url":"https://github.com/crypto-browserify/cipher-base"},{"name":"elliptic","old_version":"6.5.3","new_version":"removed","repository_url":"https://github.com/indutny/elliptic"},{"name":"flatted","old_version":"2.0.2","new_version":"3.4.2","repository_url":"https://github.com/WebReflection/flatted"},{"name":"lodash","old_version":"4.17.19","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"serialize-javascript","old_version":"4.0.0","new_version":"7.0.7","repository_url":"https://github.com/yahoo/serialize-javascript"},{"name":"sha.js","old_version":"2.4.11","new_version":"2.4.12","repository_url":"https://github.com/crypto-browserify/sha.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 16 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.11.1` | `7.29.6` |\n| [tar](https://github.com/isaacs/node-tar) | `6.0.5` | `7.5.16` |\n| [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `3.11.0` | `5.2.5` |\n| [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` |\n| [postcss](https://github.com/postcss/postcss) | `7.0.13` | `8.5.16` |\n| [loader-utils](https://github.com/webpack/loader-utils) | `1.2.3` | `1.4.2` |\n| [base-x](https://github.com/cryptocoinjs/base-x) | `3.0.5` | `3.0.11` |\n| [bn.js](https://github.com/indutny/bn.js) | `4.11.9` | `4.12.4` |\n| [qs](https://github.com/ljharb/qs) | `6.5.2` | `removed` |\n| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |\n| [cipher-base](https://github.com/crypto-browserify/cipher-base) | `1.0.4` | `1.0.7` |\n| [elliptic](https://github.com/indutny/elliptic) | `6.5.3` | `removed` |\n| [flatted](https://github.com/WebReflection/flatted) | `2.0.2` | `3.4.2` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.19` | `4.18.1` |\n| [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `4.0.0` | `7.0.7` |\n| [sha.js](https://github.com/crypto-browserify/sha.js) | `2.4.11` | `2.4.12` |\n\n\nUpdates `@babel/core` from 7.11.1 to 7.29.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17782\"\u003e#17782\u003c/a\u003e Improve trailing comma comment handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:memo: Documentation\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17847\"\u003e#17847\u003c/a\u003e Replace npmjs.com links with npmx.dev (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509\"\u003e\u003ccode\u003e04ea6b2\u003c/code\u003e\u003c/a\u003e v7.29.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb\"\u003e\u003ccode\u003e99f498a\u003c/code\u003e\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001\"\u003e#18001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc\"\u003e\u003ccode\u003efeba0a3\u003c/code\u003e\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998\"\u003e#17998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/aa8394e454337d118ac3d40bfa3ee1a3cb3f3ed2\"\u003e\u003ccode\u003eaa8394e\u003c/code\u003e\u003c/a\u003e v7.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/ad0d03f0c92404a60ec6b1c12f15febd38e2397a\"\u003e\u003ccode\u003ead0d03f\u003c/code\u003e\u003c/a\u003e [7.x backport] feat: Allow specifying startLine in code frame (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17739\"\u003e#17739\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17\"\u003e\u003ccode\u003ed7f4008\u003c/code\u003e\u003c/a\u003e v7.28.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/e130225028e93e106135586f344cfa44c4aac847\"\u003e\u003ccode\u003ee130225\u003c/code\u003e\u003c/a\u003e Polish(standalone): improve message on invalid preset/plugin (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17606\"\u003e#17606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99dcba5e71de3bd81ce14077cfa5b6df58e9b177\"\u003e\u003ccode\u003e99dcba5\u003c/code\u003e\u003c/a\u003e chore: enable some ts-eslint rules (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17592\"\u003e#17592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/c92c4919771105140015167f25f7bacac77c90d9\"\u003e\u003ccode\u003ec92c491\u003c/code\u003e\u003c/a\u003e Improve Unicode handling in code-frame tokenizer (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17589\"\u003e#17589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/d725e399fd6a4da463cff4918cf71aa03b8beb14\"\u003e\u003ccode\u003ed725e39\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eBABEL_7_TO_8_DANGEROUSLY_DISABLE_VERSION_CHECK\u003c/code\u003e (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17569\"\u003e#17569\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.6/packages/babel-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​babel/core\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 6.0.5 to 7.5.16\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/releases\"\u003etar's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.13\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/npm/node-tar/compare/v6.1.12...v6.1.13\"\u003e6.1.13\u003c/a\u003e (2022-12-07)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/npm/node-tar/commit/cc4e0ddfe523a0bce383846a67442c637a65d486\"\u003e\u003ccode\u003ecc4e0dd\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/npm/node-tar/pull/343\"\u003e#343\u003c/a\u003e bump minipass from 3.3.6 to 4.0.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.12\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/npm/node-tar/compare/v6.1.11...v6.1.12\"\u003e6.1.12\u003c/a\u003e (2022-10-31)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/npm/node-tar/commit/57493ee66ece50d62114e02914282fc37be3a91a\"\u003e\u003ccode\u003e57493ee\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/npm/node-tar/pull/332\"\u003e#332\u003c/a\u003e ensuring close event is emited after stream has ended (\u003ca href=\"https://github.com/webark\"\u003e\u003ccode\u003e@​webark\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/npm/node-tar/commit/b003c64f624332e24e19b30dc011069bb6708680\"\u003e\u003ccode\u003eb003c64\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/npm/node-tar/pull/314\"\u003e#314\u003c/a\u003e replace deprecated String.prototype.substr() (\u003ca href=\"https://redirect.github.com/isaacs/node-tar/issues/314\"\u003e#314\u003c/a\u003e) (\u003ca href=\"https://github.com/CommanderRoot\"\u003e\u003ccode\u003e@​CommanderRoot\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lukekarrys\"\u003e\u003ccode\u003e@​lukekarrys\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/npm/node-tar/commit/f12992932f171ea248b27fad95e7d489a56d31ed\"\u003e\u003ccode\u003ef129929\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/npm/node-tar/pull/313\"\u003e#313\u003c/a\u003e remove dead link to benchmarks (\u003ca href=\"https://redirect.github.com/isaacs/node-tar/issues/313\"\u003e#313\u003c/a\u003e) (\u003ca href=\"https://github.com/yetzt\"\u003e\u003ccode\u003e@​yetzt\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/npm/node-tar/commit/c1faa9f44001dfb0bc7638b2850eb6058bd56a4a\"\u003e\u003ccode\u003ec1faa9f\u003c/code\u003e\u003c/a\u003e add examples/explanation of using tar.t (\u003ca href=\"https://github.com/isaacs\"\u003e\u003ccode\u003e@​isaacs\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/302f51ff3f8eefeccc06be4caf7d0de9b7c321d7\"\u003e\u003ccode\u003e302f51f\u003c/code\u003e\u003c/a\u003e fix inconsequential typo in PENDINGLINKS symbol name\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/55dbb99b27640bb12b2ac059b26883c23523b3e3\"\u003e\u003ccode\u003e55dbb99\u003c/code\u003e\u003c/a\u003e remove some uses of mutate-fs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/87cc309f13c21d598b0b833235d387a252455058\"\u003e\u003ccode\u003e87cc309\u003c/code\u003e\u003c/a\u003e 7.5.15\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7aef486f0d21c10fd7790b16b1b28f04648cf334\"\u003e\u003ccode\u003e7aef486\u003c/code\u003e\u003c/a\u003e fix: regression in pending links detection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/6244eb33846bbd407443f5d0e339bd8c91663cd6\"\u003e\u003ccode\u003e6244eb3\u003c/code\u003e\u003c/a\u003e 7.5.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9704d8c6f639573775133cbbd541aba83cb46c9c\"\u003e\u003ccode\u003e9704d8c\u003c/code\u003e\u003c/a\u003e stricter protection against hardlinks preempting their targets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/700734f9aeb113bcc5f1400d81b8be7d499e54a2\"\u003e\u003ccode\u003e700734f\u003c/code\u003e\u003c/a\u003e update workflows and deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v6.0.5...v7.5.16\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~isaacs\"\u003eisaacs\u003c/a\u003e, a new releaser for tar since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `webpack-dev-server` from 3.11.0 to 5.2.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/webpack/webpack-dev-server/releases\"\u003ewebpack-dev-server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSkip the HMR WebSocket path when forwarding upgrade requests to user-defined proxies, so custom proxy WebSocket upgrades are no longer intercepted by the dev server. (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5680\"\u003e#5680\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.2.4\u003c/h2\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.3...v5.2.4\"\u003e5.2.4\u003c/a\u003e (2026-05-11)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eset Cross-Origin-Resource-Policy header to prevent source code theft over HTTP\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.2.3\u003c/h2\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.2...v5.2.3\"\u003e5.2.3\u003c/a\u003e (2026-01-12)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ecause\u003c/code\u003e for \u003ccode\u003eerrorObject\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5518\"\u003e#5518\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/37b033da2c48335178495a1987c469a26ef3de60\"\u003e37b033d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecompatibility with event target and universal target and lazy compilation  (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/574026c44b9c51f0bbd2f5a2836c54607289a071\"\u003e574026c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoverlay:\u003c/strong\u003e add ESC key to dismiss overlay (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5598\"\u003e#5598\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/f91baa8831e061e2998849966b8002b40b83fb07\"\u003ef91baa8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eprogress indicator styles (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5557\"\u003e#5557\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/41a53a1accdb0a90785d82cbe8a079794eeed3c8\"\u003e41a53a1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupgrade selfsigned to v5\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.2.2\u003c/h2\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.1...v5.2.2\"\u003e5.2.2\u003c/a\u003e (2025-06-03)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u0026quot;Overlay enabled\u0026quot; false positive (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/18e72ee3e57a6e7598a6c068c0ff7c7bb6a857f1\"\u003e18e72ee\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edo not crush when error is null for runtime errors (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5447\"\u003e#5447\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/309991f947baa0354140b9930a9654ac792e20c4\"\u003e309991f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove unnecessary header \u003ccode\u003eX_TEST\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5451\"\u003e#5451\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/64a6124bf1b4d158bb42a4341dd03121ae3759fa\"\u003e64a6124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erespect the \u003ccode\u003eallowedHosts\u003c/code\u003e option for cross-origin header check (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5510\"\u003e#5510\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/03d12141bf7be09dfb14e91e5c834ee63bd9a9a2\"\u003e03d1214\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.2.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.0...v6.0.0\"\u003e5.2.1\u003c/a\u003e (2025-03-26)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecross-origin requests are not allowed unless allowed by \u003ccode\u003eAccess-Control-Allow-Origin\u003c/code\u003e header\u003c/li\u003e\n\u003cli\u003erequests with an IP addresses in the \u003ccode\u003eOrigin\u003c/code\u003e header are not allowed to connect to WebSocket server unless configured by \u003ccode\u003eallowedHosts\u003c/code\u003e or it different from the \u003ccode\u003eHost\u003c/code\u003e header\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe above changes may make the dev server not work if you relied on such behavior, but unfortunately they carry security risks, so they were considered as fixes.\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eprevent overlay for errors caught by React error boundaries (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5431\"\u003e#5431\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be\"\u003e8c1abc9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etake the first network found instead of the last one, this restores the same behavior as 5.0.4 (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5411\"\u003e#5411\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96\"\u003effd0b86\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md\"\u003ewebpack-dev-server's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.2.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSkip the HMR WebSocket path when forwarding upgrade requests to user-defined proxies, so custom proxy WebSocket upgrades are no longer intercepted by the dev server. (by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/pull/5680\"\u003e#5680\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAll notable changes to this project will be documented in this file. See \u003ca href=\"https://github.com/conventional-changelog/standard-version\"\u003estandard-version\u003c/a\u003e for commit guidelines.\u003c/p\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.3...v5.2.4\"\u003e5.2.4\u003c/a\u003e (2026-05-11)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eset Cross-Origin-Resource-Policy header to prevent source code theft over HTTP\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.2...v5.2.3\"\u003e5.2.3\u003c/a\u003e (2026-01-12)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ecause\u003c/code\u003e for \u003ccode\u003eerrorObject\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5518\"\u003e#5518\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/37b033da2c48335178495a1987c469a26ef3de60\"\u003e37b033d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecompatibility with event target and universal target and lazy compilation (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/574026c44b9c51f0bbd2f5a2836c54607289a071\"\u003e574026c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoverlay:\u003c/strong\u003e add ESC key to dismiss overlay (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5598\"\u003e#5598\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/f91baa8831e061e2998849966b8002b40b83fb07\"\u003ef91baa8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eprogress indicator styles (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5557\"\u003e#5557\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/41a53a1accdb0a90785d82cbe8a079794eeed3c8\"\u003e41a53a1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupgrade selfsigned to v5\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.1...v5.2.2\"\u003e5.2.2\u003c/a\u003e (2025-06-03)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u0026quot;Overlay enabled\u0026quot; false positive (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/18e72ee3e57a6e7598a6c068c0ff7c7bb6a857f1\"\u003e18e72ee\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edo not crush when error is null for runtime errors (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5447\"\u003e#5447\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/309991f947baa0354140b9930a9654ac792e20c4\"\u003e309991f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove unnecessary header \u003ccode\u003eX_TEST\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5451\"\u003e#5451\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/64a6124bf1b4d158bb42a4341dd03121ae3759fa\"\u003e64a6124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erespect the \u003ccode\u003eallowedHosts\u003c/code\u003e option for cross-origin header check (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5510\"\u003e#5510\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/03d12141bf7be09dfb14e91e5c834ee63bd9a9a2\"\u003e03d1214\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.2.0...v6.0.0\"\u003e5.2.1\u003c/a\u003e (2025-03-26)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecross-origin requests are not allowed unless allowed by \u003ccode\u003eAccess-Control-Allow-Origin\u003c/code\u003e header\u003c/li\u003e\n\u003cli\u003erequests with an IP addresses in the \u003ccode\u003eOrigin\u003c/code\u003e header are not allowed to connect to WebSocket server unless configured by \u003ccode\u003eallowedHosts\u003c/code\u003e or it different from the \u003ccode\u003eHost\u003c/code\u003e header\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe above changes may make the dev server not work if you relied on such behavior, but unfortunately they carry security risks, so they were considered as fixes.\u003c/p\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eprevent overlay for errors caught by React error boundaries (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5431\"\u003e#5431\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be\"\u003e8c1abc9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etake the first network found instead of the last one, this restores the same behavior as 5.0.4 (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5411\"\u003e#5411\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96\"\u003effd0b86\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v5.1.0...v5.2.0\"\u003e5.2.0\u003c/a\u003e (2024-12-11)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/c3ee325819f64ceb77f85dcf727b6b5ede85cbc4\"\u003e\u003ccode\u003ec3ee325\u003c/code\u003e\u003c/a\u003e chore(release): new release (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5682\"\u003e#5682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/60173be90873b187b41fc2009a4de253732988a1\"\u003e\u003ccode\u003e60173be\u003c/code\u003e\u003c/a\u003e feat: add changeset validation and release workflow (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5680\"\u003e#5680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/948d5e6089bebcd801dac2cbe3ed4f80b64f117a\"\u003e\u003ccode\u003e948d5e6\u003c/code\u003e\u003c/a\u003e fix(proxy): match the HMR upgrade path exactly like the ws server (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5678\"\u003e#5678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/93e8996124332a6c94c4d3e0f8e5f2cf95321c67\"\u003e\u003ccode\u003e93e8996\u003c/code\u003e\u003c/a\u003e fix: skip HMR websocket path when forwarding upgrades to user-defined proxies...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/fd401308f1cc026262880e2dab810004d6444282\"\u003e\u003ccode\u003efd40130\u003c/code\u003e\u003c/a\u003e chore(release): 5.2.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/ece4f3617bea31fb6d3833f69a32b6c289959a49\"\u003e\u003ccode\u003eece4f36\u003c/code\u003e\u003c/a\u003e chore: update deps (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5661\"\u003e#5661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/a2161442a314a06a97e25d1404d08410cb4e9c51\"\u003e\u003ccode\u003ea216144\u003c/code\u003e\u003c/a\u003e ci: fix test (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5658\"\u003e#5658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/df073c53a8cefb54210b43813fa6ee60364a554e\"\u003e\u003ccode\u003edf073c5\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/b550a702bd4246d1724513b70de0bfbe6604672f\"\u003e\u003ccode\u003eb550a70\u003c/code\u003e\u003c/a\u003e chore(release): 5.2.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/webpack-dev-server/commit/9704dc52e3f696ae1446428c25882745e9b65cbb\"\u003e\u003ccode\u003e9704dc5\u003c/code\u003e\u003c/a\u003e chore: upgrade selfsigned to v5 and remove node-forge dependency (\u003ca href=\"https://redirect.github.com/webpack/webpack-dev-server/issues/5618\"\u003e#5618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/webpack/webpack-dev-server/compare/v3.11.0...v5.2.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for webpack-dev-server since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `json5` from 1.0.1 to 1.0.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/json5/json5/releases\"\u003ejson5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Properties with the name \u003ccode\u003e__proto__\u003c/code\u003e are added to objects and arrays. (\u003ca href=\"https://redirect.github.com/json5/json5/issues/199\"\u003e#199\u003c/a\u003e) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (\u003ca href=\"https://redirect.github.com/json5/json5/issues/295\"\u003e#295\u003c/a\u003e). This has been backported to v1. (\u003ca href=\"https://redirect.github.com/json5/json5/issues/298\"\u003e#298\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/json5/json5/blob/main/CHANGELOG.md\"\u003ejson5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003eUnreleased [\u003ca href=\"https://github.com/json5/json5/tree/main\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.2.3...HEAD\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003ch3\u003ev2.2.3 [\u003ca href=\"https://github.com/json5/json5/tree/v2.2.3\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.2.2...v2.2.3\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: json5@2.2.3 is now the 'latest' release according to npm instead of\nv1.0.2. (\u003ca href=\"https://redirect.github.com/json5/json5/issues/299\"\u003e#299\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev2.2.2 [\u003ca href=\"https://github.com/json5/json5/tree/v2.2.2\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.2.1...v2.2.2\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Properties with the name \u003ccode\u003e__proto__\u003c/code\u003e are added to objects and arrays.\n(\u003ca href=\"https://redirect.github.com/json5/json5/issues/199\"\u003e#199\u003c/a\u003e) This also fixes a prototype pollution vulnerability reported by\nJonathan Gregson! (\u003ca href=\"https://redirect.github.com/json5/json5/issues/295\"\u003e#295\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev2.2.1 [\u003ca href=\"https://github.com/json5/json5/tree/v2.2.1\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.2.0...v2.2.1\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Removed dependence on minimist to patch CVE-2021-44906. (\u003ca href=\"https://redirect.github.com/json5/json5/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev2.2.0 [\u003ca href=\"https://github.com/json5/json5/tree/v2.2.0\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.1.3...v2.2.0\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNew: Accurate and documented TypeScript declarations are now included. There\nis no need to install \u003ccode\u003e@types/json5\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/json5/json5/issues/236\"\u003e#236\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/json5/json5/issues/244\"\u003e#244\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev2.1.3 [\u003ca href=\"https://github.com/json5/json5/tree/v2.1.3\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.1.2...v2.1.3\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: An out of memory bug when parsing numbers has been fixed. (\u003ca href=\"https://redirect.github.com/json5/json5/issues/228\"\u003e#228\u003c/a\u003e,\n\u003ca href=\"https://redirect.github.com/json5/json5/issues/229\"\u003e#229\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev2.1.2 [\u003ca href=\"https://github.com/json5/json5/tree/v2.1.2\"\u003ecode\u003c/a\u003e, \u003ca href=\"https://github.com/json5/json5/compare/v2.1.1...v2.1.2\"\u003ediff\u003c/a\u003e]\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/json5/json5/commit/a62db1e51e1031d92ac260f5bb38bbed1fdbc754\"\u003e\u003ccode\u003ea62db1e\u003c/code\u003e\u003c/a\u003e 1.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/json5/json5/commit/e0c23fe458a77c0b2cdb271376be5d8d0908133c\"\u003e\u003ccode\u003ee0c23fe\u003c/code\u003e\u003c/a\u003e docs: update CHANGELOG for v1.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/json5/json5/commit/62a65408408d40aeea14c7869ed327acead12972\"\u003e\u003ccode\u003e62a6540\u003c/code\u003e\u003c/a\u003e fix: add \u003cstrong\u003eproto\u003c/strong\u003e to objects and arrays\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/json5/json5/compare/v1.0.1...v1.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@babel/traverse` from 7.11.0 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/traverse's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/aa8394e454337d118ac3d40bfa3ee1a3cb3f3ed2\"\u003e\u003ccode\u003eaa8394e\u003c/code\u003e\u003c/a\u003e v7.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/84366a8ea453814e732784db74cf2e2b6635eb6f\"\u003e\u003ccode\u003e84366a8\u003c/code\u003e\u003c/a\u003e fix(traverse): provide a hub when traversing a File or Program and no parentP...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/229eb452c5d5d2be0dc138ec2956aff7ff1057d7\"\u003e\u003ccode\u003e229eb45\u003c/code\u003e\u003c/a\u003e [7.x backport] fix: Rename switch discriminant references when body creates s...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17\"\u003e\u003ccode\u003ed7f4008\u003c/code\u003e\u003c/a\u003e v7.28.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/905bc22b2fff23673eabe467815c67b29bf8bba2\"\u003e\u003ccode\u003e905bc22\u003c/code\u003e\u003c/a\u003e fix: lint errors in main branch (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17612\"\u003e#17612\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/a03e2b63ae530674e866b60350b7eb4a5fcb5f59\"\u003e\u003ccode\u003ea03e2b6\u003c/code\u003e\u003c/a\u003e fix: \u003ccode\u003epath.evaluate\u003c/code\u003e correctly returns \u003ccode\u003econfident\u003c/code\u003e (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17584\"\u003e#17584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/aac2c37e11ad58905f7f9606103074e80bacbbcd\"\u003e\u003ccode\u003eaac2c37\u003c/code\u003e\u003c/a\u003e chore: Use Gulpfile.mts (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17579\"\u003e#17579\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/65c4a6b3ee0e1d32801529e841572bb22534e1f3\"\u003e\u003ccode\u003e65c4a6b\u003c/code\u003e\u003c/a\u003e [Babel 8] fix: Improve \u003ccode\u003etraverse\u003c/code\u003e types (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17574\"\u003e#17574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99dcba5e71de3bd81ce14077cfa5b6df58e9b177\"\u003e\u003ccode\u003e99dcba5\u003c/code\u003e\u003c/a\u003e chore: enable some ts-eslint rules (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17592\"\u003e#17592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-traverse\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​babel/traverse\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `postcss` from 7.0.13 to 8.5.16\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/releases\"\u003epostcss's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e position (by \u003ca href=\"https://github.com/mizdra\"\u003e\u003ccode\u003e@​mizdra\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eraws\u003c/code\u003e after rehydrating a JSON AST (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed putting parent-less node in \u003ccode\u003enodes\u003c/code\u003e of new node (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed computing \u003ccode\u003eoffset\u003c/code\u003e in \u003ccode\u003epositionBy()\u003c/code\u003e (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003erangeBy()\u003c/code\u003e on \u003ccode\u003eindex: 0\u003c/code\u003e (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed declaration parsing performance (by \u003ca href=\"https://github.com/homanp\"\u003e\u003ccode\u003e@​homanp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom syntax regression (by \u003ca href=\"https://github.com/43081j\"\u003e\u003ccode\u003e@​43081j\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epostcss-scss\u003c/code\u003e commend regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed reading any file via user-generated CSS.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003eopts.unsafeMap\u003c/code\u003e to disable checks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed nested brackets parsing performance (by \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up source map encoding paring in case of the error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eProcessor#version\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved source map annotation cleaning performance (by CodeAnt AI).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eContainerWithChildren\u003c/code\u003e type discriminating (by \u003ca href=\"https://github.com/Goodwine\"\u003e\u003ccode\u003e@​Goodwine\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epackage.json\u003c/code\u003e→\u003ccode\u003eexports\u003c/code\u003e compatibility with some tools (by \u003ca href=\"https://github.com/JounQin\"\u003e\u003ccode\u003e@​JounQin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel compatibility issue (by \u003ca href=\"https://github.com/git-sumitchaudhary\"\u003e\u003ccode\u003e@​git-sumitchaudhary\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded more details to \u003ccode\u003eUnknown word\u003c/code\u003e error (by \u003ca href=\"https://github.com/hiepxanh\"\u003e\u003ccode\u003e@​hiepxanh\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/romainmenke\"\u003e\u003ccode\u003e@​romainmenke\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/catnipan\"\u003e\u003ccode\u003e@​catnipan\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/blob/main/CHANGELOG.md\"\u003epostcss's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e position (by \u003ca href=\"https://github.com/mizdra\"\u003e\u003ccode\u003e@​mizdra\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eraws\u003c/code\u003e after rehydrating a JSON AST (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed putting parent-less node in \u003ccode\u003enodes\u003c/code\u003e of new node (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed computing \u003ccode\u003eoffset\u003c/code\u003e in \u003ccode\u003epositionBy()\u003c/code\u003e (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003erangeBy()\u003c/code\u003e on \u003ccode\u003eindex: 0\u003c/code\u003e (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed declaration parsing performance (by \u003ca href=\"https://github.com/homanp\"\u003e\u003ccode\u003e@​homanp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom syntax regression (by \u003ca href=\"https://github.com/43081j\"\u003e\u003ccode\u003e@​43081j\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epostcss-scss\u003c/code\u003e commend regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed reading any file via user-generated CSS.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003eopts.unsafeMap\u003c/code\u003e to disable checks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed nested brackets parsing performance (by \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up source map encoding paring in case of the error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eProcessor#version\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved source map annotation cleaning performance (by CodeAnt AI).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eContainerWithChildren\u003c/code\u003e type discriminating (by \u003ca href=\"https://github.com/Goodwine\"\u003e\u003ccode\u003e@​Goodwine\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.5\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/92ccc93ff15bd193491d67fad9763e62d489dfad\"\u003e\u003ccode\u003e92ccc93\u003c/code\u003e\u003c/a\u003e Release 8.5.16 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/818bdd6043359af773ccc3ca8663053d61a707c8\"\u003e\u003ccode\u003e818bdd6\u003c/code\u003e\u003c/a\u003e Update formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/46e451068ee6160b837865b715cf6972f28fabd5\"\u003e\u003ccode\u003e46e4510\u003c/code\u003e\u003c/a\u003e Fix \u003ccode\u003eInput#origin()\u003c/code\u003e returning incorrect position (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2036\"\u003e#2036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/34942ce76c0b0c9ee65b1421017ac71855e722c4\"\u003e\u003ccode\u003e34942ce\u003c/code\u003e\u003c/a\u003e Fix tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/d4feed645314ee421edf80ee9ebe453cc75c997f\"\u003e\u003ccode\u003ed4feed6\u003c/code\u003e\u003c/a\u003e Don't clone root-less child nodes in container constructor (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2097\"\u003e#2097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/da323fc8d327a38199a21987dcbf7e27e3bc34f3\"\u003e\u003ccode\u003eda323fc\u003c/code\u003e\u003c/a\u003e Revert version update to fix old Node.js on CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/886336919497516df8f140d0fb327bd125e35053\"\u003e\u003ccode\u003e8863369\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/3828982213fec6bc13d0791b1adf40393be0935e\"\u003e\u003ccode\u003e3828982\u003c/code\u003e\u003c/a\u003e Preserve node raws when rehydrating a JSON AST (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2100\"\u003e#2100\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/d1e80b830386b08dcd5b962fd466d1c51f28e82d\"\u003e\u003ccode\u003ed1e80b8\u003c/code\u003e\u003c/a\u003e Fix Node#rangeBy() ignoring index 0 (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2091\"\u003e#2091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/b91e4a63907325d98b75d11fda546bdd91acc608\"\u003e\u003ccode\u003eb91e4a6\u003c/code\u003e\u003c/a\u003e Fix Node.js 26 tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/postcss/postcss/compare/7.0.13...8.5.16\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for postcss since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `loader-utils` from 1.2.3 to 1.4.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/webpack/loader-utils/releases\"\u003eloader-utils's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.2\u003c/h2\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.4.1...v1.4.2\"\u003e1.4.2\u003c/a\u003e (2022-11-11)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReDoS problem (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/226\"\u003e#226\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa\"\u003e17cbf8f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.4.1\u003c/h2\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.4.0...v1.4.1\"\u003e1.4.1\u003c/a\u003e (2022-11-07)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esecurity problem (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/220\"\u003e#220\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/4504e34c4796a5836ef70458327351675aed48a5\"\u003e4504e34\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.4.0\u003c/h2\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.3.0...v1.4.0\"\u003e1.4.0\u003c/a\u003e (2020-02-19)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ethe \u003ccode\u003eresourceQuery\u003c/code\u003e is passed to the \u003ccode\u003einterpolateName\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/163\"\u003e#163\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/cd0e428\"\u003ecd0e428\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.0\u003c/h2\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.2.3...v1.3.0\"\u003e1.3.0\u003c/a\u003e (2020-02-19)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport the \u003ccode\u003e[query]\u003c/code\u003e template for the \u003ccode\u003einterpolatedName\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/162\"\u003e#162\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/469eeba\"\u003e469eeba\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md\"\u003eloader-utils's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.4.1...v1.4.2\"\u003e1.4.2\u003c/a\u003e (2022-11-11)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReDoS problem (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/226\"\u003e#226\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa\"\u003e17cbf8f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.4.0...v1.4.1\"\u003e1.4.1\u003c/a\u003e (2022-11-07)\u003c/h3\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esecurity problem (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/220\"\u003e#220\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/4504e34c4796a5836ef70458327351675aed48a5\"\u003e4504e34\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.3.0...v1.4.0\"\u003e1.4.0\u003c/a\u003e (2020-02-19)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ethe \u003ccode\u003eresourceQuery\u003c/code\u003e is passed to the \u003ccode\u003einterpolateName\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/163\"\u003e#163\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/cd0e428\"\u003ecd0e428\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.2.3...v1.3.0\"\u003e1.3.0\u003c/a\u003e (2020-02-19)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport the \u003ccode\u003e[query]\u003c/code\u003e template for the \u003ccode\u003einterpolatedName\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/162\"\u003e#162\u003c/a\u003e) (\u003ca href=\"https://github.com/webpack/loader-utils/commit/469eeba\"\u003e469eeba\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/331ad5067d9a1a7b8d646692e6959639969210d1\"\u003e\u003ccode\u003e331ad50\u003c/code\u003e\u003c/a\u003e chore(release): 1.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa\"\u003e\u003ccode\u003e17cbf8f\u003c/code\u003e\u003c/a\u003e fix: ReDoS problem (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/226\"\u003e#226\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/8f082b39f6903929f30fe29dab34f4d9c7ef070a\"\u003e\u003ccode\u003e8f082b3\u003c/code\u003e\u003c/a\u003e chore(release): 1.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/4504e34c4796a5836ef70458327351675aed48a5\"\u003e\u003ccode\u003e4504e34\u003c/code\u003e\u003c/a\u003e fix: security problem (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/220\"\u003e#220\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/d95b8b53f0ad547133b47ac8226f735c479f76de\"\u003e\u003ccode\u003ed95b8b5\u003c/code\u003e\u003c/a\u003e chore(release): 1.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/cd0e4284a0aa090f8776c4eb1045d4b1080e7161\"\u003e\u003ccode\u003ecd0e428\u003c/code\u003e\u003c/a\u003e feat: the \u003ccode\u003eresourceQuery\u003c/code\u003e is passed to the \u003ccode\u003einterpolateName\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/163\"\u003e#163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/06d36cf3a619cab20b08608204cb7ea9bddaceab\"\u003e\u003ccode\u003e06d36cf\u003c/code\u003e\u003c/a\u003e chore(release): 1.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/469eeba9095b879a3a988cde23d2035e454da9c2\"\u003e\u003ccode\u003e469eeba\u003c/code\u003e\u003c/a\u003e feat: support the \u003ccode\u003e[query]\u003c/code\u003e template for the \u003ccode\u003einterpolatedName\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/162\"\u003e#162\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/909c99d3f85da40478b9f02338d4113332819cfd\"\u003e\u003ccode\u003e909c99d\u003c/code\u003e\u003c/a\u003e chore: funding.yml config and CI fix (\u003ca href=\"https://redirect.github.com/webpack/loader-utils/issues/159\"\u003e#159\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webpack/loader-utils/commit/b5b74f010cace25ca70a652ebef078f6b1cfaddb\"\u003e\u003ccode\u003eb5b74f0\u003c/code\u003e\u003c/a\u003e Set up CI with Azure Pipelines\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/webpack/loader-utils/compare/v1.2.3...v1.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `base-x` from 3.0.5 to 3.0.11\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/043a888a9bae09bc4b40500e37792e2c6398e9f2\"\u003e\u003ccode\u003e043a888\u003c/code\u003e\u003c/a\u003e 3.0.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/2705dddd2565b455641985974b534291d8defb31\"\u003e\u003ccode\u003e2705ddd\u003c/code\u003e\u003c/a\u003e [backport 3.x] Prohibit char codes that would overflow the \u003ccode\u003eBASE_MAP\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/3d43c0e16bfbc045a0a8bb6423e6e336df81b512\"\u003e\u003ccode\u003e3d43c0e\u003c/code\u003e\u003c/a\u003e 3.0.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/0a3544695fa6800649a8b78ed46cece61bcdbbe5\"\u003e\u003ccode\u003e0a35446\u003c/code\u003e\u003c/a\u003e Improve decoding performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/4c10d3313a5838ce122ca3022823f1b4b153b843\"\u003e\u003ccode\u003e4c10d33\u003c/code\u003e\u003c/a\u003e 3.0.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/c9dcddd5d68c5cb5fb87d3baa4382c596d574602\"\u003e\u003ccode\u003ec9dcddd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cryptocoinjs/base-x/issues/78\"\u003e#78\u003c/a\u003e from cryptocoinjs/fix/space-alphabets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/6c54632a1bebd60fb79203c65badeec2b4360af3\"\u003e\u003ccode\u003e6c54632\u003c/code\u003e\u003c/a\u003e Fix alphabets with space in them\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/69c09ed8b5cd0ea9853b4420337a5be0540becb5\"\u003e\u003ccode\u003e69c09ed\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cryptocoinjs/base-x/issues/73\"\u003e#73\u003c/a\u003e from terrierscript/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/1dd37959d559049397b7744ef3c4f1afd047aba9\"\u003e\u003ccode\u003e1dd3795\u003c/code\u003e\u003c/a\u003e Update README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cryptocoinjs/base-x/commit/806ef3f473cb6c9a84559811f411b99cbcf93deb\"\u003e\u003ccode\u003e806ef3f\u003c/code\u003e\u003c/a\u003e 3.0.8\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cryptocoinjs/base-x/compare/v3.0.5...v3.0.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepublish\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bn.js` from 4.11.9 to 4.12.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/12f9f8f2577c1befb864b25a612377f9ed17588c\"\u003e\u003ccode\u003e12f9f8f\u003c/code\u003e\u003c/a\u003e 4.12.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/6b98684d6958e10605d9566b5704384b9fbb06b6\"\u003e\u003ccode\u003e6b98684\u003c/code\u003e\u003c/a\u003e fix: clear surplus words in inotn so notn(width) stays below 2 ** width (\u003ca href=\"https://redirect.github.com/indutny/bn.js/issues/319\"\u003e#319\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/39fe4389c773327ed15f29f77f8b7dbbff4beb4c\"\u003e\u003ccode\u003e39fe438\u003c/code\u003e\u003c/a\u003e 4.12.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/67ecb35dabaf252001b649c12d69c4b57deac6f6\"\u003e\u003ccode\u003e67ecb35\u003c/code\u003e\u003c/a\u003e backport(4.x): fix imaskn state (\u003ca href=\"https://redirect.github.com/indutny/bn.js/issues/317\"\u003e#317\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/c4098bac2470418f8e0f6bf11fe0cb676a2b9047\"\u003e\u003ccode\u003ec4098ba\u003c/code\u003e\u003c/a\u003e 4.12.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/6277fd705e51edae1c404c65f03ba2e512706945\"\u003e\u003ccode\u003e6277fd7\u003c/code\u003e\u003c/a\u003e backport(4.x): Fix imuln/muln with zero (backport of \u003ca href=\"https://redirect.github.com/indutny/bn.js/issues/313\"\u003e#313\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/indutny/bn.js/issues/314\"\u003e#314\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/ac0d4afaae91701815b9edc19789e44e7690d688\"\u003e\u003ccode\u003eac0d4af\u003c/code\u003e\u003c/a\u003e 4.12.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/a5f14b43ec61bc7cafc6de2e7444913b9f581b00\"\u003e\u003ccode\u003ea5f14b4\u003c/code\u003e\u003c/a\u003e Fix serious issue in \u003ccode\u003e.toString(16)\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/indutny/bn.js/issues/309\"\u003e#309\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/0cd2661b9d08512263c940662586042ef8aaccc6\"\u003e\u003ccode\u003e0cd2661\u003c/code\u003e\u003c/a\u003e Remove package-lock.json added by npm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/indutny/bn.js/commit/84ae31344a557abb78ddabe3bac923b7503e4fb5\"\u003e\u003ccode\u003e84ae313\u003c/code\u003e\u003c/a\u003e 4.12.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/indutny/bn.js/compare/v4.11.9...v4.12.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.19.0 to 1.20.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct off-by-one error in parameterCount by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(qs): bump qs to 6.15.1 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/722\"\u003eexpressjs/body-parser#722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.5 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/721\"\u003eexpressjs/body-parser#721\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSpecial thanks to triager \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e for keeping this on our radar and effectively triaging the specific issue!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove redundant depth check by \u003ca href=\"https://github.com/blakeembrey\"\u003e\u003ccode\u003e@​blakeembrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/538\"\u003eexpressjs/body-parser#538\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add support for Node.js v23 by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/553\"\u003eexpressjs/body-parser#553\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: restore CI for 1.x branch by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/665\"\u003eexpressjs/body-parser#665\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@^6.14.0 by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/664\"\u003eexpressjs/body-parser#664\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation and update certain dependencies by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/668\"\u003eexpressjs/body-parser#668\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove SECURITY.md by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/669\"\u003eexpressjs/body-parser#669\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add CodeQL (SAST) by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/670\"\u003eexpressjs/body-parser#670\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.4 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/672\"\u003eexpressjs/body-parser#672\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.3...1.20.4\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.3...1.20.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eImportant\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.13.0\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003edepth\u003c/code\u003e option to customize the depth level in the parser\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eIMPORTANT:\u003c/strong\u003e The default \u003ccode\u003edepth\u003c/code\u003e level for parsing URL-encoded data is now \u003ccode\u003e32\u003c/code\u003e (previously was \u003ccode\u003eInfinity\u003c/code\u003e). \u003ca href=\"https://github.com/expressjs/body-parser/blob/17529513673e39ba79886a7ce3363320cf1c0c50/README.md#depth\"\u003eDocumentation\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: add support for OSSF scorecard reporting by \u003ca href=\"https://github.com/inigomarquinez\"\u003e\u003ccode\u003e@​inigomarquinez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/522\"\u003eexpressjs/body-parser#522\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: fix errors in ci github action for node 8 and 9 by \u003ca href=\"https://github.com/inigomarquinez\"\u003e\u003ccode\u003e@​inigomarquinez\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/523\"\u003eexpressjs/body-parser#523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: pin to node@22.4.1 by \u003ca href=\"https://github.com/wesleytodd\"\u003e\u003ccode\u003e@​wesleytodd\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/527\"\u003eexpressjs/body-parser#527\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@6.12.3 by \u003ca href=\"https://github.com/melikhov-dev\"\u003e\u003ccode\u003e@​melikhov-dev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/521\"\u003eexpressjs/body-parser#521\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd OSSF Scorecard badge by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/531\"\u003eexpressjs/body-parser#531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLinter by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/534\"\u003eexpressjs/body-parser#534\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.3 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/535\"\u003eexpressjs/body-parser#535\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/1.20.5/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.5 / 2026-04-24\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4 / 2025-12-01\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.3 / 2024-09-10\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.13.0\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003edepth\u003c/code\u003e option to customize the depth level in the parser\u003c/li\u003e\n\u003cli\u003eIMPORTANT: The default \u003ccode\u003edepth\u003c/code\u003e level for parsing URL-encoded data is now \u003ccode\u003e32\u003c/code\u003e (previously was \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.2 / 2023-02-21\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix strict json error message on Node.js 19+\u003c/li\u003e\n\u003cli\u003edeps: content-type@~1.0.5\n\u003cul\u003e\n\u003cli\u003eperf: skip value escaping when unnecessary\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: raw-body@2.5.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.1 / 2022-10-06\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.11.0\u003c/li\u003e\n\u003cli\u003eperf: remove unnecessary object clone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.0 / 2022-04-02\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix error message for json parse whitespace in \u003ccode\u003estrict\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eFix internal error when inflated body exceeds limit\u003c/li\u003e\n\u003cli\u003ePrevent loss of async hooks context\u003c/li\u003e\n\u003cli\u003ePrevent hanging when request already read\u003c/li\u003e\n\u003cli\u003edeps: depd@2.0.0\n\u003cul\u003e\n\u003cli\u003eReplace internal \u003ccode\u003eeval\u003c/code\u003e usage with \u003ccode\u003eFunction\u003c/code\u003e constructor\u003c/li\u003e\n\u003cli\u003eUse instance methods on \u003ccode\u003eprocess\u003c/code\u003e to check for listeners\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: http-errors@2.0.0\n\u003cul\u003e\n\u003cli\u003edeps: depd@2.0.0\u003c/li\u003e\n\u003cli\u003edeps: statuses@2.0.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: on-finished@2.4.1\u003c/li\u003e\n\u003cli\u003edeps: qs@6.10.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575\"\u003e\u003ccode\u003e0defdbe\u003c/code\u003e\u003c/a\u003e release(patch): 1.20.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f\"\u003e\u003ccode\u003ecd0e7a0\u003c/code\u003e\u003c/a\u003e deps(qs): bump qs to 6.15.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51\"\u003e\u003ccode\u003e6f24d7e\u003c/code\u003e\u003c/a\u003e fix: correct off-by-one error in parameterCount (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/b849bd533d8b4abf5576a3e301f28d9befa05ddd\"\u003e\u003ccode\u003eb849bd5\u003c/code\u003e\u003c/a\u003e deps: qs@~6.14.1 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/690\"\u003e#690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/2c55e2f712f320a8e8d0f9fcb1d06526d0e401c9\"\u003e\u003ccode\u003e2c55e2f\u003c/code\u003e\u003c/a\u003e refactor(json): simplify strict mode error string construction (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/692\"\u003e#692\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/7db202cac84a001e6566c2dc6516b44db98beff3\"\u003e\u003ccode\u003e7db202c\u003c/code\u003e\u003c/a\u003e 1.20.4 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/672\"\u003e#672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/d8f8adb898676dfdf997b4455e5f9b689b53e989\"\u003e\u003ccode\u003ed8f8adb\u003c/code\u003e\u003c/a\u003e ci: add CodeQL (SAST) (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6d133c19b3e7c0bb8301959ca1dba283d23d23c3\"\u003e\u003ccode\u003e6d133c1\u003c/code\u003e\u003c/a\u003e chore: remove SECURITY.md (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/669\"\u003e#669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/fcd15355041ada6f37288dd13858d50429016b66\"\u003e\u003ccode\u003efcd1535\u003c/code\u003e\u003c/a\u003e deps: use tilde notation and update certain dependencies (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/668\"\u003e#668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/ec5fa290d25d85e0049757e240249072331eaee6\"\u003e\u003ccode\u003eec5fa29\u003c/code\u003e\u003c/a\u003e deps: qs@~6.14.0 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/664\"\u003e#664\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.19.0...1.20.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to ...\n\n_Description has been truncated_","html_url":"https://github.com/mrheyday/bitcoin-forge/pull/46","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mrheyday%2Fbitcoin-forge/issues/46","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/46/packages"}},{"old_version":"6.2.1","new_version":"7.5.19","update_type":"major","path":null,"pr_created_at":"2026-07-03T22:21:54.000Z","version_change":"6.2.1 → 7.5.19","issue":{"uuid":"4806615281","node_id":"PR_kwDOQteXZs7tvmZd","number":3,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 18 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-03T22:21:54.000Z","updated_at":"2026-07-03T22:22:42.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":18,"packages":[{"name":"astro","old_version":"5.13.7","new_version":"7.0.6","repository_url":"https://github.com/withastro/astro"},{"name":"dompurify","old_version":"3.2.7","new_version":"3.4.11","repository_url":"https://github.com/cure53/DOMPurify"},{"name":"fast-xml-parser","old_version":"5.2.5","new_version":"5.9.3","repository_url":"https://github.com/NaturalIntelligence/fast-xml-parser"},{"name":"mermaid","old_version":"11.12.0","new_version":"11.15.0","repository_url":"https://github.com/mermaid-js/mermaid"},{"name":"vitest","old_version":"2.1.6","new_version":"4.1.9","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"axios","old_version":"1.9.0","new_version":"1.18.1","repository_url":"https://github.com/axios/axios"},{"name":"fast-uri","old_version":"3.0.5","new_version":"3.1.3","repository_url":"https://github.com/fastify/fast-uri"},{"name":"flatted","old_version":"3.3.2","new_version":"3.4.2","repository_url":"https://github.com/WebReflection/flatted"},{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"tar","old_version":"6.2.1","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"},{"name":"tmp","old_version":"0.0.33","new_version":"0.2.7","repository_url":"https://github.com/raszi/node-tmp"},{"name":"uuid","old_version":"11.1.0","new_version":"14.0.1","repository_url":"https://github.com/uuidjs/uuid"},{"name":"vite","old_version":"6.3.6","new_version":"8.1.3","repository_url":"https://github.com/vitejs/vite"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 13 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `5.13.7` | `7.0.6` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.2.7` | `3.4.11` |\n| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.2.5` | `5.9.3` |\n| [mermaid](https://github.com/mermaid-js/mermaid) | `11.12.0` | `11.15.0` |\n| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `2.1.6` | `4.1.9` |\n| [axios](https://github.com/axios/axios) | `1.9.0` | `1.18.1` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.0.5` | `3.1.3` |\n| [flatted](https://github.com/WebReflection/flatted) | `3.3.2` | `3.4.2` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.19` |\n| [tmp](https://github.com/raszi/node-tmp) | `0.0.33` | `0.2.7` |\n| [uuid](https://github.com/uuidjs/uuid) | `11.1.0` | `14.0.1` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.3.6` | `8.1.3` |\n\n\nUpdates `astro` from 5.13.7 to 7.0.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/withastro/astro/releases\"\u003eastro's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eastro@7.0.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17261\"\u003e#17261\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/79aa99c648b4b40b95a31d4a961b77074cf7963c\"\u003e\u003ccode\u003e79aa99c\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes a false deprecation warning for \u003ccode\u003emarkdown.gfm\u003c/code\u003e and \u003ccode\u003emarkdown.smartypants\u003c/code\u003e when using the Container API\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17247\"\u003e#17247\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/f94280d61496de38f97a818975bd38529569f3e8\"\u003e\u003ccode\u003ef94280d\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/chatman-media\"\u003e\u003ccode\u003e@​chatman-media\u003c/code\u003e\u003c/a\u003e! - Fixes route generation throwing \u0026quot;Missing parameter\u0026quot; (or silently dropping the segment) when a dynamic param's value is \u003ccode\u003e0\u003c/code\u003e. The generator used truthy checks instead of checking for \u003ccode\u003eundefined\u003c/code\u003e, so \u003ccode\u003epaginate(posts, { params: { categoryId: 0 } })\u003c/code\u003e would crash even though \u003ccode\u003e0\u003c/code\u003e is a perfectly valid param value.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17278\"\u003e#17278\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/6f11739f2c7b28b108c2d8d0a2012f0711775a8c\"\u003e\u003ccode\u003e6f11739\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes missing CSS for virtual style modules (e.g., responsive image layout styles) in dev mode when JavaScript is disabled\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17250\"\u003e#17250\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/0b30b35f864310bee8485c952d1877e82e2b9b1a\"\u003e\u003ccode\u003e0b30b35\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes the \u003ccode\u003esecurity.checkOrigin\u003c/code\u003e check so it is applied consistently to Astro Actions and on-demand endpoints, regardless of how the request pipeline is composed. Previously, the origin check could be skipped in the composable \u003ccode\u003eastro/hono\u003c/code\u003e pipeline depending on the order of the \u003ccode\u003emiddleware()\u003c/code\u003e primitive (or when it was omitted).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17274\"\u003e#17274\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/8c3579b2707703037bd439992a9a4e5efceeda3b\"\u003e\u003ccode\u003e8c3579b\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes missing \u003ccode\u003erender()\u003c/code\u003e type overload for live collection entries. Previously, calling \u003ccode\u003erender()\u003c/code\u003e on a \u003ccode\u003eLiveDataEntry\u003c/code\u003e produced a TypeScript error when using only \u003ccode\u003elive.config.ts\u003c/code\u003e without a \u003ccode\u003econtent.config.ts\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17257\"\u003e#17257\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/4208297b37d1781bfe54254c0b981eb146e08691\"\u003e\u003ccode\u003e4208297\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes \u003ccode\u003eastro check\u003c/code\u003e failing to find \u003ccode\u003e@astrojs/check\u003c/code\u003e and \u003ccode\u003etypescript\u003c/code\u003e when astro is installed in a directory outside the project tree (e.g. pnpm virtual store)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17272\"\u003e#17272\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/b428648a3ce0efe7367933096949d1d18bea0168\"\u003e\u003ccode\u003eb428648\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes island component paths so that extensionless imports (e.g. \u003ccode\u003eimport { Counter } from '../components/Counter'\u003c/code\u003e) resolve to the real file on disk, matching Vite's extension order and directory \u003ccode\u003eindex\u003c/code\u003e resolution. This makes the \u003ccode\u003einclude\u003c/code\u003e/\u003ccode\u003eexclude\u003c/code\u003e options of JSX renderer integrations (React, Preact, Solid) match components imported without a file extension, and removes the spurious React 19 \u0026quot;Invalid hook call\u0026quot; warning logged on every request in dev when \u003ccode\u003einclude\u003c/code\u003e was set alongside another JSX renderer\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17279\"\u003e#17279\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/2aeaa44a23e42426619e680c37bea5b79fb9bc9d\"\u003e\u003ccode\u003e2aeaa44\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes a bug where \u003ccode\u003e\u0026lt;Picture inferSize\u0026gt;\u003c/code\u003e with a remote image could fail with \u003ccode\u003eFailedToFetchRemoteImageDimensions\u003c/code\u003e when the image server rate-limits requests (e.g. HTTP 429). Remote dimensions are now resolved once per render instead of once per output format.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17251\"\u003e#17251\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/5240e26c9dd91f9bc7140dcfacdb48d5a132830d\"\u003e\u003ccode\u003e5240e26\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Hardens the handling of attribute rendering when using with custom elements.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17248\"\u003e#17248\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/429bd6287a24770461321696f87edf34758b90fd\"\u003e\u003ccode\u003e429bd62\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes a crash when using Astro's \u003ccode\u003egetViteConfig\u003c/code\u003e with Vitest browser mode (e.g., Storybook vitest runner). Astro now skips dev server setup inside Vitest, preventing errors.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17260\"\u003e#17260\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/14524c03f3d7ea84224d4e708488f30902a9f275\"\u003e\u003ccode\u003e14524c0\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes a regression where a \u003ccode\u003e\u0026lt;script\u0026gt;\u003c/code\u003e inside a component rendered through \u003ccode\u003eAstro.slots.render()\u003c/code\u003e was hoisted out of its original position instead of staying next to its component content\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/withastro/astro/commit/eb6f97e391ee587747e37609c255c7cd4b9cce3c\"\u003e\u003ccode\u003eeb6f97e\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​astrojs/internal-helpers\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.10.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​astrojs/markdown-remark\u003c/code\u003e\u003ca href=\"https://github.com/7\"\u003e\u003ccode\u003e@​7\u003c/code\u003e\u003c/a\u003e.2.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​astrojs/markdown-satteri\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.3.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eastro@7.0.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17242\"\u003e#17242\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/9c05ba474cee5e3ef5142d88e7e08d53acfbe431\"\u003e\u003ccode\u003e9c05ba4\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes an error that could occur after the dev server restarts when using an adapter such as \u003ccode\u003e@astrojs/cloudflare\u003c/code\u003e, where a request would fail with a \u003ccode\u003e500\u003c/code\u003e referencing a missing pre-bundled dependency:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eThe file does not exist at \u0026quot;node_modules/.vite/deps_ssr/astro_compiler-runtime.js?v=6419660d\u0026quot; which is in the optimize deps directory. The dependency might be incompatible with the dep optimizer. Try adding it to `optimizeDeps.exclude`.\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17202\"\u003e#17202\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/c6d254dab889f9b15ec79eab84d8dbf7f7cd0007\"\u003e\u003ccode\u003ec6d254d\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Refactors path alias resolution to use Vite's native \u003ccode\u003etsconfigPaths\u003c/code\u003e option\u003c/p\u003e\n\u003cp\u003eThis is an internal change with no expected impact on user projects. Astro now defers tsconfig and jsconfig \u003ccode\u003epaths\u003c/code\u003e alias resolution to Vite, keeping a small fallback for a few CSS cases Vite does not yet handle.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17123\"\u003e#17123\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/72e29bd7f9d6c9f86febf5c9b97417bc90de5bb1\"\u003e\u003ccode\u003e72e29bd\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/martrapp\"\u003e\u003ccode\u003e@​martrapp\u003c/code\u003e\u003c/a\u003e! - Fixes an issue where the ClientRouter wipes head elements after page transitions if the \u003ccode\u003e\u0026lt;head\u0026gt;\u003c/code\u003e contains a \u003ccode\u003eserver:defer\u003c/code\u003e component.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17232\"\u003e#17232\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/257505ebfd8be87e6b11fd369340245edd0c937a\"\u003e\u003ccode\u003e257505e\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes a bug where \u003ccode\u003e\u0026lt;style\u0026gt;\u003c/code\u003e tags from components such as a content collection's \u003ccode\u003eContent\u003c/code\u003e could be silently dropped from the output when an \u003ccode\u003eawait\u003c/code\u003e appeared before the component in an \u003ccode\u003e.astro\u003c/code\u003e file's markup.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17193\"\u003e#17193\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/a7352fda1218bf48d8483a9893c6f7ed9bdf2060\"\u003e\u003ccode\u003ea7352fd\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/jan-kubica\"\u003e\u003ccode\u003e@​jan-kubica\u003c/code\u003e\u003c/a\u003e! - Fixes the background dev server failing to start when \u003ccode\u003eastro\u003c/code\u003e is hoisted outside the project's \u003ccode\u003enode_modules\u003c/code\u003e (for example bun workspaces). The background process is now spawned from Astro's own resolved location instead of a path assumed under the project root.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17255\"\u003e#17255\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/581d17113cb192e8b34aa3ad9965fe733e3ca210\"\u003e\u003ccode\u003e581d171\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes prefetch not working for links inside \u003ccode\u003eserver:defer\u003c/code\u003e components\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eastro@7.0.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md\"\u003eastro's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e7.0.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17261\"\u003e#17261\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/79aa99c648b4b40b95a31d4a961b77074cf7963c\"\u003e\u003ccode\u003e79aa99c\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes a false deprecation warning for \u003ccode\u003emarkdown.gfm\u003c/code\u003e and \u003ccode\u003emarkdown.smartypants\u003c/code\u003e when using the Container API\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17247\"\u003e#17247\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/f94280d61496de38f97a818975bd38529569f3e8\"\u003e\u003ccode\u003ef94280d\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/chatman-media\"\u003e\u003ccode\u003e@​chatman-media\u003c/code\u003e\u003c/a\u003e! - Fixes route generation throwing \u0026quot;Missing parameter\u0026quot; (or silently dropping the segment) when a dynamic param's value is \u003ccode\u003e0\u003c/code\u003e. The generator used truthy checks instead of checking for \u003ccode\u003eundefined\u003c/code\u003e, so \u003ccode\u003epaginate(posts, { params: { categoryId: 0 } })\u003c/code\u003e would crash even though \u003ccode\u003e0\u003c/code\u003e is a perfectly valid param value.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17278\"\u003e#17278\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/6f11739f2c7b28b108c2d8d0a2012f0711775a8c\"\u003e\u003ccode\u003e6f11739\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes missing CSS for virtual style modules (e.g., responsive image layout styles) in dev mode when JavaScript is disabled\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17250\"\u003e#17250\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/0b30b35f864310bee8485c952d1877e82e2b9b1a\"\u003e\u003ccode\u003e0b30b35\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes the \u003ccode\u003esecurity.checkOrigin\u003c/code\u003e check so it is applied consistently to Astro Actions and on-demand endpoints, regardless of how the request pipeline is composed. Previously, the origin check could be skipped in the composable \u003ccode\u003eastro/hono\u003c/code\u003e pipeline depending on the order of the \u003ccode\u003emiddleware()\u003c/code\u003e primitive (or when it was omitted).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17274\"\u003e#17274\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/8c3579b2707703037bd439992a9a4e5efceeda3b\"\u003e\u003ccode\u003e8c3579b\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes missing \u003ccode\u003erender()\u003c/code\u003e type overload for live collection entries. Previously, calling \u003ccode\u003erender()\u003c/code\u003e on a \u003ccode\u003eLiveDataEntry\u003c/code\u003e produced a TypeScript error when using only \u003ccode\u003elive.config.ts\u003c/code\u003e without a \u003ccode\u003econtent.config.ts\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17257\"\u003e#17257\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/4208297b37d1781bfe54254c0b981eb146e08691\"\u003e\u003ccode\u003e4208297\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes \u003ccode\u003eastro check\u003c/code\u003e failing to find \u003ccode\u003e@astrojs/check\u003c/code\u003e and \u003ccode\u003etypescript\u003c/code\u003e when astro is installed in a directory outside the project tree (e.g. pnpm virtual store)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17272\"\u003e#17272\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/b428648a3ce0efe7367933096949d1d18bea0168\"\u003e\u003ccode\u003eb428648\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes island component paths so that extensionless imports (e.g. \u003ccode\u003eimport { Counter } from '../components/Counter'\u003c/code\u003e) resolve to the real file on disk, matching Vite's extension order and directory \u003ccode\u003eindex\u003c/code\u003e resolution. This makes the \u003ccode\u003einclude\u003c/code\u003e/\u003ccode\u003eexclude\u003c/code\u003e options of JSX renderer integrations (React, Preact, Solid) match components imported without a file extension, and removes the spurious React 19 \u0026quot;Invalid hook call\u0026quot; warning logged on every request in dev when \u003ccode\u003einclude\u003c/code\u003e was set alongside another JSX renderer\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17279\"\u003e#17279\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/2aeaa44a23e42426619e680c37bea5b79fb9bc9d\"\u003e\u003ccode\u003e2aeaa44\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes a bug where \u003ccode\u003e\u0026lt;Picture inferSize\u0026gt;\u003c/code\u003e with a remote image could fail with \u003ccode\u003eFailedToFetchRemoteImageDimensions\u003c/code\u003e when the image server rate-limits requests (e.g. HTTP 429). Remote dimensions are now resolved once per render instead of once per output format.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17251\"\u003e#17251\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/5240e26c9dd91f9bc7140dcfacdb48d5a132830d\"\u003e\u003ccode\u003e5240e26\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Hardens the handling of attribute rendering when using with custom elements.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17248\"\u003e#17248\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/429bd6287a24770461321696f87edf34758b90fd\"\u003e\u003ccode\u003e429bd62\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/astrobot-houston\"\u003e\u003ccode\u003e@​astrobot-houston\u003c/code\u003e\u003c/a\u003e! - Fixes a crash when using Astro's \u003ccode\u003egetViteConfig\u003c/code\u003e with Vitest browser mode (e.g., Storybook vitest runner). Astro now skips dev server setup inside Vitest, preventing errors.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17260\"\u003e#17260\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/14524c03f3d7ea84224d4e708488f30902a9f275\"\u003e\u003ccode\u003e14524c0\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes a regression where a \u003ccode\u003e\u0026lt;script\u0026gt;\u003c/code\u003e inside a component rendered through \u003ccode\u003eAstro.slots.render()\u003c/code\u003e was hoisted out of its original position instead of staying next to its component content\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/withastro/astro/commit/eb6f97e391ee587747e37609c255c7cd4b9cce3c\"\u003e\u003ccode\u003eeb6f97e\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​astrojs/internal-helpers\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.10.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​astrojs/markdown-remark\u003c/code\u003e\u003ca href=\"https://github.com/7\"\u003e\u003ccode\u003e@​7\u003c/code\u003e\u003c/a\u003e.2.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​astrojs/markdown-satteri\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.3.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17242\"\u003e#17242\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/9c05ba474cee5e3ef5142d88e7e08d53acfbe431\"\u003e\u003ccode\u003e9c05ba4\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes an error that could occur after the dev server restarts when using an adapter such as \u003ccode\u003e@astrojs/cloudflare\u003c/code\u003e, where a request would fail with a \u003ccode\u003e500\u003c/code\u003e referencing a missing pre-bundled dependency:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eThe file does not exist at \u0026quot;node_modules/.vite/deps_ssr/astro_compiler-runtime.js?v=6419660d\u0026quot; which is in the optimize deps directory. The dependency might be incompatible with the dep optimizer. Try adding it to `optimizeDeps.exclude`.\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17202\"\u003e#17202\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/c6d254dab889f9b15ec79eab84d8dbf7f7cd0007\"\u003e\u003ccode\u003ec6d254d\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Refactors path alias resolution to use Vite's native \u003ccode\u003etsconfigPaths\u003c/code\u003e option\u003c/p\u003e\n\u003cp\u003eThis is an internal change with no expected impact on user projects. Astro now defers tsconfig and jsconfig \u003ccode\u003epaths\u003c/code\u003e alias resolution to Vite, keeping a small fallback for a few CSS cases Vite does not yet handle.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17123\"\u003e#17123\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/72e29bd7f9d6c9f86febf5c9b97417bc90de5bb1\"\u003e\u003ccode\u003e72e29bd\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/martrapp\"\u003e\u003ccode\u003e@​martrapp\u003c/code\u003e\u003c/a\u003e! - Fixes an issue where the ClientRouter wipes head elements after page transitions if the \u003ccode\u003e\u0026lt;head\u0026gt;\u003c/code\u003e contains a \u003ccode\u003eserver:defer\u003c/code\u003e component.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17232\"\u003e#17232\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/257505ebfd8be87e6b11fd369340245edd0c937a\"\u003e\u003ccode\u003e257505e\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/matthewp\"\u003e\u003ccode\u003e@​matthewp\u003c/code\u003e\u003c/a\u003e! - Fixes a bug where \u003ccode\u003e\u0026lt;style\u0026gt;\u003c/code\u003e tags from components such as a content collection's \u003ccode\u003eContent\u003c/code\u003e could be silently dropped from the output when an \u003ccode\u003eawait\u003c/code\u003e appeared before the component in an \u003ccode\u003e.astro\u003c/code\u003e file's markup.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/withastro/astro/pull/17193\"\u003e#17193\u003c/a\u003e \u003ca href=\"https://github.com/withastro/astro/commit/a7352fda1218bf48d8483a9893c6f7ed9bdf2060\"\u003e\u003ccode\u003ea7352fd\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/jan-kubica\"\u003e\u003ccode\u003e@​jan-kubica\u003c/code\u003e\u003c/a\u003e! - Fixes the background dev server failing to start when \u003ccode\u003eastro\u003c/code\u003e is hoisted outside the project's \u003ccode\u003enode_modules\u003c/code\u003e (for example bun workspaces). The background process is now spawned from Astro's own resolved location instead of a path assumed under the project root.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/a86160ee79e4600bf77f89eb2dc84782acdeab6f\"\u003e\u003ccode\u003ea86160e\u003c/code\u003e\u003c/a\u003e [ci] release (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17256\"\u003e#17256\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/f94280d61496de38f97a818975bd38529569f3e8\"\u003e\u003ccode\u003ef94280d\u003c/code\u003e\u003c/a\u003e Fix route generator throwing on a dynamic param value of 0 (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17247\"\u003e#17247\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/6f11739f2c7b28b108c2d8d0a2012f0711775a8c\"\u003e\u003ccode\u003e6f11739\u003c/code\u003e\u003c/a\u003e fix(css): use raw module ID for virtual CSS cache lookup in dev mode (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17267\"\u003e#17267\u003c/a\u003e)...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/26c68f6939c071c9e9abfd4175d78d31199dfae3\"\u003e\u003ccode\u003e26c68f6\u003c/code\u003e\u003c/a\u003e [ci] format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/2aeaa44a23e42426619e680c37bea5b79fb9bc9d\"\u003e\u003ccode\u003e2aeaa44\u003c/code\u003e\u003c/a\u003e Fix \u003ccode\u003einferSize\u003c/code\u003e for remote images in the \u003ccode\u003ePicture\u003c/code\u003e component (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17279\"\u003e#17279\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/b428648a3ce0efe7367933096949d1d18bea0168\"\u003e\u003ccode\u003eb428648\u003c/code\u003e\u003c/a\u003e Resolve extensionless imports in island component paths (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17272\"\u003e#17272\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/14524c03f3d7ea84224d4e708488f30902a9f275\"\u003e\u003ccode\u003e14524c0\u003c/code\u003e\u003c/a\u003e Keep component scripts in place when rendered via Astro.slots.render() (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17260\"\u003e#17260\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/8c3579b2707703037bd439992a9a4e5efceeda3b\"\u003e\u003ccode\u003e8c3579b\u003c/code\u003e\u003c/a\u003e fix: add render() type overload for live collection entries (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/16688\"\u003e#16688\u003c/a\u003e) (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17274\"\u003e#17274\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/94dd2aa06f73d1d45a538823392879719dff51b6\"\u003e\u003ccode\u003e94dd2aa\u003c/code\u003e\u003c/a\u003e [ci] format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/withastro/astro/commit/5240e26c9dd91f9bc7140dcfacdb48d5a132830d\"\u003e\u003ccode\u003e5240e26\u003c/code\u003e\u003c/a\u003e Validate attribute names on custom HTML elements during SSR (\u003ca href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/17251\"\u003e#17251\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/withastro/astro/commits/astro@7.0.6/packages/astro\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for astro since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dompurify` from 3.2.7 to 3.4.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cure53/DOMPurify/releases\"\u003edompurify's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDOMPurify 3.4.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with a leaky config for hooks via \u003ccode\u003esetConfig\u003c/code\u003e, thanks \u003ca href=\"https://github.com/trace37labs\"\u003e\u003ccode\u003e@​trace37labs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped vulnerable development dependencies to arrive at plain 0 with \u003ccode\u003enpm audit\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eUpdated the \u003ccode\u003eosv-scanner\u003c/code\u003e suppression list as no vulnerable dependencies are left for now\u003c/li\u003e\n\u003cli\u003eUpdated up the linting tool-chain and removed now-redundant lint directives\u003c/li\u003e\n\u003cli\u003eUpdated the documentation is several spots, README, wiki, etc.\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored codebase for clarity: extracted the public type declarations into \u003ccode\u003etypes.ts\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eDecomposed the three largest sanitizer functions into focused helpers\u003c/li\u003e\n\u003cli\u003eRemoved duplicated defaults and dead branches, consolidated \u003ccode\u003eSAFE_FOR_TEMPLATES\u003c/code\u003e scrubbing into single shared path\u003c/li\u003e\n\u003cli\u003eImproved per-node performance by hoisting the mXSS probe regexes and testing \u003ccode\u003etextContent\u003c/code\u003e before \u003ccode\u003einnerHTML\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdded a deterministic micro-benchmark harness (\u003ccode\u003enpm run bench\u003c/code\u003e) with a \u003ccode\u003e--compare\u003c/code\u003e mode\u003c/li\u003e\n\u003cli\u003eReduced CI cost by running the full three-engine browser suite once per PR\u003c/li\u003e\n\u003cli\u003eRefreshed the \u003ccode\u003edemos/\u003c/code\u003e folder so every demo runs again, and added a SVG-via-\u003ccode\u003e\u0026lt;img\u0026gt;\u003c/code\u003e demo\u003c/li\u003e\n\u003cli\u003eDocumented the bench and \u003ccode\u003etest:happydom\u003c/code\u003e scripts in the README\u003c/li\u003e\n\u003cli\u003eCompleted the Attack Classes \u0026amp; Bypass History wiki page\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFurther improved the handling of Trusted Types config options, thanks \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFurther improved the handling of \u003ccode\u003eIN_PLACE\u003c/code\u003e sanitization, thanks \u003ca href=\"https://github.com/mozfreddyb\"\u003e\u003ccode\u003e@​mozfreddyb\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded more test coverage for \u003ccode\u003eIN_PLACE\u003c/code\u003e and Trusted Types related usage\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003cli\u003eUpdated README and wiki with more accurate documentation \u0026amp; attack samples\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCleaned up the repository root, renamed some and removed unneeded files\u003c/li\u003e\n\u003cli\u003eFixed an issue with handling of Trusted Types policies, thanks \u003ca href=\"https://github.com/fulstadev\"\u003e\u003ccode\u003e@​fulstadev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed the node iterator for better template scrubbing, thanks \u003ca href=\"https://github.com/IamLeandrooooo\"\u003e\u003ccode\u003e@​IamLeandrooooo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIncluded formerly missing LICENSE-MPL in published npm package, thanks \u003ca href=\"https://github.com/asamuzaK\"\u003e\u003ccode\u003e@​asamuzaK\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHardened the handling of Shadow Roots when using \u003ccode\u003eIN_PLACE\u003c/code\u003e, thanks \u003ca href=\"https://github.com/GameZoneHacker\"\u003e\u003ccode\u003e@​GameZoneHacker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemoved a problem leading to permanent hook pollution, thanks \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactored the test suite and expanded test coverage significantly\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed several issues with DOM Clobbering in \u003ccode\u003eIN_PLACE\u003c/code\u003e mode, thanks \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/Bankde\"\u003e\u003ccode\u003e@​Bankde\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHardened the checks for cross-realm \u003ccode\u003eIN_PLACE\u003c/code\u003e and Shadow DOM sanitization, thanks \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/Bankde\"\u003e\u003ccode\u003e@​Bankde\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded more test coverage for \u003ccode\u003eIN_PLACE\u003c/code\u003e and general DOM Clobbering attacks\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bypass caused by the new HTML element \u003ccode\u003eselectedcontent\u003c/code\u003e added in 3.4.4, thanks \u003ca href=\"https://github.com/KabirAcharya\"\u003e\u003ccode\u003e@​KabirAcharya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eNote that this is a security release for an issue introduced in 3.4.4 and should be upgraded to immediately.\u003c/strong\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/0cae5187403132f96a6d357649e4b15633fc210a\"\u003e\u003ccode\u003e0cae518\u003c/code\u003e\u003c/a\u003e release: 3.4.11 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1494\"\u003e#1494\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/6ee5716f8336989753611beeca364957c0eb0c3e\"\u003e\u003ccode\u003e6ee5716\u003c/code\u003e\u003c/a\u003e release: 3.4.10 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1478\"\u003e#1478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/52102472d46035857c52df19e44285f8a1e102fc\"\u003e\u003ccode\u003e5210247\u003c/code\u003e\u003c/a\u003e release: 3.4.9 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1459\"\u003e#1459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/bcdd8285412dc9c4c149652aed2d712e790d6ccf\"\u003e\u003ccode\u003ebcdd828\u003c/code\u003e\u003c/a\u003e release: 3.4.8 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1439\"\u003e#1439\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff\"\u003e\u003ccode\u003eca30f07\u003c/code\u003e\u003c/a\u003e release: 3.4.7 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1414\"\u003e#1414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/bb7739e5bccec7e1ab3dae3f3e42d02db3acaaae\"\u003e\u003ccode\u003ebb7739e\u003c/code\u003e\u003c/a\u003e release: 3.4.6 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1394\"\u003e#1394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/011b0c78f2a0f57ee54f5fcccb697a46ca6e63ea\"\u003e\u003ccode\u003e011b0c7\u003c/code\u003e\u003c/a\u003e release: 3.4.5 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1382\"\u003e#1382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/5817ad969c15e67dfcd6cb37248d6e9c1553e7c3\"\u003e\u003ccode\u003e5817ad9\u003c/code\u003e\u003c/a\u003e release: 3.4.4 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1374\"\u003e#1374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/520edb0371a9638f9b51f1798051299a250c686b\"\u003e\u003ccode\u003e520edb0\u003c/code\u003e\u003c/a\u003e release: 3.4.3 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1352\"\u003e#1352\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/6f67fd396a7b8c64294343999fe607ca1f5299c0\"\u003e\u003ccode\u003e6f67fd3\u003c/code\u003e\u003c/a\u003e Sync/3.4.2 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1322\"\u003e#1322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cure53/DOMPurify/compare/3.2.7...3.4.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-xml-parser` from 5.2.5 to 5.9.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/releases\"\u003efast-xml-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHarden GitHub Actions workflows by \u003ca href=\"https://github.com/martincostello\"\u003e\u003ccode\u003e@​martincostello\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/841\"\u003eNaturalIntelligence/fast-xml-parser#841\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGitHub Actions workflow fixes by \u003ca href=\"https://github.com/martincostello\"\u003e\u003ccode\u003e@​martincostello\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/844\"\u003eNaturalIntelligence/fast-xml-parser#844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/martincostello\"\u003e\u003ccode\u003e@​martincostello\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/841\"\u003eNaturalIntelligence/fast-xml-parser#841\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.2...v5.9.3\"\u003ehttps://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.2...v5.9.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.9.2\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.1...v5.9.2\"\u003ehttps://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.1...v5.9.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.9.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.0...v5.9.1\"\u003ehttps://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.0...v5.9.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eupdate strnum, use is-unsafe\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eupdate strnum to 2.3.0\n\u003cul\u003e\n\u003cli\u003eyou can set hex, binary, enotation, infinity, unicode\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003evalidate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eupdate strnum, FXB. Use xml-naming for DOCTYPE\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eintegrate xml-naming to validate DOCTYPE entity name and notation name (using qname because of backward compatibility)\n\u003cul\u003e\n\u003cli\u003eThis will consider xml-version as well. '1.0' is default\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eupdate strnum to 2.3.0\n\u003cul\u003e\n\u003cli\u003eYou can set octal and binary parsing which is by deault off\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eupdate fast-xml-builder to 1.2.0\n\u003cul\u003e\n\u003cli\u003ecan sanitize tag names if found invalid\u003c/li\u003e\n\u003cli\u003efix format output\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003efix minor old bugs and update builder\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: alwaysCreateTextNode should create text node when attributes are present for self closing node\u003c/li\u003e\n\u003cli\u003efix stop node expression when ns prefix is removed (found by \u003ca href=\"https://github.com/iruizsalinas\"\u003eiruizsalinas\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XML Builder to 1.1.7\u003c/li\u003e\n\u003cli\u003emark addEntity deprecated\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ebackward compatibility for numerical external entity, fix \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/705\"\u003e#705\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/817\"\u003e#817\u003c/a\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eallow numerical external entity for backward compatibility\u003c/li\u003e\n\u003cli\u003efix \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/705\"\u003e#705\u003c/a\u003e: attributesGroupName working with preserveOrder\u003c/li\u003e\n\u003cli\u003efix \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/817\"\u003e#817\u003c/a\u003e: stackoverflow when tag expression is very long\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eupgrade \u003ccode\u003e@​nodable/entities\u003c/code\u003e and FXB\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003e@nodable/entities\u003c/code\u003e v2.1.0\n\u003cul\u003e\n\u003cli\u003ebreaking changes\n\u003cul\u003e\n\u003cli\u003esingle entity scan. You're not allowed to use entity value to form another entity name.\u003c/li\u003e\n\u003cli\u003eyou cant add numeric external entity\u003c/li\u003e\n\u003cli\u003eentity error message when expantion limit is crossed might change\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etypings are updated for new options related to process entity\u003c/li\u003e\n\u003cli\u003eplease follow documentation of \u003ccode\u003e@nodable/entities\u003c/code\u003e for more detail.\u003c/li\u003e\n\u003cli\u003eperformance\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md\"\u003efast-xml-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003eNote: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003cp\u003eNote: Due to some last quick changes on v4, detail of v4.5.3 \u0026amp; v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion\u003c/p\u003e\n\u003cp\u003e*\u003cem\u003e5.9.3 / 2026-06-19\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eupdate strnum\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e*\u003cem\u003e5.9.2 / 2026-06-17\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003edummy release to test changes in github action\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e*\u003cem\u003e5.9.1 / 2026-06-17\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003edummy release to test release from github action\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e*\u003cem\u003e5.9.0 / 2026-06-15\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eupdate strnum to 2.3.0\n\u003cul\u003e\n\u003cli\u003eyou can set hex, binary, enotation, infinity, unicode\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003evalidate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library.\nUser can override rules by overriding EntityDecoder.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e*\u003cem\u003e5.8.0 / 2026-05-12\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eintegrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)\n\u003cul\u003e\n\u003cli\u003eThis will consider xml-version as well. '1.0' is default\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eupdate strnum to 2.3.0\n\u003cul\u003e\n\u003cli\u003eYou can set octal and binary parsing which is bydeault off\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eupdate fast-xml-builder to 1.2.0\n\u003cul\u003e\n\u003cli\u003ecan sanitize tag names if found invalid\u003c/li\u003e\n\u003cli\u003efix format output\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e5.7.3 / 2006-05-05\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: alwaysCreateTextNode should create text node when attributes are present for self closing node\u003c/li\u003e\n\u003cli\u003efix stop node expression when ns prefix is removed (found by \u003ca href=\"https://github.com/iruizsalinas\"\u003eiruizsalinas\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate XML Builder to 1.1.7\u003c/li\u003e\n\u003cli\u003emark addEntity deprecated\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e5.7.2 / 2026-04-25\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eallow numerical external entity for backward compatibility\u003c/li\u003e\n\u003cli\u003efix \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/705\"\u003e#705\u003c/a\u003e: attributesGroupName working with preserveOrder\u003c/li\u003e\n\u003cli\u003efix \u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/817\"\u003e#817\u003c/a\u003e: stackoverflow when tag expression is very long\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e5.7.1 / 2026-04-20\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix typo in CJS typing file\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e5.7.0 / 2026-04-17\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003e@nodable/entities\u003c/code\u003e v2.1.0\n\u003cul\u003e\n\u003cli\u003ebreaking changes\n\u003cul\u003e\n\u003cli\u003esingle entity scan. You're not allowed to user entity value to form another entity name.\u003c/li\u003e\n\u003cli\u003eyou cant add numeric external entity\u003c/li\u003e\n\u003cli\u003eentity error message when expantion limit is crossed might change\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/93a09f108d6f457a84e607a6806a7bfd6abc3e55\"\u003e\u003ccode\u003e93a09f1\u003c/code\u003e\u003c/a\u003e 5.9.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/9c1905edd7ea28db70770f758e293fcf079060c5\"\u003e\u003ccode\u003e9c1905e\u003c/code\u003e\u003c/a\u003e update strnum\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/8d71292a9aaaa8f4a24294e636bd191cfbf4d8a7\"\u003e\u003ccode\u003e8d71292\u003c/code\u003e\u003c/a\u003e GitHub Actions workflow fixes (\u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/844\"\u003e#844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/784a0442b697e1498e1f3c3fc1a057ad57424858\"\u003e\u003ccode\u003e784a044\u003c/code\u003e\u003c/a\u003e Harden GitHub Actions workflows (\u003ca href=\"https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/841\"\u003e#841\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/bf9b81a9ab952ce153281e119f99f9953f32bc76\"\u003e\u003ccode\u003ebf9b81a\u003c/code\u003e\u003c/a\u003e 5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/232abf54c793a950aeb63fd25934fc7f6008dc86\"\u003e\u003ccode\u003e232abf5\u003c/code\u003e\u003c/a\u003e update publish action for better security\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/73411fa630cf85798397b3007b5db5bfff2d2d61\"\u003e\u003ccode\u003e73411fa\u003c/code\u003e\u003c/a\u003e update checklist\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/d57e33bb9aa045813440244cca9d5be837671bba\"\u003e\u003ccode\u003ed57e33b\u003c/code\u003e\u003c/a\u003e 5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/3be603a51aac23e2054c92291e188fb30f427220\"\u003e\u003ccode\u003e3be603a\u003c/code\u003e\u003c/a\u003e testing release from Github\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/commit/b6c41ea401122dc97e3396066771672974622506\"\u003e\u003ccode\u003eb6c41ea\u003c/code\u003e\u003c/a\u003e Add GitHub Actions workflow for npm publishing\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.2.5...v5.9.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for fast-xml-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `mermaid` from 11.12.0 to 11.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mermaid-js/mermaid/releases\"\u003emermaid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003emermaid@11.15.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7174\"\u003e#7174\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/0aca21739c0d1fcaaa206e04a6cd574ebc415483\"\u003e\u003ccode\u003e0aca217\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/milesspencer35\"\u003e\u003ccode\u003e@​milesspencer35\u003c/code\u003e\u003c/a\u003e! - feat(sequence): Add support for decimal start and increment values in the \u003ccode\u003eautonumber\u003c/code\u003e directive\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7512\"\u003e#7512\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/8e17492f7365ba50896382feb69a23efd9d8a22d\"\u003e\u003ccode\u003e8e17492\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/aruncveli\"\u003e\u003ccode\u003e@​aruncveli\u003c/code\u003e\u003c/a\u003e! - feat(flowchart): add datastore shape\u003c/p\u003e\n\u003cp\u003eIn Data flow diagrams, a datastore/warehouse/file/database is used to represent data persistence. It is denoted by a rectangle with only top and bottom borders, and can be used in flowcharts with \u003ccode\u003eA@{ shape: datastore, label: \u0026quot;Datastore\u0026quot; }\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/6440\"\u003e#6440\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/9ad8dde6d049adde85d8ed2d476c09b5820f3f4b\"\u003e\u003ccode\u003e9ad8dde\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/yordis\"\u003e\u003ccode\u003e@​yordis\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/lgazo\"\u003e\u003ccode\u003e@​lgazo\u003c/code\u003e\u003c/a\u003e! - feat: add Event Modeling diagram\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7707\"\u003e#7707\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/27db774627be1cee881961dfd0d2cb21cd01b79d\"\u003e\u003ccode\u003e27db774\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/txmxthy\"\u003e\u003ccode\u003e@​txmxthy\u003c/code\u003e\u003c/a\u003e! - feat(architecture): expose four fcose layout knobs for \u003ccode\u003earchitecture-beta\u003c/code\u003e diagrams (\u003ccode\u003enodeSeparation\u003c/code\u003e, \u003ccode\u003eidealEdgeLengthMultiplier\u003c/code\u003e, \u003ccode\u003eedgeElasticity\u003c/code\u003e, \u003ccode\u003enumIter\u003c/code\u003e) so authors can tune layout density and spread overlapping siblings without changing diagram source\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7604\"\u003e#7604\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/bf9502fb6012a4b724679b401ac928f5ee55161c\"\u003e\u003ccode\u003ebf9502f\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/M-a-c\"\u003e\u003ccode\u003e@​M-a-c\u003c/code\u003e\u003c/a\u003e! - feat(class): add nested namespace support for class diagrams via dot notation and syntactic nesting\u003c/p\u003e\n\u003cp\u003eIf you have namespaces in class diagrams that use \u003ccode\u003e.\u003c/code\u003es already and want to render them without nesting (≤v11.14.0 behaviour), you can use set \u003ccode\u003eclass.hierarchicalNamespaces=false\u003c/code\u003e in your mermaid config:\u003c/p\u003e\n\u003cpre lang=\"yaml\"\u003e\u003ccode\u003econfig:\n  class:\n    hierarchicalNamespaces: false\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7272\"\u003e#7272\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/88cdd3dc0aab9577174561b04e14760c565a232b\"\u003e\u003ccode\u003e88cdd3d\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/xinbenlv\"\u003e\u003ccode\u003e@​xinbenlv\u003c/code\u003e\u003c/a\u003e! - feat(sankey): add outlined label style, configurable nodeWidth/nodePadding, and custom node colors\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7737\"\u003e#7737\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/e9b0f34d8d82a6260077764ee45e1d7d90957a0f\"\u003e\u003ccode\u003ee9b0f34\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ashishjain0512\"\u003e\u003ccode\u003e@​ashishjain0512\u003c/code\u003e\u003c/a\u003e! - fix: prevent unbalanced CSS styles in classDefs\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7737\"\u003e#7737\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/37ff937f1da2e19f882fd1db01235db4d01f4056\"\u003e\u003ccode\u003e37ff937\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ashishjain0512\"\u003e\u003ccode\u003e@​ashishjain0512\u003c/code\u003e\u003c/a\u003e! - fix: create CSS styles using the CSSOM\u003c/p\u003e\n\u003cp\u003eThis removes some invalid CSS and normalizes some CSS formatting.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7508\"\u003e#7508\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/bfe60cc67b9a6dec64f9161f58e4d24a06c42b65\"\u003e\u003ccode\u003ebfe60cc\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/biiab\"\u003e\u003ccode\u003e@​biiab\u003c/code\u003e\u003c/a\u003e! - fix(stateDiagram): \u003ccode\u003eend note\u003c/code\u003e now only closes a note when used on a new line\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7737\"\u003e#7737\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/faafb5d49106dd32c367f3882505f2dd625aa30e\"\u003e\u003ccode\u003efaafb5d\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ashishjain0512\"\u003e\u003ccode\u003e@​ashishjain0512\u003c/code\u003e\u003c/a\u003e! - fix(gantt): add iteration limit for \u003ccode\u003eexcludes\u003c/code\u003e field\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7737\"\u003e#7737\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/65f8be2a42faf869b811469571983cba7eeeca99\"\u003e\u003ccode\u003e65f8be2\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ashishjain0512\"\u003e\u003ccode\u003e@​ashishjain0512\u003c/code\u003e\u003c/a\u003e! - fix: disallow some CSS at-rules in custom CSS\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7726\"\u003e#7726\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/1502f32f3c5fb944925b0c527fbbde3c4f041824\"\u003e\u003ccode\u003e1502f32\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/aloisklink\"\u003e\u003ccode\u003e@​aloisklink\u003c/code\u003e\u003c/a\u003e! - fix(wardley): fix unnecessary sanitization of text\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7578\"\u003e#7578\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/1f98db8e326299ac97a2fa60abfd509d8f5f16e2\"\u003e\u003ccode\u003e1f98db8\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/Gaston202\"\u003e\u003ccode\u003e@​Gaston202\u003c/code\u003e\u003c/a\u003e! - fix(class): self-referential class multiplicity labels no longer rendered multiple times\u003c/p\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/issues/7560\"\u003e#7560\u003c/a\u003e. Resolves an issue where cardinality labels on self-referential class relationships were rendered three times due to edge splitting in the dagre layout. The fix ensures that each sub-edge only carries its relevant label positions.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7592\"\u003e#7592\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/2343e38498a3b31f8ce5e79f1f009e0b56fbe086\"\u003e\u003ccode\u003e2343e38\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/knsv-bot\"\u003e\u003ccode\u003e@​knsv-bot\u003c/code\u003e\u003c/a\u003e! - fix(sequence): add background box behind alt/else section title labels in sequence diagrams\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7589\"\u003e#7589\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/7fb9509b8b5cb1dc48519dc60cf6cdc6afba0462\"\u003e\u003ccode\u003e7fb9509\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/NYCU-Chung\"\u003e\u003ccode\u003e@​NYCU-Chung\u003c/code\u003e\u003c/a\u003e! - fix(block): prevent column widths from shrinking when mixing different column spans\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/pull/7632\"\u003e#7632\u003c/a\u003e \u003ca href=\"https://github.com/mermaid-js/mermaid/commit/3f9e0f15bedc1e2c71ddb6b34192d1a21124cfc2\"\u003e\u003ccode\u003e3f9e0f1\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/ekiauhce\"\u003e\u003ccode\u003e@​ekiauhce\u003c/code\u003e\u003c/a\u003e! - fix(sequence): correct messageAlign label position for right-to-left arrows in sequence diagrams\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/41646dfd43ac83f001b03c70605feb036afae46d\"\u003e\u003ccode\u003e41646df\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/issues/7739\"\u003e#7739\u003c/a\u003e from aloisklink/ci/fix-release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/2671f5c44a1515960ebc41c09a365c41860f95ee\"\u003e\u003ccode\u003e2671f5c\u003c/code\u003e\u003c/a\u003e docs: fix v11.15.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/f4bf04b5db8bed603e40ed3d5ce5228d6b07754e\"\u003e\u003ccode\u003ef4bf04b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/issues/7738\"\u003e#7738\u003c/a\u003e from mermaid-js/changeset-release/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/abfb563e1dcbd46d617f44a6361bd6d926dc6289\"\u003e\u003ccode\u003eabfb563\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/60b289f428d0a0832ad95ed4e1fb326344e23532\"\u003e\u003ccode\u003e60b289f\u003c/code\u003e\u003c/a\u003e Release Candidate 11.15.0 (\u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/issues/7737\"\u003e#7737\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/d37c0db39ca2405b4473361063df2c47109dc2c9\"\u003e\u003ccode\u003ed37c0db\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/issues/7730\"\u003e#7730\u003c/a\u003e from aloisklink/fix/fix-edgeLabelRightLeft-changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/5ab5a2895fa8b7e90de85b43a4b99aa50b39b0f1\"\u003e\u003ccode\u003e5ab5a28\u003c/code\u003e\u003c/a\u003e docs: improve nested namespace changeset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/18f8b4c5bf67aface3485272b48042f2fdd6fad2\"\u003e\u003ccode\u003e18f8b4c\u003c/code\u003e\u003c/a\u003e fix: revert endEdgeLabelLeft/endEdgeLabelRight change\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/504b2eb73d4d827baa817efd47ab6f44ae769b5a\"\u003e\u003ccode\u003e504b2eb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mermaid-js/mermaid/issues/7726\"\u003e#7726\u003c/a\u003e from aloisklink/fix/correct-unnecessary-html-escapes...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mermaid-js/mermaid/commit/1502f32f3c5fb944925b0c527fbbde3c4f041824\"\u003e\u003ccode\u003e1502f32\u003c/code\u003e\u003c/a\u003e fix(wardley): fix unnecessary sanitization of text\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mermaid-js/mermaid/compare/mermaid@11.12.0...mermaid@11.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for mermaid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vitest` from 2.1.6 to 4.1.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003evitest's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.9\u003c/h2\u003e\n\u003ch3\u003e🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eimportOriginal\u003c/code\u003e with optimizer and query import [backport to v4] - by \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e, \u003cstrong\u003eDavid Harris\u003c/strong\u003e, \u003cstrong\u003eCodex\u003c/strong\u003eand \u003cstrong\u003eVladimir\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10546\"\u003evitest-dev/vitest#10546\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a5180190c\"\u003e\u003c!-- raw HTML omitted --\u003e(a5180)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eWait for orchestrator readiness before resolving browser sessions [backport to v4] - by \u003cstrong\u003eVladimir\u003c/strong\u003e and \u003cstrong\u003eSéamus O'Connor\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10555\"\u003evitest-dev/vitest#10555\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/7fb29651a\"\u003e\u003c!-- raw HTML omitted --\u003e(7fb29)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWait for iframe tester readiness before preparing  [backport to v4] - by \u003cstrong\u003eVladimir\u003c/strong\u003e and \u003cstrong\u003eSéamus O'Connor\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10497\"\u003evitest-dev/vitest#10497\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10556\"\u003evitest-dev/vitest#10556\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/fbc626c40\"\u003e\u003c!-- raw HTML omitted --\u003e(fbc62)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emocker\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eHoist vi.mock() for vite-plus/test imports [backport to v4] - by \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e, \u003cstrong\u003eLongYinan\u003c/strong\u003e, \u003cstrong\u003eClaude Opus 4.8\u003c/strong\u003e and \u003cstrong\u003eVladimir\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10548\"\u003evitest-dev/vitest#10548\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/2c9559c02\"\u003e\u003c!-- raw HTML omitted --\u003e(2c955)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epool\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePrevent test run hang on worker crash  [backport to v4] - by \u003cstrong\u003eAri Perkkiö\u003c/strong\u003e and \u003cstrong\u003eJattioui Ismail\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10543\"\u003evitest-dev/vitest#10543\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10564\"\u003evitest-dev/vitest#10564\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/934b0f587\"\u003e\u003c!-- raw HTML omitted --\u003e(934b0)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.8...v4.1.9\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.8\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eDisable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [backport to v4]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCodex\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10450\"\u003evitest-dev/vitest#10450\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e4067b3b1\"\u003e\u003c!-- raw HTML omitted --\u003e(e4067)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by \u003ca href=\"https://github.com/toxik\"\u003e\u003ccode\u003e@​toxik\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Zelys-DFKH\"\u003e\u003ccode\u003e@​Zelys-DFKH\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10474\"\u003evitest-dev/vitest#10474\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/675b4343f\"\u003e\u003c!-- raw HTML omitted --\u003e(675b4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.7...v4.1.8\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.7\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erunner\u003c/strong\u003e: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10384\"\u003evitest-dev/vitest#10384\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4f0f2a1ee\"\u003e\u003c!-- raw HTML omitted --\u003e(4f0f2)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.6...v4.1.7\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.6\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Provide project reference in \u003ccode\u003eToMatchScreenshotResolvePath\u003c/code\u003e  -  by \u003ca href=\"https://github.com/macarie\"\u003e\u003ccode\u003e@​macarie\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10138\"\u003evitest-dev/vitest#10138\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/31882607c\"\u003e\u003c!-- raw HTML omitted --\u003e(31882)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGlobal \u003ccode\u003esequence.concurrent: true\u003c/code\u003e with top-level \u003ccode\u003etest(..., { concurrent: false })\u003c/code\u003e + depreacte \u003ccode\u003esequential\u003c/code\u003e test API and options  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eCodex\u003c/strong\u003e and \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10196\"\u003evitest-dev/vitest#10196\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/2847dfa2a\"\u003e\u003c!-- raw HTML omitted --\u003e(2847d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Simplify orchestrator otel carrier  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10285\"\u003evitest-dev/vitest#10285\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/18af98cee\"\u003e\u003c!-- raw HTML omitted --\u003e(18af9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🏎 Performance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eStringify diff objects only once  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10276\"\u003evitest-dev/vitest#10276\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9f7b1528c\"\u003e\u003c!-- raw HTML omitted --\u003e(9f7b1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v4.1.5...v4.1.6\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.5\u003c/h2\u003e\n\u003ch3\u003e   🚀 Experimental Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecoverage\u003c/strong\u003e: Istanbul to support \u003ccode\u003einstrumenter\u003c/code\u003e option  -  by \u003ca href=\"https://github.com/BartWaardenburg\"\u003e\u003ccode\u003e@​BartWaardenburg\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10119\"\u003evitest-dev/vitest#10119\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/0e0ff41c7\"\u003e\u003c!-- raw HTML omitted --\u003e(0e0ff)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a7a61e78c7d0718f00173cff6800a91a344457d4\"\u003e\u003ccode\u003ea7a61e7\u003c/code\u003e\u003c/a\u003e chore: release v4.1.9 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10598\"\u003e#10598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/934b0f587cb61d8338d83f525295322692a2db40\"\u003e\u003ccode\u003e934b0f5\u003c/code\u003e\u003c/a\u003e fix(pool): prevent test run hang on worker crash (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10543\"\u003e#10543\u003c/a\u003e) [backport to v4] (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/7fb29651afbae2a9b0cefe6c031a9308f168ac60\"\u003e\u003ccode\u003e7fb2965\u003c/code\u003e\u003c/a\u003e fix(browser): wait for orchestrator readiness before resolving browser sessio...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a5180190c1be7089e3705e3dd9e84fea118d09d3\"\u003e\u003ccode\u003ea518019\u003c/code\u003e\u003c/a\u003e fix: fix \u003ccode\u003eimportOriginal\u003c/code\u003e with optimizer and query import [backport to v4] (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/e61f2dd2a0ba0a266c1c5e0334aad3799fee527f\"\u003e\u003ccode\u003ee61f2dd\u003c/code\u003e\u003c/a\u003e chore: release v4.1.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/e4067b3b150005fd42cf75f994300119245806b9\"\u003e\u003ccode\u003ee4067b3\u003c/code\u003e\u003c/a\u003e fix(browser): disable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a09d47236e19fd3151351080c667036ca6164dc4\"\u003e\u003ccode\u003ea09d472\u003c/code\u003e\u003c/a\u003e chore: release v4.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/a8fd24c1cad2320b19fcc651413c7d928423bdc1\"\u003e\u003ccode\u003ea8fd24c\u003c/code\u003e\u003c/a\u003e chore: release v4.1.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/18af98cee1830604d57f6a02bf28f8067cdffc06\"\u003e\u003ccode\u003e18af98c\u003c/code\u003e\u003c/a\u003e fix(browser): simplify orchestrator otel carrier (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10285\"\u003e#10285\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/31882607cc67c7bf52ead13a606321ffdb06a857\"\u003e\u003ccode\u003e3188260\u003c/code\u003e\u003c/a\u003e feat(browser): provide project reference in \u003ccode\u003eToMatchScreenshotResolvePath\u003c/code\u003e (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/vitest\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for vitest since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.9.0 to 1.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.18.1 — June 21, 2026\u003c/h2\u003e\n\u003cp\u003eThis release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.\u003c/p\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10913\"\u003e#10913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10917\"\u003e#10917\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10930\"\u003e#10930\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10942\"\u003e#10942\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/10993\"\u003e#10993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRuntime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10959\"\u003e#10959\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11021\"\u003e#11021\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAxiosURLSearchParams: Switched the encoder callback to an arrow function so \u003ccode\u003eencoder.call(this)\u003c/code\u003e receives the \u003ccode\u003eAxiosURLSearchParams\u003c/code\u003e instance correctly. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDocumentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11007\"\u003e#11007\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11010\"\u003e#11010\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11023\"\u003e#11023\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11025\"\u003e#11025\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eDependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11011\"\u003e#11011\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11012\"\u003e#11012\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11013\"\u003e#11013\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11014\"\u003e#11014\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11015\"\u003e#11015\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11016\"\u003e#11016\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11017\"\u003e#11017\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11026\"\u003e#11026\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/webdevelopersrinu\"\u003e\u003ccode\u003e@​webdevelopersrinu\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10913\"\u003e#10913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sijie-Z\"\u003e\u003ccode\u003e@​sijie-Z\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10993\"\u003e#10993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bartlomieju\"\u003e\u003ccode\u003e@​bartlomieju\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11023\"\u003e#11023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JSap0914\"\u003e\u003ccode\u003e@​JSap0914\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11019\"\u003e#11019\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.18.0...v1.18.1\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.0 — June 13, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eRedirect Header Safety:\u003c/strong\u003e Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10892\"\u003e#10892\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eURL And Request Hardening:\u003c/strong\u003e Rejects malformed \u003ccode\u003ehttp:\u003c/code\u003e and \u003ccode\u003ehttps:\u003c/code\u003e URLs that omit \u003ccode\u003e//\u003c/code\u003e with \u003ccode\u003eERR_INVALID_URL\u003c/code\u003e, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local \u003ccode\u003eNO_...\n\n_Description has been truncated_","html_url":"https://github.com/rzazadebilal7/cloudflare-docs/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/rzazadebilal7%2Fcloudflare-docs/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"}},{"old_version":"7.4.3","new_version":"7.5.19","update_type":"minor","path":null,"pr_created_at":"2026-07-02T22:47:39.000Z","version_change":"7.4.3 → 7.5.19","issue":{"uuid":"4798688795","node_id":"PR_kwDOKduc6M7tVxJ2","number":839,"state":"open","title":"Bump tar from 7.4.3 to 7.5.19","user":"dependabot[bot]","labels":["size/M","🤖 bot","☑️ auto-merge"],"assignees":["guibranco"],"locked":false,"comments_count":7,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-02T22:47:39.000Z","updated_at":"2026-07-03T19:14:37.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"tar","old_version":"7.4.3","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps [tar](https://github.com/isaacs/node-tar) from 7.4.3 to 7.5.19.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~isaacs\"\u003eisaacs\u003c/a\u003e, a new releaser for tar since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar\u0026package-manager=npm_and_yarn\u0026previous-version=7.4.3\u0026new-version=7.5.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ApiBR/sports-agenda-ui/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/ApiBR/sports-agenda-ui/pull/839","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ApiBR%2Fsports-agenda-ui/issues/839","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/839/packages"}},{"old_version":"7.4.3","new_version":"7.5.19","update_type":"minor","path":null,"pr_created_at":"2026-07-02T22:40:07.000Z","version_change":"7.4.3 → 7.5.19","issue":{"uuid":"4798656473","node_id":"PR_kwDONSvSGc7tVqjk","number":722,"state":"open","title":"Build(deps-dev): bump tar from 7.4.3 to 7.5.19","user":"dependabot[bot]","labels":["size/M"],"assignees":["guibranco"],"locked":false,"comments_count":7,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-02T22:40:07.000Z","updated_at":"2026-07-02T22:41:55.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Build(deps-dev)","packages":[{"name":"tar","old_version":"7.4.3","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps [tar](https://github.com/isaacs/node-tar) from 7.4.3 to 7.5.19.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~isaacs\"\u003eisaacs\u003c/a\u003e, a new releaser for tar since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar\u0026package-manager=npm_and_yarn\u0026previous-version=7.4.3\u0026new-version=7.5.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ApiBR/catalog/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/ApiBR/catalog/pull/722","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ApiBR%2Fcatalog/issues/722","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/722/packages"}},{"old_version":"7.4.3","new_version":"7.5.19","update_type":"minor","path":null,"pr_created_at":"2026-07-02T22:25:59.000Z","version_change":"7.4.3 → 7.5.19","issue":{"uuid":"4798596350","node_id":"PR_kwDOCKdSKc7tVeT_","number":852,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","☑️ auto-merge","🤖 bot","size/XXL"],"assignees":["guibranco"],"locked":false,"comments_count":6,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-02T22:25:59.000Z","updated_at":"2026-07-03T00:24:25.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":8,"packages":[{"name":"postcss","old_version":"8.5.6","new_version":"8.5.16","repository_url":"https://github.com/postcss/postcss"},{"name":"vite","old_version":"6.3.5","new_version":"8.1.3","repository_url":"https://github.com/vitejs/vite"},{"name":"minimatch","old_version":"3.1.2","new_version":"3.1.5","repository_url":"https://github.com/isaacs/minimatch"},{"name":"flatted","old_version":"3.3.3","new_version":"3.4.2","repository_url":"https://github.com/WebReflection/flatted"},{"name":"js-yaml","old_version":"4.1.0","new_version":"4.3.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"picomatch","old_version":"2.3.1","new_version":"removed","repository_url":"https://github.com/micromatch/picomatch"},{"name":"react-router","old_version":"7.6.2","new_version":"7.18.1","repository_url":"https://github.com/remix-run/react-router"},{"name":"tar","old_version":"7.4.3","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.16` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.3.5` | `8.1.3` |\n| [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` |\n| [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.2` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.3.0` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `removed` |\n| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.6.2` | `7.18.1` |\n| [tar](https://github.com/isaacs/node-tar) | `7.4.3` | `7.5.19` |\n\n\nUpdates `postcss` from 8.5.6 to 8.5.16\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/releases\"\u003epostcss's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e position (by \u003ca href=\"https://github.com/mizdra\"\u003e\u003ccode\u003e@​mizdra\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eraws\u003c/code\u003e after rehydrating a JSON AST (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed putting parent-less node in \u003ccode\u003enodes\u003c/code\u003e of new node (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed computing \u003ccode\u003eoffset\u003c/code\u003e in \u003ccode\u003epositionBy()\u003c/code\u003e (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003erangeBy()\u003c/code\u003e on \u003ccode\u003eindex: 0\u003c/code\u003e (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed declaration parsing performance (by \u003ca href=\"https://github.com/homanp\"\u003e\u003ccode\u003e@​homanp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom syntax regression (by \u003ca href=\"https://github.com/43081j\"\u003e\u003ccode\u003e@​43081j\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epostcss-scss\u003c/code\u003e commend regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed reading any file via user-generated CSS.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003eopts.unsafeMap\u003c/code\u003e to disable checks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed nested brackets parsing performance (by \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up source map encoding paring in case of the error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eProcessor#version\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved source map annotation cleaning performance (by CodeAnt AI).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/blob/main/CHANGELOG.md\"\u003epostcss's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e position (by \u003ca href=\"https://github.com/mizdra\"\u003e\u003ccode\u003e@​mizdra\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eraws\u003c/code\u003e after rehydrating a JSON AST (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed putting parent-less node in \u003ccode\u003enodes\u003c/code\u003e of new node (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed computing \u003ccode\u003eoffset\u003c/code\u003e in \u003ccode\u003epositionBy()\u003c/code\u003e (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003erangeBy()\u003c/code\u003e on \u003ccode\u003eindex: 0\u003c/code\u003e (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed declaration parsing performance (by \u003ca href=\"https://github.com/homanp\"\u003e\u003ccode\u003e@​homanp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom syntax regression (by \u003ca href=\"https://github.com/43081j\"\u003e\u003ccode\u003e@​43081j\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epostcss-scss\u003c/code\u003e commend regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed reading any file via user-generated CSS.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003eopts.unsafeMap\u003c/code\u003e to disable checks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed nested brackets parsing performance (by \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up source map encoding paring in case of the error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eProcessor#version\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved source map annotation cleaning performance (by CodeAnt AI).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/92ccc93ff15bd193491d67fad9763e62d489dfad\"\u003e\u003ccode\u003e92ccc93\u003c/code\u003e\u003c/a\u003e Release 8.5.16 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/818bdd6043359af773ccc3ca8663053d61a707c8\"\u003e\u003ccode\u003e818bdd6\u003c/code\u003e\u003c/a\u003e Update formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/46e451068ee6160b837865b715cf6972f28fabd5\"\u003e\u003ccode\u003e46e4510\u003c/code\u003e\u003c/a\u003e Fix \u003ccode\u003eInput#origin()\u003c/code\u003e returning incorrect position (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2036\"\u003e#2036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/34942ce76c0b0c9ee65b1421017ac71855e722c4\"\u003e\u003ccode\u003e34942ce\u003c/code\u003e\u003c/a\u003e Fix tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/d4feed645314ee421edf80ee9ebe453cc75c997f\"\u003e\u003ccode\u003ed4feed6\u003c/code\u003e\u003c/a\u003e Don't clone root-less child nodes in container constructor (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2097\"\u003e#2097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/da323fc8d327a38199a21987dcbf7e27e3bc34f3\"\u003e\u003ccode\u003eda323fc\u003c/code\u003e\u003c/a\u003e Revert version update to fix old Node.js on CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/886336919497516df8f140d0fb327bd125e35053\"\u003e\u003ccode\u003e8863369\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/3828982213fec6bc13d0791b1adf40393be0935e\"\u003e\u003ccode\u003e3828982\u003c/code\u003e\u003c/a\u003e Preserve node raws when rehydrating a JSON AST (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2100\"\u003e#2100\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/d1e80b830386b08dcd5b962fd466d1c51f28e82d\"\u003e\u003ccode\u003ed1e80b8\u003c/code\u003e\u003c/a\u003e Fix Node#rangeBy() ignoring index 0 (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2091\"\u003e#2091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/b91e4a63907325d98b75d11fda546bdd91acc608\"\u003e\u003ccode\u003eb91e4a6\u003c/code\u003e\u003c/a\u003e Fix Node.js 26 tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/postcss/postcss/compare/8.5.6...8.5.16\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for postcss since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vite` from 6.3.5 to 8.1.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.1.3\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.3/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.2\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.2/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.1\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.1/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ecreate-vite@8.1.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/create-vite@8.1.0/packages/create-vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003eplugin-legacy@8.1.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0/packages/plugin-legacy/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.0/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003eplugin-legacy@8.1.0-beta.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0-beta.0/packages/plugin-legacy/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.0-beta.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.0-beta.0/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.16\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.16/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.15\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.15/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.14\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.14/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.13\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.13/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.12\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.12/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.11\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.11/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.10\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.10/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.9\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.9/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.8\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.8/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.1.2...v8.1.3\"\u003e8.1.3\u003c/a\u003e (2026-07-02)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e inject inlined CSS after the shebang line (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22717\"\u003e#22717\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/1534d362794e856cc718b123cb245e0efcf36b9a\"\u003e1534d36\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e bump \u003ccode\u003ees-module-lexer\u003c/code\u003e to 2.3.0 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22838\"\u003e#22838\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7103c3af795396e2ad87e1125eb3fc20d60d9430\"\u003e7103c3a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epreload css for nested dynamic imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22759\"\u003e#22759\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2c530542da1c50b95b7f0cb17adf82f64ecf97f3\"\u003e2c53054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e correct stacktrace column position for first line (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22828\"\u003e#22828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c4acd6982a051fa10dbd7e3a37e00f0c467793b8\"\u003ec4acd69\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.1.1...v8.1.2\"\u003e8.1.2\u003c/a\u003e (2026-06-30)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e revert es-module-lexer to 2.1.0 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22827\"\u003e#22827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d3bd7c4111b8345cfc353c7bbb2c30601752e26\"\u003e0d3bd7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erestore, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of cwd (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22757\"\u003e#22757\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22825\"\u003e#22825\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/efb98cce73f3f89c4f03936ab7741cd5b0636f5c\"\u003eefb98cc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erevert, \u0026quot;fix: escape ids with multiple null bytes (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22687\"\u003e#22687\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://github.com/vitejs/vite/commit/cccef55dfaa6253929d2cb58d3af53f217efc877\"\u003ecccef55\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erevert, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of cwd (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22757\"\u003e#22757\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://github.com/vitejs/vite/commit/cf97711963ddcdcfac3e4fcd00771d7a55e92141\"\u003ecf97711\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.1.0...v8.1.1\"\u003e8.1.1\u003c/a\u003e (2026-06-30)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dynamic import warning to link to Vite docs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22823\"\u003e#22823\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/62bd7afd27ec0507bf528a135165dda3a44ebc21\"\u003e62bd7af\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e avoid stack overflow on \u003ccode\u003eimport.meta.hot.invalidate()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22797\"\u003e#22797\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/709eb8ee03d3c46269755334f59b7e9a353fc522\"\u003e709eb8e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e serve assets emitted during HMR/lazy compile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22745\"\u003e#22745\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5876b2cc2e1a01df9363e1e3d1d19f474ba68285\"\u003e5876b2c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundledDev:\u003c/strong\u003e skip plugin transform hooks for rolldown-lazy stub modules (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22778\"\u003e#22778\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8f925e2e496f4d313d860acb53880245b07ce6f7\"\u003e8f925e2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e preserve dollar signs in external \u003ccode\u003e@import\u003c/code\u003e urls with lightningcss (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22718\"\u003e#22718\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/9fa7ab4990f4fe74597d0a37a16d84af1c1e3544\"\u003e9fa7ab4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e resolve tsconfig paths in CSS and Sass \u003ca href=\"https://github.com/import\"\u003e\u003ccode\u003e@​import\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22775\"\u003e#22775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ef0b8916160c4d2a677decc062f6faa48fbf1578\"\u003eef0b891\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22734\"\u003e#22734\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/e635f493faa24930ae637318d6564539bc668e89\"\u003ee635f49\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22804\"\u003e#22804\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8837400a676a633af1ad6d3746b584d13cf90ecc\"\u003e8837400\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22591\"\u003e#22591\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2ce6677a151c53a019baec32859b646267f9d320\"\u003e2ce6677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eescape ids with multiple null bytes (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22687\"\u003e#22687\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/833fc302f3f4a5030f49207b5fbf10422f3247a2\"\u003e833fc30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehide console window when running 'net use' on Windows (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22698\"\u003e#22698\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/92b63f219f6c1872f35461aa75e9e9aec79bb01c\"\u003e92b63f2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eignore bundled config temp dir (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22800\"\u003e#22800\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/043a81096ddf8c6f9077c8e3e12362c83f9ed089\"\u003e043a810\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einvert \u003ccode\u003eesbuild.jsxSideEffects\u003c/code\u003e when converting to \u003ccode\u003eoxc.jsx.pure\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22809\"\u003e#22809\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/33895ba4faa0a46d5bd7b3eb53d02255113c8b5d\"\u003e33895ba\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimize-deps:\u003c/strong\u003e ignore \u003ccode\u003eERR_CLOSED_SERVER\u003c/code\u003e in scanner (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22784\"\u003e#22784\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/085a0ab704bf1a698d459d625a5c955d27b73134\"\u003e085a0ab\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scanner should resolve \u003ccode\u003einput\u003c/code\u003e from \u003ccode\u003eroot\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22769\"\u003e#22769\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/9722b0795b68602597ddd53e3d3c7ed9f00cb831\"\u003e9722b07\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eresolve pnpm .modules.yaml from workspace root instead of cwd (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22757\"\u003e#22757\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2531ac7ccd1d581df5febe4a3814226ba8939a20\"\u003e2531ac7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ereturn sourcemap field from some plugins that were lacking (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22782\"\u003e#22782\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7e18bf802bdde7a386eb3b407c87a67f89a895ca\"\u003e7e18bf8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle malformed URI in indexHtmlMiddleware (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22781\"\u003e#22781\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/84f5cccc7574c740c46f5cb2a09f29cde8380701\"\u003e84f5ccc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eimprove dependency optimizer messages (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22549\"\u003e#22549\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/092cb3b4247a06ba176c094a9a743d335adc6574\"\u003e092cb3b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e remove lightningcss null byte bug workaround (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22822\"\u003e#22822\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2dafd3bb7f8b265037e216f50afaa890ae2e2875\"\u003e2dafd3b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003euse pre-defined environments variable to avoid duplicate \u003ccode\u003eObject.values\u003c/code\u003e calls (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22790\"\u003e#22790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/1113acf6cff711196b3443f7126804847c1d4e1e\"\u003e1113acf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/578ffb80d46940f3b99cd96ed609f8b3a0ac5ede\"\u003e\u003ccode\u003e578ffb8\u003c/code\u003e\u003c/a\u003e release: v8.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/7103c3af795396e2ad87e1125eb3fc20d60d9430\"\u003e\u003ccode\u003e7103c3a\u003c/code\u003e\u003c/a\u003e fix(deps): bump \u003ccode\u003ees-module-lexer\u003c/code\u003e to 2.3.0 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22838\"\u003e#22838\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/1534d362794e856cc718b123cb245e0efcf36b9a\"\u003e\u003ccode\u003e1534d36\u003c/code\u003e\u003c/a\u003e fix(css): inject inlined CSS after the shebang line (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22717\"\u003e#22717\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/c4acd6982a051fa10dbd7e3a37e00f0c467793b8\"\u003e\u003ccode\u003ec4acd69\u003c/code\u003e\u003c/a\u003e fix(ssr): correct stacktrace column position for first line (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22828\"\u003e#22828\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/2c530542da1c50b95b7f0cb17adf82f64ecf97f3\"\u003e\u003ccode\u003e2c53054\u003c/code\u003e\u003c/a\u003e fix: preload css for nested dynamic imports (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22759\"\u003e#22759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/ba3119397d0110952f29965774c627a3017d7292\"\u003e\u003ccode\u003eba31193\u003c/code\u003e\u003c/a\u003e release: v8.1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0d3bd7c4111b8345cfc353c7bbb2c30601752e26\"\u003e\u003ccode\u003e0d3bd7c\u003c/code\u003e\u003c/a\u003e fix(deps): revert es-module-lexer to 2.1.0 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22827\"\u003e#22827\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/efb98cce73f3f89c4f03936ab7741cd5b0636f5c\"\u003e\u003ccode\u003eefb98cc\u003c/code\u003e\u003c/a\u003e fix: restore, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/cf97711963ddcdcfac3e4fcd00771d7a55e92141\"\u003e\u003ccode\u003ecf97711\u003c/code\u003e\u003c/a\u003e fix: revert, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/cccef55dfaa6253929d2cb58d3af53f217efc877\"\u003e\u003ccode\u003ecccef55\u003c/code\u003e\u003c/a\u003e fix: revert, \u0026quot;fix: escape ids with multiple null bytes (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22687\"\u003e#22687\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v8.1.3/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for vite since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `minimatch` from 3.1.2 to 3.1.5\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/7bba97888a27a6162983056bcce2a6e28f668712\"\u003e\u003ccode\u003e7bba978\u003c/code\u003e\u003c/a\u003e 3.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/bd259425b2ca17b42897997f93e890314155522d\"\u003e\u003ccode\u003ebd25942\u003c/code\u003e\u003c/a\u003e docs: add warning about ReDoS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/1a9c27c75725474dbde57db2995b6281b267756d\"\u003e\u003ccode\u003e1a9c27c\u003c/code\u003e\u003c/a\u003e fix partial matching of globstar patterns\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/1a2e084af579731af66c221214e3ca8222c9bf23\"\u003e\u003ccode\u003e1a2e084\u003c/code\u003e\u003c/a\u003e 3.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/ae24656237c3d58067442f790ce17eff84463a47\"\u003e\u003ccode\u003eae24656\u003c/code\u003e\u003c/a\u003e update lockfile\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/b1003749228b2a79e1f237963a0d559ef7a0941e\"\u003e\u003ccode\u003eb100374\u003c/code\u003e\u003c/a\u003e limit recursion for **, improve perf considerably\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/26ffeaa091b9f660833e23f42e07165b33e85c13\"\u003e\u003ccode\u003e26ffeaa\u003c/code\u003e\u003c/a\u003e lockfile update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/9eca892a4e5dbb20534f9f30483b85cdeee6c2eb\"\u003e\u003ccode\u003e9eca892\u003c/code\u003e\u003c/a\u003e lock node version to 14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/00c323b188b704e5d4bc534ecec2268cfa70a32a\"\u003e\u003ccode\u003e00c323b\u003c/code\u003e\u003c/a\u003e 3.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/30486b2048929264f44d18822891cfffa02af78b\"\u003e\u003ccode\u003e30486b2\u003c/code\u003e\u003c/a\u003e update CI matrix and actions\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `flatted` from 3.3.3 to 3.4.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/3bf09091c3562e17a0647bc06710dd6097079cf7\"\u003e\u003ccode\u003e3bf0909\u003c/code\u003e\u003c/a\u003e 3.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802\"\u003e\u003ccode\u003e885ddcc\u003c/code\u003e\u003c/a\u003e fix CWE-1321\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/0bdba705d130f00892b1b8fcc80cf4cdea0631e3\"\u003e\u003ccode\u003e0bdba70\u003c/code\u003e\u003c/a\u003e added flatted-view to the benchmark\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/2a02dce7c641dec31194c67663f9b0b12e62da20\"\u003e\u003ccode\u003e2a02dce\u003c/code\u003e\u003c/a\u003e 3.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/fba4e8f2e113665da275b19cd0f695f3d98e9416\"\u003e\u003ccode\u003efba4e8f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/WebReflection/flatted/issues/89\"\u003e#89\u003c/a\u003e from WebReflection/python-fix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/5fe86485e6df7f7f34a07a2a85498bd3e17384e7\"\u003e\u003ccode\u003e5fe8648\u003c/code\u003e\u003c/a\u003e added \u0026quot;when in Rome\u0026quot; also a test for PHP\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/53517adbefe724fe472b2f9ebcdb01910d0ae3f0\"\u003e\u003ccode\u003e53517ad\u003c/code\u003e\u003c/a\u003e some minor improvement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/b3e2a0c387bf446435fec45ad7f05299f012346f\"\u003e\u003ccode\u003eb3e2a0c\u003c/code\u003e\u003c/a\u003e Fixing recursion issue in Python too\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/c4b46dbcbf782326e54ea1b65d3ebb1dc7a23fad\"\u003e\u003ccode\u003ec4b46db\u003c/code\u003e\u003c/a\u003e Add SECURITY.md for security policy and reporting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/f86d071e0f70de5a7d8200198824a3f07fc9c988\"\u003e\u003ccode\u003ef86d071\u003c/code\u003e\u003c/a\u003e Create dependabot.yml for version updates\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 4.1.0 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda\"\u003e\u003ccode\u003e33d05b5\u003c/code\u003e\u003c/a\u003e 4.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb\"\u003e\u003ccode\u003e663bfab\u003c/code\u003e\u003c/a\u003e Drop demo publish, to not override new v5 one.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986\"\u003e\u003ccode\u003e1cb8c7b\u003c/code\u003e\u003c/a\u003e Add v4-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157\"\u003e\u003ccode\u003e02f27af\u003c/code\u003e\u003c/a\u003e Restore umd builds back to es5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb\"\u003e\u003ccode\u003e8be84ed\u003c/code\u003e\u003c/a\u003e Fix es5 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4\"\u003e\u003ccode\u003e59423c6\u003c/code\u003e\u003c/a\u003e Replace \u003ccode\u003emaxMergeSeqLength\u003c/code\u003e option with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (more robust). Ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d\"\u003e\u003ccode\u003e6842ef6\u003c/code\u003e\u003c/a\u003e doc polish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/590dbabadd172b099c07654fab2eabec8c7a07b9\"\u003e\u003ccode\u003e590dbab\u003c/code\u003e\u003c/a\u003e 4.2.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f944dc5cd132251752499bdb157f33027d362177\"\u003e\u003ccode\u003ef944dc5\u003c/code\u003e\u003c/a\u003e Add package.json funding field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f6927192223355b64f2a6e19f3071ccc579ee718\"\u003e\u003ccode\u003ef692719\u003c/code\u003e\u003c/a\u003e Changelog update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/4.1.0...4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nRemoves `picomatch`\n\nUpdates `react-router` from 7.6.2 to 7.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/remix-run/react-router/releases\"\u003ereact-router's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.18.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181\"\u003ehttps://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.18.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.17.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.16.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.15.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.15.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.2\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.2\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.12.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.11.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7110\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7110\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.10.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7101\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7101\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.10.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7100\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7100\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.9.6\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v796\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v796\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/remix-run/react-router/blob/react-router@7.18.1/packages/react-router/CHANGELOG.md\"\u003ereact-router's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.18.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eNo changes\u003c/em\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.18.0\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix server handler prerender responses when using \u003ccode\u003essr: false\u003c/code\u003e and \u003ccode\u003efuture.v8_trailingSlashAwareDataRequests: true\u003c/code\u003e. Avoids false positive \u0026quot;SPA Mode\u0026quot; detection when serving prerendered paths (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15173\"\u003e#15173\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse the \u003ccode\u003eServerRouter\u003c/code\u003e nonce for nonce-aware SSR components when they don't provide their own value so strict CSP pages can load them. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15170\"\u003e#15170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003eturbo-stream\u003c/code\u003e to serialize and deserialize Framework Mode hydration errors (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15175\"\u003e#15175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrecompute route branch matchers to avoid recompiling route path regexes during matching (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15186\"\u003e#15186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse the constructed request URL host when validating action request origins. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15185\"\u003e#15185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove the un-documented custom error serialization logic from Data Mode SSR built-in hydration flows (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15175\"\u003e#15175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eValidate protocols in RSC render redirects (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15177\"\u003e#15177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eConsolidate url normalization logic and better handle mixed slashes (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15176\"\u003e#15176\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.17.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShip a subset of the official documentation inside the \u003ccode\u003ereact-router\u003c/code\u003e package (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15121\"\u003e#15121\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eMarkdown docs are now available in \u003ccode\u003enode_modules/react-router/docs\u003c/code\u003e, letting AI coding agents and the React Router agent skills read official docs locally\u003c/li\u003e\n\u003cli\u003eExcludes auto-generated API docs (\u003ccode\u003eapi/\u003c/code\u003e), \u003ccode\u003ecommunity/\u003c/code\u003e content, and tutorials (\u003ccode\u003etutorials/\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.16.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eStabilize \u003ccode\u003efuture.unstable_trailingSlashAwareDataRequests\u003c/code\u003e as \u003ccode\u003efuture.v8_trailingSlashAwareDataRequests\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15098\"\u003e#15098\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDisable manifest path when lazy route dicovery is disabled (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15068\"\u003e#15068\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix browser URL creation to use the configured history window instead of the global window. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15066\"\u003e#15066\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePass the history/router window through to \u003ccode\u003ecreateBrowserURLImpl\u003c/code\u003e so custom window contexts keep the correct URL origin.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix \u003ccode\u003euseNavigation()\u003c/code\u003e return type to preserve discriminated union across navigation states (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15095\"\u003e#15095\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eWiden \u003ccode\u003eMetaDescriptor\u003c/code\u003e \u003ccode\u003escript:ld+json\u003c/code\u003e type from \u003ccode\u003eLdJsonObject\u003c/code\u003e to \u003ccode\u003eLdJsonObject | LdJsonObject[]\u003c/code\u003e to permit multiple JSON-LD schemas in a single \u003ccode\u003e\u0026lt;script type=\u0026quot;application/ld+json\u0026quot;\u0026gt;\u003c/code\u003e tag emitted by \u003ccode\u003e\u0026lt;Meta /\u0026gt;\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15082\"\u003e#15082\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.15.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate router to operate on fetcher Maps in an immutable manner to avoid delayed React renders from potentially reading an updated but not yet committed Map. This could result in brief flickers in some fetcher-driven optimistic UI scenarios. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15028\"\u003e#15028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eserverLoader()\u003c/code\u003e returning stale SSR data when a client navigation aborts pending hydration before the hydration \u003ccode\u003eclientLoader\u003c/code\u003e resolves (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15022\"\u003e#15022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/afdf85d3c15448a41017514caca2aca038d3e9ca\"\u003e\u003ccode\u003eafdf85d\u003c/code\u003e\u003c/a\u003e Release v7.18.1 (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15253\"\u003e#15253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/6fb1e79f8304eddd8b78759edea83cb32389ebf5\"\u003e\u003ccode\u003e6fb1e79\u003c/code\u003e\u003c/a\u003e Release v7.18.0 (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15187\"\u003e#15187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/09e6020d1950e54f361f7ad00938ecd4dde60929\"\u003e\u003ccode\u003e09e6020\u003c/code\u003e\u003c/a\u003e Optimize route matching internals (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15186\"\u003e#15186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/5b57f5f371595ad97ac91cca389c5adc08ddcc3a\"\u003e\u003ccode\u003e5b57f5f\u003c/code\u003e\u003c/a\u003e Request Host derivation + CSRF check simplifications (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15185\"\u003e#15185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/ce596e823f0d7b883a433af1d5a839a8b9fe0242\"\u003e\u003ccode\u003ece596e8\u003c/code\u003e\u003c/a\u003e Validate RSC redirect protocols (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15177\"\u003e#15177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/1cebd2a823bb232ad74dcb2d970f750070b2bebe\"\u003e\u003ccode\u003e1cebd2a\u003c/code\u003e\u003c/a\u003e chore: format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/9d22943fd46c8ae4b08236425fa3549e10e9ad1a\"\u003e\u003ccode\u003e9d22943\u003c/code\u003e\u003c/a\u003e Use turbo stream for framework hydration errors (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15175\"\u003e#15175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/bf63729561365b50705a24fd576e293424df23ef\"\u003e\u003ccode\u003ebf63729\u003c/code\u003e\u003c/a\u003e Consolidate url normalization logic (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15176\"\u003e#15176\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/4ce8ff72737bcf43afc7e9f5705c9214a19ec9f6\"\u003e\u003ccode\u003e4ce8ff7\u003c/code\u003e\u003c/a\u003e Fix prerendering pathname issue with trailingSlashAwareDataRequests e… (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15173\"\u003e#15173\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/4f060dd11cd8bedcba9e3ee96fce832bd987fe25\"\u003e\u003ccode\u003e4f060dd\u003c/code\u003e\u003c/a\u003e Use ServerRouter nonce when nonce prop is not specified (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15170\"\u003e#15170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/remix-run/react-router/commits/react-router@7.18.1/packages/react-router\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for react-router since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.4.3 to 7.5.19\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~isaacs\"\u003eisaacs\u003c/a\u003e, a new releaser for tar since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/guibranco/guibranco.github.io/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/guibranco/guibranco.github.io/pull/852","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/guibranco%2Fguibranco.github.io/issues/852","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/852/packages"}},{"old_version":"7.4.3","new_version":"7.5.19","update_type":"minor","path":null,"pr_created_at":"2026-07-02T22:23:10.000Z","version_change":"7.4.3 → 7.5.19","issue":{"uuid":"4798582753","node_id":"PR_kwDOCKdSKc7tVbeI","number":833,"state":"closed","title":"Bump the npm_and_yarn group across 1 directory with 4 updates","user":"dependabot[bot]","labels":["dependencies","size/XXL"],"assignees":["guibranco"],"locked":false,"comments_count":7,"pull_request":true,"closed_at":"2026-07-02T22:26:02.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-02T22:23:10.000Z","updated_at":"2026-07-02T22:27:27.000Z","time_to_close":172,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":4,"packages":[{"name":"vite","old_version":"6.3.5","new_version":"8.1.3","repository_url":"https://github.com/vitejs/vite"},{"name":"js-yaml","old_version":"4.1.0","new_version":"4.3.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"react-router","old_version":"7.6.2","new_version":"7.18.1","repository_url":"https://github.com/remix-run/react-router"},{"name":"tar","old_version":"7.4.3","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 4 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [js-yaml](https://github.com/nodeca/js-yaml), [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) and [tar](https://github.com/isaacs/node-tar).\n\nUpdates `vite` from 6.3.5 to 8.1.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.1.3\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.3/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.2\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.2/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.1\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.1/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ecreate-vite@8.1.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/create-vite@8.1.0/packages/create-vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003eplugin-legacy@8.1.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0/packages/plugin-legacy/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.0/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003eplugin-legacy@8.1.0-beta.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0-beta.0/packages/plugin-legacy/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.1.0-beta.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.1.0-beta.0/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.16\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.16/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.15\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.15/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.14\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.14/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.13\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.13/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.12\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.12/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.11\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.11/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.10\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.10/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.9\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.9/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev8.0.8\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v8.0.8/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.1.2...v8.1.3\"\u003e8.1.3\u003c/a\u003e (2026-07-02)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e inject inlined CSS after the shebang line (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22717\"\u003e#22717\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/1534d362794e856cc718b123cb245e0efcf36b9a\"\u003e1534d36\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e bump \u003ccode\u003ees-module-lexer\u003c/code\u003e to 2.3.0 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22838\"\u003e#22838\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7103c3af795396e2ad87e1125eb3fc20d60d9430\"\u003e7103c3a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epreload css for nested dynamic imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22759\"\u003e#22759\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2c530542da1c50b95b7f0cb17adf82f64ecf97f3\"\u003e2c53054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e correct stacktrace column position for first line (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22828\"\u003e#22828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c4acd6982a051fa10dbd7e3a37e00f0c467793b8\"\u003ec4acd69\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.1.1...v8.1.2\"\u003e8.1.2\u003c/a\u003e (2026-06-30)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e revert es-module-lexer to 2.1.0 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22827\"\u003e#22827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d3bd7c4111b8345cfc353c7bbb2c30601752e26\"\u003e0d3bd7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erestore, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of cwd (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22757\"\u003e#22757\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22825\"\u003e#22825\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/efb98cce73f3f89c4f03936ab7741cd5b0636f5c\"\u003eefb98cc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erevert, \u0026quot;fix: escape ids with multiple null bytes (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22687\"\u003e#22687\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://github.com/vitejs/vite/commit/cccef55dfaa6253929d2cb58d3af53f217efc877\"\u003ecccef55\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erevert, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of cwd (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22757\"\u003e#22757\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://github.com/vitejs/vite/commit/cf97711963ddcdcfac3e4fcd00771d7a55e92141\"\u003ecf97711\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.1.0...v8.1.1\"\u003e8.1.1\u003c/a\u003e (2026-06-30)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dynamic import warning to link to Vite docs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22823\"\u003e#22823\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/62bd7afd27ec0507bf528a135165dda3a44ebc21\"\u003e62bd7af\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e avoid stack overflow on \u003ccode\u003eimport.meta.hot.invalidate()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22797\"\u003e#22797\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/709eb8ee03d3c46269755334f59b7e9a353fc522\"\u003e709eb8e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e serve assets emitted during HMR/lazy compile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22745\"\u003e#22745\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5876b2cc2e1a01df9363e1e3d1d19f474ba68285\"\u003e5876b2c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundledDev:\u003c/strong\u003e skip plugin transform hooks for rolldown-lazy stub modules (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22778\"\u003e#22778\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8f925e2e496f4d313d860acb53880245b07ce6f7\"\u003e8f925e2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e preserve dollar signs in external \u003ccode\u003e@import\u003c/code\u003e urls with lightningcss (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22718\"\u003e#22718\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/9fa7ab4990f4fe74597d0a37a16d84af1c1e3544\"\u003e9fa7ab4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e resolve tsconfig paths in CSS and Sass \u003ca href=\"https://github.com/import\"\u003e\u003ccode\u003e@​import\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22775\"\u003e#22775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ef0b8916160c4d2a677decc062f6faa48fbf1578\"\u003eef0b891\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22734\"\u003e#22734\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/e635f493faa24930ae637318d6564539bc668e89\"\u003ee635f49\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22804\"\u003e#22804\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8837400a676a633af1ad6d3746b584d13cf90ecc\"\u003e8837400\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22591\"\u003e#22591\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2ce6677a151c53a019baec32859b646267f9d320\"\u003e2ce6677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eescape ids with multiple null bytes (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22687\"\u003e#22687\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/833fc302f3f4a5030f49207b5fbf10422f3247a2\"\u003e833fc30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehide console window when running 'net use' on Windows (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22698\"\u003e#22698\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/92b63f219f6c1872f35461aa75e9e9aec79bb01c\"\u003e92b63f2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eignore bundled config temp dir (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22800\"\u003e#22800\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/043a81096ddf8c6f9077c8e3e12362c83f9ed089\"\u003e043a810\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einvert \u003ccode\u003eesbuild.jsxSideEffects\u003c/code\u003e when converting to \u003ccode\u003eoxc.jsx.pure\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22809\"\u003e#22809\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/33895ba4faa0a46d5bd7b3eb53d02255113c8b5d\"\u003e33895ba\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimize-deps:\u003c/strong\u003e ignore \u003ccode\u003eERR_CLOSED_SERVER\u003c/code\u003e in scanner (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22784\"\u003e#22784\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/085a0ab704bf1a698d459d625a5c955d27b73134\"\u003e085a0ab\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scanner should resolve \u003ccode\u003einput\u003c/code\u003e from \u003ccode\u003eroot\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22769\"\u003e#22769\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/9722b0795b68602597ddd53e3d3c7ed9f00cb831\"\u003e9722b07\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eresolve pnpm .modules.yaml from workspace root instead of cwd (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22757\"\u003e#22757\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2531ac7ccd1d581df5febe4a3814226ba8939a20\"\u003e2531ac7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ereturn sourcemap field from some plugins that were lacking (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22782\"\u003e#22782\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7e18bf802bdde7a386eb3b407c87a67f89a895ca\"\u003e7e18bf8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle malformed URI in indexHtmlMiddleware (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22781\"\u003e#22781\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/84f5cccc7574c740c46f5cb2a09f29cde8380701\"\u003e84f5ccc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eimprove dependency optimizer messages (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22549\"\u003e#22549\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/092cb3b4247a06ba176c094a9a743d335adc6574\"\u003e092cb3b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e remove lightningcss null byte bug workaround (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22822\"\u003e#22822\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/2dafd3bb7f8b265037e216f50afaa890ae2e2875\"\u003e2dafd3b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003euse pre-defined environments variable to avoid duplicate \u003ccode\u003eObject.values\u003c/code\u003e calls (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22790\"\u003e#22790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/1113acf6cff711196b3443f7126804847c1d4e1e\"\u003e1113acf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/578ffb80d46940f3b99cd96ed609f8b3a0ac5ede\"\u003e\u003ccode\u003e578ffb8\u003c/code\u003e\u003c/a\u003e release: v8.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/7103c3af795396e2ad87e1125eb3fc20d60d9430\"\u003e\u003ccode\u003e7103c3a\u003c/code\u003e\u003c/a\u003e fix(deps): bump \u003ccode\u003ees-module-lexer\u003c/code\u003e to 2.3.0 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22838\"\u003e#22838\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/1534d362794e856cc718b123cb245e0efcf36b9a\"\u003e\u003ccode\u003e1534d36\u003c/code\u003e\u003c/a\u003e fix(css): inject inlined CSS after the shebang line (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22717\"\u003e#22717\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/c4acd6982a051fa10dbd7e3a37e00f0c467793b8\"\u003e\u003ccode\u003ec4acd69\u003c/code\u003e\u003c/a\u003e fix(ssr): correct stacktrace column position for first line (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22828\"\u003e#22828\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/2c530542da1c50b95b7f0cb17adf82f64ecf97f3\"\u003e\u003ccode\u003e2c53054\u003c/code\u003e\u003c/a\u003e fix: preload css for nested dynamic imports (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22759\"\u003e#22759\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/ba3119397d0110952f29965774c627a3017d7292\"\u003e\u003ccode\u003eba31193\u003c/code\u003e\u003c/a\u003e release: v8.1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0d3bd7c4111b8345cfc353c7bbb2c30601752e26\"\u003e\u003ccode\u003e0d3bd7c\u003c/code\u003e\u003c/a\u003e fix(deps): revert es-module-lexer to 2.1.0 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22827\"\u003e#22827\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/efb98cce73f3f89c4f03936ab7741cd5b0636f5c\"\u003e\u003ccode\u003eefb98cc\u003c/code\u003e\u003c/a\u003e fix: restore, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/cf97711963ddcdcfac3e4fcd00771d7a55e92141\"\u003e\u003ccode\u003ecf97711\u003c/code\u003e\u003c/a\u003e fix: revert, \u0026quot;fix: resolve pnpm .modules.yaml from workspace root instead of ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/cccef55dfaa6253929d2cb58d3af53f217efc877\"\u003e\u003ccode\u003ecccef55\u003c/code\u003e\u003c/a\u003e fix: revert, \u0026quot;fix: escape ids with multiple null bytes (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22687\"\u003e#22687\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v8.1.3/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for vite since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 4.1.0 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda\"\u003e\u003ccode\u003e33d05b5\u003c/code\u003e\u003c/a\u003e 4.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb\"\u003e\u003ccode\u003e663bfab\u003c/code\u003e\u003c/a\u003e Drop demo publish, to not override new v5 one.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986\"\u003e\u003ccode\u003e1cb8c7b\u003c/code\u003e\u003c/a\u003e Add v4-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157\"\u003e\u003ccode\u003e02f27af\u003c/code\u003e\u003c/a\u003e Restore umd builds back to es5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb\"\u003e\u003ccode\u003e8be84ed\u003c/code\u003e\u003c/a\u003e Fix es5 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4\"\u003e\u003ccode\u003e59423c6\u003c/code\u003e\u003c/a\u003e Replace \u003ccode\u003emaxMergeSeqLength\u003c/code\u003e option with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (more robust). Ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d\"\u003e\u003ccode\u003e6842ef6\u003c/code\u003e\u003c/a\u003e doc polish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/590dbabadd172b099c07654fab2eabec8c7a07b9\"\u003e\u003ccode\u003e590dbab\u003c/code\u003e\u003c/a\u003e 4.2.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f944dc5cd132251752499bdb157f33027d362177\"\u003e\u003ccode\u003ef944dc5\u003c/code\u003e\u003c/a\u003e Add package.json funding field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f6927192223355b64f2a6e19f3071ccc579ee718\"\u003e\u003ccode\u003ef692719\u003c/code\u003e\u003c/a\u003e Changelog update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/4.1.0...4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react-router` from 7.6.2 to 7.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/remix-run/react-router/releases\"\u003ereact-router's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.18.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181\"\u003ehttps://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.18.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.17.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.16.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.15.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.15.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.2\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.2\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.12.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.11.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7110\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7110\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.10.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7101\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7101\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.10.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7100\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7100\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.9.6\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v796\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v796\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/remix-run/react-router/blob/react-router@7.18.1/packages/react-router/CHANGELOG.md\"\u003ereact-router's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.18.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eNo changes\u003c/em\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.18.0\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix server handler prerender responses when using \u003ccode\u003essr: false\u003c/code\u003e and \u003ccode\u003efuture.v8_trailingSlashAwareDataRequests: true\u003c/code\u003e. Avoids false positive \u0026quot;SPA Mode\u0026quot; detection when serving prerendered paths (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15173\"\u003e#15173\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse the \u003ccode\u003eServerRouter\u003c/code\u003e nonce for nonce-aware SSR components when they don't provide their own value so strict CSP pages can load them. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15170\"\u003e#15170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003eturbo-stream\u003c/code\u003e to serialize and deserialize Framework Mode hydration errors (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15175\"\u003e#15175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrecompute route branch matchers to avoid recompiling route path regexes during matching (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15186\"\u003e#15186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse the constructed request URL host when validating action request origins. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15185\"\u003e#15185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove the un-documented custom error serialization logic from Data Mode SSR built-in hydration flows (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15175\"\u003e#15175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eValidate protocols in RSC render redirects (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15177\"\u003e#15177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eConsolidate url normalization logic and better handle mixed slashes (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15176\"\u003e#15176\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.17.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShip a subset of the official documentation inside the \u003ccode\u003ereact-router\u003c/code\u003e package (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15121\"\u003e#15121\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eMarkdown docs are now available in \u003ccode\u003enode_modules/react-router/docs\u003c/code\u003e, letting AI coding agents and the React Router agent skills read official docs locally\u003c/li\u003e\n\u003cli\u003eExcludes auto-generated API docs (\u003ccode\u003eapi/\u003c/code\u003e), \u003ccode\u003ecommunity/\u003c/code\u003e content, and tutorials (\u003ccode\u003etutorials/\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.16.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eStabilize \u003ccode\u003efuture.unstable_trailingSlashAwareDataRequests\u003c/code\u003e as \u003ccode\u003efuture.v8_trailingSlashAwareDataRequests\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15098\"\u003e#15098\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDisable manifest path when lazy route dicovery is disabled (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15068\"\u003e#15068\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix browser URL creation to use the configured history window instead of the global window. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15066\"\u003e#15066\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePass the history/router window through to \u003ccode\u003ecreateBrowserURLImpl\u003c/code\u003e so custom window contexts keep the correct URL origin.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix \u003ccode\u003euseNavigation()\u003c/code\u003e return type to preserve discriminated union across navigation states (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15095\"\u003e#15095\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eWiden \u003ccode\u003eMetaDescriptor\u003c/code\u003e \u003ccode\u003escript:ld+json\u003c/code\u003e type from \u003ccode\u003eLdJsonObject\u003c/code\u003e to \u003ccode\u003eLdJsonObject | LdJsonObject[]\u003c/code\u003e to permit multiple JSON-LD schemas in a single \u003ccode\u003e\u0026lt;script type=\u0026quot;application/ld+json\u0026quot;\u0026gt;\u003c/code\u003e tag emitted by \u003ccode\u003e\u0026lt;Meta /\u0026gt;\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15082\"\u003e#15082\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.15.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate router to operate on fetcher Maps in an immutable manner to avoid delayed React renders from potentially reading an updated but not yet committed Map. This could result in brief flickers in some fetcher-driven optimistic UI scenarios. (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15028\"\u003e#15028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eserverLoader()\u003c/code\u003e returning stale SSR data when a client navigation aborts pending hydration before the hydration \u003ccode\u003eclientLoader\u003c/code\u003e resolves (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15022\"\u003e#15022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/afdf85d3c15448a41017514caca2aca038d3e9ca\"\u003e\u003ccode\u003eafdf85d\u003c/code\u003e\u003c/a\u003e Release v7.18.1 (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15253\"\u003e#15253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/6fb1e79f8304eddd8b78759edea83cb32389ebf5\"\u003e\u003ccode\u003e6fb1e79\u003c/code\u003e\u003c/a\u003e Release v7.18.0 (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15187\"\u003e#15187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/09e6020d1950e54f361f7ad00938ecd4dde60929\"\u003e\u003ccode\u003e09e6020\u003c/code\u003e\u003c/a\u003e Optimize route matching internals (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15186\"\u003e#15186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/5b57f5f371595ad97ac91cca389c5adc08ddcc3a\"\u003e\u003ccode\u003e5b57f5f\u003c/code\u003e\u003c/a\u003e Request Host derivation + CSRF check simplifications (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15185\"\u003e#15185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/ce596e823f0d7b883a433af1d5a839a8b9fe0242\"\u003e\u003ccode\u003ece596e8\u003c/code\u003e\u003c/a\u003e Validate RSC redirect protocols (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15177\"\u003e#15177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/1cebd2a823bb232ad74dcb2d970f750070b2bebe\"\u003e\u003ccode\u003e1cebd2a\u003c/code\u003e\u003c/a\u003e chore: format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/9d22943fd46c8ae4b08236425fa3549e10e9ad1a\"\u003e\u003ccode\u003e9d22943\u003c/code\u003e\u003c/a\u003e Use turbo stream for framework hydration errors (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15175\"\u003e#15175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/bf63729561365b50705a24fd576e293424df23ef\"\u003e\u003ccode\u003ebf63729\u003c/code\u003e\u003c/a\u003e Consolidate url normalization logic (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15176\"\u003e#15176\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/4ce8ff72737bcf43afc7e9f5705c9214a19ec9f6\"\u003e\u003ccode\u003e4ce8ff7\u003c/code\u003e\u003c/a\u003e Fix prerendering pathname issue with trailingSlashAwareDataRequests e… (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15173\"\u003e#15173\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/4f060dd11cd8bedcba9e3ee96fce832bd987fe25\"\u003e\u003ccode\u003e4f060dd\u003c/code\u003e\u003c/a\u003e Use ServerRouter nonce when nonce prop is not specified (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15170\"\u003e#15170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/remix-run/react-router/commits/react-router@7.18.1/packages/react-router\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for react-router since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.4.3 to 7.5.19\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md\"\u003etar's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003ezstd\u003c/code\u003e compression support.\u003c/li\u003e\n\u003cli\u003eConsistent TOCTOU behavior in sync t.list\u003c/li\u003e\n\u003cli\u003eOnly read from ustar block if not specified in Pax\u003c/li\u003e\n\u003cli\u003eFix sync tar.list when file size reduces while reading\u003c/li\u003e\n\u003cli\u003eSanitize absolute linkpaths properly\u003c/li\u003e\n\u003cli\u003ePrevent writing hardlink entries to the archive ahead of their\nfile target\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eonentry\u003c/code\u003e in favor of \u003ccode\u003eonReadEntry\u003c/code\u003e for clarity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eonWriteEntry\u003c/code\u003e option\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDRY the command definitions into a single \u003ccode\u003emakeCommand\u003c/code\u003e method,\nand update the type signatures to more appropriately infer the\nreturn type from the options and arguments provided.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minipass to v7.1.0\u003c/li\u003e\n\u003cli\u003eUpdate the type definitions of \u003ccode\u003ewrite()\u003c/code\u003e and \u003ccode\u003eend()\u003c/code\u003e methods on\n\u003ccode\u003eUnpack\u003c/code\u003e and \u003ccode\u003eParser\u003c/code\u003e classes to be compatible with the\nNodeJS.WritableStream type in the latest versions of\n\u003ccode\u003e@types/node\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop support for node \u0026lt;18\u003c/li\u003e\n\u003cli\u003eRewrite in TypeScript, provide ESM and CommonJS hybrid\ninterface\u003c/li\u003e\n\u003cli\u003eAdd tree-shake friendly exports, like \u003ccode\u003eimport('tar/create')\u003c/code\u003e\nand \u003ccode\u003eimport('tar/read-entry')\u003c/code\u003e to get individual functions or\nclasses.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003echmod\u003c/code\u003e option that defaults to false, and deprecate\n\u003ccode\u003enoChmod\u003c/code\u003e. That is, reverse the default option regarding\nexplicitly setting file system modes to match tar entry\nsettings.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eprocessUmask\u003c/code\u003e option to avoid having to call\n\u003ccode\u003eprocess.umask()\u003c/code\u003e when \u003ccode\u003echmod: true\u003c/code\u003e (or \u003ccode\u003enoChmod: false\u003c/code\u003e) is\nset.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~isaacs\"\u003eisaacs\u003c/a\u003e, a new releaser for tar since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/guibranco/guibranco.github.io/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/guibranco/guibranco.github.io/pull/833","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/guibranco%2Fguibranco.github.io/issues/833","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/833/packages"}},{"old_version":"6.2.1","new_version":"removed","update_type":null,"path":null,"pr_created_at":"2026-07-02T17:43:01.000Z","version_change":"6.2.1 → removed","issue":{"uuid":"4796892355","node_id":"PR_kwDOK5vYKc7tP46u","number":149,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 12 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-02T17:43:01.000Z","updated_at":"2026-07-02T17:45:13.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":12,"packages":[{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"uuid","old_version":"13.0.0","new_version":"14.0.1","repository_url":"https://github.com/uuidjs/uuid"},{"name":"postcss","old_version":"8.5.6","new_version":"8.5.10","repository_url":"https://github.com/postcss/postcss"},{"name":"flatted","old_version":"3.3.3","new_version":"3.4.2","repository_url":"https://github.com/WebReflection/flatted"},{"name":"tar","old_version":"6.2.1","new_version":"removed","repository_url":"https://github.com/isaacs/node-tar"},{"name":"tmp","old_version":"0.2.5","new_version":"0.2.7","repository_url":"https://github.com/raszi/node-tmp"},{"name":"ws","old_version":"7.5.10","new_version":"7.5.11","repository_url":"https://github.com/websockets/ws"},{"name":"ws","old_version":"8.18.3","new_version":"8.21.0","repository_url":"https://github.com/websockets/ws"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.1` |\n| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.10` |\n| [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.2` |\n| [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `removed` |\n| [tmp](https://github.com/raszi/node-tmp) | `0.2.5` | `0.2.7` |\n| [ws](https://github.com/websockets/ws) | `7.5.10` | `7.5.11` |\n| [ws](https://github.com/websockets/ws) | `8.18.3` | `8.21.0` |\n\n\nUpdates `lodash` from 4.17.21 to 4.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lodash/lodash/releases\"\u003elodash's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.18.1\u003c/h2\u003e\n\u003ch2\u003eBugs\u003c/h2\u003e\n\u003cp\u003eFixes a \u003ccode\u003eReferenceError\u003c/code\u003e issue in \u003ccode\u003elodash\u003c/code\u003e \u003ccode\u003elodash-es\u003c/code\u003e \u003ccode\u003elodash-amd\u003c/code\u003e and \u003ccode\u003elodash.template\u003c/code\u003e when using the \u003ccode\u003etemplate\u003c/code\u003e and \u003ccode\u003efromPairs\u003c/code\u003e functions from the modular builds. See \u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769\"\u003elodash/lodash#6167\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThese defects were related to how lodash distributions are built from the main branch using \u003ca href=\"https://github.com/lodash-archive/lodash-cli\"\u003ehttps://github.com/lodash-archive/lodash-cli\u003c/a\u003e. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.\u003c/p\u003e\n\u003cp\u003eThere is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003elodash\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-es\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-amd\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash.template\u003c/code\u003e\u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.18.0\u003c/h2\u003e\n\u003ch2\u003ev4.18.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.23...4.18.0\"\u003ehttps://github.com/lodash/lodash/compare/4.17.23...4.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.unset\u003c/code\u003e / \u003ccode\u003e_.omit\u003c/code\u003e\u003c/strong\u003e: Fixed prototype pollution via \u003ccode\u003econstructor\u003c/code\u003e/\u003ccode\u003eprototype\u003c/code\u003e path traversal (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh\"\u003eGHSA-f23m-r3pf-42rh\u003c/a\u003e, \u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003efe8d32e\u003c/a\u003e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now \u003ccode\u003econstructor\u003c/code\u003e and \u003ccode\u003eprototype\u003c/code\u003e are blocked unconditionally as non-terminal path keys, matching \u003ccode\u003ebaseSet\u003c/code\u003e. Calls that previously returned \u003ccode\u003etrue\u003c/code\u003e and deleted the property now return \u003ccode\u003efalse\u003c/code\u003e and leave the target untouched.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.template\u003c/code\u003e\u003c/strong\u003e: Fixed code injection via \u003ccode\u003eimports\u003c/code\u003e keys (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc\"\u003eGHSA-r5fr-rjxr-66jc\u003c/a\u003e, CVE-2026-4800, \u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e879aaa9\u003c/a\u003e). Fixes an incomplete patch for CVE-2021-23337. The \u003ccode\u003evariable\u003c/code\u003e option was validated against \u003ccode\u003ereForbiddenIdentifierChars\u003c/code\u003e but \u003ccode\u003eimportsKeys\u003c/code\u003e was left unguarded, allowing code injection via the same \u003ccode\u003eFunction()\u003c/code\u003e constructor sink. \u003ccode\u003eimports\u003c/code\u003e keys containing forbidden identifier characters now throw \u003ccode\u003e\u0026quot;Invalid imports option passed into _.template\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd security notice for \u003ccode\u003e_.template\u003c/code\u003e in threat model and API docs (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6099\"\u003e#6099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument \u003ccode\u003elower \u0026gt; upper\u003c/code\u003e behavior in \u003ccode\u003e_.random\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6115\"\u003e#6115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix quotes in \u003ccode\u003e_.compact\u003c/code\u003e jsdoc (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6090\"\u003e#6090\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003elodash.*\u003c/code\u003e modular packages\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6157\"\u003eDiff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWe have also regenerated and published a select number of the \u003ccode\u003elodash.*\u003c/code\u003e modular packages.\u003c/p\u003e\n\u003cp\u003eThese modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.orderby\"\u003elodash.orderby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.tonumber\"\u003elodash.tonumber\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trim\"\u003elodash.trim\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trimend\"\u003elodash.trimend\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.sortedindexby\"\u003elodash.sortedindexby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.zipobjectdeep\"\u003elodash.zipobjectdeep\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.unset\"\u003elodash.unset\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.omit\"\u003elodash.omit\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.template\"\u003elodash.template\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/cb0b9b9212521c08e3eafe7c8cb0af1b42b6649e\"\u003e\u003ccode\u003ecb0b9b9\u003c/code\u003e\u003c/a\u003e release(patch): bump main to 4.18.1 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6177\"\u003e#6177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/75535f57883b7225adb96de1cfc1cd4169cfcb51\"\u003e\u003ccode\u003e75535f5\u003c/code\u003e\u003c/a\u003e chore: prune stale advisory refs (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6170\"\u003e#6170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/62e91bc6a39c98d85b9ada8c44d40593deaf82a4\"\u003e\u003ccode\u003e62e91bc\u003c/code\u003e\u003c/a\u003e docs: remove n_ Node.js \u0026lt; 6 REPL note from README (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6165\"\u003e#6165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4\"\u003e\u003ccode\u003e59be2de\u003c/code\u003e\u003c/a\u003e release(minor): bump to 4.18.0 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6161\"\u003e#6161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d\"\u003e\u003ccode\u003eaf63457\u003c/code\u003e\u003c/a\u003e fix: broken tests for _.template 879aaa9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0\"\u003e\u003ccode\u003e1073a76\u003c/code\u003e\u003c/a\u003e fix: linting issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e\u003ccode\u003e879aaa9\u003c/code\u003e\u003c/a\u003e fix: validate imports keys in _.template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003e\u003ccode\u003efe8d32e\u003c/code\u003e\u003c/a\u003e fix: block prototype pollution in baseUnset via constructor/prototype traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d\"\u003e\u003ccode\u003e18ba0a3\u003c/code\u003e\u003c/a\u003e refactor(fromPairs): use baseAssignValue for consistent assignment (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2\"\u003e\u003ccode\u003eb819080\u003c/code\u003e\u003c/a\u003e ci: add dist sync validation workflow (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6137\"\u003e#6137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.21...4.18.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `uuid` from 13.0.0 to 14.0.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/uuidjs/uuid/releases\"\u003euuid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v14.0.0...v14.0.1\"\u003e14.0.1\u003c/a\u003e (2026-06-20)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd types condition to node export for moduleResolution bundler (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/961\"\u003e#961\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/27ffae5e867823b8c7db255975d65358fbdb1a7e\"\u003e27ffae5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0\"\u003e14.0.0\u003c/a\u003e (2026-04-19)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexpect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/dc4ddb87272ed2843faccd130bcc41d492688bd3\"\u003edc4ddb8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexpect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/f2c235f93059325fa43e1106e624b5291bb523c4\"\u003ef2c235f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse GITHUB_TOKEN for release-please and enable npm provenance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/925\"\u003e#925\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/ffa31383e8e4e1f0b4e22e504561272041b8738c\"\u003effa3138\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.1...v13.0.2\"\u003e13.0.2\u003c/a\u003e (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ererelease to fix provenance. (\u003ca href=\"https://github.com/uuidjs/uuid/commit/49ccb35f78c0c4ce1409dd2f1d89f83caadba10b\"\u003e49ccb35\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v13.0.1\"\u003e13.0.1\u003c/a\u003e (2026-04-27)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackport fix for GHSA-w5hq-g745-h8pq (\u003ca href=\"https://github.com/uuidjs/uuid/commit/9d27ddf7046ce496ef39569ff84d948eeff9cb2a\"\u003e9d27ddf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md\"\u003euuid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v14.0.0...v14.0.1\"\u003e14.0.1\u003c/a\u003e (2026-06-20)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd types condition to node export for moduleResolution bundler (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/961\"\u003e#961\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/27ffae5e867823b8c7db255975d65358fbdb1a7e\"\u003e27ffae5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0\"\u003e14.0.0\u003c/a\u003e (2026-04-19)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq\"\u003eGHSA-w5hq-g745-h8pq\u003c/a\u003e: \u003ccode\u003ev3()\u003c/code\u003e, \u003ccode\u003ev5()\u003c/code\u003e, and \u003ccode\u003ev6()\u003c/code\u003e did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid \u003ccode\u003eoffset\u003c/code\u003e was provided. A \u003ccode\u003eRangeError\u003c/code\u003e is now thrown if \u003ccode\u003eoffset \u0026lt; 0\u003c/code\u003e or \u003ccode\u003eoffset + 16 \u0026gt; buf.length\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecrypto\u003c/code\u003e is now expected to be globally defined (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/70177807e9229dfacde2038dc1e722f1828f358a\"\u003e\u003ccode\u003e7017780\u003c/code\u003e\u003c/a\u003e chore(main): release 14.0.1 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/964\"\u003e#964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/f2c3e4b513e47968f568ad1bf96417c6924e83a7\"\u003e\u003ccode\u003ef2c3e4b\u003c/code\u003e\u003c/a\u003e chore: fix release-please workflow (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/963\"\u003e#963\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/27ffae5e867823b8c7db255975d65358fbdb1a7e\"\u003e\u003ccode\u003e27ffae5\u003c/code\u003e\u003c/a\u003e fix: add types condition to node export for moduleResolution bundler (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/961\"\u003e#961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/664cb3163531f49d3a5125f732d38724621bfcaa\"\u003e\u003ccode\u003e664cb31\u003c/code\u003e\u003c/a\u003e Remove outdated security contact information (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/959\"\u003e#959\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/d729016037c4e1b09a522f4854a96f4f4add9047\"\u003e\u003ccode\u003ed729016\u003c/code\u003e\u003c/a\u003e fix(ci): checkout PR head commit in browser workflow (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/957\"\u003e#957\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/89a5ebcc56999fc25c95350f922693b71fb11d32\"\u003e\u003ccode\u003e89a5ebc\u003c/code\u003e\u003c/a\u003e Workflows (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/948\"\u003e#948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/196e208db33d568d8d43d5b549d5d0eb3d9b0fbf\"\u003e\u003ccode\u003e196e208\u003c/code\u003e\u003c/a\u003e chore: fix workflow (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/947\"\u003e#947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/95af4489be459d6ba14d137b6fcd87ffd0953e91\"\u003e\u003ccode\u003e95af448\u003c/code\u003e\u003c/a\u003e chore: update workflows (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/946\"\u003e#946\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/3b57f95555ab1b8432213264b5eaa318958fb8fe\"\u003e\u003ccode\u003e3b57f95\u003c/code\u003e\u003c/a\u003e chore: add workflow_dispatch (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/944\"\u003e#944\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/a433096a74e1d1815432fb1bed8115369785a1a9\"\u003e\u003ccode\u003ea433096\u003c/code\u003e\u003c/a\u003e chore: add 12.x and 13.x maintenance release branches (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/941\"\u003e#941\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for uuid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `postcss` from 8.5.6 to 8.5.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/releases\"\u003epostcss's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up source map encoding paring in case of the error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eProcessor#version\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved source map annotation cleaning performance (by CodeAnt AI).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/blob/main/CHANGELOG.md\"\u003epostcss's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up source map encoding paring in case of the error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eProcessor#version\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved source map annotation cleaning performance (by CodeAnt AI).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/33b9790263dc1562a46ce45d9532bd63e95b7986\"\u003e\u003ccode\u003e33b9790\u003c/code\u003e\u003c/a\u003e Release 8.5.10 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/536c79e4b01e58a3a56b09c3c0cf2323f4b9a28b\"\u003e\u003ccode\u003e536c79e\u003c/code\u003e\u003c/a\u003e Escape \u0026lt;/style\u0026gt; in CSS output (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2074\"\u003e#2074\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/afa96b2a139ce625c4d27973313479c7c85f39d4\"\u003e\u003ccode\u003eafa96b2\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2073\"\u003e#2073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/effe88bb87cabdc1876e02adbdd30f392f19f40d\"\u003e\u003ccode\u003eeffe88b\u003c/code\u003e\u003c/a\u003e Typo (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2072\"\u003e#2072\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/3ee79a2c4a11e41d52db50b444eebe38299495ad\"\u003e\u003ccode\u003e3ee79a2\u003c/code\u003e\u003c/a\u003e Thread model (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2071\"\u003e#2071\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/2e0683daca4dc2919211b03774f6b2d137136c01\"\u003e\u003ccode\u003e2e0683d\u003c/code\u003e\u003c/a\u003e Create incident response docs (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2070\"\u003e#2070\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/fe88ac29c06b7b218be32994cdc6ca1525bdf2c9\"\u003e\u003ccode\u003efe88ac2\u003c/code\u003e\u003c/a\u003e Release 8.5.9 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/c551632496b87ab3f1965bfda5dc386b6c71963e\"\u003e\u003ccode\u003ec551632\u003c/code\u003e\u003c/a\u003e Avoid RegExp when we can use simple JS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/89a6b744060eb8dee743351c785a9fbe37d4525a\"\u003e\u003ccode\u003e89a6b74\u003c/code\u003e\u003c/a\u003e Move SECURITY.txt for docs folder to keep GitHub page cleaner\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/6ceb8a46af9f9de821faee98f861bdf84617347b\"\u003e\u003ccode\u003e6ceb8a4\u003c/code\u003e\u003c/a\u003e Create SECURITY.md\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/postcss/postcss/compare/8.5.6...8.5.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `flatted` from 3.3.3 to 3.4.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/3bf09091c3562e17a0647bc06710dd6097079cf7\"\u003e\u003ccode\u003e3bf0909\u003c/code\u003e\u003c/a\u003e 3.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802\"\u003e\u003ccode\u003e885ddcc\u003c/code\u003e\u003c/a\u003e fix CWE-1321\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/0bdba705d130f00892b1b8fcc80cf4cdea0631e3\"\u003e\u003ccode\u003e0bdba70\u003c/code\u003e\u003c/a\u003e added flatted-view to the benchmark\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/2a02dce7c641dec31194c67663f9b0b12e62da20\"\u003e\u003ccode\u003e2a02dce\u003c/code\u003e\u003c/a\u003e 3.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/fba4e8f2e113665da275b19cd0f695f3d98e9416\"\u003e\u003ccode\u003efba4e8f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/WebReflection/flatted/issues/89\"\u003e#89\u003c/a\u003e from WebReflection/python-fix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/5fe86485e6df7f7f34a07a2a85498bd3e17384e7\"\u003e\u003ccode\u003e5fe8648\u003c/code\u003e\u003c/a\u003e added \u0026quot;when in Rome\u0026quot; also a test for PHP\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/53517adbefe724fe472b2f9ebcdb01910d0ae3f0\"\u003e\u003ccode\u003e53517ad\u003c/code\u003e\u003c/a\u003e some minor improvement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/b3e2a0c387bf446435fec45ad7f05299f012346f\"\u003e\u003ccode\u003eb3e2a0c\u003c/code\u003e\u003c/a\u003e Fixing recursion issue in Python too\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/c4b46dbcbf782326e54ea1b65d3ebb1dc7a23fad\"\u003e\u003ccode\u003ec4b46db\u003c/code\u003e\u003c/a\u003e Add SECURITY.md for security policy and reporting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/f86d071e0f70de5a7d8200198824a3f07fc9c988\"\u003e\u003ccode\u003ef86d071\u003c/code\u003e\u003c/a\u003e Create dependabot.yml for version updates\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `form-data` from 4.0.5 to 4.0.6\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/form-data/form-data/blob/master/CHANGELOG.md\"\u003eform-data's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ev4.0.6\u003c/a\u003e - 2026-06-12\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames \u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435\"\u003e\u003ccode\u003e64190db\u003c/code\u003e\u003c/a\u003e v4.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e [Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nRemoves `tar`\n\nUpdates `ip-address` from 9.0.5 to 10.2.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/80fccaae984618f35dc941efab55cf2440ab37e8\"\u003e\u003ccode\u003e80fccaa\u003c/code\u003e\u003c/a\u003e 10.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/abaeb4d817cab16d3a1a78abd249d1f116bd302e\"\u003e\u003ccode\u003eabaeb4d\u003c/code\u003e\u003c/a\u003e Type Address4.addressMinusSuffix as non-nilable (closes \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/143\"\u003e#143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/2878c294e1216f9a0b69ad1d3c57a3790a7d5e8e\"\u003e\u003ccode\u003e2878c29\u003c/code\u003e\u003c/a\u003e Preserve subnet prefix through Address6.to4() (closes \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/123\"\u003e#123\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/203\"\u003e#203\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/586666ee9e666464071761d7a453715f98b6caee\"\u003e\u003ccode\u003e586666e\u003c/code\u003e\u003c/a\u003e Reject trailing junk in Address6.fromURL (closes \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/158\"\u003e#158\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/202\"\u003e#202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/80bc76eddf63df38db60defd5004bea919adf7ac\"\u003e\u003ccode\u003e80bc76e\u003c/code\u003e\u003c/a\u003e Validate static factories instead of silently overflowing (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/201\"\u003e#201\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/98927be9ef0c09f8ffcaf30b297405c9eff0a520\"\u003e\u003ccode\u003e98927be\u003c/code\u003e\u003c/a\u003e Clarify isValid() accepts CIDRs with host bits set (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/81\"\u003e#81\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/a0eb0732d6ac3088daa1106f4933eade41fd364a\"\u003e\u003ccode\u003ea0eb073\u003c/code\u003e\u003c/a\u003e Fix getScope() and broaden getType() classification (closes \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/122\"\u003e#122\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/200\"\u003e#200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/ec52105c87179129b9f091e97581e87b007824c7\"\u003e\u003ccode\u003eec52105\u003c/code\u003e\u003c/a\u003e Add networkForm() for CIDR network-address strings (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/199\"\u003e#199\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/a9443a72215b21a1e692be75cd3e18e8aa2262cb\"\u003e\u003ccode\u003ea9443a7\u003c/code\u003e\u003c/a\u003e Add isMapped4() predicate for IPv4-mapped IPv6 addresses (closes \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/62\"\u003e#62\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/198\"\u003e#198\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/f01d74267ed39f84521157e5f199edade9809f1e\"\u003e\u003ccode\u003ef01d742\u003c/code\u003e\u003c/a\u003e Add address-property predicates (private, ULA, loopback, link-local, etc.) (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v9.0.5...v10.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `sigstore` from 3.1.0 to 4.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore-js/releases\"\u003esigstore's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esigstore@4.1.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e7845532: Verification of OID certificate extensions\u003c/li\u003e\n\u003cli\u003ef074710: Require inclusion promise in Rekor entry when used as timestamp source\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [b5aa4f1]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [7845532]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [f074710]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/core\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.2.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/verify\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.1.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esigstore@4.1.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eeba6a52: \u003ccode\u003everify(bundle[, payload][, options])\u003c/code\u003e now returns a \u003ccode\u003eSigner\u003c/code\u003e object containing the public key and identity information from the verification.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [cee51c0]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [2042aad]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [018974e]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [dea916f]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [61a4f9e]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [5ffadc0]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [5ffadc0]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [1663b3e]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/tuf\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.0.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/verify\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.1.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/sign\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.1.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/core\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.1.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esigstore@4.0.0\u003c/h2\u003e\n\u003ch3\u003eMajor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e383e200: Drop support for node 18\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [40395f5]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [383e200]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [383e200]\u003c/li\u003e\n\u003cli\u003eUpdated dependencies [383e200]\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/tuf\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.0.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/sign\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.0.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/bundle\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.0.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/verify\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.0.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​sigstore/core\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.0.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/c1dc7d4778a450787fc72b083f2490ad02b714c6\"\u003e\u003ccode\u003ec1dc7d4\u003c/code\u003e\u003c/a\u003e Version Packages (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1607\"\u003e#1607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/f074710a91ea9260a9ac2142345634579843a3cd\"\u003e\u003ccode\u003ef074710\u003c/code\u003e\u003c/a\u003e reject integratedTime w/o inclusionPromise (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1659\"\u003e#1659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/7845532f9d17f6f765363dbee82b01bd159fb52b\"\u003e\u003ccode\u003e7845532\u003c/code\u003e\u003c/a\u003e OID certificate extension verification (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1658\"\u003e#1658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/b5aa4f1f8d2db0a9dfa6430fb114d9c2f1c304f7\"\u003e\u003ccode\u003eb5aa4f1\u003c/code\u003e\u003c/a\u003e proper utf-8 encoding in DSSE PAE (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1657\"\u003e#1657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/c7a34e0e9514f4573f8daf980c0987a4120a7183\"\u003e\u003ccode\u003ec7a34e0\u003c/code\u003e\u003c/a\u003e clarify cert ID matching (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1656\"\u003e#1656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/9858bd7fc535ff01755c8dd5842ef7171b0fafeb\"\u003e\u003ccode\u003e9858bd7\u003c/code\u003e\u003c/a\u003e Upgrade TypeScript to 6.x (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1655\"\u003e#1655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/8cef20d0069abd3ff03f2afb9ca320a76ddf6d4b\"\u003e\u003ccode\u003e8cef20d\u003c/code\u003e\u003c/a\u003e bump qs from 6.15.1 to 6.15.2 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1654\"\u003e#1654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/aca341b56aa561af4d74ad07fda4acd12c417beb\"\u003e\u003ccode\u003eaca341b\u003c/code\u003e\u003c/a\u003e bump \u003ccode\u003e@​sigstore/mock\u003c/code\u003e deps (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1653\"\u003e#1653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/0855acac119ae9f9dc21413356ce36eade2a51f8\"\u003e\u003ccode\u003e0855aca\u003c/code\u003e\u003c/a\u003e Pin all \u003ccode\u003e@​swc/core\u003c/code\u003e platform binaries as optionalDependencies (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1652\"\u003e#1652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/44a374d63107b25d11f880a8427e2e27d45965d8\"\u003e\u003ccode\u003e44a374d\u003c/code\u003e\u003c/a\u003e Pin all \u003ccode\u003e@​swc/core\u003c/code\u003e platform binaries as optionalDependencies (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1650\"\u003e#1650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore-js/compare/sigstore@3.1.0...sigstore@4.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for sigstore since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@sigstore/core` from 2.0.0 to 3.2.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sigstore/sigstore-js/releases\"\u003e@​sigstore/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​sigstore/core\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.2.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eb5aa4f1: Apply UTF-8 encoding to payload type during PAE calculation\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​sigstore/core\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.2.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e8f736ef: Update the \u003ccode\u003ecreatePublicKey\u003c/code\u003e function to support base64-encoded keys\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​sigstore/core\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.0.0\u003c/h2\u003e\n\u003ch3\u003eMajor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e383e200: Drop support for node 18\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/c1dc7d4778a450787fc72b083f2490ad02b714c6\"\u003e\u003ccode\u003ec1dc7d4\u003c/code\u003e\u003c/a\u003e Version Packages (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1607\"\u003e#1607\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/f074710a91ea9260a9ac2142345634579843a3cd\"\u003e\u003ccode\u003ef074710\u003c/code\u003e\u003c/a\u003e reject integratedTime w/o inclusionPromise (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1659\"\u003e#1659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/7845532f9d17f6f765363dbee82b01bd159fb52b\"\u003e\u003ccode\u003e7845532\u003c/code\u003e\u003c/a\u003e OID certificate extension verification (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1658\"\u003e#1658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/b5aa4f1f8d2db0a9dfa6430fb114d9c2f1c304f7\"\u003e\u003ccode\u003eb5aa4f1\u003c/code\u003e\u003c/a\u003e proper utf-8 encoding in DSSE PAE (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1657\"\u003e#1657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/c7a34e0e9514f4573f8daf980c0987a4120a7183\"\u003e\u003ccode\u003ec7a34e0\u003c/code\u003e\u003c/a\u003e clarify cert ID matching (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1656\"\u003e#1656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/9858bd7fc535ff01755c8dd5842ef7171b0fafeb\"\u003e\u003ccode\u003e9858bd7\u003c/code\u003e\u003c/a\u003e Upgrade TypeScript to 6.x (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1655\"\u003e#1655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/8cef20d0069abd3ff03f2afb9ca320a76ddf6d4b\"\u003e\u003ccode\u003e8cef20d\u003c/code\u003e\u003c/a\u003e bump qs from 6.15.1 to 6.15.2 (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1654\"\u003e#1654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/aca341b56aa561af4d74ad07fda4acd12c417beb\"\u003e\u003ccode\u003eaca341b\u003c/code\u003e\u003c/a\u003e bump \u003ccode\u003e@​sigstore/mock\u003c/code\u003e deps (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1653\"\u003e#1653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/0855acac119ae9f9dc21413356ce36eade2a51f8\"\u003e\u003ccode\u003e0855aca\u003c/code\u003e\u003c/a\u003e Pin all \u003ccode\u003e@​swc/core\u003c/code\u003e platform binaries as optionalDependencies (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1652\"\u003e#1652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sigstore/sigstore-js/commit/44a374d63107b25d11f880a8427e2e27d45965d8\"\u003e\u003ccode\u003e44a374d\u003c/code\u003e\u003c/a\u003e Pin all \u003ccode\u003e@​swc/core\u003c/code\u003e platform binaries as optionalDependencies (\u003ca href=\"https://redirect.github.com/sigstore/sigstore-js/issues/1650\"\u003e#1650\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sigstore/sigstore-js/compare/@sigstore/core@2.0.0...@sigstore/core@3.2.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​sigstore/core\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.14.0 to 6.15.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.3\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e for cumulative array growth via \u003ccode\u003ecombine\u003c/code\u003e/\u003ccode\u003emerge\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: respect encoding of surrogate pairs across chunks (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/559\"\u003e#559\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: throw the \u003ccode\u003earrayLimit\u003c/code\u003e error before splitting oversized comma values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils.merge\u003c/code\u003e / \u003ccode\u003eutils.assign\u003c/code\u003e: avoid invoking \u003ccode\u003e__proto__\u003c/code\u003e setter when copying own properties\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e consistently across \u003ccode\u003emerge\u003c/code\u003e's array paths\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003eutils\u003c/code\u003e: make \u003ccode\u003ecompact\u003c/code\u003e O(n) via a side-channel visited-set instead of \u003ccode\u003eArray.indexOf\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize current lenient handling of unbalanced bracket keys (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.2\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: skip null/undefined entries in \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e + \u003ccode\u003eencodeValuesOnly\u003c/code\u003e instead of crashing in \u003ccode\u003eencoder\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: use configured \u003ccode\u003edelimiter\u003c/code\u003e after \u003ccode\u003echarsetSentinel\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/555\"\u003e#555\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: apply \u003ccode\u003eformatter\u003c/code\u003e to encoded key under \u003ccode\u003estrictNullHandling\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/554\"\u003e#554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: skip null/undefined filter-array entries instead of crashing in \u003ccode\u003eencoder\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: handle nested bracket groups and add regression tests (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/530\"\u003e#530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] fix grammar (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/550\"\u003e#550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] add regression tests for keys containing percent-encoded bracket text\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: \u003ccode\u003eparameterLimit: Infinity\u003c/code\u003e with \u003ccode\u003ethrowOnLimitExceeded: true\u003c/code\u003e silently drops all parameters\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eiconv-lite\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] increase coverage\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add \u003ccode\u003estrictMerge\u003c/code\u003e option to wrap object/primitive conflicts in an array (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/425\"\u003e#425\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ljharb/qs/issues/122\"\u003e#122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eduplicates\u003c/code\u003e option should not apply to bracket notation keys (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/514\"\u003e#514\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.14.2\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: mark overflow objects for indexed notation exceeding \u003ccode\u003earrayLimit\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/546\"\u003e#546\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003earrayLimit\u003c/code\u003e means max count, not max index, in \u003ccode\u003ecombine\u003c/code\u003e/\u003ccode\u003emerge\u003c/code\u003e/\u003ccode\u003eparseArrayValue\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: throw on \u003ccode\u003earrayLimit\u003c/code\u003e exceeded with indexed notation when \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e is true (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/529\"\u003e#529\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e on \u003ccode\u003ecomma\u003c/code\u003e-parsed values\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: fix error message to reflect arrayLimit as max index; remove extraneous comments (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/545\"\u003e#545\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] avoid \u003ccode\u003e.push\u003c/code\u003e, use \u003ccode\u003evoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[readme] document that \u003ccode\u003eaddQueryPrefix\u003c/code\u003e does not add \u003ccode\u003e?\u003c/code\u003e to empty output (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/418\"\u003e#418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] clarify \u003ccode\u003eparseArrays\u003c/code\u003e and \u003ccode\u003earrayLimit\u003c/code\u003e documentation (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/543\"\u003e#543\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] replace runkit CI badge with shields.io check-runs badge\u003c/li\u003e\n\u003cli\u003e[meta] fix changelog typo (\u003ccode\u003earrayLength\u003c/code\u003e → \u003ccode\u003earrayLimit\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e[actions] fix rebase workflow permissions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.14.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] ensure \u003ccode\u003earrayLimit\u003c/code\u003e applies to \u003ccode\u003e[]\u003c/code\u003e notation as well\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: when a custom decoder returns \u003ccode\u003enull\u003c/code\u003e for a key, ignore that key\u003c/li\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003eparse\u003c/code\u003e: extract key segment splitting helper\u003c/li\u003e\n\u003cli\u003e[meta] add threat model\u003c/li\u003e\n\u003cli\u003e[actions] add workflow permissions\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/18d085e919dae70c8f1b200ab99323058edab2c2\"\u003e\u003ccode\u003e18d085e\u003c/code\u003e\u003c/a\u003e v6.15.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/c38af42039d8cbf83f3e0d486c924eaa5a5d1712\"\u003e\u003ccode\u003ec38af42\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/adce539489fcd34cc10830cf8c4a43e90b9300b0\"\u003e\u003ccode\u003eadce539\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/74a0f6a83af59245b4fa78785fbe709438580c97\"\u003e\u003ccode\u003e74a0f6a\u003c/code\u003e\u003c/a\u003e [Robustness] \u003ccode\u003eutils\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e consistently across \u003ccode\u003emerge\u003c/code\u003e's arra...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/f4938f594a0a2773d3c99c0c6f5c96f30d909a2c\"\u003e\u003ccode\u003ef4938f5\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize current lenient handling of unbalanced bracket ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/5d5f723afe55a861c52cff6327f62269df35fdd1\"\u003e\u003ccode\u003e5d5f723\u003c/code\u003e\u003c/a\u003e [Perf] \u003ccode\u003eutils\u003c/code\u003e: make \u003ccode\u003ecompact\u003c/code\u003e O(n) via a side-channel visited-set instead of...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/52afe00abdb36416ee01c8d5243919b47a59af67\"\u003e\u003ccode\u003e52afe00\u003c/code\u003e\u003c/a\u003e [Robustness] \u003ccode\u003eparse\u003c/code\u003e: throw the \u003ccode\u003earrayLimit\u003c/code\u003e error before splitting oversized...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/963e538c740961a35ecaa0b38ee1f5c16697e208\"\u003e\u003ccode\u003e963e538\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e for cumulative array growth via...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/59da434d5de8c3d2564e4d75aeedde2e8af72369\"\u003e\u003ccode\u003e59da434\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eutils\u003c/code\u003e: respect encoding of surrogate pairs across chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/9532969635a4bc96506370b28dd28dcab446e7ee\"\u003e\u003ccode\u003e9532969\u003c/code\u003e\u003c/a\u003e [Robustness] \u003ccode\u003eutils.merge\u003c/code\u003e / \u003ccode\u003eutils.assign\u003c/code\u003e: avoid invoking \u003ccode\u003e__proto__\u003c/code\u003e sette...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/qs/compare/v6.14.0...v6.15.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tmp` from 0.2.5 to 0.2.7\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raszi/node-tmp/commit/8ea1f37d75c67569e0f151448330d52f7babf211\"\u003e\u003ccode\u003e8ea1f37\u003c/code\u003e\u003c/a\u003e Bump up the version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raszi/node-tmp/commit/8f24f788a356b5d45c9bec894632bd4931338153\"\u003e\u003ccode\u003e8f24f78\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raszi/node-tmp/commit/ce787f37aaacccad921ae90990c9da33481fe59c\"\u003e\u003ccode\u003ece787f3\u003c/code\u003e\u003c/a\u003e Reject non-string prefix, postfix, template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raszi/node-tmp/commit/41f71598d03f104a67e0448a7cb9bd4efcdd5980\"\u003e\u003ccode\u003e41f7159\u003c/code\u003e\u003c/a\u003e Bump up the version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raszi/node-tmp/commit/efa4a06f24374797ae32ab2b6ae39b7a611ae429\"\u003e\u003ccode\u003eefa4a06\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raszi/node-tmp/commit/7ef2728ce0211b8110b2033dfe62eaf030341acf\"\u003e\u003ccode\u003e7ef2728\u003c/code\u003e\u003c/a\u003e Check for relative values\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/raszi/node-tmp/compare/v0.2.5...v0.2.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ws` from 7.5.10 to 7.5.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/websockets/ws/releases\"\u003ews's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e7.5.11\u003c/h2\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 2b2abd45 to the 7.x release line (e14c4586).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8\"\u003e\u003ccode\u003efd36cd8\u003c/code\u003e\u003c/a\u003e [dist] 7.5.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/e14c45861deca0cef60dec0f9109b694abebdf52\"\u003e\u003ccode\u003ee14c458\u003c/code\u003e\u003c/a\u003e [security] Limit retained message parts\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/websockets/ws/compare/7.5.10...7.5.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ws` from 8.18.3 to 8.21.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/websockets/ws/releases\"\u003ews's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e7.5.11\u003c/h2\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 2b2abd45 to the 7.x release line (e14c4586).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8\"\u003e\u003ccode\u003efd36cd8\u003c/code\u003e\u003c/a\u003e [dist] 7.5.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/e14c45861deca0cef60dec0f9109b694abebdf52\"\u003e\u003ccode\u003ee14c458\u003c/code\u003e\u003c/a\u003e [security] Limit retained message parts\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/websockets/ws/compare/7.5.10...7.5.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/soapy-dns/retirement-calc/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/soapy-dns/retirement-calc/pull/149","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/soapy-dns%2Fretirement-calc/issues/149","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/149/packages"}},{"old_version":"7.5.11","new_version":"7.5.19","update_type":"patch","path":null,"pr_created_at":"2026-07-02T10:37:46.000Z","version_change":"7.5.11 → 7.5.19","issue":{"uuid":"4793593569","node_id":"PR_kwDOM5Y-Bc7tFEfN","number":2459,"state":"closed","title":"build(deps): bump the npm_and_yarn group across 19 directories with 4 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":9,"pull_request":true,"closed_at":"2026-07-02T10:46:06.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-02T10:37:46.000Z","updated_at":"2026-07-02T10:53:58.000Z","time_to_close":500,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"npm_and_yarn","update_count":4,"packages":[{"name":"@opentelemetry/core","old_version":"2.2.0","new_version":"2.8.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"@opentelemetry/core","old_version":"2.2.0","new_version":"2.8.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"@opentelemetry/core","old_version":"2.2.0","new_version":"2.8.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"tar","old_version":"7.5.11","new_version":"7.5.19","repository_url":"https://github.com/isaacs/node-tar"},{"name":"undici","old_version":"7.24.7","new_version":"7.28.0","repository_url":"https://github.com/nodejs/undici"},{"name":"@opentelemetry/core","old_version":"2.2.0","new_version":"2.8.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the /examples/apq-subgraphs directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/extra-fields directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 4 updates in the /examples/federation-example directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js), [js-yaml](https://github.com/nodeca/js-yaml), [tar](https://github.com/isaacs/node-tar) and [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 4 updates in the /examples/federation-mixed directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js), [js-yaml](https://github.com/nodeca/js-yaml), [tar](https://github.com/isaacs/node-tar) and [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 4 updates in the /examples/federation-subscriptions-passthrough directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js), [js-yaml](https://github.com/nodeca/js-yaml), [tar](https://github.com/isaacs/node-tar) and [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 2 updates in the /examples/file-upload directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/hmac-auth-https directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/interface-additional-resolvers directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/json-schema-subscriptions directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 4 updates in the /examples/launchdarkly-override directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js), [js-yaml](https://github.com/nodeca/js-yaml), [tar](https://github.com/isaacs/node-tar) and [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 2 updates in the /examples/openapi-additional-resolvers directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/openapi-arg-rename directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/openapi-javascript-wiki directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/openapi-subscriptions directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/operation-field-permissions directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/programmatic-batching directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/subscriptions-with-transforms directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/type-merging-batching directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 2 updates in the /examples/typed-sdk directory: [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) and [js-yaml](https://github.com/nodeca/js-yaml).\n\nUpdates `@opentelemetry/core` from 2.2.0 to 2.8.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.8.0\u003c/h2\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.1\u003c/h2\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.0\u003c/h2\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md\"\u003e@​opentelemetry/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: test Node.js 26 in CI \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6671\"\u003e#6671\u003c/a\u003e \u003ca href=\"https://github.com/cjihrig\"\u003e\u003ccode\u003e@​cjihrig\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.6.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/13a035bc695996cf4aec885fef7b9866f48bc555\"\u003e\u003ccode\u003e13a035b\u003c/code\u003e\u003c/a\u003e chore: prepare next release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6756\"\u003e#6756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/4b13587d1e08b47baf153e5312ccd08a3240d074\"\u003e\u003ccode\u003e4b13587\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/71d195c508320295f1892aaed1ee2f1971ffb470\"\u003e\u003ccode\u003e71d195c\u003c/code\u003e\u003c/a\u003e chore(renovate): set minimumReleaseAge to 3 days (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6792\"\u003e#6792\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/555fca6ce94fb8d40a5f869dbd28e43143b4e730\"\u003e\u003ccode\u003e555fca6\u003c/code\u003e\u003c/a\u003e Update renovate.json to use matchManagers (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6141\"\u003e#6141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/b711a81d5262904245d70f1857b6f3bc811b22cd\"\u003e\u003ccode\u003eb711a81\u003c/code\u003e\u003c/a\u003e docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/da704029ccd291d65402f3d1c469bd3f25aec047\"\u003e\u003ccode\u003eda70402\u003c/code\u003e\u003c/a\u003e fix(ci): supply-chain sec: disable caching in release-related workflow (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6790\"\u003e#6790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/002267b1c639aac1d2f1d6e5c7ac3ed023109ea0\"\u003e\u003ccode\u003e002267b\u003c/code\u003e\u003c/a\u003e chore: complete the move to the smaller SPDX license header (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6791\"\u003e#6791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/056ef9c4e1ddf9306477b7ce26acc7be489f9c6c\"\u003e\u003ccode\u003e056ef9c\u003c/code\u003e\u003c/a\u003e feat(sdk-metrics): implement metric reader metrics (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6449\"\u003e#6449\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/3bd69ce18011f9a16a7231489d9c3acc8294e8d9\"\u003e\u003ccode\u003e3bd69ce\u003c/code\u003e\u003c/a\u003e fix(configuration): improve environment variable substitution to handle all t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/bfbda7c2d90e1686f51cd0fc4d02d785ab9a9cc0\"\u003e\u003ccode\u003ebfbda7c\u003c/code\u003e\u003c/a\u003e docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/compare/v2.2.0...v2.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda\"\u003e\u003ccode\u003e33d05b5\u003c/code\u003e\u003c/a\u003e 4.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb\"\u003e\u003ccode\u003e663bfab\u003c/code\u003e\u003c/a\u003e Drop demo publish, to not override new v5 one.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986\"\u003e\u003ccode\u003e1cb8c7b\u003c/code\u003e\u003c/a\u003e Add v4-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157\"\u003e\u003ccode\u003e02f27af\u003c/code\u003e\u003c/a\u003e Restore umd builds back to es5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb\"\u003e\u003ccode\u003e8be84ed\u003c/code\u003e\u003c/a\u003e Fix es5 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4\"\u003e\u003ccode\u003e59423c6\u003c/code\u003e\u003c/a\u003e Replace \u003ccode\u003emaxMergeSeqLength\u003c/code\u003e option with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (more robust). Ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d\"\u003e\u003ccode\u003e6842ef6\u003c/code\u003e\u003c/a\u003e doc polish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/590dbabadd172b099c07654fab2eabec8c7a07b9\"\u003e\u003ccode\u003e590dbab\u003c/code\u003e\u003c/a\u003e 4.2.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f944dc5cd132251752499bdb157f33027d362177\"\u003e\u003ccode\u003ef944dc5\u003c/code\u003e\u003c/a\u003e Add package.json funding field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f6927192223355b64f2a6e19f3071ccc579ee718\"\u003e\u003ccode\u003ef692719\u003c/code\u003e\u003c/a\u003e Changelog update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@opentelemetry/core` from 2.2.0 to 2.8.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.8.0\u003c/h2\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.1\u003c/h2\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.0\u003c/h2\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md\"\u003e@​opentelemetry/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: test Node.js 26 in CI \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6671\"\u003e#6671\u003c/a\u003e \u003ca href=\"https://github.com/cjihrig\"\u003e\u003ccode\u003e@​cjihrig\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.6.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/13a035bc695996cf4aec885fef7b9866f48bc555\"\u003e\u003ccode\u003e13a035b\u003c/code\u003e\u003c/a\u003e chore: prepare next release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6756\"\u003e#6756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/4b13587d1e08b47baf153e5312ccd08a3240d074\"\u003e\u003ccode\u003e4b13587\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/71d195c508320295f1892aaed1ee2f1971ffb470\"\u003e\u003ccode\u003e71d195c\u003c/code\u003e\u003c/a\u003e chore(renovate): set minimumReleaseAge to 3 days (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6792\"\u003e#6792\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/555fca6ce94fb8d40a5f869dbd28e43143b4e730\"\u003e\u003ccode\u003e555fca6\u003c/code\u003e\u003c/a\u003e Update renovate.json to use matchManagers (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6141\"\u003e#6141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/b711a81d5262904245d70f1857b6f3bc811b22cd\"\u003e\u003ccode\u003eb711a81\u003c/code\u003e\u003c/a\u003e docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/da704029ccd291d65402f3d1c469bd3f25aec047\"\u003e\u003ccode\u003eda70402\u003c/code\u003e\u003c/a\u003e fix(ci): supply-chain sec: disable caching in release-related workflow (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6790\"\u003e#6790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/002267b1c639aac1d2f1d6e5c7ac3ed023109ea0\"\u003e\u003ccode\u003e002267b\u003c/code\u003e\u003c/a\u003e chore: complete the move to the smaller SPDX license header (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6791\"\u003e#6791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/056ef9c4e1ddf9306477b7ce26acc7be489f9c6c\"\u003e\u003ccode\u003e056ef9c\u003c/code\u003e\u003c/a\u003e feat(sdk-metrics): implement metric reader metrics (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6449\"\u003e#6449\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/3bd69ce18011f9a16a7231489d9c3acc8294e8d9\"\u003e\u003ccode\u003e3bd69ce\u003c/code\u003e\u003c/a\u003e fix(configuration): improve environment variable substitution to handle all t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/bfbda7c2d90e1686f51cd0fc4d02d785ab9a9cc0\"\u003e\u003ccode\u003ebfbda7c\u003c/code\u003e\u003c/a\u003e docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/compare/v2.2.0...v2.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda\"\u003e\u003ccode\u003e33d05b5\u003c/code\u003e\u003c/a\u003e 4.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb\"\u003e\u003ccode\u003e663bfab\u003c/code\u003e\u003c/a\u003e Drop demo publish, to not override new v5 one.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986\"\u003e\u003ccode\u003e1cb8c7b\u003c/code\u003e\u003c/a\u003e Add v4-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157\"\u003e\u003ccode\u003e02f27af\u003c/code\u003e\u003c/a\u003e Restore umd builds back to es5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb\"\u003e\u003ccode\u003e8be84ed\u003c/code\u003e\u003c/a\u003e Fix es5 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4\"\u003e\u003ccode\u003e59423c6\u003c/code\u003e\u003c/a\u003e Replace \u003ccode\u003emaxMergeSeqLength\u003c/code\u003e option with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (more robust). Ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d\"\u003e\u003ccode\u003e6842ef6\u003c/code\u003e\u003c/a\u003e doc polish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/590dbabadd172b099c07654fab2eabec8c7a07b9\"\u003e\u003ccode\u003e590dbab\u003c/code\u003e\u003c/a\u003e 4.2.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f944dc5cd132251752499bdb157f33027d362177\"\u003e\u003ccode\u003ef944dc5\u003c/code\u003e\u003c/a\u003e Add package.json funding field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f6927192223355b64f2a6e19f3071ccc579ee718\"\u003e\u003ccode\u003ef692719\u003c/code\u003e\u003c/a\u003e Changelog update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@opentelemetry/core` from 2.2.0 to 2.8.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.8.0\u003c/h2\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.1\u003c/h2\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.0\u003c/h2\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md\"\u003e@​opentelemetry/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: test Node.js 26 in CI \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6671\"\u003e#6671\u003c/a\u003e \u003ca href=\"https://github.com/cjihrig\"\u003e\u003ccode\u003e@​cjihrig\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.6.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/13a035bc695996cf4aec885fef7b9866f48bc555\"\u003e\u003ccode\u003e13a035b\u003c/code\u003e\u003c/a\u003e chore: prepare next release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6756\"\u003e#6756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/4b13587d1e08b47baf153e5312ccd08a3240d074\"\u003e\u003ccode\u003e4b13587\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/71d195c508320295f1892aaed1ee2f1971ffb470\"\u003e\u003ccode\u003e71d195c\u003c/code\u003e\u003c/a\u003e chore(renovate): set minimumReleaseAge to 3 days (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6792\"\u003e#6792\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/555fca6ce94fb8d40a5f869dbd28e43143b4e730\"\u003e\u003ccode\u003e555fca6\u003c/code\u003e\u003c/a\u003e Update renovate.json to use matchManagers (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6141\"\u003e#6141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/b711a81d5262904245d70f1857b6f3bc811b22cd\"\u003e\u003ccode\u003eb711a81\u003c/code\u003e\u003c/a\u003e docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/da704029ccd291d65402f3d1c469bd3f25aec047\"\u003e\u003ccode\u003eda70402\u003c/code\u003e\u003c/a\u003e fix(ci): supply-chain sec: disable caching in release-related workflow (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6790\"\u003e#6790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/002267b1c639aac1d2f1d6e5c7ac3ed023109ea0\"\u003e\u003ccode\u003e002267b\u003c/code\u003e\u003c/a\u003e chore: complete the move to the smaller SPDX license header (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6791\"\u003e#6791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/056ef9c4e1ddf9306477b7ce26acc7be489f9c6c\"\u003e\u003ccode\u003e056ef9c\u003c/code\u003e\u003c/a\u003e feat(sdk-metrics): implement metric reader metrics (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6449\"\u003e#6449\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/3bd69ce18011f9a16a7231489d9c3acc8294e8d9\"\u003e\u003ccode\u003e3bd69ce\u003c/code\u003e\u003c/a\u003e fix(configuration): improve environment variable substitution to handle all t...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/bfbda7c2d90e1686f51cd0fc4d02d785ab9a9cc0\"\u003e\u003ccode\u003ebfbda7c\u003c/code\u003e\u003c/a\u003e docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/compare/v2.2.0...v2.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0, 3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.2.0] - 2026-06-26\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003eload()\u003c/code\u003e / \u003ccode\u003eloadAll()\u003c/code\u003e call.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxAliases\u003c/code\u003e (-1) loader option to limit the number of YAML aliases per\ndocument.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emaxMergeSeqLength\u003c/code\u003e replaced with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e for limiting YAML merge\nprocessing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRound-trip of integers with exponential form (\u0026gt;= \u003ccode\u003e1e21\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.1.0] - 2026-06-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCollection tags can finalize an incrementally populated carrier into a\ndifferent result value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[breaking] \u003ccode\u003equoteStyle\u003c/code\u003e now selects the preferred quote style; use the\nrestored \u003ccode\u003eforceQuotes\u003c/code\u003e option to force quoting non-key strings.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[5.0.0] - 2026-06-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded named exports for schemas, tags, parser events and AST utilities.\u003c/li\u003e\n\u003cli\u003eReworked \u003ccode\u003eJSON_SCHEMA\u003c/code\u003e and \u003ccode\u003eCORE_SCHEMA\u003c/code\u003e with spec-compliant scalar resolution\nrules, and added \u003ccode\u003eYAML11_SCHEMA\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003erealMapTag\u003c/code\u003e for lossless mappings with non-string and complex keys.\nObject-based mappings now reject complex keys instead of stringifying them.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e \u003ccode\u003etransform\u003c/code\u003e option for changing the generated AST before\nrendering.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003edump()\u003c/code\u003e options \u003ccode\u003eseqInlineFirst\u003c/code\u003e, \u003ccode\u003eflowBracketPadding\u003c/code\u003e,\n\u003ccode\u003eflowSkipCommaSpace\u003c/code\u003e, \u003ccode\u003eflowSkipColonSpace\u003c/code\u003e, \u003ccode\u003equoteFlowKeys\u003c/code\u003e, \u003ccode\u003equoteStyle\u003c/code\u003e and\n\u003ccode\u003etagBeforeAnchor\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded formal data layers (events and AST) for modular data pipelines.\n\u003cul\u003e\n\u003cli\u003eAdded low-level parser (to events), presenter and visitor APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdded the \u003ca href=\"https://github.com/yaml/yaml-test-suite\"\u003eYAML Test Suite\u003c/a\u003e to the\ntest set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSee the \u003ca href=\"https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md\"\u003emigration guide\u003c/a\u003e for upgrade notes.\u003c/li\u003e\n\u003cli\u003eRewritten in TypeScript and reorganized the public API around flat named\nexports.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda\"\u003e\u003ccode\u003e33d05b5\u003c/code\u003e\u003c/a\u003e 4.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb\"\u003e\u003ccode\u003e663bfab\u003c/code\u003e\u003c/a\u003e Drop demo publish, to not override new v5 one.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986\"\u003e\u003ccode\u003e1cb8c7b\u003c/code\u003e\u003c/a\u003e Add v4-legacy tag for publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157\"\u003e\u003ccode\u003e02f27af\u003c/code\u003e\u003c/a\u003e Restore umd builds back to es5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb\"\u003e\u003ccode\u003e8be84ed\u003c/code\u003e\u003c/a\u003e Fix es5 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4\"\u003e\u003ccode\u003e59423c6\u003c/code\u003e\u003c/a\u003e Replace \u003ccode\u003emaxMergeSeqLength\u003c/code\u003e option with \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (more robust). Ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d\"\u003e\u003ccode\u003e6842ef6\u003c/code\u003e\u003c/a\u003e doc polish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/590dbabadd172b099c07654fab2eabec8c7a07b9\"\u003e\u003ccode\u003e590dbab\u003c/code\u003e\u003c/a\u003e 4.2.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f944dc5cd132251752499bdb157f33027d362177\"\u003e\u003ccode\u003ef944dc5\u003c/code\u003e\u003c/a\u003e Add package.json funding field\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f6927192223355b64f2a6e19f3071ccc579ee718\"\u003e\u003ccode\u003ef692719\u003c/code\u003e\u003c/a\u003e Changelog update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.5.11 to 7.5.19\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad\"\u003e\u003ccode\u003ebe440da\u003c/code\u003e\u003c/a\u003e 7.5.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3\"\u003e\u003ccode\u003e2812e93\u003c/code\u003e\u003c/a\u003e add maxDecompressionRatio guard against explosive decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93\"\u003e\u003ccode\u003e9ecd4d2\u003c/code\u003e\u003c/a\u003e 7.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5\"\u003e\u003ccode\u003e9e78bf0\u003c/code\u003e\u003c/a\u003e refuse to let header size be less than 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b\"\u003e\u003ccode\u003ee02a4e9\u003c/code\u003e\u003c/a\u003e pax: parse values according to known types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946\"\u003e\u003ccode\u003e9cbdb31\u003c/code\u003e\u003c/a\u003e 7.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3\"\u003e\u003ccode\u003e7a635c2\u003c/code\u003e\u003c/a\u003e terminate pax strings on nul bytes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550\"\u003e\u003ccode\u003ecf21338\u003c/code\u003e\u003c/a\u003e 7.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe\"\u003e\u003ccode\u003e21a8220\u003c/code\u003e\u003c/a\u003e do not apply PAX header fields to meta entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970\"\u003e\u003ccode\u003e52632cf\u003c/code\u003e\u003c/a\u003e update project deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.11...v7.5.19\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `undici` from 7.24.7 to 7.28.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.28.0\u003c/h2\u003e\n\u003ch1\u003e⚠️ Security Release\u003c/h1\u003e\n\u003cp\u003eThis release line addresses \u003cstrong\u003e7 security advisories\u003c/strong\u003e, all shipped in \u003cstrong\u003ev7.28.0\u003c/strong\u003e.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eAction required:\u003c/strong\u003e Upgrade to \u003cstrong\u003eundici 7.28.0\u003c/strong\u003e or later.\u003c/p\u003e\n\u003cpre lang=\"sh\"\u003e\u003ccode\u003enpm install undici@^7.28.0\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThe v7 line is \u003cstrong\u003enot\u003c/strong\u003e affected by GHSA-38rv-x7px-6hhq (CVE-2026-9675), which is\nan 8.x-only regression.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eNote on GHSA-hm92-r4w5-c3mj:\u003c/strong\u003e this fix shipped in \u003cstrong\u003ev7.28.0\u003c/strong\u003e, not the\nearlier 7.2x line — the vulnerable single-pool code was still present through\n\u003ccode\u003ev7.27.2\u003c/code\u003e. The per-origin pool fix is\n\u003ca href=\"https://github.com/nodejs/undici/commit/3805b8f8\"\u003e\u003ccode\u003e3805b8f8\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5041\"\u003e#5041\u003c/a\u003e).\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eSummary\u003c/h2\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eAdvisory\u003c/th\u003e\n\u003cth\u003eCVE\u003c/th\u003e\n\u003cth\u003eSeverity (CVSS)\u003c/th\u003e\n\u003cth\u003eFixed in\u003c/th\u003e\n\u003cth\u003eFix commit\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q\"\u003eGHSA-vxpw-j846-p89q\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-12151\u003c/td\u003e\n\u003ctd\u003eHigh (7.5)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8cb10f98\"\u003e\u003ccode\u003e8cb10f98\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g\"\u003eGHSA-vmh5-mc38-953g\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-9697\u003c/td\u003e\n\u003ctd\u003eHigh (7.4)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/04201f89\"\u003e\u003ccode\u003e04201f89\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj\"\u003eGHSA-hm92-r4w5-c3mj\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-6734\u003c/td\u003e\n\u003ctd\u003eHigh (7.5)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/3805b8f8\"\u003e\u003ccode\u003e3805b8f8\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-pr7r-676h-xcf6\"\u003eGHSA-pr7r-676h-xcf6\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-9678\u003c/td\u003e\n\u003ctd\u003eModerate (5.9)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/85a24055\"\u003e\u003ccode\u003e85a24055\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-p88m-4jfj-68fv\"\u003eGHSA-p88m-4jfj-68fv\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-9679\u003c/td\u003e\n\u003ctd\u003eModerate (5.9)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/d0574cc4\"\u003e\u003ccode\u003ed0574cc4\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m\"\u003eGHSA-g8m3-5g58-fq7m\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-11525\u003c/td\u003e\n\u003ctd\u003eLow (3.7)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/d0574cc4\"\u003e\u003ccode\u003ed0574cc4\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52\"\u003eGHSA-35p6-xmwp-9g52\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-6733\u003c/td\u003e\n\u003ctd\u003eLow (3.7)\u003c/td\u003e\n\u003ctd\u003e7.28.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/ea8930cf\"\u003e\u003ccode\u003eea8930cf\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003chr /\u003e\n\u003ch2\u003eHigh severity\u003c/h2\u003e\n\u003ch3\u003eWebSocket DoS via fragment count bypass — CVE-2026-12151\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q\"\u003eGHSA-vxpw-j846-p89q\u003c/a\u003e\u003c/strong\u003e · CWE-400, CWE-770\n\u003cstrong\u003eFix:\u003c/strong\u003e \u003ca href=\"https://github.com/nodejs/undici/commit/8cb10f98\"\u003e\u003ccode\u003e8cb10f98\u003c/code\u003e\u003c/a\u003e \u003cem\u003ewebsocket: limit the number of fragments in a message\u003c/em\u003e (part of backport \u003ca href=\"https://github.com/nodejs/undici/commit/a027a4a0\"\u003e\u003ccode\u003ea027a4a0\u003c/code\u003e\u003c/a\u003e \u003cem\u003eBackport WebSocket maxPayloadSize fixes to v7.x\u003c/em\u003e, \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5423\"\u003e#5423\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eA malicious WebSocket server can stream a large number of small or empty\ncontinuation frames. Undici enforced a limit on cumulative payload size but did\nnot limit the \u003cem\u003enumber\u003c/em\u003e of fragments per message, leading to unbounded memory\ngrowth and denial of service.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eAffected:\u003c/strong\u003e applications using \u003ccode\u003enew WebSocket(...)\u003c/code\u003e or \u003ccode\u003eWebSocketStream\u003c/code\u003e\nagainst untrusted endpoints.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eWorkaround:\u003c/strong\u003e none — upgrade is required.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTLS certificate validation bypass in SOCKS5 ProxyAgent — CVE-2026-9697\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g\"\u003eGHSA-vmh5-mc38-953g\u003c/a\u003e\u003c/strong\u003e · CWE-295\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/f9eba0ad9134e1c0977848476bba9d49734696e4\"\u003e\u003ccode\u003ef9eba0a\u003c/code\u003e\u003c/a\u003e Bumped v7.28.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5430\"\u003e#5430\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/a027a4a04c6c055877d1abaf5f60ee4917e7e01f\"\u003e\u003ccode\u003ea027a4a\u003c/code\u003e\u003c/a\u003e Backport WebSocket maxPayloadSize fixes to v7.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5423\"\u003e#5423\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8cb10f983eb6005dd53f3744d95d3b6d7dbcee0f\"\u003e\u003ccode\u003e8cb10f9\u003c/code\u003e\u003c/a\u003e websocket: limit the number of fragments in a message\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/04201f8947041f0f4f2ac865dbdb1677e46a8844\"\u003e\u003ccode\u003e04201f8\u003c/code\u003e\u003c/a\u003e fix: honor requestTls when proxy is SOCKS5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/fcd642ff613ea9030dec87cf622e68d4b1ae9847\"\u003e\u003ccode\u003efcd642f\u003c/code\u003e\u003c/a\u003e fix(socks5): preserve dispatch backpressure return value (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5166\"\u003e#5166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/bc98c97906abf26fa1e959b2f6111b53ade0e18f\"\u003e\u003ccode\u003ebc98c97\u003c/code\u003e\u003c/a\u003e fix(socks5): use configured connector in Socks5ProxyAgent (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5168\"\u003e#5168\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/9e1c74372a2b27cacd92d27c13a83a6d84f10e0e\"\u003e\u003ccode\u003e9e1c743\u003c/code\u003e\u003c/a\u003e fix(socks5): encode embedded IPv4 tails in IPv6 literals correctly (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5099\"\u003e#5099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/376c8be27cb40cc17ccaad6b6ebb317fa7148d65\"\u003e\u003ccode\u003e376c8be\u003c/code\u003e\u003c/a\u003e fix(socks5): enforce authenticated state before CONNECT (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5097\"\u003e#5097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/3805b8f8518882991044048c256e005dc3c10a85\"\u003e\u003ccode\u003e3805b8f\u003c/code\u003e\u003c/a\u003e fix(socks5-proxy-agent): use per-origin pools to prevent cross-origin routing...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/85a240551c9feb8b8a0ecc56c84b2b3015add8a9\"\u003e\u003ccode\u003e85a2405\u003c/code\u003e\u003c/a\u003e fix(cache): trim qualified field names\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodejs/undici/compare/v7.24.7...v7.28.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@opentelemetry/core` from 2.2.0 to 2.8.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.8.0\u003c/h2\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-trace-base): pretty-print \u003ccode\u003eSpanImpl\u003c/code\u003e, \u003ccode\u003eTracer\u003c/code\u003e, and \u003ccode\u003eBasicTracerProvider\u003c/code\u003e via \u003ccode\u003eutil.inspect\u003c/code\u003e so they render through \u003ccode\u003ediag\u003c/code\u003e and \u003ccode\u003econsole.log\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690\"\u003e#6690\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): implement metric reader self-observability metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(core): add \u003ccode\u003ehrTimeToSeconds\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449\"\u003e#6449\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core): limit processing of incoming \u0026quot;baggage\u0026quot; header to 8192 bytes \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.1\u003c/h2\u003e\n\u003ch2\u003e2.7.1\u003c/h2\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(core, api): defer trace state validation. Deprecate trace state implementation in api \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6459\"\u003e#6459\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eimportant:\u003c/strong\u003e this bug fix may be breaking for certain uses of \u003ccode\u003eTraceState\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key/value are invalid or makes the while trace state invalid.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eunset\u003c/code\u003e now returns the same \u003ccode\u003eTraceState\u003c/code\u003e instance if key is not present.\u003c/li\u003e\n\u003cli\u003ebest-effort parsing of invalid \u003ccode\u003eTraceState\u003c/code\u003es has changed: when multiple keys with the same name are present, the most recent one will win.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eperf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6284\"\u003e#6284\u003c/a\u003e \u003ca href=\"https://github.com/AbhiPrasad\"\u003e\u003ccode\u003e@​AbhiPrasad\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf(sdk-metrics): reduce loop overhead in sdk hot paths \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6593\"\u003e#6593\u003c/a\u003e \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.7.0\u003c/h2\u003e\n\u003ch2\u003e2.7.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): implement log creation metrics \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6433\"\u003e#6433\u003c/a\u003e \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders\n\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6460\"\u003e#6460\u003c/a\u003e \u003ca href=\"https://github.com/starzlocker\"\u003e\u003ccode\u003e@​starzlocker\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(opentelemetry-core): add extra checks on internal merge function for safety \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6587\"\u003e#6587\u003c/a\u003e \u003ca href=\"https://github.com/maryliag\"\u003e\u003ccode\u003e@​maryliag\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etest(exporter-zipkin): fix broken browser test assertions and add missing coverage \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6566\"\u003e#6566\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-metrics): repair ExponentialHistogram tests \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6565\"\u003e#6565\u003c/a\u003e \u003ca href=\"https://github.com/overbalance\"\u003e\u003ccode\u003e@​overbalance\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md\"\u003e@​opentelemetry/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.8.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ef...\n\n_Description has been truncated_","html_url":"https://github.com/graphql-hive/gateway/pull/2459","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/graphql-hive%2Fgateway/issues/2459","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2459/packages"}}]}