chore(deps): update dependency deno to v2.9.6 - #489

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/deno-monorepo
Open

chore(deps): update dependency deno to v2.9.6#489
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/deno-monorepo

Conversation

@renovate

@renovaterenovateBot commented Mar 4, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

PackageChangeAgeConfidence
deno (source)2.7.1 → 2.9.6ageconfidence

Release Notes

denoland/deno (deno)

v2.9.6

Compare Source

  • feat(compressible): add support for 'text/x-component' content type (#​36450)
  • feat(desktop): clipboard api (#​35750)
  • feat(desktop): support checked, icon, and tooltip on menu items (#​36649)
  • fix(bundle): isolate esbuild downloads from workspace registries (#​36467)
  • fix(cache): combine duplicate headers for Vary matching (#​36476)
  • fix(cli_parser): remove orphaned sync-types parser
  • fix(core): cap adaptive buffer initial allocations (#​36432)
  • fix(core): make Unix pipe fd ownership explicit (#​36353)
  • fix(core): make user timer waker state thread-safe (#​36495)
  • fix(coverage): compare a range against a line in V8's units (#​36613)
  • fix(crypto): preserve RSA-OAEP label bytes (#​36441)
  • fix(desktop): keep dots in the app name when resolving the runtime library
    (#​36006)
  • fix(desktop): keep the macOS bundle signature valid unless an update is
    applied (#​36574)
  • fix(desktop): never block the JS thread on the error-report dialog (#​36575)
  • fix(desktop): propagate deno.json version and license into packaged installers
    (#​36577)
  • fix(desktop): run Vite-based HMR dev servers inside the desktop runtime
    (#​36488)
  • fix(desktop): transport binding args and results as DesktopValue so Uint8Array
    survives (#​36573)
  • fix(ext/fetch): enforce permissions for proxy transports (#​36217)
  • fix(ext/fetch): only retry transport errors on pooled connections (#​36415)
  • fix(ext/fetch): raise default HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE to 256KB
    (#​36558)
  • fix(ext/http): keep request body readable after response is sent (#​36629)
  • fix(ext/http): route invalid async responses to onError (#​36437)
  • fix(ext/napi): don't invoke napi_wrap finalizer twice at teardown (#​36556)
  • fix(ext/napi): run JS-calling finalizers safely, NULL string result, and
    Float16Array (#​36572)
  • fix(ext/napi): surface OS error and path on addon load failure (#​36630)
  • fix(ext/napi): track pending finalizers by identity (#​36551)
  • fix(ext/napi): wake the event loop at the next uv_timer deadline (#​36559)
  • fix(ext/net): skip unsupported DNS records in ANY queries (#​36650)
  • fix(ext/node): accept string ports in dns.lookupService (#​36546)
  • fix(ext/node): build the proxied request target with the URL parser (#​36557)
  • fix(ext/node): do not resume client TLS sessions unless requested (#​36592)
  • fix(ext/node): fix perf_hooks detail.req.url proxied path duplication (#​36407)
  • fix(ext/node): handle readv short reads (#​36211)
  • fix(ext/node): require sys permission for inspector.open (#​36465)
  • fix(ext/node_sqlite): invalidate sessions on database close (#​36633)
  • fix(ext/tls): avoid panic for mismatched client certificate and key (#​36457)
  • fix(ext/web): clean up abort handlers when listeners are removed (#​36226)
  • fix(ext/web): close transfer MessagePort when a transferred readable is
    cancelled (#​36270)
  • fix(ext/web): snapshot SharedArrayBuffer input in TextDecoder.decode()
    (#​36611)
  • fix(fetch): require an initial multipart boundary (#​36470)
  • fix(ffi): validate struct return buffers (#​36373)
  • fix(fmt): honor .editorconfig when formatting from stdin (#​36267)
  • fix(fs): require write permission for creating opens (#​36497)
  • fix(fs): use a private FsFile constructor token (#​36439)
  • fix(glob): retain valid gitignore rules after parse errors (#​36478)
  • fix(http): preserve keep-alive after reading request body (#​36690)
  • fix(http): truncate streaming responses to content length (#​36496)
  • fix(lsp): restrict registry completion endpoint schemes (#​36477)
  • fix(node): check reads during require resolution (#​36461)
  • fix(node): match domain uncaught exception handling (#​36475)
  • fix(node): preserve v8 deserializer view offsets (#​36460)
  • fix(node): validate Brotli encoder operations (#​36530)
  • fix(node): validate raw outgoing HTTP headers (#​36471)
  • fix(node/crypto): preserve binary key export passphrases (#​36443)
  • fix(node_crypto): apply RFC 7748 scalar decoding for X448 (#​36466)
  • fix(node_crypto): size cipher updates by byte length (#​36459)
  • fix(node_shim): preserve explicit argument delimiters (#​36435)
  • fix(npm): flatten single-resolution peers when building package ids (#​36608)
  • fix(npm): match peer fallbacks when checking peer resolution cache (#​36607)
  • fix(npm): remove arrayref dependency (#​36653)
  • fix(npm): resolve bare npm specifier when latest is too new for min dependency
    age (#​36619)
  • fix(npm): use cached abbreviated metadata under --cached-only (#​36526)
  • fix(npm): validate tar paths before extraction (#​36468)
  • fix(os): serialize process environment updates (#​36074)
  • fix(permissions): check resolved IP against import deny list (#​36486)
  • fix(process): reject NULs in Windows arguments (#​36436)
  • fix(process): validate whitespace-only loader environment values (#​36431)
  • fix(publish): authenticate the package existence check so private packages
    work (#​36656)
  • fix(publish): memoize publish order depth (#​36215)
  • fix(publish): reject invalid JSR package names (#​36474)
  • fix(repl): skip regex literals when validating input (#​36375)
  • fix(runtime): unregister dropped signal resources (#​36213)
  • fix(web): keep MessagePort resource identifiers private (#​36440)
  • fix: bugs in primordials related to ObjectCreate and
    ObjectDefineProperties (#​36541)
  • fix: prevent threadpool starvation with concurrent file locks (#​32789)
  • perf(core): grow the op driver's future arena on demand (#​36678)
  • perf(core): uncontended-borrow fast path for AsyncRefCell (#​36679)
  • perf(core): use index-based SafeArrayIterator in primordials (#​36543)
  • perf(core): zero-copy snapshot rehydration, drop bincode (#​36680)
  • perf(ext/web): apply the base64url op design to standard base64 (#​36422)
  • perf(ext/websocket): shrink the op_ws_create future (#​36681)

v2.9.5

Compare Source

  • feat(add): --unscoped flag to alias packages by their unscoped name (#​36319)
  • feat(task): add --members flag to run tasks in workspace members only (#​35748)
  • feat: add Blob/Body textStream() (#​35616)
  • feat: add experimental QuickJS backend (#​36194)
  • fix(bundle): avoid esbuild protocol deadlock (#​36427)
  • fix(bundle): respect runtime file permissions (#​36107)
  • fix(cjs): use loader sources for recursive analysis (#​36111)
  • fix(cli): escape control characters in external metadata (#​36198)
  • fix(core): don't resolve internal module imports with the user's import map
    (#​36303)
  • fix(crypto): add "raw-secret" to KeyFormat type (#​35708)
  • fix(desktop): handle colored HMR URLs and page loads (#​36316)
  • fix(desktop): retain update signature verification op (#​36152)
  • fix(ext/crypto): allow deriveBits with length 0 (#​36283)
  • fix(ext/napi): polyfill uv_handle_size and uv_strerror (#​36308)
  • fix(ext/net): release completed QUIC stream resources (#​36247)
  • fix(ext/net): require --allow-sys for node:dns.getServers() (#​35941)
  • fix(ext/node): Node compat for web streams (#​36285)
  • fix(ext/node): apply backpressure in Readable.toWeb() (#​36321)
  • fix(ext/node): defer TLS write completion callback to avoid reentrancy panic
    (#​35867)
  • fix(ext/node): don't fire http2 settings callback after session destroy
    (#​36230)
  • fix(ext/node): gate constrained memory cgroup reads (#​36218)
  • fix(ext/node): handle pre-quoted shell arguments (#​36371)
  • fix(ext/node): implement node:test tags (#​36292)
  • fix(ext/node): implement util.diff (#​36289)
  • fix(ext/node): implement v8.promiseHooks API (#​36281)
  • fix(ext/node): sort fs.readdir entries to match Node.js (#​36341)
  • fix(ext/node): stop http2 file reads after stream close (#​36300)
  • fix(ext/node): store blocklist ranges compactly (#​36212)
  • fix(ext/node): support the fs flush option for writes (#​36290)
  • fix(ext/node): use signatureAlgorithm digest for X509 ECDSA verify (#​36326)
  • fix(ext/node_crypto): use named group exponent sizes (#​36347)
  • fix(ext/web): attach Node error codes to WHATWG API validation errors (#​36288)
  • fix(ext/websocket): disable HTTP/2 server push on wss upgrade path (#​36327)
  • fix(fetch): scope redirect-sensitive headers by origin (#​36361)
  • fix(ffi): reject resizable buffers in nonblocking calls (#​36259)
  • fix(fmt): accept xml and svg extensions for stdin (#​36149)
  • fix(fmt): update lax-markup to 0.3.2, lax-css and lax-sql to 0.3.0 (#​36397)
  • fix(http): preserve stripped headers across redirects (#​36360)
  • fix(inspector): validate request host headers (#​36348)
  • fix(net): cancel pending writes on stream close (#​36369)
  • fix(net): clean up concurrently dropped load-balanced listeners (#​36246)
  • fix(net): handle malformed DNS record text (#​36374)
  • fix(node): clean up Web Stream finished listeners (#​36227)
  • fix(node): retain consumed HTTP stream wrapper (#​36254)
  • fix(npm): ignore invalid package bin targets (#​36354)
  • fix(npm): tolerate malformed scripts field in packuments (#​36324)
  • fix(npmrc): match auth configs by authority and path (#​36359)
  • fix(outdated): don't report JSR pre-release versions as latest (#​36325)
  • fix(publish): report when the registry rejects a provenance attestation
    (#​36404)
  • fix(resolver): don't treat deno eval modules as npm package files (#​36304)
  • fix(runtime): map notify's Windows missing-path error to NotFound (#​35864)
  • fix(sync-types): add reason to too_many_arguments allows (lint)
  • fix(telemetry): handle reentrant attribute conversion (#​36256)
  • fix(webgpu): own mapped range backing stores (#​36257)
  • fix(webstorage): preserve Storage constructor name (#​35944)
  • fix: capitalize IP in help text (#​36170)
  • fix: upgrade deno_task_shell to 0.33.3 (#​36406)
  • fix: wire no-legacy-abort unstable flag from deno.json config (#​36312)
  • perf(core): run the common-path tick drain in Rust (#​36157)
  • perf(ext/node): bypass dns lookup on literal IPs in udp send (#​35909)
  • perf(ext/web): implement base64url encode/decode as simdutf ops (#​36398)
  • perf(fs): open files on the blocking pool in async readFile/writeFile (#​36160)
  • perf: order startup functions in release builds (#​36219)
  • perf: reduce eager module evaluation at startup (#​36331)
  • perf: remove Linux unwind tables from release artifacts (#​36265)

v2.9.4

Compare Source

  • feat(desktop): enable --hmr for React Router (#​35900)
  • feat(ext/node): add a byteLength/length parameter to
    Buffer.indexOf/lastIndexOf/includes (#​35872)
  • feat(ext/node): support raw chacha20 cipher in crypto.createCipheriv (#​36016)
  • feat: upgrade V8 to 150.2.0 (#​36098)
  • fix(add): support --minimum-dependency-age flag in deno add/remove (#​36099)
  • fix(cache): store Web Cache under origin data (#​36145)
  • fix(canvas): require FFI permission for native window handles (#​36080)
  • fix(clean): reject symlinked node_modules cleanup roots (#​36190)
  • fix(compile): bump libsui to 0.16.4 to fix Windows resource SizeOfImage
    (#​36242)
  • fix(core): allow dynamic imports during cached module evaluation (#​36258)
  • fix(core): bound error graph conversion (#​36070)
  • fix(core): enforce JSON requests in FsModuleLoader (#​36137)
  • fix(core): handle malformed error constructors (#​36071)
  • fix(core): stop rejected dynamic imports before loading (#​36136)
  • fix(desktop): make BrowserWindow bindings typeable (#​35907)
  • fix(desktop): preserve binding wrappers after lazy op upgrade (#​36065)
  • fix(desktop): strip runtime extension from app name (#​36060)
  • fix(ext/napi): cancel async sends after close (#​36077)
  • fix(ext/napi): scope callback info per invocation (#​36076)
  • fix(ext/node): apply backpressure to http2 stream writes (#​36044)
  • fix(ext/node): don't leave 0-byte .heapsnapshot files near the heap limit
    (#​36113)
  • fix(ext/node): implement worker_threads.locks via Web Locks (#​35963)
  • fix(ext/node): node:sqlite backup() and deserialize() argument validation
    (#​36127)
  • fix(ext/node): retry DNS query when its per-attempt timeout fires (#​35955)
  • fix(ext/node): stop http2 file reads on stream close (#​36061)
  • fix(ext/web): handle failed webtransport datagram setup (#​36067)
  • fix(ext/webidl): implement async_sequence for ReadableStream.from (#​35976)
  • fix(fetch): bound multipart part headers (#​36096)
  • fix(fmt): keep embedded CSS custom property indentation stable (#​35949)
  • fix(fs): require sys permission for umask (#​36222)
  • fix(http): preserve trust proxy environment setting (#​36073)
  • fix(init): validate temporary node_modules parent (#​36142)
  • fix(jupyter): report codemirror_mode as a string (#​36241)
  • fix(loader): reject non-JSON modules for JSON imports (#​36135)
  • fix(napi): synchronize external string finalizers (#​36078)
  • fix(net): clean up cancellation resources on early errors (#​36229)
  • fix(net): limit WebTransport handshake frame buffering (#​36068)
  • fix(node_http2): clean up destroyed sessions (#​36043)
  • fix(node_resolver): handle CJS filesystem path edge cases (#​36112)
  • fix(node_stream): handle Web Stream adapter errors (#​36193)
  • fix(npm): avoid following lock poll symlinks (#​36192)
  • fix(npm): download tarballs from the configured registry instead of
    registry.npmjs.org (#​36187)
  • fix(npm): reject symlinked package materialization dirs (#​36191)
  • fix(outdated): keep type-only dependencies in the lockfile (#​36140)
  • fix(pack): support file paths longer than the tar name field (#​36105)
  • fix(permissions): escape bidi controls in prompts (#​36195)
  • fix(process): avoid collisions in Windows stdio pipe names (#​36081)
  • fix(publish): constrain generated source rewrites (#​36109)
  • fix(release): insert into versions.json in semver order (#​36097)
  • fix(rt): isolate extracted native addons (#​36144)
  • fix(runtime): bridge console to the inspector regardless of --inspect flag
    (#​35795)
  • fix(runtime): give worker isolate threads the stack size we report (#​36114)
  • fix(test): escape control characters in test names (#​36196)
  • fix(tests): make npm test registry tolerate a bad advisories request body
    (#​36138)
  • fix(tls): resolve sni requests concurrently (#​36062)
  • fix(update): don't downgrade lockfile when npm cache is stale (#​35904)
  • fix(webtransport): avoid url parse panic (#​36066)
  • fix(webtransport): validate certificate dates (#​36069)
  • fix(x): honor --minimum-dependency-age and deno.json minimumDependencyAge
    (#​36025)
  • fix: discover config file for jsr: entrypoints (#​35838)
  • fix: handle UTF-16 diagnostic columns (#​36028)
  • perf(core): avoid duplicating lazy ESM snapshot sources (#​36262)
  • perf(snapshot): mangle internal source identifiers (#​36263)
  • perf: compress bundled AppImage runtimes (#​36261)
  • perf: use FxHash for hot internal hash maps (#​36100)

v2.9.3

Compare Source

  • feat(cli): deno add --no-save and --save-optional (#​36039)
  • feat(cli): add --min-dep-age alias (#​35914)
  • feat(compile): support aarch64-pc-windows-msvc target (#​36004)
  • feat(ext/fetch): add http2MaxHeaderListSize option to
    Deno.createHttpClient (#​33194)
  • fix(bundle): preserve raw imports in watch mode (#​36040)
  • fix(canvas): don't hold SurfaceData mut borrow over window resize (#​35993)
  • fix(config): reject out-of-range minimum dependency ages (#​36051)
  • fix(core): block user ext imports after resolution (#​36012)
  • fix(core): deactivate idle TTY write handles (#​35886)
  • fix(core): restrict extension loaders to internal modules (#​36013)
  • fix(core): root slow op string coercions (#​36018)
  • fix(desktop): don't let op_desktop_send_error_report target caller-supplied
    URLs (#​35940)
  • fix(ext/http): don't panic recycling cancelled record on native response
    (#​36053)
  • fix(ext/napi): don't free threadsafe function on abort while refs remain
    (#​36032)
  • fix(ext/napi): don't resurrect a released threadsafe function in acquire
    (#​36054)
  • fix(ext/node): add deprecation warning for Duplex.toWeb({ type }) DEP0201
    (#​35972)
  • fix(ext/node): guard sqlite deserialize during callbacks (#​36023)
  • fix(ext/node): handle UTF-16 assert source positions (#​36029)
  • fix(ext/node): handle sqlite conversion failures (#​36024)
  • fix(ext/node): respect base64 buffer ranges (#​36030)
  • fix(ext/process): don't double-close extra stdio pipe handles on Windows
    (#​36005)
  • fix(lsp): respect lint rule exclusion for no-slow-types diagnostics (#​35924)
  • fix(node): stop active read on stream close to avoid leaking Socket/TCPWrap
    (#​35898)
  • fix(node_http2): keep header validation enabled (#​36042)
  • fix(node_http2): validate serialized headers (#​36041)
  • fix(npm): don't fetch registry info for deprecated packages under
    --cached-only (#​35903)
  • fix(npm): normalize path in BYONM read permission check (#​35882)
  • fix(pm): hint about minimumDependencyAge when no version is old enough
    (#​35890)
  • fix(release): only strip Mach-O signature for x86_64-apple-darwin (#​35902)
  • fix(release): strip Mach-O signature before patchver on apple targets (#​35897)
  • fix(runtime): guard usage op output buffers (#​36020)
  • fix(serde_v8): handle deserialization exceptions (#​36021)
  • fix(web): guard encodeInto fallback result buffer (#​36019)
  • fix(web): support Event subclasses with readonly toStringTag (#​35920)
  • fix(worker): remove imported ops during bootstrap (#​36014)
  • fix: don't print duplicate parse diagnostics (#​35933)
  • perf(ext/crypto): batch randomUUID generation (#​35953)
  • perf(ext/fetch): remove quadratic line buffering in EventSource (#​35881)
  • perf(ext/node): cache compiled glob matchers + bump bundled minimatch to
    10.2.5 (#​35873)
  • perf(ext/node): fast path fs cp (#​35856)
  • perf(ext/node): right-size small socket reads instead of pinning the 64KB slab
    (#​35779)
  • perf(ext/node): speed up sqlite.StatementSync.all() and run() (#​35863)
  • perf(ext/web): avoid copy-back in op_base64_atob large path (#​35862)

v2.9.2

Compare Source

  • feat(desktop): autodetect React Router framework (#​35557)
  • feat(desktop): enable --hmr for Vite and Nuxt (#​35851)
  • feat(desktop): run HMR by framework dev server (#​35722)
  • feat(desktop): window opacity and transparency APIs (#​35646)
  • feat(desktop): wire --exclude-unused-npm through to compile (#​35740)
  • feat(ext/node): implement v8.setHeapSnapshotNearHeapLimit (#​35694)
  • feat(ext/telemetry): honor OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT (#​35068)
  • feat(inspector): start inspector server on SIGUSR1 (#​35738)
  • feat(node): implement getTestContext() in node:test (#​35678)
  • feat: support wildcard patterns in minimumDependencyAge.exclude (#​35746)
  • fix(check): don't interleave errors with "Check" lines in a workspace (#​35687)
  • fix(compile): bump libsui to 0.16.1 to survive eu-strip in flatpak (#​35699)
  • fix(compile): bump libsui to 0.16.3 to fix segfault under gVisor/Cloud Run
    (#​35701)
  • fix(core): don't drain microtasks in mod_evaluate_sync mid-evaluation (#​35707)
  • fix(coverage): count a branch-junction line as covered when either arm runs
    (#​35858)
  • fix(coverage): don't count V8 block-boundary gaps as branches (#​35767)
  • fix(coverage): don't let a trailing comment change a line's hit count (#​35741)
  • fix(deploy): disable config discovery and refresh the cached CLI version
    (#​35754)
  • fix(desktop): attribute bind calls to the registering window id (#​35654)
  • fix(desktop): honor desktop.backend from deno.json (#​35815
  • fix(desktop): pin @​std/http in generated Vite SPA entrypoint + add hermetic
    compile test (#​35676)
  • fix(desktop): rename launcher to so it self-loads the runtime (#​35709)
  • fix(desktop): run framework build step before bundling output (#​35603)
  • fix(desktop): surface compiled-app startup errors instead of exiting silently
    (#​35567)
  • fix(dprint): exclude tools/lzld submodule (#​35778)
  • fix(ext): throw DataCloneError when posting non-serializable values (#​35604)
  • fix(ext/cache): implement Cache.keys() (#​35455)
  • fix(ext/fetch): reject transport failures with Node's "fetch failed" shape
    (#​35618)
  • fix(ext/http): error non-Uint8Array response streams (#​35783)
  • fix(ext/http): honor explicit content-length header on HEAD responses (#​35728)
  • fix(ext/http): point legacy abort warning at docs.deno.com/go link (#​35713)
  • fix(ext/napi): add uv_cond_* polyfills for native addons (#​35536)
  • fix(ext/net): abort pending Deno.connect during DNS resolution (#​35729)
  • fix(ext/node): allow adopting inherited extra stdio TCP fds (#​35805)
  • fix(ext/node): don't panic when main module path has invalid percent-encoding
    (#​35534)
  • fix(ext/node): don't schedule a pause in inspector.waitForDebugger() (#​35796)
  • fix(ext/node): flush StringDecoder in cipher final() for stream ciphers
    (#​35800)
  • fix(ext/node): mark TLSWrap dead on teardown before tls_conn check (#​35706)
  • fix(ext/node): report all active resources from process.getActiveResourcesInfo
    (#​35532)
  • fix(ext/node): require --allow-net=unix for node:net unix sockets (#​35835)
  • fix(ext/node): support fd 3 pipes in spawned Deno children (#​34133)
  • fix(ext/signals): unregister handler when SignalStream is dropped (#​35832)
  • fix(ext/web): resolve pending BYOB read when teeing a byte stream that closes
    (#​35828)
  • fix(fmt): format Astro inline scripts as TypeScript (#​35852)
  • fix(fs): support pre-1970 (negative) timestamps in FsStat (#​35517)
  • fix(inspector): close WebSocket connections when the runtime is torn down
    (#​35791)
  • fix(install): don't panic on jsr specifier with a tag like @​latest (#​35605)
  • fix(install): don't write through hardlinks when copying package files
    (#​35735)
  • fix(install): make setup cache packages hash deterministic (#​35825)
  • fix(install): resolve lifecycle script dependency bins against the hoisted
    layout (#​35762)
  • fix(install): support uninstalling multiple global packages (#​29352)
  • fix(lint): don't error on non-analyzable package exports like CSS files
    (#​35732)
  • fix(lint): include config file in workspace member invalid version error
    (#​35759)
  • fix(lsp): fix CPU busy loop by creating tokio runtime before JsRuntime in TSC
    thread (#​35595)
  • fix(node/fs): implement followSymlinks option for fs.glob() (#​35524)
  • fix(npm): don't re-fetch packuments on every run when registry has no time
    data (#​35834)
  • fix(npm): don't retain full npm exports value + fix --watch memory leak
    (#​35677)
  • fix(npm): widen node_modules lock staleness margin to avoid false preemption
    (#​35806)
  • fix(permissions): split comma-separated paths in --ignore-read (#​35661)
  • fix(test): run Node-API finalizers at test worker shutdown (#​35695)
  • fix(watch): accept watch paths in fmt/lint/bench --watch (#​35720)
  • fix(watch): execute preload modules under --watch (#​35792)
  • fix(watch): terminate on Ctrl+C while blocked in synchronous code (#​35826)
  • fix: enable rusqlite "fallible_uint" feature in workspace deps (#​35681)
  • perf(config): literal-suffix reject and prune irrelevant globs per base
    (#​35688)
  • perf(core): defer residual lazy source registration (#​35731)
  • perf(ext/fetch): stream wasm bytes to the compiler from Rust (#​35704)
  • perf(ext/node): remove per-chunk copying on TLSWrap data paths (#​35705)
  • perf(ext/node): zero-copy async Buffer writes on the stream_wrap path (#​35780)
  • perf(ext/web): identity pipeThrough writable bypass (#​35799)
  • perf(ext/web): persistent pump for the generic pipeTo loop (#​35813)
  • perf(ext/web): pump readableStreamCollectIntoUint8Array with a persistent read
    request (#​35790)
  • perf(ext/web): reduce per-chunk allocations on stream read and tee paths
    (#​35786)
  • perf(ext/web): reduce per-chunk overhead in Web Streams (#​35773)
  • perf(ext/web): run synchronous pull completion without a microtask hop
    (#​35788)
  • perf(ext/web): shared underlying-source algorithms, hoist resource-bridge read
    request (#​35810)
  • perf(ext/web): sync fast path for ReadableStream async iterator next()
    (#​35842)
  • perf(ext/web): synchronous transform fast path for TransformStream (#​35844)
  • perf(npm): index packuments with SIMD JSON scanner (#​35698)
  • perf(streams): offload resource-backed pipeTo to Rust via op_pipe (#​35689)
  • perf(workers): optimize message passing (#​35110)
  • perf(workers): return raw buffer from receive ops for no-transferable messages
    (#​35756)
  • perf: use V8 native queueMicrotask instead of op (#​35787)

v2.9.1

Compare Source

  • feat(check): add --desktop flag to type-check for deno desktop (#​35644)
  • feat(desktop): register deep-link URL schemes at bundle time (#​35466)
  • feat: update laufey to 0.5.0 (#​35663)
  • fix(bundle): emit CSSStyleSheet for CSS raw imports (#​35598)
  • fix(cache): skip checksums for cached 404 entries (#​35526)
  • fix(config): don't strip workspace-member includes from deploy config (#​34788)
  • fix(core): apply deferred fast-call op upgrade to the captured bootstrap clone
    (#​35630)
  • fix(core): prevent shared-buffer timer expiry race from losing timers (#​35312)
  • fix(desktop): default window title to app name instead of laufey_webview
    (#​35541)
  • fix(desktop): detect SvelteKit adapter-node and error on unsupported adapters
    (#​35533)
  • fix(desktop): discover deno.json in the project dir for deno desktop .
    (#​35660)
  • fix(desktop): don't delete user directories that collide with app name
    (#​35513)
  • fix(desktop): repair webview and raw backends on Windows (laufey v0.4.1)
    (#​35566)
  • fix(desktop): resolve launcher symlink so .deb/.rpm apps find the backend
    (#​35632)
  • fix(desktop): set LAUFEY_RUNTIME_PATH in Linux app launcher (#​35580)
  • fix(desktop): show macOS tray icon in bundled .app launched via Finder
    (#​35626)
  • fix(desktop): use zstd for appimage squashfs (#​35506)
  • fix(doc): strip blockquote > prefixes from JSDoc code blocks (#​34866)
  • fix(ext/fetch): include path and reason when fetching a file:// URL fails
    (#​35606)
  • fix(ext/node): check permissions when binding node:net unix sockets (#​35564)
  • fix(ext/node): export report as named export from node:process (#​35400)
  • fix(ext/node): mock.reset() should also reset MockTimers (#​35588)
  • fix(ext/node): pass Deno subcommands through child_process spawn (#​35599)
  • fix(ext/node): send TLS close_notify on JS stream-backed socket shutdown
    (#​35582)
  • fix(ext/node_sqlite): keep attach limit capped under scoped permissions
    (#​35232)
  • fix(ext/web): make URL and URLSearchParams non-serializable (#​35423)
  • fix(fmt): stable formatting of multi-line html/svg tagged templates (#​35540)
  • fix(inspector): support Chrome worker debugging (#​35629)
  • fix(install): pin pre-release npm versions added via dist-tag (#​35586)
  • fix(jupyter): register stdin peer only after ZMTP handshake completes (#​35585)
  • fix(lib): add PerformanceObserver and PerformanceObserverEntryList types
    (#​35640)
  • fix(libs/http): add missing write_flushed in
    poll_start_fixed_response_with (#​35649)
  • fix(lsp): watch .wasm files for changes (#​35560)
  • fix(node): load graph-backed TypeScript modules synchronously (#​35527)
  • fix(npm): decode percent-encoded subpath of npm specifiers (#​35505)
  • fix(npm): fall back for age-filtered npm dist-tags (#​35561)
  • fix(npm): normalize bin names with path separators (#​35555)
  • fix(npm): realpath npm bin main module (#​35554)
  • fix(npm): show scoped-registry auth hint on tarball 404 (#​35514)
  • fix(npm): use case-insensitive match for trust-policy-exclude (#​35520)
  • fix(rt_desktop): reveal initial window on first paint (startup black flash)
    (#​35620)
  • fix: correct property name for JSX new line configuration in schema file
    (#​35565)
  • fix: resolve LAUFEY_VERSION from crate-local Cargo.lock during publish
    (#​35507)
  • fix: show clear error when V8 fails to create worker threads (#​32856)
  • perf(core/webidl): check next method outside of iterator loop (#​35480)
  • perf(ext/fetch): fast-path Response reconstruction (#​35495)
  • perf(ext/http): coalesce chunked response writes into a single write (#​35523)

v2.9.0

Compare Source

Read more: http://deno.com/blog/v2.9

  • feat(bundle): add --declaration flag to generate rolled-up .d.ts files
    (#​33838)
  • feat(cli): add deno link and deno unlink subcommands (#​34359)
  • feat(cli): add deno watch subcommand (#​35301)
  • feat(cli): add deno list subcommand to list declared dependencies (#​34972)
  • feat(cli): auto-migrate pnpm-workspace.yaml on resolution failure (#​34993)
  • feat(cli): provide a node on PATH when Node.js is not installed (#​34969)
  • feat(compile): persist Web Storage/KV in a per-app data directory (#​34618)
  • feat(coverage): add configurable coverage thresholds (#​35056)
  • feat(desktop): --compress for self-extracting app bundles (#​35420)
  • feat(desktop): add Linux .deb and .rpm installer output formats (#​35296)
  • feat(desktop): add Windows .msi installer output format (#​35378)
  • feat(desktop): autodetect Vite framework (#​35470)
  • feat(desktop): default UI backend to webview (#​35442)
  • feat(ext/crypto): support remaining modern WebCrypto algorithms (#​35223)
  • feat(ext/http): deprecation warning for legacy request abort (#​34397)
  • feat(ext/net): implement Happy Eyeballs for Deno.connect and
    Deno.connectTls (#​31726)
  • feat(ext/node): implement node:test mock.module (#​35329)
  • feat(ext/node): implement node:test mock.timers (#​33946)
  • feat(ext/web): web locks api (#​31166)
  • feat(fmt): add sortNamedImports and sortNamedExports options (#​33313)
  • feat(fmt): infer config from .editorconfig (#​34071)
  • feat(fmt): use lax-css for CSS, SCSS, and Less (#​35160)
  • feat(fmt): use lax-markup for HTML, XML, SVG, and components ([#​35174](https://redirect.gi

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.7.3chore(deps): update dependency deno to v2.7.4Mar 5, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch 5 times, most recently from 906567b to f63f10fCompareMarch 11, 2026 13:39
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.7.4chore(deps): update dependency deno to v2.7.5Mar 11, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch from f63f10f to f46c778CompareMarch 18, 2026 12:36
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.7.5chore(deps): update dependency deno to v2.7.6Mar 18, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch from f46c778 to 62b45e6CompareMarch 19, 2026 17:56
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.7.6chore(deps): update dependency deno to v2.7.7Mar 19, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch from 62b45e6 to f45b439CompareMarch 20, 2026 21:39
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.7.7chore(deps): update dependency deno to v2.7.8Mar 25, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch 2 times, most recently from a4f65a8 to 314e963CompareMarch 27, 2026 13:13
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.7.8chore(deps): update dependency deno to v2.7.9Mar 27, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch from 314e963 to 12f833cCompareMarch 31, 2026 20:45
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.7.9chore(deps): update dependency deno to v2.7.10Mar 31, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch 3 times, most recently from 85f743e to 91c4835CompareApril 4, 2026 09:12
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.7.10chore(deps): update dependency deno to v2.7.11Apr 4, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch from 91c4835 to fd15c1fCompareApril 10, 2026 01:55
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.7.11chore(deps): update dependency deno to v2.7.12Apr 10, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch 2 times, most recently from 5683292 to b4efd08CompareApril 12, 2026 09:55
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch 3 times, most recently from 1a1eb22 to 95cdc65CompareApril 22, 2026 18:08
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.7.12chore(deps): update dependency deno to v2.7.13Apr 22, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch 2 times, most recently from 5764cc4 to 694818bCompareMay 17, 2026 16:59
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch 2 times, most recently from d85b44b to 4e3fd3eCompareMay 28, 2026 19:03
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.7.14chore(deps): update dependency deno to v2.8.1May 28, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch from 4e3fd3e to 7920c67CompareMay 30, 2026 05:30
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.8.1chore(deps): update deno monorepo to v2.8.1Jun 2, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch from 7920c67 to e5b5cc9CompareJune 3, 2026 14:41
@renovaterenovateBot changed the title chore(deps): update deno monorepo to v2.8.1chore(deps): update deno monorepo to v2.8.2Jun 3, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch 4 times, most recently from dedcb9d to f647f79CompareJune 11, 2026 04:48
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch from f647f79 to 6c55738CompareJune 12, 2026 00:54
@renovaterenovateBot changed the title chore(deps): update deno monorepo to v2.8.2chore(deps): update deno monorepo to v2.8.3Jun 12, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch 2 times, most recently from fa2f4ac to a39b68bCompareJune 18, 2026 22:51
@renovaterenovateBot changed the title chore(deps): update deno monorepo to v2.8.3chore(deps): update deno monorepoJun 22, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch 2 times, most recently from 13b132f to e6e2547CompareJune 23, 2026 19:31
@renovaterenovateBot changed the title chore(deps): update deno monorepochore(deps): update dependency deno to v2.8.3Jun 25, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch from e6e2547 to 895a0bbCompareJune 25, 2026 18:49
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.8.3chore(deps): update dependency deno to v2.9.0Jun 25, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch from 895a0bb to 5fb112cCompareJune 27, 2026 02:14
@renovaterenovateBot changed the title chore(deps): update dependency deno to v2.9.0chore(deps): update dependency deno to v2.9.1Jul 2, 2026
@renovate
renovateBotforce-pushed the renovate/deno-monorepo branch 4 times, most recently from 56218c8 to 5798b64CompareJuly 8, 2026 19:59
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@w3nl
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
chore(deps): update dependency deno to v2.9.6 - #489
Open
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Open
chore(deps): update dependency deno to v2.9.6#489
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Conversation
@renovate
@renovaterenovateBot
commented
Mar 4, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
ℹ️ Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
PackageChangeAgeConfidence
deno (source)2.7.1 → 2.9.6ageconfidence
Release Notes
denoland/deno (deno)
v2.9.6
Compare Source
  • feat(compressible): add support for 'text/x-component' content type (#​36450)
  • feat(desktop): clipboard api (#​35750)
  • feat(desktop): support checked, icon, and tooltip on menu items (#​36649)
  • fix(bundle): isolate esbuild downloads from workspace registries (#​36467)
  • fix(cache): combine duplicate headers for Vary matching (#​36476)
  • fix(cli_parser): remove orphaned sync-types parser
  • fix(core): cap adaptive buffer initial allocations (#​36432)
  • fix(core): make Unix pipe fd ownership explicit (#​36353)
  • fix(core): make user timer waker state thread-safe (#​36495)
  • fix(coverage): compare a range against a line in V8's units (#​36613)
  • fix(crypto): preserve RSA-OAEP label bytes (#​36441)
  • fix(desktop): keep dots in the app name when resolving the runtime library
    
(#​36006)
  • fix(desktop): keep the macOS bundle signature valid unless an update is
    
applied (#​36574)
  • fix(desktop): never block the JS thread on the error-report dialog (#​36575)
  • fix(desktop): propagate deno.json version and license into packaged installers
    
(#​36577)
  • fix(desktop): run Vite-based HMR dev servers inside the desktop runtime
    
(#​36488)
  • fix(desktop): transport binding args and results as DesktopValue so Uint8Array
    
survives (#​36573)
  • fix(ext/fetch): enforce permissions for proxy transports (#​36217)
  • fix(ext/fetch): only retry transport errors on pooled connections (#​36415)
  • fix(ext/fetch): raise default HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE to 256KB
    
(#​36558)
  • fix(ext/http): keep request body readable after response is sent (#​36629)
  • fix(ext/http): route invalid async responses to onError (#​36437)
  • fix(ext/napi): don't invoke napi_wrap finalizer twice at teardown (#​36556)
  • fix(ext/napi): run JS-calling finalizers safely, NULL string result, and
    
Float16Array (#​36572)
  • fix(ext/napi): surface OS error and path on addon load failure (#​36630)
  • fix(ext/napi): track pending finalizers by identity (#​36551)
  • fix(ext/napi): wake the event loop at the next uv_timer deadline (#​36559)
  • fix(ext/net): skip unsupported DNS records in ANY queries (#​36650)
  • fix(ext/node): accept string ports in dns.lookupService (#​36546)
  • fix(ext/node): build the proxied request target with the URL parser (#​36557)
  • fix(ext/node): do not resume client TLS sessions unless requested (#​36592)
  • fix(ext/node): fix perf_hooks detail.req.url proxied path duplication (#​36407)
  • fix(ext/node): handle readv short reads (#​36211)
  • fix(ext/node): require sys permission for inspector.open (#​36465)
  • fix(ext/node_sqlite): invalidate sessions on database close (#​36633)
  • fix(ext/tls): avoid panic for mismatched client certificate and key (#​36457)
  • fix(ext/web): clean up abort handlers when listeners are removed (#​36226)
  • fix(ext/web): close transfer MessagePort when a transferred readable is
    
cancelled (#​36270)
  • fix(ext/web): snapshot SharedArrayBuffer input in TextDecoder.decode()
    
(#​36611)
  • fix(fetch): require an initial multipart boundary (#​36470)
  • fix(ffi): validate struct return buffers (#​36373)
  • fix(fmt): honor .editorconfig when formatting from stdin (#​36267)
  • fix(fs): require write permission for creating opens (#​36497)
  • fix(fs): use a private FsFile constructor token (#​36439)
  • fix(glob): retain valid gitignore rules after parse errors (#​36478)
  • fix(http): preserve keep-alive after reading request body (#​36690)
  • fix(http): truncate streaming responses to content length (#​36496)
  • fix(lsp): restrict registry completion endpoint schemes (#​36477)
  • fix(node): check reads during require resolution (#​36461)
  • fix(node): match domain uncaught exception handling (#​36475)
  • fix(node): preserve v8 deserializer view offsets (#​36460)
  • fix(node): validate Brotli encoder operations (#​36530)
  • fix(node): validate raw outgoing HTTP headers (#​36471)
  • fix(node/crypto): preserve binary key export passphrases (#​36443)
  • fix(node_crypto): apply RFC 7748 scalar decoding for X448 (#​36466)
  • fix(node_crypto): size cipher updates by byte length (#​36459)
  • fix(node_shim): preserve explicit argument delimiters (#​36435)
  • fix(npm): flatten single-resolution peers when building package ids (#​36608)
  • fix(npm): match peer fallbacks when checking peer resolution cache (#​36607)
  • fix(npm): remove arrayref dependency (#​36653)
  • fix(npm): resolve bare npm specifier when latest is too new for min dependency
    
age (#​36619)
  • fix(npm): use cached abbreviated metadata under --cached-only (#​36526)
  • fix(npm): validate tar paths before extraction (#​36468)
  • fix(os): serialize process environment updates (#​36074)
  • fix(permissions): check resolved IP against import deny list (#​36486)
  • fix(process): reject NULs in Windows arguments (#​36436)
  • fix(process): validate whitespace-only loader environment values (#​36431)
  • fix(publish): authenticate the package existence check so private packages
    
work (#​36656)
  • fix(publish): memoize publish order depth (#​36215)
  • fix(publish): reject invalid JSR package names (#​36474)
  • fix(repl): skip regex literals when validating input (#​36375)
  • fix(runtime): unregister dropped signal resources (#​36213)
  • fix(web): keep MessagePort resource identifiers private (#​36440)
  • fix: bugs in primordials related to ObjectCreate and
    ObjectDefineProperties (#​36541)
  • fix: prevent threadpool starvation with concurrent file locks (#​32789)
  • perf(core): grow the op driver's future arena on demand (#​36678)
  • perf(core): uncontended-borrow fast path for AsyncRefCell (#​36679)
  • perf(core): use index-based SafeArrayIterator in primordials (#​36543)
  • perf(core): zero-copy snapshot rehydration, drop bincode (#​36680)
  • perf(ext/web): apply the base64url op design to standard base64 (#​36422)
  • perf(ext/websocket): shrink the op_ws_create future (#​36681)
v2.9.5
Compare Source
  • feat(add): --unscoped flag to alias packages by their unscoped name (#​36319)
  • feat(task): add --members flag to run tasks in workspace members only (#​35748)
  • feat: add Blob/Body textStream() (#​35616)
  • feat: add experimental QuickJS backend (#​36194)
  • fix(bundle): avoid esbuild protocol deadlock (#​36427)
  • fix(bundle): respect runtime file permissions (#​36107)
  • fix(cjs): use loader sources for recursive analysis (#​36111)
  • fix(cli): escape control characters in external metadata (#​36198)
  • fix(core): don't resolve internal module imports with the user's import map
    
(#​36303)
  • fix(crypto): add "raw-secret" to KeyFormat type (#​35708)
  • fix(desktop): handle colored HMR URLs and page loads (#​36316)
  • fix(desktop): retain update signature verification op (#​36152)
  • fix(ext/crypto): allow deriveBits with length 0 (#​36283)
  • fix(ext/napi): polyfill uv_handle_size and uv_strerror (#​36308)
  • fix(ext/net): release completed QUIC stream resources (#​36247)
  • fix(ext/net): require --allow-sys for node:dns.getServers() (#​35941)
  • fix(ext/node): Node compat for web streams (#​36285)
  • fix(ext/node): apply backpressure in Readable.toWeb() (#​36321)
  • fix(ext/node): defer TLS write completion callback to avoid reentrancy panic
    
(#​35867)
  • fix(ext/node): don't fire http2 settings callback after session destroy
    
(#​36230)
  • fix(ext/node): gate constrained memory cgroup reads (#​36218)
  • fix(ext/node): handle pre-quoted shell arguments (#​36371)
  • fix(ext/node): implement node:test tags (#​36292)
  • fix(ext/node): implement util.diff (#​36289)
  • fix(ext/node): implement v8.promiseHooks API (#​36281)
  • fix(ext/node): sort fs.readdir entries to match Node.js (#​36341)
  • fix(ext/node): stop http2 file reads after stream close (#​36300)
  • fix(ext/node): store blocklist ranges compactly (#​36212)
  • fix(ext/node): support the fs flush option for writes (#​36290)
  • fix(ext/node): use signatureAlgorithm digest for X509 ECDSA verify (#​36326)
  • fix(ext/node_crypto): use named group exponent sizes (#​36347)
  • fix(ext/web): attach Node error codes to WHATWG API validation errors (#​36288)
  • fix(ext/websocket): disable HTTP/2 server push on wss upgrade path (#​36327)
  • fix(fetch): scope redirect-sensitive headers by origin (#​36361)
  • fix(ffi): reject resizable buffers in nonblocking calls (#​36259)
  • fix(fmt): accept xml and svg extensions for stdin (#​36149)
  • fix(fmt): update lax-markup to 0.3.2, lax-css and lax-sql to 0.3.0 (#​36397)
  • fix(http): preserve stripped headers across redirects (#​36360)
  • fix(inspector): validate request host headers (#​36348)
  • fix(net): cancel pending writes on stream close (#​36369)
  • fix(net): clean up concurrently dropped load-balanced listeners (#​36246)
  • fix(net): handle malformed DNS record text (#​36374)
  • fix(node): clean up Web Stream finished listeners (#​36227)
  • fix(node): retain consumed HTTP stream wrapper (#​36254)
  • fix(npm): ignore invalid package bin targets (#​36354)
  • fix(npm): tolerate malformed scripts field in packuments (#​36324)
  • fix(npmrc): match auth configs by authority and path (#​36359)
  • fix(outdated): don't report JSR pre-release versions as latest (#​36325)
  • fix(publish): report when the registry rejects a provenance attestation
    
(#​36404)
  • fix(resolver): don't treat deno eval modules as npm package files (#​36304)
  • fix(runtime): map notify's Windows missing-path error to NotFound (#​35864)
  • fix(sync-types): add reason to too_many_arguments allows (lint)
  • fix(telemetry): handle reentrant attribute conversion (#​36256)
  • fix(webgpu): own mapped range backing stores (#​36257)
  • fix(webstorage): preserve Storage constructor name (#​35944)
  • fix: capitalize IP in help text (#​36170)
  • fix: upgrade deno_task_shell to 0.33.3 (#​36406)
  • fix: wire no-legacy-abort unstable flag from deno.json config (#​36312)
  • perf(core): run the common-path tick drain in Rust (#​36157)
  • perf(ext/node): bypass dns lookup on literal IPs in udp send (#​35909)
  • perf(ext/web): implement base64url encode/decode as simdutf ops (#​36398)
  • perf(fs): open files on the blocking pool in async readFile/writeFile (#​36160)
  • perf: order startup functions in release builds (#​36219)
  • perf: reduce eager module evaluation at startup (#​36331)
  • perf: remove Linux unwind tables from release artifacts (#​36265)
v2.9.4
Compare Source
  • feat(desktop): enable --hmr for React Router (#​35900)
  • feat(ext/node): add a byteLength/length parameter to
    
Buffer.indexOf/lastIndexOf/includes (#​35872)
  • feat(ext/node): support raw chacha20 cipher in crypto.createCipheriv (#​36016)
  • feat: upgrade V8 to 150.2.0 (#​36098)
  • fix(add): support --minimum-dependency-age flag in deno add/remove (#​36099)
  • fix(cache): store Web Cache under origin data (#​36145)
  • fix(canvas): require FFI permission for native window handles (#​36080)
  • fix(clean): reject symlinked node_modules cleanup roots (#​36190)
  • fix(compile): bump libsui to 0.16.4 to fix Windows resource SizeOfImage
    
(#​36242)
  • fix(core): allow dynamic imports during cached module evaluation (#​36258)
  • fix(core): bound error graph conversion (#​36070)
  • fix(core): enforce JSON requests in FsModuleLoader (#​36137)
  • fix(core): handle malformed error constructors (#​36071)
  • fix(core): stop rejected dynamic imports before loading (#​36136)
  • fix(desktop): make BrowserWindow bindings typeable (#​35907)
  • fix(desktop): preserve binding wrappers after lazy op upgrade (#​36065)
  • fix(desktop): strip runtime extension from app name (#​36060)
  • fix(ext/napi): cancel async sends after close (#​36077)
  • fix(ext/napi): scope callback info per invocation (#​36076)
  • fix(ext/node): apply backpressure to http2 stream writes (#​36044)
  • fix(ext/node): don't leave 0-byte .heapsnapshot files near the heap limit
    
(#​36113)
  • fix(ext/node): implement worker_threads.locks via Web Locks (#​35963)
  • fix(ext/node): node:sqlite backup() and deserialize() argument validation
    
(#​36127)
  • fix(ext/node): retry DNS query when its per-attempt timeout fires (#​35955)
  • fix(ext/node): stop http2 file reads on stream close (#​36061)
  • fix(ext/web): handle failed webtransport datagram setup (#​36067)
  • fix(ext/webidl): implement async_sequence for ReadableStream.from (#​35976)
  • fix(fetch): bound multipart part headers (#​36096)
  • fix(fmt): keep embedded CSS custom property indentation stable (#​35949)
  • fix(fs): require sys permission for umask (#​36222)
  • fix(http): preserve trust proxy environment setting (#​36073)
  • fix(init): validate temporary node_modules parent (#​36142)
  • fix(jupyter): report codemirror_mode as a string (#​36241)
  • fix(loader): reject non-JSON modules for JSON imports (#​36135)
  • fix(napi): synchronize external string finalizers (#​36078)
  • fix(net): clean up cancellation resources on early errors (#​36229)
  • fix(net): limit WebTransport handshake frame buffering (#​36068)
  • fix(node_http2): clean up destroyed sessions (#​36043)
  • fix(node_resolver): handle CJS filesystem path edge cases (#​36112)
  • fix(node_stream): handle Web Stream adapter errors (#​36193)
  • fix(npm): avoid following lock poll symlinks (#​36192)
  • fix(npm): download tarballs from the configured registry instead of
    
registry.npmjs.org (#​36187)
  • fix(npm): reject symlinked package materialization dirs (#​36191)
  • fix(outdated): keep type-only dependencies in the lockfile (#​36140)
  • fix(pack): support file paths longer than the tar name field (#​36105)
  • fix(permissions): escape bidi controls in prompts (#​36195)
  • fix(process): avoid collisions in Windows stdio pipe names (#​36081)
  • fix(publish): constrain generated source rewrites (#​36109)
  • fix(release): insert into versions.json in semver order (#​36097)
  • fix(rt): isolate extracted native addons (#​36144)
  • fix(runtime): bridge console to the inspector regardless of --inspect flag
    
(#​35795)
  • fix(runtime): give worker isolate threads the stack size we report (#​36114)
  • fix(test): escape control characters in test names (#​36196)
  • fix(tests): make npm test registry tolerate a bad advisories request body
    
(#​36138)
  • fix(tls): resolve sni requests concurrently (#​36062)
  • fix(update): don't downgrade lockfile when npm cache is stale (#​35904)
  • fix(webtransport): avoid url parse panic (#​36066)
  • fix(webtransport): validate certificate dates (#​36069)
  • fix(x): honor --minimum-dependency-age and deno.json minimumDependencyAge
    
(#​36025)
  • fix: discover config file for jsr: entrypoints (#​35838)
  • fix: handle UTF-16 diagnostic columns (#​36028)
  • perf(core): avoid duplicating lazy ESM snapshot sources (#​36262)
  • perf(snapshot): mangle internal source identifiers (#​36263)
  • perf: compress bundled AppImage runtimes (#​36261)
  • perf: use FxHash for hot internal hash maps (#​36100)
v2.9.3
Compare Source
  • feat(cli): deno add --no-save and --save-optional (#​36039)
  • feat(cli): add --min-dep-age alias (#​35914)
  • feat(compile): support aarch64-pc-windows-msvc target (#​36004)
  • feat(ext/fetch): add http2MaxHeaderListSize option to
    Deno.createHttpClient (#​33194)
  • fix(bundle): preserve raw imports in watch mode (#​36040)
  • fix(canvas): don't hold SurfaceData mut borrow over window resize (#​35993)
  • fix(config): reject out-of-range minimum dependency ages (#​36051)
  • fix(core): block user ext imports after resolution (#​36012)
  • fix(core): deactivate idle TTY write handles (#​35886)
  • fix(core): restrict extension loaders to internal modules (#​36013)
  • fix(core): root slow op string coercions (#​36018)
  • fix(desktop): don't let op_desktop_send_error_report target caller-supplied
    
URLs (#​35940)
  • fix(ext/http): don't panic recycling cancelled record on native response
    
(#​36053)
  • fix(ext/napi): don't free threadsafe function on abort while refs remain
    
(#​36032)
  • fix(ext/napi): don't resurrect a released threadsafe function in acquire
    
(#​36054)
  • fix(ext/node): add deprecation warning for Duplex.toWeb({ type }) DEP0201
    
(#​35972)
  • fix(ext/node): guard sqlite deserialize during callbacks (#​36023)
  • fix(ext/node): handle UTF-16 assert source positions (#​36029)
  • fix(ext/node): handle sqlite conversion failures (#​36024)
  • fix(ext/node): respect base64 buffer ranges (#​36030)
  • fix(ext/process): don't double-close extra stdio pipe handles on Windows
    
(#​36005)
  • fix(lsp): respect lint rule exclusion for no-slow-types diagnostics (#​35924)
  • fix(node): stop active read on stream close to avoid leaking Socket/TCPWrap
    
(#​35898)
  • fix(node_http2): keep header validation enabled (#​36042)
  • fix(node_http2): validate serialized headers (#​36041)
  • fix(npm): don't fetch registry info for deprecated packages under
    
--cached-only (#​35903)
  • fix(npm): normalize path in BYONM read permission check (#​35882)
  • fix(pm): hint about minimumDependencyAge when no version is old enough
    
(#​35890)
  • fix(release): only strip Mach-O signature for x86_64-apple-darwin (#​35902)
  • fix(release): strip Mach-O signature before patchver on apple targets (#​35897)
  • fix(runtime): guard usage op output buffers (#​36020)
  • fix(serde_v8): handle deserialization exceptions (#​36021)
  • fix(web): guard encodeInto fallback result buffer (#​36019)
  • fix(web): support Event subclasses with readonly toStringTag (#​35920)
  • fix(worker): remove imported ops during bootstrap (#​36014)
  • fix: don't print duplicate parse diagnostics (#​35933)
  • perf(ext/crypto): batch randomUUID generation (#​35953)
  • perf(ext/fetch): remove quadratic line buffering in EventSource (#​35881)
  • perf(ext/node): cache compiled glob matchers + bump bundled minimatch to
    
10.2.5 (#​35873)
  • perf(ext/node): fast path fs cp (#​35856)
  • perf(ext/node): right-size small socket reads instead of pinning the 64KB slab
    
(#​35779)
  • perf(ext/node): speed up sqlite.StatementSync.all() and run() (#​35863)
  • perf(ext/web): avoid copy-back in op_base64_atob large path (#​35862)
v2.9.2
Compare Source
  • feat(desktop): autodetect React Router framework (#​35557)
  • feat(desktop): enable --hmr for Vite and Nuxt (#​35851)
  • feat(desktop): run HMR by framework dev server (#​35722)
  • feat(desktop): window opacity and transparency APIs (#​35646)
  • feat(desktop): wire --exclude-unused-npm through to compile (#​35740)
  • feat(ext/node): implement v8.setHeapSnapshotNearHeapLimit (#​35694)
  • feat(ext/telemetry): honor OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT (#​35068)
  • feat(inspector): start inspector server on SIGUSR1 (#​35738)
  • feat(node): implement getTestContext() in node:test (#​35678)
  • feat: support wildcard patterns in minimumDependencyAge.exclude (#​35746)
  • fix(check): don't interleave errors with "Check" lines in a workspace (#​35687)
  • fix(compile): bump libsui to 0.16.1 to survive eu-strip in flatpak (#​35699)
  • fix(compile): bump libsui to 0.16.3 to fix segfault under gVisor/Cloud Run
    
(#​35701)
  • fix(core): don't drain microtasks in mod_evaluate_sync mid-evaluation (#​35707)
  • fix(coverage): count a branch-junction line as covered when either arm runs
    
(#​35858)
  • fix(coverage): don't count V8 block-boundary gaps as branches (#​35767)
  • fix(coverage): don't let a trailing comment change a line's hit count (#​35741)
  • fix(deploy): disable config discovery and refresh the cached CLI version
    
(#​35754)
  • fix(desktop): attribute bind calls to the registering window id (#​35654)
  • fix(desktop): honor desktop.backend from deno.json (#​35815
  • fix(desktop): pin @​std/http in generated Vite SPA entrypoint + add hermetic
    
compile test (#​35676)
  • fix(desktop): rename launcher to so it self-loads the runtime (#​35709)
  • fix(desktop): run framework build step before bundling output (#​35603)
  • fix(desktop): surface compiled-app startup errors instead of exiting silently
    
(#​35567)
  • fix(dprint): exclude tools/lzld submodule (#​35778)
  • fix(ext): throw DataCloneError when posting non-serializable values (#​35604)
  • fix(ext/cache): implement Cache.keys() (#​35455)
  • fix(ext/fetch): reject transport failures with Node's "fetch failed" shape
    
(#​35618)
  • fix(ext/http): error non-Uint8Array response streams (#​35783)
  • fix(ext/http): honor explicit content-length header on HEAD responses (#​35728)
  • fix(ext/http): point legacy abort warning at docs.deno.com/go link (#​35713)
  • fix(ext/napi): add uv_cond_* polyfills for native addons (#​35536)
  • fix(ext/net): abort pending Deno.connect during DNS resolution (#​35729)
  • fix(ext/node): allow adopting inherited extra stdio TCP fds (#​35805)
  • fix(ext/node): don't panic when main module path has invalid percent-encoding
    
(#​35534)
  • fix(ext/node): don't schedule a pause in inspector.waitForDebugger() (#​35796)
  • fix(ext/node): flush StringDecoder in cipher final() for stream ciphers
    
(#​35800)
  • fix(ext/node): mark TLSWrap dead on teardown before tls_conn check (#​35706)
  • fix(ext/node): report all active resources from process.getActiveResourcesInfo
    
(#​35532)
  • fix(ext/node): require --allow-net=unix for node:net unix sockets (#​35835)
  • fix(ext/node): support fd 3 pipes in spawned Deno children (#​34133)
  • fix(ext/signals): unregister handler when SignalStream is dropped (#​35832)
  • fix(ext/web): resolve pending BYOB read when teeing a byte stream that closes
    
(#​35828)
  • fix(fmt): format Astro inline scripts as TypeScript (#​35852)
  • fix(fs): support pre-1970 (negative) timestamps in FsStat (#​35517)
  • fix(inspector): close WebSocket connections when the runtime is torn down
    
(#​35791)
  • fix(install): don't panic on jsr specifier with a tag like @​latest (#​35605)
  • fix(install): don't write through hardlinks when copying package files
    
(#​35735)
  • fix(install): make setup cache packages hash deterministic (#​35825)
  • fix(install): resolve lifecycle script dependency bins against the hoisted
    
layout (#​35762)
  • fix(install): support uninstalling multiple global packages (#​29352)
  • fix(lint): don't error on non-analyzable package exports like CSS files
    
(#​35732)
  • fix(lint): include config file in workspace member invalid version error
    
(#​35759)
  • fix(lsp): fix CPU busy loop by creating tokio runtime before JsRuntime in TSC
    
thread (#​35595)
  • fix(node/fs): implement followSymlinks option for fs.glob() (#​35524)
  • fix(npm): don't re-fetch packuments on every run when registry has no time
    
data (#​35834)
  • fix(npm): don't retain full npm exports value + fix --watch memory leak
    
(#​35677)
  • fix(npm): widen node_modules lock staleness margin to avoid false preemption
    
(#​35806)
  • fix(permissions): split comma-separated paths in --ignore-read (#​35661)
  • fix(test): run Node-API finalizers at test worker shutdown (#​35695)
  • fix(watch): accept watch paths in fmt/lint/bench --watch (#​35720)
  • fix(watch): execute preload modules under --watch (#​35792)
  • fix(watch): terminate on Ctrl+C while blocked in synchronous code (#​35826)
  • fix: enable rusqlite "fallible_uint" feature in workspace deps (#​35681)
  • perf(config): literal-suffix reject and prune irrelevant globs per base
    
(#​35688)
  • perf(core): defer residual lazy source registration (#​35731)
  • perf(ext/fetch): stream wasm bytes to the compiler from Rust (#​35704)
  • perf(ext/node): remove per-chunk copying on TLSWrap data paths (#​35705)
  • perf(ext/node): zero-copy async Buffer writes on the stream_wrap path (#​35780)
  • perf(ext/web): identity pipeThrough writable bypass (#​35799)
  • perf(ext/web): persistent pump for the generic pipeTo loop (#​35813)
  • perf(ext/web): pump readableStreamCollectIntoUint8Array with a persistent read
    
request (#​35790)
  • perf(ext/web): reduce per-chunk allocations on stream read and tee paths
    
(#​35786)
  • perf(ext/web): reduce per-chunk overhead in Web Streams (#​35773)
  • perf(ext/web): run synchronous pull completion without a microtask hop
    
(#​35788)
  • perf(ext/web): shared underlying-source algorithms, hoist resource-bridge read
    
request (#​35810)
  • perf(ext/web): sync fast path for ReadableStream async iterator next()
    
(#​35842)
  • perf(ext/web): synchronous transform fast path for TransformStream (#​35844)
  • perf(npm): index packuments with SIMD JSON scanner (#​35698)
  • perf(streams): offload resource-backed pipeTo to Rust via op_pipe (#​35689)
  • perf(workers): optimize message passing (#​35110)
  • perf(workers): return raw buffer from receive ops for no-transferable messages
    
(#​35756)
  • perf: use V8 native queueMicrotask instead of op (#​35787)
v2.9.1
Compare Source
  • feat(check): add --desktop flag to type-check for deno desktop (#​35644)
  • feat(desktop): register deep-link URL schemes at bundle time (#​35466)
  • feat: update laufey to 0.5.0 (#​35663)
  • fix(bundle): emit CSSStyleSheet for CSS raw imports (#​35598)
  • fix(cache): skip checksums for cached 404 entries (#​35526)
  • fix(config): don't strip workspace-member includes from deploy config (#​34788)
  • fix(core): apply deferred fast-call op upgrade to the captured bootstrap clone
    
(#​35630)
  • fix(core): prevent shared-buffer timer expiry race from losing timers (#​35312)
  • fix(desktop): default window title to app name instead of laufey_webview
    
(#​35541)
  • fix(desktop): detect SvelteKit adapter-node and error on unsupported adapters
    
(#​35533)
  • fix(desktop): discover deno.json in the project dir for deno desktop .
    
(#​35660)
  • fix(desktop): don't delete user directories that collide with app name
    
(#​35513)
  • fix(desktop): repair webview and raw backends on Windows (laufey v0.4.1)
    
(#​35566)
  • fix(desktop): resolve launcher symlink so .deb/.rpm apps find the backend
    
(#​35632)
  • fix(desktop): set LAUFEY_RUNTIME_PATH in Linux app launcher (#​35580)
  • fix(desktop): show macOS tray icon in bundled .app launched via Finder
    
(#​35626)
  • fix(desktop): use zstd for appimage squashfs (#​35506)
  • fix(doc): strip blockquote > prefixes from JSDoc code blocks (#​34866)
  • fix(ext/fetch): include path and reason when fetching a file:// URL fails
    
(#​35606)
  • fix(ext/node): check permissions when binding node:net unix sockets (#​35564)
  • fix(ext/node): export report as named export from node:process (#​35400)
  • fix(ext/node): mock.reset() should also reset MockTimers (#​35588)
  • fix(ext/node): pass Deno subcommands through child_process spawn (#​35599)
  • fix(ext/node): send TLS close_notify on JS stream-backed socket shutdown
    
(#​35582)
  • fix(ext/node_sqlite): keep attach limit capped under scoped permissions
    
(#​35232)
  • fix(ext/web): make URL and URLSearchParams non-serializable (#​35423)
  • fix(fmt): stable formatting of multi-line html/svg tagged templates (#​35540)
  • fix(inspector): support Chrome worker debugging (#​35629)
  • fix(install): pin pre-release npm versions added via dist-tag (#​35586)
  • fix(jupyter): register stdin peer only after ZMTP handshake completes (#​35585)
  • fix(lib): add PerformanceObserver and PerformanceObserverEntryList types
    
(#​35640)
  • fix(libs/http): add missing write_flushed in
    poll_start_fixed_response_with (#​35649)
  • fix(lsp): watch .wasm files for changes (#​35560)
  • fix(node): load graph-backed TypeScript modules synchronously (#​35527)
  • fix(npm): decode percent-encoded subpath of npm specifiers (#​35505)
  • fix(npm): fall back for age-filtered npm dist-tags (#​35561)
  • fix(npm): normalize bin names with path separators (#​35555)
  • fix(npm): realpath npm bin main module (#​35554)
  • fix(npm): show scoped-registry auth hint on tarball 404 (#​35514)
  • fix(npm): use case-insensitive match for trust-policy-exclude (#​35520)
  • fix(rt_desktop): reveal initial window on first paint (startup black flash)
    
(#​35620)
  • fix: correct property name for JSX new line configuration in schema file
    
(#​35565)
  • fix: resolve LAUFEY_VERSION from crate-local Cargo.lock during publish
    
(#​35507)
  • fix: show clear error when V8 fails to create worker threads (#​32856)
  • perf(core/webidl): check next method outside of iterator loop (#​35480)
  • perf(ext/fetch): fast-path Response reconstruction (#​35495)
  • perf(ext/http): coalesce chunked response writes into a single write (#​35523)
v2.9.0
Compare Source
Read more: http://deno.com/blog/v2.9
  • feat(bundle): add --declaration flag to generate rolled-up .d.ts files
    
(#​33838)
  • feat(cli): add deno link and deno unlink subcommands (#​34359)
  • feat(cli): add deno watch subcommand (#​35301)
  • feat(cli): add deno list subcommand to list declared dependencies (#​34972)
  • feat(cli): auto-migrate pnpm-workspace.yaml on resolution failure (#​34993)
  • feat(cli): provide a node on PATH when Node.js is not installed (#​34969)
  • feat(compile): persist Web Storage/KV in a per-app data directory (#​34618)
  • feat(coverage): add configurable coverage thresholds (#​35056)
  • feat(desktop): --compress for self-extracting app bundles (#​35420)
  • feat(desktop): add Linux .deb and .rpm installer output formats (#​35296)
  • feat(desktop): add Windows .msi installer output format (#​35378)
  • feat(desktop): autodetect Vite framework (#​35470)
  • feat(desktop): default UI backend to webview (#​35442)
  • feat(ext/crypto): support remaining modern WebCrypto algorithms (#​35223)
  • feat(ext/http): deprecation warning for legacy request abort (#​34397)
  • feat(ext/net): implement Happy Eyeballs for Deno.connect and
    Deno.connectTls (#​31726)
  • feat(ext/node): implement node:test mock.module (#​35329)
  • feat(ext/node): implement node:test mock.timers (#​33946)
  • feat(ext/web): web locks api (#​31166)
  • feat(fmt): add sortNamedImports and sortNamedExports options (#​33313)
  • feat(fmt): infer config from .editorconfig (#​34071)
  • feat(fmt): use lax-css for CSS, SCSS, and Less (#​35160)
  • feat(fmt): use lax-markup for HTML, XML, SVG, and components ([#​35174](https://redirect.gi
✂ Note
PR body was truncated to here.
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.3chore(deps): update dependency deno to v2.7.4Mar 5, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
5 times, most recently
from
906567b to
f63f10fCompareMarch 11, 2026 13:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.4chore(deps): update dependency deno to v2.7.5Mar 11, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f63f10f to
f46c778CompareMarch 18, 2026 12:36
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.5chore(deps): update dependency deno to v2.7.6Mar 18, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f46c778 to
62b45e6CompareMarch 19, 2026 17:56
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.6chore(deps): update dependency deno to v2.7.7Mar 19, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
62b45e6 to
f45b439CompareMarch 20, 2026 21:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.7chore(deps): update dependency deno to v2.7.8Mar 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
a4f65a8 to
314e963CompareMarch 27, 2026 13:13
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.8chore(deps): update dependency deno to v2.7.9Mar 27, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
314e963 to
12f833cCompareMarch 31, 2026 20:45
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.9chore(deps): update dependency deno to v2.7.10Mar 31, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
85f743e to
91c4835CompareApril 4, 2026 09:12
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.10chore(deps): update dependency deno to v2.7.11Apr 4, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
91c4835 to
fd15c1fCompareApril 10, 2026 01:55
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.11chore(deps): update dependency deno to v2.7.12Apr 10, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5683292 to
b4efd08CompareApril 12, 2026 09:55
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
1a1eb22 to
95cdc65CompareApril 22, 2026 18:08
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.12chore(deps): update dependency deno to v2.7.13Apr 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5764cc4 to
694818bCompareMay 17, 2026 16:59
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
d85b44b to
4e3fd3eCompareMay 28, 2026 19:03
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.14chore(deps): update dependency deno to v2.8.1May 28, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
4e3fd3e to
7920c67CompareMay 30, 2026 05:30
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.1chore(deps): update deno monorepo to v2.8.1Jun 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
7920c67 to
e5b5cc9CompareJune 3, 2026 14:41
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.1chore(deps): update deno monorepo to v2.8.2Jun 3, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
dedcb9d to
f647f79CompareJune 11, 2026 04:48
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f647f79 to
6c55738CompareJune 12, 2026 00:54
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.2chore(deps): update deno monorepo to v2.8.3Jun 12, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
fa2f4ac to
a39b68bCompareJune 18, 2026 22:51
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.3chore(deps): update deno monorepoJun 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
13b132f to
e6e2547CompareJune 23, 2026 19:31
@renovaterenovateBot
changed the title
chore(deps): update deno monorepochore(deps): update dependency deno to v2.8.3Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
e6e2547 to
895a0bbCompareJune 25, 2026 18:49
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.3chore(deps): update dependency deno to v2.9.0Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
895a0bb to
5fb112cCompareJune 27, 2026 02:14
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.9.0chore(deps): update dependency deno to v2.9.1Jul 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
56218c8 to
5798b64CompareJuly 8, 2026 19:59
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@w3nl

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
chore(deps): update dependency deno to v2.9.6 - #489
Open
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Open
chore(deps): update dependency deno to v2.9.6#489
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Conversation
@renovate
@renovaterenovateBot
commented
Mar 4, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
ℹ️ Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
PackageChangeAgeConfidence
deno (source)2.7.1 → 2.9.6ageconfidence
Release Notes
denoland/deno (deno)
v2.9.6
Compare Source
  • feat(compressible): add support for 'text/x-component' content type (#​36450)
  • feat(desktop): clipboard api (#​35750)
  • feat(desktop): support checked, icon, and tooltip on menu items (#​36649)
  • fix(bundle): isolate esbuild downloads from workspace registries (#​36467)
  • fix(cache): combine duplicate headers for Vary matching (#​36476)
  • fix(cli_parser): remove orphaned sync-types parser
  • fix(core): cap adaptive buffer initial allocations (#​36432)
  • fix(core): make Unix pipe fd ownership explicit (#​36353)
  • fix(core): make user timer waker state thread-safe (#​36495)
  • fix(coverage): compare a range against a line in V8's units (#​36613)
  • fix(crypto): preserve RSA-OAEP label bytes (#​36441)
  • fix(desktop): keep dots in the app name when resolving the runtime library
    
(#​36006)
  • fix(desktop): keep the macOS bundle signature valid unless an update is
    
applied (#​36574)
  • fix(desktop): never block the JS thread on the error-report dialog (#​36575)
  • fix(desktop): propagate deno.json version and license into packaged installers
    
(#​36577)
  • fix(desktop): run Vite-based HMR dev servers inside the desktop runtime
    
(#​36488)
  • fix(desktop): transport binding args and results as DesktopValue so Uint8Array
    
survives (#​36573)
  • fix(ext/fetch): enforce permissions for proxy transports (#​36217)
  • fix(ext/fetch): only retry transport errors on pooled connections (#​36415)
  • fix(ext/fetch): raise default HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE to 256KB
    
(#​36558)
  • fix(ext/http): keep request body readable after response is sent (#​36629)
  • fix(ext/http): route invalid async responses to onError (#​36437)
  • fix(ext/napi): don't invoke napi_wrap finalizer twice at teardown (#​36556)
  • fix(ext/napi): run JS-calling finalizers safely, NULL string result, and
    
Float16Array (#​36572)
  • fix(ext/napi): surface OS error and path on addon load failure (#​36630)
  • fix(ext/napi): track pending finalizers by identity (#​36551)
  • fix(ext/napi): wake the event loop at the next uv_timer deadline (#​36559)
  • fix(ext/net): skip unsupported DNS records in ANY queries (#​36650)
  • fix(ext/node): accept string ports in dns.lookupService (#​36546)
  • fix(ext/node): build the proxied request target with the URL parser (#​36557)
  • fix(ext/node): do not resume client TLS sessions unless requested (#​36592)
  • fix(ext/node): fix perf_hooks detail.req.url proxied path duplication (#​36407)
  • fix(ext/node): handle readv short reads (#​36211)
  • fix(ext/node): require sys permission for inspector.open (#​36465)
  • fix(ext/node_sqlite): invalidate sessions on database close (#​36633)
  • fix(ext/tls): avoid panic for mismatched client certificate and key (#​36457)
  • fix(ext/web): clean up abort handlers when listeners are removed (#​36226)
  • fix(ext/web): close transfer MessagePort when a transferred readable is
    
cancelled (#​36270)
  • fix(ext/web): snapshot SharedArrayBuffer input in TextDecoder.decode()
    
(#​36611)
  • fix(fetch): require an initial multipart boundary (#​36470)
  • fix(ffi): validate struct return buffers (#​36373)
  • fix(fmt): honor .editorconfig when formatting from stdin (#​36267)
  • fix(fs): require write permission for creating opens (#​36497)
  • fix(fs): use a private FsFile constructor token (#​36439)
  • fix(glob): retain valid gitignore rules after parse errors (#​36478)
  • fix(http): preserve keep-alive after reading request body (#​36690)
  • fix(http): truncate streaming responses to content length (#​36496)
  • fix(lsp): restrict registry completion endpoint schemes (#​36477)
  • fix(node): check reads during require resolution (#​36461)
  • fix(node): match domain uncaught exception handling (#​36475)
  • fix(node): preserve v8 deserializer view offsets (#​36460)
  • fix(node): validate Brotli encoder operations (#​36530)
  • fix(node): validate raw outgoing HTTP headers (#​36471)
  • fix(node/crypto): preserve binary key export passphrases (#​36443)
  • fix(node_crypto): apply RFC 7748 scalar decoding for X448 (#​36466)
  • fix(node_crypto): size cipher updates by byte length (#​36459)
  • fix(node_shim): preserve explicit argument delimiters (#​36435)
  • fix(npm): flatten single-resolution peers when building package ids (#​36608)
  • fix(npm): match peer fallbacks when checking peer resolution cache (#​36607)
  • fix(npm): remove arrayref dependency (#​36653)
  • fix(npm): resolve bare npm specifier when latest is too new for min dependency
    
age (#​36619)
  • fix(npm): use cached abbreviated metadata under --cached-only (#​36526)
  • fix(npm): validate tar paths before extraction (#​36468)
  • fix(os): serialize process environment updates (#​36074)
  • fix(permissions): check resolved IP against import deny list (#​36486)
  • fix(process): reject NULs in Windows arguments (#​36436)
  • fix(process): validate whitespace-only loader environment values (#​36431)
  • fix(publish): authenticate the package existence check so private packages
    
work (#​36656)
  • fix(publish): memoize publish order depth (#​36215)
  • fix(publish): reject invalid JSR package names (#​36474)
  • fix(repl): skip regex literals when validating input (#​36375)
  • fix(runtime): unregister dropped signal resources (#​36213)
  • fix(web): keep MessagePort resource identifiers private (#​36440)
  • fix: bugs in primordials related to ObjectCreate and
    ObjectDefineProperties (#​36541)
  • fix: prevent threadpool starvation with concurrent file locks (#​32789)
  • perf(core): grow the op driver's future arena on demand (#​36678)
  • perf(core): uncontended-borrow fast path for AsyncRefCell (#​36679)
  • perf(core): use index-based SafeArrayIterator in primordials (#​36543)
  • perf(core): zero-copy snapshot rehydration, drop bincode (#​36680)
  • perf(ext/web): apply the base64url op design to standard base64 (#​36422)
  • perf(ext/websocket): shrink the op_ws_create future (#​36681)
v2.9.5
Compare Source
  • feat(add): --unscoped flag to alias packages by their unscoped name (#​36319)
  • feat(task): add --members flag to run tasks in workspace members only (#​35748)
  • feat: add Blob/Body textStream() (#​35616)
  • feat: add experimental QuickJS backend (#​36194)
  • fix(bundle): avoid esbuild protocol deadlock (#​36427)
  • fix(bundle): respect runtime file permissions (#​36107)
  • fix(cjs): use loader sources for recursive analysis (#​36111)
  • fix(cli): escape control characters in external metadata (#​36198)
  • fix(core): don't resolve internal module imports with the user's import map
    
(#​36303)
  • fix(crypto): add "raw-secret" to KeyFormat type (#​35708)
  • fix(desktop): handle colored HMR URLs and page loads (#​36316)
  • fix(desktop): retain update signature verification op (#​36152)
  • fix(ext/crypto): allow deriveBits with length 0 (#​36283)
  • fix(ext/napi): polyfill uv_handle_size and uv_strerror (#​36308)
  • fix(ext/net): release completed QUIC stream resources (#​36247)
  • fix(ext/net): require --allow-sys for node:dns.getServers() (#​35941)
  • fix(ext/node): Node compat for web streams (#​36285)
  • fix(ext/node): apply backpressure in Readable.toWeb() (#​36321)
  • fix(ext/node): defer TLS write completion callback to avoid reentrancy panic
    
(#​35867)
  • fix(ext/node): don't fire http2 settings callback after session destroy
    
(#​36230)
  • fix(ext/node): gate constrained memory cgroup reads (#​36218)
  • fix(ext/node): handle pre-quoted shell arguments (#​36371)
  • fix(ext/node): implement node:test tags (#​36292)
  • fix(ext/node): implement util.diff (#​36289)
  • fix(ext/node): implement v8.promiseHooks API (#​36281)
  • fix(ext/node): sort fs.readdir entries to match Node.js (#​36341)
  • fix(ext/node): stop http2 file reads after stream close (#​36300)
  • fix(ext/node): store blocklist ranges compactly (#​36212)
  • fix(ext/node): support the fs flush option for writes (#​36290)
  • fix(ext/node): use signatureAlgorithm digest for X509 ECDSA verify (#​36326)
  • fix(ext/node_crypto): use named group exponent sizes (#​36347)
  • fix(ext/web): attach Node error codes to WHATWG API validation errors (#​36288)
  • fix(ext/websocket): disable HTTP/2 server push on wss upgrade path (#​36327)
  • fix(fetch): scope redirect-sensitive headers by origin (#​36361)
  • fix(ffi): reject resizable buffers in nonblocking calls (#​36259)
  • fix(fmt): accept xml and svg extensions for stdin (#​36149)
  • fix(fmt): update lax-markup to 0.3.2, lax-css and lax-sql to 0.3.0 (#​36397)
  • fix(http): preserve stripped headers across redirects (#​36360)
  • fix(inspector): validate request host headers (#​36348)
  • fix(net): cancel pending writes on stream close (#​36369)
  • fix(net): clean up concurrently dropped load-balanced listeners (#​36246)
  • fix(net): handle malformed DNS record text (#​36374)
  • fix(node): clean up Web Stream finished listeners (#​36227)
  • fix(node): retain consumed HTTP stream wrapper (#​36254)
  • fix(npm): ignore invalid package bin targets (#​36354)
  • fix(npm): tolerate malformed scripts field in packuments (#​36324)
  • fix(npmrc): match auth configs by authority and path (#​36359)
  • fix(outdated): don't report JSR pre-release versions as latest (#​36325)
  • fix(publish): report when the registry rejects a provenance attestation
    
(#​36404)
  • fix(resolver): don't treat deno eval modules as npm package files (#​36304)
  • fix(runtime): map notify's Windows missing-path error to NotFound (#​35864)
  • fix(sync-types): add reason to too_many_arguments allows (lint)
  • fix(telemetry): handle reentrant attribute conversion (#​36256)
  • fix(webgpu): own mapped range backing stores (#​36257)
  • fix(webstorage): preserve Storage constructor name (#​35944)
  • fix: capitalize IP in help text (#​36170)
  • fix: upgrade deno_task_shell to 0.33.3 (#​36406)
  • fix: wire no-legacy-abort unstable flag from deno.json config (#​36312)
  • perf(core): run the common-path tick drain in Rust (#​36157)
  • perf(ext/node): bypass dns lookup on literal IPs in udp send (#​35909)
  • perf(ext/web): implement base64url encode/decode as simdutf ops (#​36398)
  • perf(fs): open files on the blocking pool in async readFile/writeFile (#​36160)
  • perf: order startup functions in release builds (#​36219)
  • perf: reduce eager module evaluation at startup (#​36331)
  • perf: remove Linux unwind tables from release artifacts (#​36265)
v2.9.4
Compare Source
  • feat(desktop): enable --hmr for React Router (#​35900)
  • feat(ext/node): add a byteLength/length parameter to
    
Buffer.indexOf/lastIndexOf/includes (#​35872)
  • feat(ext/node): support raw chacha20 cipher in crypto.createCipheriv (#​36016)
  • feat: upgrade V8 to 150.2.0 (#​36098)
  • fix(add): support --minimum-dependency-age flag in deno add/remove (#​36099)
  • fix(cache): store Web Cache under origin data (#​36145)
  • fix(canvas): require FFI permission for native window handles (#​36080)
  • fix(clean): reject symlinked node_modules cleanup roots (#​36190)
  • fix(compile): bump libsui to 0.16.4 to fix Windows resource SizeOfImage
    
(#​36242)
  • fix(core): allow dynamic imports during cached module evaluation (#​36258)
  • fix(core): bound error graph conversion (#​36070)
  • fix(core): enforce JSON requests in FsModuleLoader (#​36137)
  • fix(core): handle malformed error constructors (#​36071)
  • fix(core): stop rejected dynamic imports before loading (#​36136)
  • fix(desktop): make BrowserWindow bindings typeable (#​35907)
  • fix(desktop): preserve binding wrappers after lazy op upgrade (#​36065)
  • fix(desktop): strip runtime extension from app name (#​36060)
  • fix(ext/napi): cancel async sends after close (#​36077)
  • fix(ext/napi): scope callback info per invocation (#​36076)
  • fix(ext/node): apply backpressure to http2 stream writes (#​36044)
  • fix(ext/node): don't leave 0-byte .heapsnapshot files near the heap limit
    
(#​36113)
  • fix(ext/node): implement worker_threads.locks via Web Locks (#​35963)
  • fix(ext/node): node:sqlite backup() and deserialize() argument validation
    
(#​36127)
  • fix(ext/node): retry DNS query when its per-attempt timeout fires (#​35955)
  • fix(ext/node): stop http2 file reads on stream close (#​36061)
  • fix(ext/web): handle failed webtransport datagram setup (#​36067)
  • fix(ext/webidl): implement async_sequence for ReadableStream.from (#​35976)
  • fix(fetch): bound multipart part headers (#​36096)
  • fix(fmt): keep embedded CSS custom property indentation stable (#​35949)
  • fix(fs): require sys permission for umask (#​36222)
  • fix(http): preserve trust proxy environment setting (#​36073)
  • fix(init): validate temporary node_modules parent (#​36142)
  • fix(jupyter): report codemirror_mode as a string (#​36241)
  • fix(loader): reject non-JSON modules for JSON imports (#​36135)
  • fix(napi): synchronize external string finalizers (#​36078)
  • fix(net): clean up cancellation resources on early errors (#​36229)
  • fix(net): limit WebTransport handshake frame buffering (#​36068)
  • fix(node_http2): clean up destroyed sessions (#​36043)
  • fix(node_resolver): handle CJS filesystem path edge cases (#​36112)
  • fix(node_stream): handle Web Stream adapter errors (#​36193)
  • fix(npm): avoid following lock poll symlinks (#​36192)
  • fix(npm): download tarballs from the configured registry instead of
    
registry.npmjs.org (#​36187)
  • fix(npm): reject symlinked package materialization dirs (#​36191)
  • fix(outdated): keep type-only dependencies in the lockfile (#​36140)
  • fix(pack): support file paths longer than the tar name field (#​36105)
  • fix(permissions): escape bidi controls in prompts (#​36195)
  • fix(process): avoid collisions in Windows stdio pipe names (#​36081)
  • fix(publish): constrain generated source rewrites (#​36109)
  • fix(release): insert into versions.json in semver order (#​36097)
  • fix(rt): isolate extracted native addons (#​36144)
  • fix(runtime): bridge console to the inspector regardless of --inspect flag
    
(#​35795)
  • fix(runtime): give worker isolate threads the stack size we report (#​36114)
  • fix(test): escape control characters in test names (#​36196)
  • fix(tests): make npm test registry tolerate a bad advisories request body
    
(#​36138)
  • fix(tls): resolve sni requests concurrently (#​36062)
  • fix(update): don't downgrade lockfile when npm cache is stale (#​35904)
  • fix(webtransport): avoid url parse panic (#​36066)
  • fix(webtransport): validate certificate dates (#​36069)
  • fix(x): honor --minimum-dependency-age and deno.json minimumDependencyAge
    
(#​36025)
  • fix: discover config file for jsr: entrypoints (#​35838)
  • fix: handle UTF-16 diagnostic columns (#​36028)
  • perf(core): avoid duplicating lazy ESM snapshot sources (#​36262)
  • perf(snapshot): mangle internal source identifiers (#​36263)
  • perf: compress bundled AppImage runtimes (#​36261)
  • perf: use FxHash for hot internal hash maps (#​36100)
v2.9.3
Compare Source
  • feat(cli): deno add --no-save and --save-optional (#​36039)
  • feat(cli): add --min-dep-age alias (#​35914)
  • feat(compile): support aarch64-pc-windows-msvc target (#​36004)
  • feat(ext/fetch): add http2MaxHeaderListSize option to
    Deno.createHttpClient (#​33194)
  • fix(bundle): preserve raw imports in watch mode (#​36040)
  • fix(canvas): don't hold SurfaceData mut borrow over window resize (#​35993)
  • fix(config): reject out-of-range minimum dependency ages (#​36051)
  • fix(core): block user ext imports after resolution (#​36012)
  • fix(core): deactivate idle TTY write handles (#​35886)
  • fix(core): restrict extension loaders to internal modules (#​36013)
  • fix(core): root slow op string coercions (#​36018)
  • fix(desktop): don't let op_desktop_send_error_report target caller-supplied
    
URLs (#​35940)
  • fix(ext/http): don't panic recycling cancelled record on native response
    
(#​36053)
  • fix(ext/napi): don't free threadsafe function on abort while refs remain
    
(#​36032)
  • fix(ext/napi): don't resurrect a released threadsafe function in acquire
    
(#​36054)
  • fix(ext/node): add deprecation warning for Duplex.toWeb({ type }) DEP0201
    
(#​35972)
  • fix(ext/node): guard sqlite deserialize during callbacks (#​36023)
  • fix(ext/node): handle UTF-16 assert source positions (#​36029)
  • fix(ext/node): handle sqlite conversion failures (#​36024)
  • fix(ext/node): respect base64 buffer ranges (#​36030)
  • fix(ext/process): don't double-close extra stdio pipe handles on Windows
    
(#​36005)
  • fix(lsp): respect lint rule exclusion for no-slow-types diagnostics (#​35924)
  • fix(node): stop active read on stream close to avoid leaking Socket/TCPWrap
    
(#​35898)
  • fix(node_http2): keep header validation enabled (#​36042)
  • fix(node_http2): validate serialized headers (#​36041)
  • fix(npm): don't fetch registry info for deprecated packages under
    
--cached-only (#​35903)
  • fix(npm): normalize path in BYONM read permission check (#​35882)
  • fix(pm): hint about minimumDependencyAge when no version is old enough
    
(#​35890)
  • fix(release): only strip Mach-O signature for x86_64-apple-darwin (#​35902)
  • fix(release): strip Mach-O signature before patchver on apple targets (#​35897)
  • fix(runtime): guard usage op output buffers (#​36020)
  • fix(serde_v8): handle deserialization exceptions (#​36021)
  • fix(web): guard encodeInto fallback result buffer (#​36019)
  • fix(web): support Event subclasses with readonly toStringTag (#​35920)
  • fix(worker): remove imported ops during bootstrap (#​36014)
  • fix: don't print duplicate parse diagnostics (#​35933)
  • perf(ext/crypto): batch randomUUID generation (#​35953)
  • perf(ext/fetch): remove quadratic line buffering in EventSource (#​35881)
  • perf(ext/node): cache compiled glob matchers + bump bundled minimatch to
    
10.2.5 (#​35873)
  • perf(ext/node): fast path fs cp (#​35856)
  • perf(ext/node): right-size small socket reads instead of pinning the 64KB slab
    
(#​35779)
  • perf(ext/node): speed up sqlite.StatementSync.all() and run() (#​35863)
  • perf(ext/web): avoid copy-back in op_base64_atob large path (#​35862)
v2.9.2
Compare Source
  • feat(desktop): autodetect React Router framework (#​35557)
  • feat(desktop): enable --hmr for Vite and Nuxt (#​35851)
  • feat(desktop): run HMR by framework dev server (#​35722)
  • feat(desktop): window opacity and transparency APIs (#​35646)
  • feat(desktop): wire --exclude-unused-npm through to compile (#​35740)
  • feat(ext/node): implement v8.setHeapSnapshotNearHeapLimit (#​35694)
  • feat(ext/telemetry): honor OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT (#​35068)
  • feat(inspector): start inspector server on SIGUSR1 (#​35738)
  • feat(node): implement getTestContext() in node:test (#​35678)
  • feat: support wildcard patterns in minimumDependencyAge.exclude (#​35746)
  • fix(check): don't interleave errors with "Check" lines in a workspace (#​35687)
  • fix(compile): bump libsui to 0.16.1 to survive eu-strip in flatpak (#​35699)
  • fix(compile): bump libsui to 0.16.3 to fix segfault under gVisor/Cloud Run
    
(#​35701)
  • fix(core): don't drain microtasks in mod_evaluate_sync mid-evaluation (#​35707)
  • fix(coverage): count a branch-junction line as covered when either arm runs
    
(#​35858)
  • fix(coverage): don't count V8 block-boundary gaps as branches (#​35767)
  • fix(coverage): don't let a trailing comment change a line's hit count (#​35741)
  • fix(deploy): disable config discovery and refresh the cached CLI version
    
(#​35754)
  • fix(desktop): attribute bind calls to the registering window id (#​35654)
  • fix(desktop): honor desktop.backend from deno.json (#​35815
  • fix(desktop): pin @​std/http in generated Vite SPA entrypoint + add hermetic
    
compile test (#​35676)
  • fix(desktop): rename launcher to so it self-loads the runtime (#​35709)
  • fix(desktop): run framework build step before bundling output (#​35603)
  • fix(desktop): surface compiled-app startup errors instead of exiting silently
    
(#​35567)
  • fix(dprint): exclude tools/lzld submodule (#​35778)
  • fix(ext): throw DataCloneError when posting non-serializable values (#​35604)
  • fix(ext/cache): implement Cache.keys() (#​35455)
  • fix(ext/fetch): reject transport failures with Node's "fetch failed" shape
    
(#​35618)
  • fix(ext/http): error non-Uint8Array response streams (#​35783)
  • fix(ext/http): honor explicit content-length header on HEAD responses (#​35728)
  • fix(ext/http): point legacy abort warning at docs.deno.com/go link (#​35713)
  • fix(ext/napi): add uv_cond_* polyfills for native addons (#​35536)
  • fix(ext/net): abort pending Deno.connect during DNS resolution (#​35729)
  • fix(ext/node): allow adopting inherited extra stdio TCP fds (#​35805)
  • fix(ext/node): don't panic when main module path has invalid percent-encoding
    
(#​35534)
  • fix(ext/node): don't schedule a pause in inspector.waitForDebugger() (#​35796)
  • fix(ext/node): flush StringDecoder in cipher final() for stream ciphers
    
(#​35800)
  • fix(ext/node): mark TLSWrap dead on teardown before tls_conn check (#​35706)
  • fix(ext/node): report all active resources from process.getActiveResourcesInfo
    
(#​35532)
  • fix(ext/node): require --allow-net=unix for node:net unix sockets (#​35835)
  • fix(ext/node): support fd 3 pipes in spawned Deno children (#​34133)
  • fix(ext/signals): unregister handler when SignalStream is dropped (#​35832)
  • fix(ext/web): resolve pending BYOB read when teeing a byte stream that closes
    
(#​35828)
  • fix(fmt): format Astro inline scripts as TypeScript (#​35852)
  • fix(fs): support pre-1970 (negative) timestamps in FsStat (#​35517)
  • fix(inspector): close WebSocket connections when the runtime is torn down
    
(#​35791)
  • fix(install): don't panic on jsr specifier with a tag like @​latest (#​35605)
  • fix(install): don't write through hardlinks when copying package files
    
(#​35735)
  • fix(install): make setup cache packages hash deterministic (#​35825)
  • fix(install): resolve lifecycle script dependency bins against the hoisted
    
layout (#​35762)
  • fix(install): support uninstalling multiple global packages (#​29352)
  • fix(lint): don't error on non-analyzable package exports like CSS files
    
(#​35732)
  • fix(lint): include config file in workspace member invalid version error
    
(#​35759)
  • fix(lsp): fix CPU busy loop by creating tokio runtime before JsRuntime in TSC
    
thread (#​35595)
  • fix(node/fs): implement followSymlinks option for fs.glob() (#​35524)
  • fix(npm): don't re-fetch packuments on every run when registry has no time
    
data (#​35834)
  • fix(npm): don't retain full npm exports value + fix --watch memory leak
    
(#​35677)
  • fix(npm): widen node_modules lock staleness margin to avoid false preemption
    
(#​35806)
  • fix(permissions): split comma-separated paths in --ignore-read (#​35661)
  • fix(test): run Node-API finalizers at test worker shutdown (#​35695)
  • fix(watch): accept watch paths in fmt/lint/bench --watch (#​35720)
  • fix(watch): execute preload modules under --watch (#​35792)
  • fix(watch): terminate on Ctrl+C while blocked in synchronous code (#​35826)
  • fix: enable rusqlite "fallible_uint" feature in workspace deps (#​35681)
  • perf(config): literal-suffix reject and prune irrelevant globs per base
    
(#​35688)
  • perf(core): defer residual lazy source registration (#​35731)
  • perf(ext/fetch): stream wasm bytes to the compiler from Rust (#​35704)
  • perf(ext/node): remove per-chunk copying on TLSWrap data paths (#​35705)
  • perf(ext/node): zero-copy async Buffer writes on the stream_wrap path (#​35780)
  • perf(ext/web): identity pipeThrough writable bypass (#​35799)
  • perf(ext/web): persistent pump for the generic pipeTo loop (#​35813)
  • perf(ext/web): pump readableStreamCollectIntoUint8Array with a persistent read
    
request (#​35790)
  • perf(ext/web): reduce per-chunk allocations on stream read and tee paths
    
(#​35786)
  • perf(ext/web): reduce per-chunk overhead in Web Streams (#​35773)
  • perf(ext/web): run synchronous pull completion without a microtask hop
    
(#​35788)
  • perf(ext/web): shared underlying-source algorithms, hoist resource-bridge read
    
request (#​35810)
  • perf(ext/web): sync fast path for ReadableStream async iterator next()
    
(#​35842)
  • perf(ext/web): synchronous transform fast path for TransformStream (#​35844)
  • perf(npm): index packuments with SIMD JSON scanner (#​35698)
  • perf(streams): offload resource-backed pipeTo to Rust via op_pipe (#​35689)
  • perf(workers): optimize message passing (#​35110)
  • perf(workers): return raw buffer from receive ops for no-transferable messages
    
(#​35756)
  • perf: use V8 native queueMicrotask instead of op (#​35787)
v2.9.1
Compare Source
  • feat(check): add --desktop flag to type-check for deno desktop (#​35644)
  • feat(desktop): register deep-link URL schemes at bundle time (#​35466)
  • feat: update laufey to 0.5.0 (#​35663)
  • fix(bundle): emit CSSStyleSheet for CSS raw imports (#​35598)
  • fix(cache): skip checksums for cached 404 entries (#​35526)
  • fix(config): don't strip workspace-member includes from deploy config (#​34788)
  • fix(core): apply deferred fast-call op upgrade to the captured bootstrap clone
    
(#​35630)
  • fix(core): prevent shared-buffer timer expiry race from losing timers (#​35312)
  • fix(desktop): default window title to app name instead of laufey_webview
    
(#​35541)
  • fix(desktop): detect SvelteKit adapter-node and error on unsupported adapters
    
(#​35533)
  • fix(desktop): discover deno.json in the project dir for deno desktop .
    
(#​35660)
  • fix(desktop): don't delete user directories that collide with app name
    
(#​35513)
  • fix(desktop): repair webview and raw backends on Windows (laufey v0.4.1)
    
(#​35566)
  • fix(desktop): resolve launcher symlink so .deb/.rpm apps find the backend
    
(#​35632)
  • fix(desktop): set LAUFEY_RUNTIME_PATH in Linux app launcher (#​35580)
  • fix(desktop): show macOS tray icon in bundled .app launched via Finder
    
(#​35626)
  • fix(desktop): use zstd for appimage squashfs (#​35506)
  • fix(doc): strip blockquote > prefixes from JSDoc code blocks (#​34866)
  • fix(ext/fetch): include path and reason when fetching a file:// URL fails
    
(#​35606)
  • fix(ext/node): check permissions when binding node:net unix sockets (#​35564)
  • fix(ext/node): export report as named export from node:process (#​35400)
  • fix(ext/node): mock.reset() should also reset MockTimers (#​35588)
  • fix(ext/node): pass Deno subcommands through child_process spawn (#​35599)
  • fix(ext/node): send TLS close_notify on JS stream-backed socket shutdown
    
(#​35582)
  • fix(ext/node_sqlite): keep attach limit capped under scoped permissions
    
(#​35232)
  • fix(ext/web): make URL and URLSearchParams non-serializable (#​35423)
  • fix(fmt): stable formatting of multi-line html/svg tagged templates (#​35540)
  • fix(inspector): support Chrome worker debugging (#​35629)
  • fix(install): pin pre-release npm versions added via dist-tag (#​35586)
  • fix(jupyter): register stdin peer only after ZMTP handshake completes (#​35585)
  • fix(lib): add PerformanceObserver and PerformanceObserverEntryList types
    
(#​35640)
  • fix(libs/http): add missing write_flushed in
    poll_start_fixed_response_with (#​35649)
  • fix(lsp): watch .wasm files for changes (#​35560)
  • fix(node): load graph-backed TypeScript modules synchronously (#​35527)
  • fix(npm): decode percent-encoded subpath of npm specifiers (#​35505)
  • fix(npm): fall back for age-filtered npm dist-tags (#​35561)
  • fix(npm): normalize bin names with path separators (#​35555)
  • fix(npm): realpath npm bin main module (#​35554)
  • fix(npm): show scoped-registry auth hint on tarball 404 (#​35514)
  • fix(npm): use case-insensitive match for trust-policy-exclude (#​35520)
  • fix(rt_desktop): reveal initial window on first paint (startup black flash)
    
(#​35620)
  • fix: correct property name for JSX new line configuration in schema file
    
(#​35565)
  • fix: resolve LAUFEY_VERSION from crate-local Cargo.lock during publish
    
(#​35507)
  • fix: show clear error when V8 fails to create worker threads (#​32856)
  • perf(core/webidl): check next method outside of iterator loop (#​35480)
  • perf(ext/fetch): fast-path Response reconstruction (#​35495)
  • perf(ext/http): coalesce chunked response writes into a single write (#​35523)
v2.9.0
Compare Source
Read more: http://deno.com/blog/v2.9
  • feat(bundle): add --declaration flag to generate rolled-up .d.ts files
    
(#​33838)
  • feat(cli): add deno link and deno unlink subcommands (#​34359)
  • feat(cli): add deno watch subcommand (#​35301)
  • feat(cli): add deno list subcommand to list declared dependencies (#​34972)
  • feat(cli): auto-migrate pnpm-workspace.yaml on resolution failure (#​34993)
  • feat(cli): provide a node on PATH when Node.js is not installed (#​34969)
  • feat(compile): persist Web Storage/KV in a per-app data directory (#​34618)
  • feat(coverage): add configurable coverage thresholds (#​35056)
  • feat(desktop): --compress for self-extracting app bundles (#​35420)
  • feat(desktop): add Linux .deb and .rpm installer output formats (#​35296)
  • feat(desktop): add Windows .msi installer output format (#​35378)
  • feat(desktop): autodetect Vite framework (#​35470)
  • feat(desktop): default UI backend to webview (#​35442)
  • feat(ext/crypto): support remaining modern WebCrypto algorithms (#​35223)
  • feat(ext/http): deprecation warning for legacy request abort (#​34397)
  • feat(ext/net): implement Happy Eyeballs for Deno.connect and
    Deno.connectTls (#​31726)
  • feat(ext/node): implement node:test mock.module (#​35329)
  • feat(ext/node): implement node:test mock.timers (#​33946)
  • feat(ext/web): web locks api (#​31166)
  • feat(fmt): add sortNamedImports and sortNamedExports options (#​33313)
  • feat(fmt): infer config from .editorconfig (#​34071)
  • feat(fmt): use lax-css for CSS, SCSS, and Less (#​35160)
  • feat(fmt): use lax-markup for HTML, XML, SVG, and components ([#​35174](https://redirect.gi
✂ Note
PR body was truncated to here.
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.3chore(deps): update dependency deno to v2.7.4Mar 5, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
5 times, most recently
from
906567b to
f63f10fCompareMarch 11, 2026 13:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.4chore(deps): update dependency deno to v2.7.5Mar 11, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f63f10f to
f46c778CompareMarch 18, 2026 12:36
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.5chore(deps): update dependency deno to v2.7.6Mar 18, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f46c778 to
62b45e6CompareMarch 19, 2026 17:56
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.6chore(deps): update dependency deno to v2.7.7Mar 19, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
62b45e6 to
f45b439CompareMarch 20, 2026 21:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.7chore(deps): update dependency deno to v2.7.8Mar 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
a4f65a8 to
314e963CompareMarch 27, 2026 13:13
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.8chore(deps): update dependency deno to v2.7.9Mar 27, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
314e963 to
12f833cCompareMarch 31, 2026 20:45
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.9chore(deps): update dependency deno to v2.7.10Mar 31, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
85f743e to
91c4835CompareApril 4, 2026 09:12
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.10chore(deps): update dependency deno to v2.7.11Apr 4, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
91c4835 to
fd15c1fCompareApril 10, 2026 01:55
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.11chore(deps): update dependency deno to v2.7.12Apr 10, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5683292 to
b4efd08CompareApril 12, 2026 09:55
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
1a1eb22 to
95cdc65CompareApril 22, 2026 18:08
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.12chore(deps): update dependency deno to v2.7.13Apr 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5764cc4 to
694818bCompareMay 17, 2026 16:59
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
d85b44b to
4e3fd3eCompareMay 28, 2026 19:03
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.14chore(deps): update dependency deno to v2.8.1May 28, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
4e3fd3e to
7920c67CompareMay 30, 2026 05:30
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.1chore(deps): update deno monorepo to v2.8.1Jun 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
7920c67 to
e5b5cc9CompareJune 3, 2026 14:41
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.1chore(deps): update deno monorepo to v2.8.2Jun 3, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
dedcb9d to
f647f79CompareJune 11, 2026 04:48
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f647f79 to
6c55738CompareJune 12, 2026 00:54
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.2chore(deps): update deno monorepo to v2.8.3Jun 12, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
fa2f4ac to
a39b68bCompareJune 18, 2026 22:51
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.3chore(deps): update deno monorepoJun 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
13b132f to
e6e2547CompareJune 23, 2026 19:31
@renovaterenovateBot
changed the title
chore(deps): update deno monorepochore(deps): update dependency deno to v2.8.3Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
e6e2547 to
895a0bbCompareJune 25, 2026 18:49
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.3chore(deps): update dependency deno to v2.9.0Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
895a0bb to
5fb112cCompareJune 27, 2026 02:14
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.9.0chore(deps): update dependency deno to v2.9.1Jul 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
56218c8 to
5798b64CompareJuly 8, 2026 19:59
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@w3nl

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
chore(deps): update dependency deno to v2.9.6 - #489
Open
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Open
chore(deps): update dependency deno to v2.9.6#489
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Conversation
@renovate
@renovaterenovateBot
commented
Mar 4, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
ℹ️ Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
PackageChangeAgeConfidence
deno (source)2.7.1 → 2.9.6ageconfidence
Release Notes
denoland/deno (deno)
v2.9.6
Compare Source
  • feat(compressible): add support for 'text/x-component' content type (#​36450)
  • feat(desktop): clipboard api (#​35750)
  • feat(desktop): support checked, icon, and tooltip on menu items (#​36649)
  • fix(bundle): isolate esbuild downloads from workspace registries (#​36467)
  • fix(cache): combine duplicate headers for Vary matching (#​36476)
  • fix(cli_parser): remove orphaned sync-types parser
  • fix(core): cap adaptive buffer initial allocations (#​36432)
  • fix(core): make Unix pipe fd ownership explicit (#​36353)
  • fix(core): make user timer waker state thread-safe (#​36495)
  • fix(coverage): compare a range against a line in V8's units (#​36613)
  • fix(crypto): preserve RSA-OAEP label bytes (#​36441)
  • fix(desktop): keep dots in the app name when resolving the runtime library
    
(#​36006)
  • fix(desktop): keep the macOS bundle signature valid unless an update is
    
applied (#​36574)
  • fix(desktop): never block the JS thread on the error-report dialog (#​36575)
  • fix(desktop): propagate deno.json version and license into packaged installers
    
(#​36577)
  • fix(desktop): run Vite-based HMR dev servers inside the desktop runtime
    
(#​36488)
  • fix(desktop): transport binding args and results as DesktopValue so Uint8Array
    
survives (#​36573)
  • fix(ext/fetch): enforce permissions for proxy transports (#​36217)
  • fix(ext/fetch): only retry transport errors on pooled connections (#​36415)
  • fix(ext/fetch): raise default HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE to 256KB
    
(#​36558)
  • fix(ext/http): keep request body readable after response is sent (#​36629)
  • fix(ext/http): route invalid async responses to onError (#​36437)
  • fix(ext/napi): don't invoke napi_wrap finalizer twice at teardown (#​36556)
  • fix(ext/napi): run JS-calling finalizers safely, NULL string result, and
    
Float16Array (#​36572)
  • fix(ext/napi): surface OS error and path on addon load failure (#​36630)
  • fix(ext/napi): track pending finalizers by identity (#​36551)
  • fix(ext/napi): wake the event loop at the next uv_timer deadline (#​36559)
  • fix(ext/net): skip unsupported DNS records in ANY queries (#​36650)
  • fix(ext/node): accept string ports in dns.lookupService (#​36546)
  • fix(ext/node): build the proxied request target with the URL parser (#​36557)
  • fix(ext/node): do not resume client TLS sessions unless requested (#​36592)
  • fix(ext/node): fix perf_hooks detail.req.url proxied path duplication (#​36407)
  • fix(ext/node): handle readv short reads (#​36211)
  • fix(ext/node): require sys permission for inspector.open (#​36465)
  • fix(ext/node_sqlite): invalidate sessions on database close (#​36633)
  • fix(ext/tls): avoid panic for mismatched client certificate and key (#​36457)
  • fix(ext/web): clean up abort handlers when listeners are removed (#​36226)
  • fix(ext/web): close transfer MessagePort when a transferred readable is
    
cancelled (#​36270)
  • fix(ext/web): snapshot SharedArrayBuffer input in TextDecoder.decode()
    
(#​36611)
  • fix(fetch): require an initial multipart boundary (#​36470)
  • fix(ffi): validate struct return buffers (#​36373)
  • fix(fmt): honor .editorconfig when formatting from stdin (#​36267)
  • fix(fs): require write permission for creating opens (#​36497)
  • fix(fs): use a private FsFile constructor token (#​36439)
  • fix(glob): retain valid gitignore rules after parse errors (#​36478)
  • fix(http): preserve keep-alive after reading request body (#​36690)
  • fix(http): truncate streaming responses to content length (#​36496)
  • fix(lsp): restrict registry completion endpoint schemes (#​36477)
  • fix(node): check reads during require resolution (#​36461)
  • fix(node): match domain uncaught exception handling (#​36475)
  • fix(node): preserve v8 deserializer view offsets (#​36460)
  • fix(node): validate Brotli encoder operations (#​36530)
  • fix(node): validate raw outgoing HTTP headers (#​36471)
  • fix(node/crypto): preserve binary key export passphrases (#​36443)
  • fix(node_crypto): apply RFC 7748 scalar decoding for X448 (#​36466)
  • fix(node_crypto): size cipher updates by byte length (#​36459)
  • fix(node_shim): preserve explicit argument delimiters (#​36435)
  • fix(npm): flatten single-resolution peers when building package ids (#​36608)
  • fix(npm): match peer fallbacks when checking peer resolution cache (#​36607)
  • fix(npm): remove arrayref dependency (#​36653)
  • fix(npm): resolve bare npm specifier when latest is too new for min dependency
    
age (#​36619)
  • fix(npm): use cached abbreviated metadata under --cached-only (#​36526)
  • fix(npm): validate tar paths before extraction (#​36468)
  • fix(os): serialize process environment updates (#​36074)
  • fix(permissions): check resolved IP against import deny list (#​36486)
  • fix(process): reject NULs in Windows arguments (#​36436)
  • fix(process): validate whitespace-only loader environment values (#​36431)
  • fix(publish): authenticate the package existence check so private packages
    
work (#​36656)
  • fix(publish): memoize publish order depth (#​36215)
  • fix(publish): reject invalid JSR package names (#​36474)
  • fix(repl): skip regex literals when validating input (#​36375)
  • fix(runtime): unregister dropped signal resources (#​36213)
  • fix(web): keep MessagePort resource identifiers private (#​36440)
  • fix: bugs in primordials related to ObjectCreate and
    ObjectDefineProperties (#​36541)
  • fix: prevent threadpool starvation with concurrent file locks (#​32789)
  • perf(core): grow the op driver's future arena on demand (#​36678)
  • perf(core): uncontended-borrow fast path for AsyncRefCell (#​36679)
  • perf(core): use index-based SafeArrayIterator in primordials (#​36543)
  • perf(core): zero-copy snapshot rehydration, drop bincode (#​36680)
  • perf(ext/web): apply the base64url op design to standard base64 (#​36422)
  • perf(ext/websocket): shrink the op_ws_create future (#​36681)
v2.9.5
Compare Source
  • feat(add): --unscoped flag to alias packages by their unscoped name (#​36319)
  • feat(task): add --members flag to run tasks in workspace members only (#​35748)
  • feat: add Blob/Body textStream() (#​35616)
  • feat: add experimental QuickJS backend (#​36194)
  • fix(bundle): avoid esbuild protocol deadlock (#​36427)
  • fix(bundle): respect runtime file permissions (#​36107)
  • fix(cjs): use loader sources for recursive analysis (#​36111)
  • fix(cli): escape control characters in external metadata (#​36198)
  • fix(core): don't resolve internal module imports with the user's import map
    
(#​36303)
  • fix(crypto): add "raw-secret" to KeyFormat type (#​35708)
  • fix(desktop): handle colored HMR URLs and page loads (#​36316)
  • fix(desktop): retain update signature verification op (#​36152)
  • fix(ext/crypto): allow deriveBits with length 0 (#​36283)
  • fix(ext/napi): polyfill uv_handle_size and uv_strerror (#​36308)
  • fix(ext/net): release completed QUIC stream resources (#​36247)
  • fix(ext/net): require --allow-sys for node:dns.getServers() (#​35941)
  • fix(ext/node): Node compat for web streams (#​36285)
  • fix(ext/node): apply backpressure in Readable.toWeb() (#​36321)
  • fix(ext/node): defer TLS write completion callback to avoid reentrancy panic
    
(#​35867)
  • fix(ext/node): don't fire http2 settings callback after session destroy
    
(#​36230)
  • fix(ext/node): gate constrained memory cgroup reads (#​36218)
  • fix(ext/node): handle pre-quoted shell arguments (#​36371)
  • fix(ext/node): implement node:test tags (#​36292)
  • fix(ext/node): implement util.diff (#​36289)
  • fix(ext/node): implement v8.promiseHooks API (#​36281)
  • fix(ext/node): sort fs.readdir entries to match Node.js (#​36341)
  • fix(ext/node): stop http2 file reads after stream close (#​36300)
  • fix(ext/node): store blocklist ranges compactly (#​36212)
  • fix(ext/node): support the fs flush option for writes (#​36290)
  • fix(ext/node): use signatureAlgorithm digest for X509 ECDSA verify (#​36326)
  • fix(ext/node_crypto): use named group exponent sizes (#​36347)
  • fix(ext/web): attach Node error codes to WHATWG API validation errors (#​36288)
  • fix(ext/websocket): disable HTTP/2 server push on wss upgrade path (#​36327)
  • fix(fetch): scope redirect-sensitive headers by origin (#​36361)
  • fix(ffi): reject resizable buffers in nonblocking calls (#​36259)
  • fix(fmt): accept xml and svg extensions for stdin (#​36149)
  • fix(fmt): update lax-markup to 0.3.2, lax-css and lax-sql to 0.3.0 (#​36397)
  • fix(http): preserve stripped headers across redirects (#​36360)
  • fix(inspector): validate request host headers (#​36348)
  • fix(net): cancel pending writes on stream close (#​36369)
  • fix(net): clean up concurrently dropped load-balanced listeners (#​36246)
  • fix(net): handle malformed DNS record text (#​36374)
  • fix(node): clean up Web Stream finished listeners (#​36227)
  • fix(node): retain consumed HTTP stream wrapper (#​36254)
  • fix(npm): ignore invalid package bin targets (#​36354)
  • fix(npm): tolerate malformed scripts field in packuments (#​36324)
  • fix(npmrc): match auth configs by authority and path (#​36359)
  • fix(outdated): don't report JSR pre-release versions as latest (#​36325)
  • fix(publish): report when the registry rejects a provenance attestation
    
(#​36404)
  • fix(resolver): don't treat deno eval modules as npm package files (#​36304)
  • fix(runtime): map notify's Windows missing-path error to NotFound (#​35864)
  • fix(sync-types): add reason to too_many_arguments allows (lint)
  • fix(telemetry): handle reentrant attribute conversion (#​36256)
  • fix(webgpu): own mapped range backing stores (#​36257)
  • fix(webstorage): preserve Storage constructor name (#​35944)
  • fix: capitalize IP in help text (#​36170)
  • fix: upgrade deno_task_shell to 0.33.3 (#​36406)
  • fix: wire no-legacy-abort unstable flag from deno.json config (#​36312)
  • perf(core): run the common-path tick drain in Rust (#​36157)
  • perf(ext/node): bypass dns lookup on literal IPs in udp send (#​35909)
  • perf(ext/web): implement base64url encode/decode as simdutf ops (#​36398)
  • perf(fs): open files on the blocking pool in async readFile/writeFile (#​36160)
  • perf: order startup functions in release builds (#​36219)
  • perf: reduce eager module evaluation at startup (#​36331)
  • perf: remove Linux unwind tables from release artifacts (#​36265)
v2.9.4
Compare Source
  • feat(desktop): enable --hmr for React Router (#​35900)
  • feat(ext/node): add a byteLength/length parameter to
    
Buffer.indexOf/lastIndexOf/includes (#​35872)
  • feat(ext/node): support raw chacha20 cipher in crypto.createCipheriv (#​36016)
  • feat: upgrade V8 to 150.2.0 (#​36098)
  • fix(add): support --minimum-dependency-age flag in deno add/remove (#​36099)
  • fix(cache): store Web Cache under origin data (#​36145)
  • fix(canvas): require FFI permission for native window handles (#​36080)
  • fix(clean): reject symlinked node_modules cleanup roots (#​36190)
  • fix(compile): bump libsui to 0.16.4 to fix Windows resource SizeOfImage
    
(#​36242)
  • fix(core): allow dynamic imports during cached module evaluation (#​36258)
  • fix(core): bound error graph conversion (#​36070)
  • fix(core): enforce JSON requests in FsModuleLoader (#​36137)
  • fix(core): handle malformed error constructors (#​36071)
  • fix(core): stop rejected dynamic imports before loading (#​36136)
  • fix(desktop): make BrowserWindow bindings typeable (#​35907)
  • fix(desktop): preserve binding wrappers after lazy op upgrade (#​36065)
  • fix(desktop): strip runtime extension from app name (#​36060)
  • fix(ext/napi): cancel async sends after close (#​36077)
  • fix(ext/napi): scope callback info per invocation (#​36076)
  • fix(ext/node): apply backpressure to http2 stream writes (#​36044)
  • fix(ext/node): don't leave 0-byte .heapsnapshot files near the heap limit
    
(#​36113)
  • fix(ext/node): implement worker_threads.locks via Web Locks (#​35963)
  • fix(ext/node): node:sqlite backup() and deserialize() argument validation
    
(#​36127)
  • fix(ext/node): retry DNS query when its per-attempt timeout fires (#​35955)
  • fix(ext/node): stop http2 file reads on stream close (#​36061)
  • fix(ext/web): handle failed webtransport datagram setup (#​36067)
  • fix(ext/webidl): implement async_sequence for ReadableStream.from (#​35976)
  • fix(fetch): bound multipart part headers (#​36096)
  • fix(fmt): keep embedded CSS custom property indentation stable (#​35949)
  • fix(fs): require sys permission for umask (#​36222)
  • fix(http): preserve trust proxy environment setting (#​36073)
  • fix(init): validate temporary node_modules parent (#​36142)
  • fix(jupyter): report codemirror_mode as a string (#​36241)
  • fix(loader): reject non-JSON modules for JSON imports (#​36135)
  • fix(napi): synchronize external string finalizers (#​36078)
  • fix(net): clean up cancellation resources on early errors (#​36229)
  • fix(net): limit WebTransport handshake frame buffering (#​36068)
  • fix(node_http2): clean up destroyed sessions (#​36043)
  • fix(node_resolver): handle CJS filesystem path edge cases (#​36112)
  • fix(node_stream): handle Web Stream adapter errors (#​36193)
  • fix(npm): avoid following lock poll symlinks (#​36192)
  • fix(npm): download tarballs from the configured registry instead of
    
registry.npmjs.org (#​36187)
  • fix(npm): reject symlinked package materialization dirs (#​36191)
  • fix(outdated): keep type-only dependencies in the lockfile (#​36140)
  • fix(pack): support file paths longer than the tar name field (#​36105)
  • fix(permissions): escape bidi controls in prompts (#​36195)
  • fix(process): avoid collisions in Windows stdio pipe names (#​36081)
  • fix(publish): constrain generated source rewrites (#​36109)
  • fix(release): insert into versions.json in semver order (#​36097)
  • fix(rt): isolate extracted native addons (#​36144)
  • fix(runtime): bridge console to the inspector regardless of --inspect flag
    
(#​35795)
  • fix(runtime): give worker isolate threads the stack size we report (#​36114)
  • fix(test): escape control characters in test names (#​36196)
  • fix(tests): make npm test registry tolerate a bad advisories request body
    
(#​36138)
  • fix(tls): resolve sni requests concurrently (#​36062)
  • fix(update): don't downgrade lockfile when npm cache is stale (#​35904)
  • fix(webtransport): avoid url parse panic (#​36066)
  • fix(webtransport): validate certificate dates (#​36069)
  • fix(x): honor --minimum-dependency-age and deno.json minimumDependencyAge
    
(#​36025)
  • fix: discover config file for jsr: entrypoints (#​35838)
  • fix: handle UTF-16 diagnostic columns (#​36028)
  • perf(core): avoid duplicating lazy ESM snapshot sources (#​36262)
  • perf(snapshot): mangle internal source identifiers (#​36263)
  • perf: compress bundled AppImage runtimes (#​36261)
  • perf: use FxHash for hot internal hash maps (#​36100)
v2.9.3
Compare Source
  • feat(cli): deno add --no-save and --save-optional (#​36039)
  • feat(cli): add --min-dep-age alias (#​35914)
  • feat(compile): support aarch64-pc-windows-msvc target (#​36004)
  • feat(ext/fetch): add http2MaxHeaderListSize option to
    Deno.createHttpClient (#​33194)
  • fix(bundle): preserve raw imports in watch mode (#​36040)
  • fix(canvas): don't hold SurfaceData mut borrow over window resize (#​35993)
  • fix(config): reject out-of-range minimum dependency ages (#​36051)
  • fix(core): block user ext imports after resolution (#​36012)
  • fix(core): deactivate idle TTY write handles (#​35886)
  • fix(core): restrict extension loaders to internal modules (#​36013)
  • fix(core): root slow op string coercions (#​36018)
  • fix(desktop): don't let op_desktop_send_error_report target caller-supplied
    
URLs (#​35940)
  • fix(ext/http): don't panic recycling cancelled record on native response
    
(#​36053)
  • fix(ext/napi): don't free threadsafe function on abort while refs remain
    
(#​36032)
  • fix(ext/napi): don't resurrect a released threadsafe function in acquire
    
(#​36054)
  • fix(ext/node): add deprecation warning for Duplex.toWeb({ type }) DEP0201
    
(#​35972)
  • fix(ext/node): guard sqlite deserialize during callbacks (#​36023)
  • fix(ext/node): handle UTF-16 assert source positions (#​36029)
  • fix(ext/node): handle sqlite conversion failures (#​36024)
  • fix(ext/node): respect base64 buffer ranges (#​36030)
  • fix(ext/process): don't double-close extra stdio pipe handles on Windows
    
(#​36005)
  • fix(lsp): respect lint rule exclusion for no-slow-types diagnostics (#​35924)
  • fix(node): stop active read on stream close to avoid leaking Socket/TCPWrap
    
(#​35898)
  • fix(node_http2): keep header validation enabled (#​36042)
  • fix(node_http2): validate serialized headers (#​36041)
  • fix(npm): don't fetch registry info for deprecated packages under
    
--cached-only (#​35903)
  • fix(npm): normalize path in BYONM read permission check (#​35882)
  • fix(pm): hint about minimumDependencyAge when no version is old enough
    
(#​35890)
  • fix(release): only strip Mach-O signature for x86_64-apple-darwin (#​35902)
  • fix(release): strip Mach-O signature before patchver on apple targets (#​35897)
  • fix(runtime): guard usage op output buffers (#​36020)
  • fix(serde_v8): handle deserialization exceptions (#​36021)
  • fix(web): guard encodeInto fallback result buffer (#​36019)
  • fix(web): support Event subclasses with readonly toStringTag (#​35920)
  • fix(worker): remove imported ops during bootstrap (#​36014)
  • fix: don't print duplicate parse diagnostics (#​35933)
  • perf(ext/crypto): batch randomUUID generation (#​35953)
  • perf(ext/fetch): remove quadratic line buffering in EventSource (#​35881)
  • perf(ext/node): cache compiled glob matchers + bump bundled minimatch to
    
10.2.5 (#​35873)
  • perf(ext/node): fast path fs cp (#​35856)
  • perf(ext/node): right-size small socket reads instead of pinning the 64KB slab
    
(#​35779)
  • perf(ext/node): speed up sqlite.StatementSync.all() and run() (#​35863)
  • perf(ext/web): avoid copy-back in op_base64_atob large path (#​35862)
v2.9.2
Compare Source
  • feat(desktop): autodetect React Router framework (#​35557)
  • feat(desktop): enable --hmr for Vite and Nuxt (#​35851)
  • feat(desktop): run HMR by framework dev server (#​35722)
  • feat(desktop): window opacity and transparency APIs (#​35646)
  • feat(desktop): wire --exclude-unused-npm through to compile (#​35740)
  • feat(ext/node): implement v8.setHeapSnapshotNearHeapLimit (#​35694)
  • feat(ext/telemetry): honor OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT (#​35068)
  • feat(inspector): start inspector server on SIGUSR1 (#​35738)
  • feat(node): implement getTestContext() in node:test (#​35678)
  • feat: support wildcard patterns in minimumDependencyAge.exclude (#​35746)
  • fix(check): don't interleave errors with "Check" lines in a workspace (#​35687)
  • fix(compile): bump libsui to 0.16.1 to survive eu-strip in flatpak (#​35699)
  • fix(compile): bump libsui to 0.16.3 to fix segfault under gVisor/Cloud Run
    
(#​35701)
  • fix(core): don't drain microtasks in mod_evaluate_sync mid-evaluation (#​35707)
  • fix(coverage): count a branch-junction line as covered when either arm runs
    
(#​35858)
  • fix(coverage): don't count V8 block-boundary gaps as branches (#​35767)
  • fix(coverage): don't let a trailing comment change a line's hit count (#​35741)
  • fix(deploy): disable config discovery and refresh the cached CLI version
    
(#​35754)
  • fix(desktop): attribute bind calls to the registering window id (#​35654)
  • fix(desktop): honor desktop.backend from deno.json (#​35815
  • fix(desktop): pin @​std/http in generated Vite SPA entrypoint + add hermetic
    
compile test (#​35676)
  • fix(desktop): rename launcher to so it self-loads the runtime (#​35709)
  • fix(desktop): run framework build step before bundling output (#​35603)
  • fix(desktop): surface compiled-app startup errors instead of exiting silently
    
(#​35567)
  • fix(dprint): exclude tools/lzld submodule (#​35778)
  • fix(ext): throw DataCloneError when posting non-serializable values (#​35604)
  • fix(ext/cache): implement Cache.keys() (#​35455)
  • fix(ext/fetch): reject transport failures with Node's "fetch failed" shape
    
(#​35618)
  • fix(ext/http): error non-Uint8Array response streams (#​35783)
  • fix(ext/http): honor explicit content-length header on HEAD responses (#​35728)
  • fix(ext/http): point legacy abort warning at docs.deno.com/go link (#​35713)
  • fix(ext/napi): add uv_cond_* polyfills for native addons (#​35536)
  • fix(ext/net): abort pending Deno.connect during DNS resolution (#​35729)
  • fix(ext/node): allow adopting inherited extra stdio TCP fds (#​35805)
  • fix(ext/node): don't panic when main module path has invalid percent-encoding
    
(#​35534)
  • fix(ext/node): don't schedule a pause in inspector.waitForDebugger() (#​35796)
  • fix(ext/node): flush StringDecoder in cipher final() for stream ciphers
    
(#​35800)
  • fix(ext/node): mark TLSWrap dead on teardown before tls_conn check (#​35706)
  • fix(ext/node): report all active resources from process.getActiveResourcesInfo
    
(#​35532)
  • fix(ext/node): require --allow-net=unix for node:net unix sockets (#​35835)
  • fix(ext/node): support fd 3 pipes in spawned Deno children (#​34133)
  • fix(ext/signals): unregister handler when SignalStream is dropped (#​35832)
  • fix(ext/web): resolve pending BYOB read when teeing a byte stream that closes
    
(#​35828)
  • fix(fmt): format Astro inline scripts as TypeScript (#​35852)
  • fix(fs): support pre-1970 (negative) timestamps in FsStat (#​35517)
  • fix(inspector): close WebSocket connections when the runtime is torn down
    
(#​35791)
  • fix(install): don't panic on jsr specifier with a tag like @​latest (#​35605)
  • fix(install): don't write through hardlinks when copying package files
    
(#​35735)
  • fix(install): make setup cache packages hash deterministic (#​35825)
  • fix(install): resolve lifecycle script dependency bins against the hoisted
    
layout (#​35762)
  • fix(install): support uninstalling multiple global packages (#​29352)
  • fix(lint): don't error on non-analyzable package exports like CSS files
    
(#​35732)
  • fix(lint): include config file in workspace member invalid version error
    
(#​35759)
  • fix(lsp): fix CPU busy loop by creating tokio runtime before JsRuntime in TSC
    
thread (#​35595)
  • fix(node/fs): implement followSymlinks option for fs.glob() (#​35524)
  • fix(npm): don't re-fetch packuments on every run when registry has no time
    
data (#​35834)
  • fix(npm): don't retain full npm exports value + fix --watch memory leak
    
(#​35677)
  • fix(npm): widen node_modules lock staleness margin to avoid false preemption
    
(#​35806)
  • fix(permissions): split comma-separated paths in --ignore-read (#​35661)
  • fix(test): run Node-API finalizers at test worker shutdown (#​35695)
  • fix(watch): accept watch paths in fmt/lint/bench --watch (#​35720)
  • fix(watch): execute preload modules under --watch (#​35792)
  • fix(watch): terminate on Ctrl+C while blocked in synchronous code (#​35826)
  • fix: enable rusqlite "fallible_uint" feature in workspace deps (#​35681)
  • perf(config): literal-suffix reject and prune irrelevant globs per base
    
(#​35688)
  • perf(core): defer residual lazy source registration (#​35731)
  • perf(ext/fetch): stream wasm bytes to the compiler from Rust (#​35704)
  • perf(ext/node): remove per-chunk copying on TLSWrap data paths (#​35705)
  • perf(ext/node): zero-copy async Buffer writes on the stream_wrap path (#​35780)
  • perf(ext/web): identity pipeThrough writable bypass (#​35799)
  • perf(ext/web): persistent pump for the generic pipeTo loop (#​35813)
  • perf(ext/web): pump readableStreamCollectIntoUint8Array with a persistent read
    
request (#​35790)
  • perf(ext/web): reduce per-chunk allocations on stream read and tee paths
    
(#​35786)
  • perf(ext/web): reduce per-chunk overhead in Web Streams (#​35773)
  • perf(ext/web): run synchronous pull completion without a microtask hop
    
(#​35788)
  • perf(ext/web): shared underlying-source algorithms, hoist resource-bridge read
    
request (#​35810)
  • perf(ext/web): sync fast path for ReadableStream async iterator next()
    
(#​35842)
  • perf(ext/web): synchronous transform fast path for TransformStream (#​35844)
  • perf(npm): index packuments with SIMD JSON scanner (#​35698)
  • perf(streams): offload resource-backed pipeTo to Rust via op_pipe (#​35689)
  • perf(workers): optimize message passing (#​35110)
  • perf(workers): return raw buffer from receive ops for no-transferable messages
    
(#​35756)
  • perf: use V8 native queueMicrotask instead of op (#​35787)
v2.9.1
Compare Source
  • feat(check): add --desktop flag to type-check for deno desktop (#​35644)
  • feat(desktop): register deep-link URL schemes at bundle time (#​35466)
  • feat: update laufey to 0.5.0 (#​35663)
  • fix(bundle): emit CSSStyleSheet for CSS raw imports (#​35598)
  • fix(cache): skip checksums for cached 404 entries (#​35526)
  • fix(config): don't strip workspace-member includes from deploy config (#​34788)
  • fix(core): apply deferred fast-call op upgrade to the captured bootstrap clone
    
(#​35630)
  • fix(core): prevent shared-buffer timer expiry race from losing timers (#​35312)
  • fix(desktop): default window title to app name instead of laufey_webview
    
(#​35541)
  • fix(desktop): detect SvelteKit adapter-node and error on unsupported adapters
    
(#​35533)
  • fix(desktop): discover deno.json in the project dir for deno desktop .
    
(#​35660)
  • fix(desktop): don't delete user directories that collide with app name
    
(#​35513)
  • fix(desktop): repair webview and raw backends on Windows (laufey v0.4.1)
    
(#​35566)
  • fix(desktop): resolve launcher symlink so .deb/.rpm apps find the backend
    
(#​35632)
  • fix(desktop): set LAUFEY_RUNTIME_PATH in Linux app launcher (#​35580)
  • fix(desktop): show macOS tray icon in bundled .app launched via Finder
    
(#​35626)
  • fix(desktop): use zstd for appimage squashfs (#​35506)
  • fix(doc): strip blockquote > prefixes from JSDoc code blocks (#​34866)
  • fix(ext/fetch): include path and reason when fetching a file:// URL fails
    
(#​35606)
  • fix(ext/node): check permissions when binding node:net unix sockets (#​35564)
  • fix(ext/node): export report as named export from node:process (#​35400)
  • fix(ext/node): mock.reset() should also reset MockTimers (#​35588)
  • fix(ext/node): pass Deno subcommands through child_process spawn (#​35599)
  • fix(ext/node): send TLS close_notify on JS stream-backed socket shutdown
    
(#​35582)
  • fix(ext/node_sqlite): keep attach limit capped under scoped permissions
    
(#​35232)
  • fix(ext/web): make URL and URLSearchParams non-serializable (#​35423)
  • fix(fmt): stable formatting of multi-line html/svg tagged templates (#​35540)
  • fix(inspector): support Chrome worker debugging (#​35629)
  • fix(install): pin pre-release npm versions added via dist-tag (#​35586)
  • fix(jupyter): register stdin peer only after ZMTP handshake completes (#​35585)
  • fix(lib): add PerformanceObserver and PerformanceObserverEntryList types
    
(#​35640)
  • fix(libs/http): add missing write_flushed in
    poll_start_fixed_response_with (#​35649)
  • fix(lsp): watch .wasm files for changes (#​35560)
  • fix(node): load graph-backed TypeScript modules synchronously (#​35527)
  • fix(npm): decode percent-encoded subpath of npm specifiers (#​35505)
  • fix(npm): fall back for age-filtered npm dist-tags (#​35561)
  • fix(npm): normalize bin names with path separators (#​35555)
  • fix(npm): realpath npm bin main module (#​35554)
  • fix(npm): show scoped-registry auth hint on tarball 404 (#​35514)
  • fix(npm): use case-insensitive match for trust-policy-exclude (#​35520)
  • fix(rt_desktop): reveal initial window on first paint (startup black flash)
    
(#​35620)
  • fix: correct property name for JSX new line configuration in schema file
    
(#​35565)
  • fix: resolve LAUFEY_VERSION from crate-local Cargo.lock during publish
    
(#​35507)
  • fix: show clear error when V8 fails to create worker threads (#​32856)
  • perf(core/webidl): check next method outside of iterator loop (#​35480)
  • perf(ext/fetch): fast-path Response reconstruction (#​35495)
  • perf(ext/http): coalesce chunked response writes into a single write (#​35523)
v2.9.0
Compare Source
Read more: http://deno.com/blog/v2.9
  • feat(bundle): add --declaration flag to generate rolled-up .d.ts files
    
(#​33838)
  • feat(cli): add deno link and deno unlink subcommands (#​34359)
  • feat(cli): add deno watch subcommand (#​35301)
  • feat(cli): add deno list subcommand to list declared dependencies (#​34972)
  • feat(cli): auto-migrate pnpm-workspace.yaml on resolution failure (#​34993)
  • feat(cli): provide a node on PATH when Node.js is not installed (#​34969)
  • feat(compile): persist Web Storage/KV in a per-app data directory (#​34618)
  • feat(coverage): add configurable coverage thresholds (#​35056)
  • feat(desktop): --compress for self-extracting app bundles (#​35420)
  • feat(desktop): add Linux .deb and .rpm installer output formats (#​35296)
  • feat(desktop): add Windows .msi installer output format (#​35378)
  • feat(desktop): autodetect Vite framework (#​35470)
  • feat(desktop): default UI backend to webview (#​35442)
  • feat(ext/crypto): support remaining modern WebCrypto algorithms (#​35223)
  • feat(ext/http): deprecation warning for legacy request abort (#​34397)
  • feat(ext/net): implement Happy Eyeballs for Deno.connect and
    Deno.connectTls (#​31726)
  • feat(ext/node): implement node:test mock.module (#​35329)
  • feat(ext/node): implement node:test mock.timers (#​33946)
  • feat(ext/web): web locks api (#​31166)
  • feat(fmt): add sortNamedImports and sortNamedExports options (#​33313)
  • feat(fmt): infer config from .editorconfig (#​34071)
  • feat(fmt): use lax-css for CSS, SCSS, and Less (#​35160)
  • feat(fmt): use lax-markup for HTML, XML, SVG, and components ([#​35174](https://redirect.gi
✂ Note
PR body was truncated to here.
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.3chore(deps): update dependency deno to v2.7.4Mar 5, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
5 times, most recently
from
906567b to
f63f10fCompareMarch 11, 2026 13:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.4chore(deps): update dependency deno to v2.7.5Mar 11, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f63f10f to
f46c778CompareMarch 18, 2026 12:36
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.5chore(deps): update dependency deno to v2.7.6Mar 18, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f46c778 to
62b45e6CompareMarch 19, 2026 17:56
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.6chore(deps): update dependency deno to v2.7.7Mar 19, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
62b45e6 to
f45b439CompareMarch 20, 2026 21:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.7chore(deps): update dependency deno to v2.7.8Mar 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
a4f65a8 to
314e963CompareMarch 27, 2026 13:13
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.8chore(deps): update dependency deno to v2.7.9Mar 27, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
314e963 to
12f833cCompareMarch 31, 2026 20:45
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.9chore(deps): update dependency deno to v2.7.10Mar 31, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
85f743e to
91c4835CompareApril 4, 2026 09:12
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.10chore(deps): update dependency deno to v2.7.11Apr 4, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
91c4835 to
fd15c1fCompareApril 10, 2026 01:55
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.11chore(deps): update dependency deno to v2.7.12Apr 10, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5683292 to
b4efd08CompareApril 12, 2026 09:55
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
1a1eb22 to
95cdc65CompareApril 22, 2026 18:08
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.12chore(deps): update dependency deno to v2.7.13Apr 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5764cc4 to
694818bCompareMay 17, 2026 16:59
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
d85b44b to
4e3fd3eCompareMay 28, 2026 19:03
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.14chore(deps): update dependency deno to v2.8.1May 28, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
4e3fd3e to
7920c67CompareMay 30, 2026 05:30
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.1chore(deps): update deno monorepo to v2.8.1Jun 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
7920c67 to
e5b5cc9CompareJune 3, 2026 14:41
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.1chore(deps): update deno monorepo to v2.8.2Jun 3, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
dedcb9d to
f647f79CompareJune 11, 2026 04:48
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f647f79 to
6c55738CompareJune 12, 2026 00:54
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.2chore(deps): update deno monorepo to v2.8.3Jun 12, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
fa2f4ac to
a39b68bCompareJune 18, 2026 22:51
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.3chore(deps): update deno monorepoJun 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
13b132f to
e6e2547CompareJune 23, 2026 19:31
@renovaterenovateBot
changed the title
chore(deps): update deno monorepochore(deps): update dependency deno to v2.8.3Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
e6e2547 to
895a0bbCompareJune 25, 2026 18:49
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.3chore(deps): update dependency deno to v2.9.0Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
895a0bb to
5fb112cCompareJune 27, 2026 02:14
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.9.0chore(deps): update dependency deno to v2.9.1Jul 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
56218c8 to
5798b64CompareJuly 8, 2026 19:59
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@w3nl

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
chore(deps): update dependency deno to v2.9.6 - #489
Open
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Open
chore(deps): update dependency deno to v2.9.6#489
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Conversation
@renovate
@renovaterenovateBot
commented
Mar 4, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
ℹ️ Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
PackageChangeAgeConfidence
deno (source)2.7.1 → 2.9.6ageconfidence
Release Notes
denoland/deno (deno)
v2.9.6
Compare Source
  • feat(compressible): add support for 'text/x-component' content type (#​36450)
  • feat(desktop): clipboard api (#​35750)
  • feat(desktop): support checked, icon, and tooltip on menu items (#​36649)
  • fix(bundle): isolate esbuild downloads from workspace registries (#​36467)
  • fix(cache): combine duplicate headers for Vary matching (#​36476)
  • fix(cli_parser): remove orphaned sync-types parser
  • fix(core): cap adaptive buffer initial allocations (#​36432)
  • fix(core): make Unix pipe fd ownership explicit (#​36353)
  • fix(core): make user timer waker state thread-safe (#​36495)
  • fix(coverage): compare a range against a line in V8's units (#​36613)
  • fix(crypto): preserve RSA-OAEP label bytes (#​36441)
  • fix(desktop): keep dots in the app name when resolving the runtime library
    
(#​36006)
  • fix(desktop): keep the macOS bundle signature valid unless an update is
    
applied (#​36574)
  • fix(desktop): never block the JS thread on the error-report dialog (#​36575)
  • fix(desktop): propagate deno.json version and license into packaged installers
    
(#​36577)
  • fix(desktop): run Vite-based HMR dev servers inside the desktop runtime
    
(#​36488)
  • fix(desktop): transport binding args and results as DesktopValue so Uint8Array
    
survives (#​36573)
  • fix(ext/fetch): enforce permissions for proxy transports (#​36217)
  • fix(ext/fetch): only retry transport errors on pooled connections (#​36415)
  • fix(ext/fetch): raise default HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE to 256KB
    
(#​36558)
  • fix(ext/http): keep request body readable after response is sent (#​36629)
  • fix(ext/http): route invalid async responses to onError (#​36437)
  • fix(ext/napi): don't invoke napi_wrap finalizer twice at teardown (#​36556)
  • fix(ext/napi): run JS-calling finalizers safely, NULL string result, and
    
Float16Array (#​36572)
  • fix(ext/napi): surface OS error and path on addon load failure (#​36630)
  • fix(ext/napi): track pending finalizers by identity (#​36551)
  • fix(ext/napi): wake the event loop at the next uv_timer deadline (#​36559)
  • fix(ext/net): skip unsupported DNS records in ANY queries (#​36650)
  • fix(ext/node): accept string ports in dns.lookupService (#​36546)
  • fix(ext/node): build the proxied request target with the URL parser (#​36557)
  • fix(ext/node): do not resume client TLS sessions unless requested (#​36592)
  • fix(ext/node): fix perf_hooks detail.req.url proxied path duplication (#​36407)
  • fix(ext/node): handle readv short reads (#​36211)
  • fix(ext/node): require sys permission for inspector.open (#​36465)
  • fix(ext/node_sqlite): invalidate sessions on database close (#​36633)
  • fix(ext/tls): avoid panic for mismatched client certificate and key (#​36457)
  • fix(ext/web): clean up abort handlers when listeners are removed (#​36226)
  • fix(ext/web): close transfer MessagePort when a transferred readable is
    
cancelled (#​36270)
  • fix(ext/web): snapshot SharedArrayBuffer input in TextDecoder.decode()
    
(#​36611)
  • fix(fetch): require an initial multipart boundary (#​36470)
  • fix(ffi): validate struct return buffers (#​36373)
  • fix(fmt): honor .editorconfig when formatting from stdin (#​36267)
  • fix(fs): require write permission for creating opens (#​36497)
  • fix(fs): use a private FsFile constructor token (#​36439)
  • fix(glob): retain valid gitignore rules after parse errors (#​36478)
  • fix(http): preserve keep-alive after reading request body (#​36690)
  • fix(http): truncate streaming responses to content length (#​36496)
  • fix(lsp): restrict registry completion endpoint schemes (#​36477)
  • fix(node): check reads during require resolution (#​36461)
  • fix(node): match domain uncaught exception handling (#​36475)
  • fix(node): preserve v8 deserializer view offsets (#​36460)
  • fix(node): validate Brotli encoder operations (#​36530)
  • fix(node): validate raw outgoing HTTP headers (#​36471)
  • fix(node/crypto): preserve binary key export passphrases (#​36443)
  • fix(node_crypto): apply RFC 7748 scalar decoding for X448 (#​36466)
  • fix(node_crypto): size cipher updates by byte length (#​36459)
  • fix(node_shim): preserve explicit argument delimiters (#​36435)
  • fix(npm): flatten single-resolution peers when building package ids (#​36608)
  • fix(npm): match peer fallbacks when checking peer resolution cache (#​36607)
  • fix(npm): remove arrayref dependency (#​36653)
  • fix(npm): resolve bare npm specifier when latest is too new for min dependency
    
age (#​36619)
  • fix(npm): use cached abbreviated metadata under --cached-only (#​36526)
  • fix(npm): validate tar paths before extraction (#​36468)
  • fix(os): serialize process environment updates (#​36074)
  • fix(permissions): check resolved IP against import deny list (#​36486)
  • fix(process): reject NULs in Windows arguments (#​36436)
  • fix(process): validate whitespace-only loader environment values (#​36431)
  • fix(publish): authenticate the package existence check so private packages
    
work (#​36656)
  • fix(publish): memoize publish order depth (#​36215)
  • fix(publish): reject invalid JSR package names (#​36474)
  • fix(repl): skip regex literals when validating input (#​36375)
  • fix(runtime): unregister dropped signal resources (#​36213)
  • fix(web): keep MessagePort resource identifiers private (#​36440)
  • fix: bugs in primordials related to ObjectCreate and
    ObjectDefineProperties (#​36541)
  • fix: prevent threadpool starvation with concurrent file locks (#​32789)
  • perf(core): grow the op driver's future arena on demand (#​36678)
  • perf(core): uncontended-borrow fast path for AsyncRefCell (#​36679)
  • perf(core): use index-based SafeArrayIterator in primordials (#​36543)
  • perf(core): zero-copy snapshot rehydration, drop bincode (#​36680)
  • perf(ext/web): apply the base64url op design to standard base64 (#​36422)
  • perf(ext/websocket): shrink the op_ws_create future (#​36681)
v2.9.5
Compare Source
  • feat(add): --unscoped flag to alias packages by their unscoped name (#​36319)
  • feat(task): add --members flag to run tasks in workspace members only (#​35748)
  • feat: add Blob/Body textStream() (#​35616)
  • feat: add experimental QuickJS backend (#​36194)
  • fix(bundle): avoid esbuild protocol deadlock (#​36427)
  • fix(bundle): respect runtime file permissions (#​36107)
  • fix(cjs): use loader sources for recursive analysis (#​36111)
  • fix(cli): escape control characters in external metadata (#​36198)
  • fix(core): don't resolve internal module imports with the user's import map
    
(#​36303)
  • fix(crypto): add "raw-secret" to KeyFormat type (#​35708)
  • fix(desktop): handle colored HMR URLs and page loads (#​36316)
  • fix(desktop): retain update signature verification op (#​36152)
  • fix(ext/crypto): allow deriveBits with length 0 (#​36283)
  • fix(ext/napi): polyfill uv_handle_size and uv_strerror (#​36308)
  • fix(ext/net): release completed QUIC stream resources (#​36247)
  • fix(ext/net): require --allow-sys for node:dns.getServers() (#​35941)
  • fix(ext/node): Node compat for web streams (#​36285)
  • fix(ext/node): apply backpressure in Readable.toWeb() (#​36321)
  • fix(ext/node): defer TLS write completion callback to avoid reentrancy panic
    
(#​35867)
  • fix(ext/node): don't fire http2 settings callback after session destroy
    
(#​36230)
  • fix(ext/node): gate constrained memory cgroup reads (#​36218)
  • fix(ext/node): handle pre-quoted shell arguments (#​36371)
  • fix(ext/node): implement node:test tags (#​36292)
  • fix(ext/node): implement util.diff (#​36289)
  • fix(ext/node): implement v8.promiseHooks API (#​36281)
  • fix(ext/node): sort fs.readdir entries to match Node.js (#​36341)
  • fix(ext/node): stop http2 file reads after stream close (#​36300)
  • fix(ext/node): store blocklist ranges compactly (#​36212)
  • fix(ext/node): support the fs flush option for writes (#​36290)
  • fix(ext/node): use signatureAlgorithm digest for X509 ECDSA verify (#​36326)
  • fix(ext/node_crypto): use named group exponent sizes (#​36347)
  • fix(ext/web): attach Node error codes to WHATWG API validation errors (#​36288)
  • fix(ext/websocket): disable HTTP/2 server push on wss upgrade path (#​36327)
  • fix(fetch): scope redirect-sensitive headers by origin (#​36361)
  • fix(ffi): reject resizable buffers in nonblocking calls (#​36259)
  • fix(fmt): accept xml and svg extensions for stdin (#​36149)
  • fix(fmt): update lax-markup to 0.3.2, lax-css and lax-sql to 0.3.0 (#​36397)
  • fix(http): preserve stripped headers across redirects (#​36360)
  • fix(inspector): validate request host headers (#​36348)
  • fix(net): cancel pending writes on stream close (#​36369)
  • fix(net): clean up concurrently dropped load-balanced listeners (#​36246)
  • fix(net): handle malformed DNS record text (#​36374)
  • fix(node): clean up Web Stream finished listeners (#​36227)
  • fix(node): retain consumed HTTP stream wrapper (#​36254)
  • fix(npm): ignore invalid package bin targets (#​36354)
  • fix(npm): tolerate malformed scripts field in packuments (#​36324)
  • fix(npmrc): match auth configs by authority and path (#​36359)
  • fix(outdated): don't report JSR pre-release versions as latest (#​36325)
  • fix(publish): report when the registry rejects a provenance attestation
    
(#​36404)
  • fix(resolver): don't treat deno eval modules as npm package files (#​36304)
  • fix(runtime): map notify's Windows missing-path error to NotFound (#​35864)
  • fix(sync-types): add reason to too_many_arguments allows (lint)
  • fix(telemetry): handle reentrant attribute conversion (#​36256)
  • fix(webgpu): own mapped range backing stores (#​36257)
  • fix(webstorage): preserve Storage constructor name (#​35944)
  • fix: capitalize IP in help text (#​36170)
  • fix: upgrade deno_task_shell to 0.33.3 (#​36406)
  • fix: wire no-legacy-abort unstable flag from deno.json config (#​36312)
  • perf(core): run the common-path tick drain in Rust (#​36157)
  • perf(ext/node): bypass dns lookup on literal IPs in udp send (#​35909)
  • perf(ext/web): implement base64url encode/decode as simdutf ops (#​36398)
  • perf(fs): open files on the blocking pool in async readFile/writeFile (#​36160)
  • perf: order startup functions in release builds (#​36219)
  • perf: reduce eager module evaluation at startup (#​36331)
  • perf: remove Linux unwind tables from release artifacts (#​36265)
v2.9.4
Compare Source
  • feat(desktop): enable --hmr for React Router (#​35900)
  • feat(ext/node): add a byteLength/length parameter to
    
Buffer.indexOf/lastIndexOf/includes (#​35872)
  • feat(ext/node): support raw chacha20 cipher in crypto.createCipheriv (#​36016)
  • feat: upgrade V8 to 150.2.0 (#​36098)
  • fix(add): support --minimum-dependency-age flag in deno add/remove (#​36099)
  • fix(cache): store Web Cache under origin data (#​36145)
  • fix(canvas): require FFI permission for native window handles (#​36080)
  • fix(clean): reject symlinked node_modules cleanup roots (#​36190)
  • fix(compile): bump libsui to 0.16.4 to fix Windows resource SizeOfImage
    
(#​36242)
  • fix(core): allow dynamic imports during cached module evaluation (#​36258)
  • fix(core): bound error graph conversion (#​36070)
  • fix(core): enforce JSON requests in FsModuleLoader (#​36137)
  • fix(core): handle malformed error constructors (#​36071)
  • fix(core): stop rejected dynamic imports before loading (#​36136)
  • fix(desktop): make BrowserWindow bindings typeable (#​35907)
  • fix(desktop): preserve binding wrappers after lazy op upgrade (#​36065)
  • fix(desktop): strip runtime extension from app name (#​36060)
  • fix(ext/napi): cancel async sends after close (#​36077)
  • fix(ext/napi): scope callback info per invocation (#​36076)
  • fix(ext/node): apply backpressure to http2 stream writes (#​36044)
  • fix(ext/node): don't leave 0-byte .heapsnapshot files near the heap limit
    
(#​36113)
  • fix(ext/node): implement worker_threads.locks via Web Locks (#​35963)
  • fix(ext/node): node:sqlite backup() and deserialize() argument validation
    
(#​36127)
  • fix(ext/node): retry DNS query when its per-attempt timeout fires (#​35955)
  • fix(ext/node): stop http2 file reads on stream close (#​36061)
  • fix(ext/web): handle failed webtransport datagram setup (#​36067)
  • fix(ext/webidl): implement async_sequence for ReadableStream.from (#​35976)
  • fix(fetch): bound multipart part headers (#​36096)
  • fix(fmt): keep embedded CSS custom property indentation stable (#​35949)
  • fix(fs): require sys permission for umask (#​36222)
  • fix(http): preserve trust proxy environment setting (#​36073)
  • fix(init): validate temporary node_modules parent (#​36142)
  • fix(jupyter): report codemirror_mode as a string (#​36241)
  • fix(loader): reject non-JSON modules for JSON imports (#​36135)
  • fix(napi): synchronize external string finalizers (#​36078)
  • fix(net): clean up cancellation resources on early errors (#​36229)
  • fix(net): limit WebTransport handshake frame buffering (#​36068)
  • fix(node_http2): clean up destroyed sessions (#​36043)
  • fix(node_resolver): handle CJS filesystem path edge cases (#​36112)
  • fix(node_stream): handle Web Stream adapter errors (#​36193)
  • fix(npm): avoid following lock poll symlinks (#​36192)
  • fix(npm): download tarballs from the configured registry instead of
    
registry.npmjs.org (#​36187)
  • fix(npm): reject symlinked package materialization dirs (#​36191)
  • fix(outdated): keep type-only dependencies in the lockfile (#​36140)
  • fix(pack): support file paths longer than the tar name field (#​36105)
  • fix(permissions): escape bidi controls in prompts (#​36195)
  • fix(process): avoid collisions in Windows stdio pipe names (#​36081)
  • fix(publish): constrain generated source rewrites (#​36109)
  • fix(release): insert into versions.json in semver order (#​36097)
  • fix(rt): isolate extracted native addons (#​36144)
  • fix(runtime): bridge console to the inspector regardless of --inspect flag
    
(#​35795)
  • fix(runtime): give worker isolate threads the stack size we report (#​36114)
  • fix(test): escape control characters in test names (#​36196)
  • fix(tests): make npm test registry tolerate a bad advisories request body
    
(#​36138)
  • fix(tls): resolve sni requests concurrently (#​36062)
  • fix(update): don't downgrade lockfile when npm cache is stale (#​35904)
  • fix(webtransport): avoid url parse panic (#​36066)
  • fix(webtransport): validate certificate dates (#​36069)
  • fix(x): honor --minimum-dependency-age and deno.json minimumDependencyAge
    
(#​36025)
  • fix: discover config file for jsr: entrypoints (#​35838)
  • fix: handle UTF-16 diagnostic columns (#​36028)
  • perf(core): avoid duplicating lazy ESM snapshot sources (#​36262)
  • perf(snapshot): mangle internal source identifiers (#​36263)
  • perf: compress bundled AppImage runtimes (#​36261)
  • perf: use FxHash for hot internal hash maps (#​36100)
v2.9.3
Compare Source
  • feat(cli): deno add --no-save and --save-optional (#​36039)
  • feat(cli): add --min-dep-age alias (#​35914)
  • feat(compile): support aarch64-pc-windows-msvc target (#​36004)
  • feat(ext/fetch): add http2MaxHeaderListSize option to
    Deno.createHttpClient (#​33194)
  • fix(bundle): preserve raw imports in watch mode (#​36040)
  • fix(canvas): don't hold SurfaceData mut borrow over window resize (#​35993)
  • fix(config): reject out-of-range minimum dependency ages (#​36051)
  • fix(core): block user ext imports after resolution (#​36012)
  • fix(core): deactivate idle TTY write handles (#​35886)
  • fix(core): restrict extension loaders to internal modules (#​36013)
  • fix(core): root slow op string coercions (#​36018)
  • fix(desktop): don't let op_desktop_send_error_report target caller-supplied
    
URLs (#​35940)
  • fix(ext/http): don't panic recycling cancelled record on native response
    
(#​36053)
  • fix(ext/napi): don't free threadsafe function on abort while refs remain
    
(#​36032)
  • fix(ext/napi): don't resurrect a released threadsafe function in acquire
    
(#​36054)
  • fix(ext/node): add deprecation warning for Duplex.toWeb({ type }) DEP0201
    
(#​35972)
  • fix(ext/node): guard sqlite deserialize during callbacks (#​36023)
  • fix(ext/node): handle UTF-16 assert source positions (#​36029)
  • fix(ext/node): handle sqlite conversion failures (#​36024)
  • fix(ext/node): respect base64 buffer ranges (#​36030)
  • fix(ext/process): don't double-close extra stdio pipe handles on Windows
    
(#​36005)
  • fix(lsp): respect lint rule exclusion for no-slow-types diagnostics (#​35924)
  • fix(node): stop active read on stream close to avoid leaking Socket/TCPWrap
    
(#​35898)
  • fix(node_http2): keep header validation enabled (#​36042)
  • fix(node_http2): validate serialized headers (#​36041)
  • fix(npm): don't fetch registry info for deprecated packages under
    
--cached-only (#​35903)
  • fix(npm): normalize path in BYONM read permission check (#​35882)
  • fix(pm): hint about minimumDependencyAge when no version is old enough
    
(#​35890)
  • fix(release): only strip Mach-O signature for x86_64-apple-darwin (#​35902)
  • fix(release): strip Mach-O signature before patchver on apple targets (#​35897)
  • fix(runtime): guard usage op output buffers (#​36020)
  • fix(serde_v8): handle deserialization exceptions (#​36021)
  • fix(web): guard encodeInto fallback result buffer (#​36019)
  • fix(web): support Event subclasses with readonly toStringTag (#​35920)
  • fix(worker): remove imported ops during bootstrap (#​36014)
  • fix: don't print duplicate parse diagnostics (#​35933)
  • perf(ext/crypto): batch randomUUID generation (#​35953)
  • perf(ext/fetch): remove quadratic line buffering in EventSource (#​35881)
  • perf(ext/node): cache compiled glob matchers + bump bundled minimatch to
    
10.2.5 (#​35873)
  • perf(ext/node): fast path fs cp (#​35856)
  • perf(ext/node): right-size small socket reads instead of pinning the 64KB slab
    
(#​35779)
  • perf(ext/node): speed up sqlite.StatementSync.all() and run() (#​35863)
  • perf(ext/web): avoid copy-back in op_base64_atob large path (#​35862)
v2.9.2
Compare Source
  • feat(desktop): autodetect React Router framework (#​35557)
  • feat(desktop): enable --hmr for Vite and Nuxt (#​35851)
  • feat(desktop): run HMR by framework dev server (#​35722)
  • feat(desktop): window opacity and transparency APIs (#​35646)
  • feat(desktop): wire --exclude-unused-npm through to compile (#​35740)
  • feat(ext/node): implement v8.setHeapSnapshotNearHeapLimit (#​35694)
  • feat(ext/telemetry): honor OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT (#​35068)
  • feat(inspector): start inspector server on SIGUSR1 (#​35738)
  • feat(node): implement getTestContext() in node:test (#​35678)
  • feat: support wildcard patterns in minimumDependencyAge.exclude (#​35746)
  • fix(check): don't interleave errors with "Check" lines in a workspace (#​35687)
  • fix(compile): bump libsui to 0.16.1 to survive eu-strip in flatpak (#​35699)
  • fix(compile): bump libsui to 0.16.3 to fix segfault under gVisor/Cloud Run
    
(#​35701)
  • fix(core): don't drain microtasks in mod_evaluate_sync mid-evaluation (#​35707)
  • fix(coverage): count a branch-junction line as covered when either arm runs
    
(#​35858)
  • fix(coverage): don't count V8 block-boundary gaps as branches (#​35767)
  • fix(coverage): don't let a trailing comment change a line's hit count (#​35741)
  • fix(deploy): disable config discovery and refresh the cached CLI version
    
(#​35754)
  • fix(desktop): attribute bind calls to the registering window id (#​35654)
  • fix(desktop): honor desktop.backend from deno.json (#​35815
  • fix(desktop): pin @​std/http in generated Vite SPA entrypoint + add hermetic
    
compile test (#​35676)
  • fix(desktop): rename launcher to so it self-loads the runtime (#​35709)
  • fix(desktop): run framework build step before bundling output (#​35603)
  • fix(desktop): surface compiled-app startup errors instead of exiting silently
    
(#​35567)
  • fix(dprint): exclude tools/lzld submodule (#​35778)
  • fix(ext): throw DataCloneError when posting non-serializable values (#​35604)
  • fix(ext/cache): implement Cache.keys() (#​35455)
  • fix(ext/fetch): reject transport failures with Node's "fetch failed" shape
    
(#​35618)
  • fix(ext/http): error non-Uint8Array response streams (#​35783)
  • fix(ext/http): honor explicit content-length header on HEAD responses (#​35728)
  • fix(ext/http): point legacy abort warning at docs.deno.com/go link (#​35713)
  • fix(ext/napi): add uv_cond_* polyfills for native addons (#​35536)
  • fix(ext/net): abort pending Deno.connect during DNS resolution (#​35729)
  • fix(ext/node): allow adopting inherited extra stdio TCP fds (#​35805)
  • fix(ext/node): don't panic when main module path has invalid percent-encoding
    
(#​35534)
  • fix(ext/node): don't schedule a pause in inspector.waitForDebugger() (#​35796)
  • fix(ext/node): flush StringDecoder in cipher final() for stream ciphers
    
(#​35800)
  • fix(ext/node): mark TLSWrap dead on teardown before tls_conn check (#​35706)
  • fix(ext/node): report all active resources from process.getActiveResourcesInfo
    
(#​35532)
  • fix(ext/node): require --allow-net=unix for node:net unix sockets (#​35835)
  • fix(ext/node): support fd 3 pipes in spawned Deno children (#​34133)
  • fix(ext/signals): unregister handler when SignalStream is dropped (#​35832)
  • fix(ext/web): resolve pending BYOB read when teeing a byte stream that closes
    
(#​35828)
  • fix(fmt): format Astro inline scripts as TypeScript (#​35852)
  • fix(fs): support pre-1970 (negative) timestamps in FsStat (#​35517)
  • fix(inspector): close WebSocket connections when the runtime is torn down
    
(#​35791)
  • fix(install): don't panic on jsr specifier with a tag like @​latest (#​35605)
  • fix(install): don't write through hardlinks when copying package files
    
(#​35735)
  • fix(install): make setup cache packages hash deterministic (#​35825)
  • fix(install): resolve lifecycle script dependency bins against the hoisted
    
layout (#​35762)
  • fix(install): support uninstalling multiple global packages (#​29352)
  • fix(lint): don't error on non-analyzable package exports like CSS files
    
(#​35732)
  • fix(lint): include config file in workspace member invalid version error
    
(#​35759)
  • fix(lsp): fix CPU busy loop by creating tokio runtime before JsRuntime in TSC
    
thread (#​35595)
  • fix(node/fs): implement followSymlinks option for fs.glob() (#​35524)
  • fix(npm): don't re-fetch packuments on every run when registry has no time
    
data (#​35834)
  • fix(npm): don't retain full npm exports value + fix --watch memory leak
    
(#​35677)
  • fix(npm): widen node_modules lock staleness margin to avoid false preemption
    
(#​35806)
  • fix(permissions): split comma-separated paths in --ignore-read (#​35661)
  • fix(test): run Node-API finalizers at test worker shutdown (#​35695)
  • fix(watch): accept watch paths in fmt/lint/bench --watch (#​35720)
  • fix(watch): execute preload modules under --watch (#​35792)
  • fix(watch): terminate on Ctrl+C while blocked in synchronous code (#​35826)
  • fix: enable rusqlite "fallible_uint" feature in workspace deps (#​35681)
  • perf(config): literal-suffix reject and prune irrelevant globs per base
    
(#​35688)
  • perf(core): defer residual lazy source registration (#​35731)
  • perf(ext/fetch): stream wasm bytes to the compiler from Rust (#​35704)
  • perf(ext/node): remove per-chunk copying on TLSWrap data paths (#​35705)
  • perf(ext/node): zero-copy async Buffer writes on the stream_wrap path (#​35780)
  • perf(ext/web): identity pipeThrough writable bypass (#​35799)
  • perf(ext/web): persistent pump for the generic pipeTo loop (#​35813)
  • perf(ext/web): pump readableStreamCollectIntoUint8Array with a persistent read
    
request (#​35790)
  • perf(ext/web): reduce per-chunk allocations on stream read and tee paths
    
(#​35786)
  • perf(ext/web): reduce per-chunk overhead in Web Streams (#​35773)
  • perf(ext/web): run synchronous pull completion without a microtask hop
    
(#​35788)
  • perf(ext/web): shared underlying-source algorithms, hoist resource-bridge read
    
request (#​35810)
  • perf(ext/web): sync fast path for ReadableStream async iterator next()
    
(#​35842)
  • perf(ext/web): synchronous transform fast path for TransformStream (#​35844)
  • perf(npm): index packuments with SIMD JSON scanner (#​35698)
  • perf(streams): offload resource-backed pipeTo to Rust via op_pipe (#​35689)
  • perf(workers): optimize message passing (#​35110)
  • perf(workers): return raw buffer from receive ops for no-transferable messages
    
(#​35756)
  • perf: use V8 native queueMicrotask instead of op (#​35787)
v2.9.1
Compare Source
  • feat(check): add --desktop flag to type-check for deno desktop (#​35644)
  • feat(desktop): register deep-link URL schemes at bundle time (#​35466)
  • feat: update laufey to 0.5.0 (#​35663)
  • fix(bundle): emit CSSStyleSheet for CSS raw imports (#​35598)
  • fix(cache): skip checksums for cached 404 entries (#​35526)
  • fix(config): don't strip workspace-member includes from deploy config (#​34788)
  • fix(core): apply deferred fast-call op upgrade to the captured bootstrap clone
    
(#​35630)
  • fix(core): prevent shared-buffer timer expiry race from losing timers (#​35312)
  • fix(desktop): default window title to app name instead of laufey_webview
    
(#​35541)
  • fix(desktop): detect SvelteKit adapter-node and error on unsupported adapters
    
(#​35533)
  • fix(desktop): discover deno.json in the project dir for deno desktop .
    
(#​35660)
  • fix(desktop): don't delete user directories that collide with app name
    
(#​35513)
  • fix(desktop): repair webview and raw backends on Windows (laufey v0.4.1)
    
(#​35566)
  • fix(desktop): resolve launcher symlink so .deb/.rpm apps find the backend
    
(#​35632)
  • fix(desktop): set LAUFEY_RUNTIME_PATH in Linux app launcher (#​35580)
  • fix(desktop): show macOS tray icon in bundled .app launched via Finder
    
(#​35626)
  • fix(desktop): use zstd for appimage squashfs (#​35506)
  • fix(doc): strip blockquote > prefixes from JSDoc code blocks (#​34866)
  • fix(ext/fetch): include path and reason when fetching a file:// URL fails
    
(#​35606)
  • fix(ext/node): check permissions when binding node:net unix sockets (#​35564)
  • fix(ext/node): export report as named export from node:process (#​35400)
  • fix(ext/node): mock.reset() should also reset MockTimers (#​35588)
  • fix(ext/node): pass Deno subcommands through child_process spawn (#​35599)
  • fix(ext/node): send TLS close_notify on JS stream-backed socket shutdown
    
(#​35582)
  • fix(ext/node_sqlite): keep attach limit capped under scoped permissions
    
(#​35232)
  • fix(ext/web): make URL and URLSearchParams non-serializable (#​35423)
  • fix(fmt): stable formatting of multi-line html/svg tagged templates (#​35540)
  • fix(inspector): support Chrome worker debugging (#​35629)
  • fix(install): pin pre-release npm versions added via dist-tag (#​35586)
  • fix(jupyter): register stdin peer only after ZMTP handshake completes (#​35585)
  • fix(lib): add PerformanceObserver and PerformanceObserverEntryList types
    
(#​35640)
  • fix(libs/http): add missing write_flushed in
    poll_start_fixed_response_with (#​35649)
  • fix(lsp): watch .wasm files for changes (#​35560)
  • fix(node): load graph-backed TypeScript modules synchronously (#​35527)
  • fix(npm): decode percent-encoded subpath of npm specifiers (#​35505)
  • fix(npm): fall back for age-filtered npm dist-tags (#​35561)
  • fix(npm): normalize bin names with path separators (#​35555)
  • fix(npm): realpath npm bin main module (#​35554)
  • fix(npm): show scoped-registry auth hint on tarball 404 (#​35514)
  • fix(npm): use case-insensitive match for trust-policy-exclude (#​35520)
  • fix(rt_desktop): reveal initial window on first paint (startup black flash)
    
(#​35620)
  • fix: correct property name for JSX new line configuration in schema file
    
(#​35565)
  • fix: resolve LAUFEY_VERSION from crate-local Cargo.lock during publish
    
(#​35507)
  • fix: show clear error when V8 fails to create worker threads (#​32856)
  • perf(core/webidl): check next method outside of iterator loop (#​35480)
  • perf(ext/fetch): fast-path Response reconstruction (#​35495)
  • perf(ext/http): coalesce chunked response writes into a single write (#​35523)
v2.9.0
Compare Source
Read more: http://deno.com/blog/v2.9
  • feat(bundle): add --declaration flag to generate rolled-up .d.ts files
    
(#​33838)
  • feat(cli): add deno link and deno unlink subcommands (#​34359)
  • feat(cli): add deno watch subcommand (#​35301)
  • feat(cli): add deno list subcommand to list declared dependencies (#​34972)
  • feat(cli): auto-migrate pnpm-workspace.yaml on resolution failure (#​34993)
  • feat(cli): provide a node on PATH when Node.js is not installed (#​34969)
  • feat(compile): persist Web Storage/KV in a per-app data directory (#​34618)
  • feat(coverage): add configurable coverage thresholds (#​35056)
  • feat(desktop): --compress for self-extracting app bundles (#​35420)
  • feat(desktop): add Linux .deb and .rpm installer output formats (#​35296)
  • feat(desktop): add Windows .msi installer output format (#​35378)
  • feat(desktop): autodetect Vite framework (#​35470)
  • feat(desktop): default UI backend to webview (#​35442)
  • feat(ext/crypto): support remaining modern WebCrypto algorithms (#​35223)
  • feat(ext/http): deprecation warning for legacy request abort (#​34397)
  • feat(ext/net): implement Happy Eyeballs for Deno.connect and
    Deno.connectTls (#​31726)
  • feat(ext/node): implement node:test mock.module (#​35329)
  • feat(ext/node): implement node:test mock.timers (#​33946)
  • feat(ext/web): web locks api (#​31166)
  • feat(fmt): add sortNamedImports and sortNamedExports options (#​33313)
  • feat(fmt): infer config from .editorconfig (#​34071)
  • feat(fmt): use lax-css for CSS, SCSS, and Less (#​35160)
  • feat(fmt): use lax-markup for HTML, XML, SVG, and components ([#​35174](https://redirect.gi
✂ Note
PR body was truncated to here.
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.3chore(deps): update dependency deno to v2.7.4Mar 5, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
5 times, most recently
from
906567b to
f63f10fCompareMarch 11, 2026 13:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.4chore(deps): update dependency deno to v2.7.5Mar 11, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f63f10f to
f46c778CompareMarch 18, 2026 12:36
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.5chore(deps): update dependency deno to v2.7.6Mar 18, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f46c778 to
62b45e6CompareMarch 19, 2026 17:56
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.6chore(deps): update dependency deno to v2.7.7Mar 19, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
62b45e6 to
f45b439CompareMarch 20, 2026 21:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.7chore(deps): update dependency deno to v2.7.8Mar 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
a4f65a8 to
314e963CompareMarch 27, 2026 13:13
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.8chore(deps): update dependency deno to v2.7.9Mar 27, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
314e963 to
12f833cCompareMarch 31, 2026 20:45
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.9chore(deps): update dependency deno to v2.7.10Mar 31, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
85f743e to
91c4835CompareApril 4, 2026 09:12
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.10chore(deps): update dependency deno to v2.7.11Apr 4, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
91c4835 to
fd15c1fCompareApril 10, 2026 01:55
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.11chore(deps): update dependency deno to v2.7.12Apr 10, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5683292 to
b4efd08CompareApril 12, 2026 09:55
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
1a1eb22 to
95cdc65CompareApril 22, 2026 18:08
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.12chore(deps): update dependency deno to v2.7.13Apr 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5764cc4 to
694818bCompareMay 17, 2026 16:59
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
d85b44b to
4e3fd3eCompareMay 28, 2026 19:03
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.14chore(deps): update dependency deno to v2.8.1May 28, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
4e3fd3e to
7920c67CompareMay 30, 2026 05:30
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.1chore(deps): update deno monorepo to v2.8.1Jun 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
7920c67 to
e5b5cc9CompareJune 3, 2026 14:41
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.1chore(deps): update deno monorepo to v2.8.2Jun 3, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
dedcb9d to
f647f79CompareJune 11, 2026 04:48
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f647f79 to
6c55738CompareJune 12, 2026 00:54
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.2chore(deps): update deno monorepo to v2.8.3Jun 12, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
fa2f4ac to
a39b68bCompareJune 18, 2026 22:51
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.3chore(deps): update deno monorepoJun 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
13b132f to
e6e2547CompareJune 23, 2026 19:31
@renovaterenovateBot
changed the title
chore(deps): update deno monorepochore(deps): update dependency deno to v2.8.3Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
e6e2547 to
895a0bbCompareJune 25, 2026 18:49
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.3chore(deps): update dependency deno to v2.9.0Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
895a0bb to
5fb112cCompareJune 27, 2026 02:14
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.9.0chore(deps): update dependency deno to v2.9.1Jul 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
56218c8 to
5798b64CompareJuly 8, 2026 19:59
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@w3nl

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
chore(deps): update dependency deno to v2.9.6 - #489
Open
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Open
chore(deps): update dependency deno to v2.9.6#489
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Conversation
@renovate
@renovaterenovateBot
commented
Mar 4, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
ℹ️ Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
PackageChangeAgeConfidence
deno (source)2.7.1 → 2.9.6ageconfidence
Release Notes
denoland/deno (deno)
v2.9.6
Compare Source
  • feat(compressible): add support for 'text/x-component' content type (#​36450)
  • feat(desktop): clipboard api (#​35750)
  • feat(desktop): support checked, icon, and tooltip on menu items (#​36649)
  • fix(bundle): isolate esbuild downloads from workspace registries (#​36467)
  • fix(cache): combine duplicate headers for Vary matching (#​36476)
  • fix(cli_parser): remove orphaned sync-types parser
  • fix(core): cap adaptive buffer initial allocations (#​36432)
  • fix(core): make Unix pipe fd ownership explicit (#​36353)
  • fix(core): make user timer waker state thread-safe (#​36495)
  • fix(coverage): compare a range against a line in V8's units (#​36613)
  • fix(crypto): preserve RSA-OAEP label bytes (#​36441)
  • fix(desktop): keep dots in the app name when resolving the runtime library
    
(#​36006)
  • fix(desktop): keep the macOS bundle signature valid unless an update is
    
applied (#​36574)
  • fix(desktop): never block the JS thread on the error-report dialog (#​36575)
  • fix(desktop): propagate deno.json version and license into packaged installers
    
(#​36577)
  • fix(desktop): run Vite-based HMR dev servers inside the desktop runtime
    
(#​36488)
  • fix(desktop): transport binding args and results as DesktopValue so Uint8Array
    
survives (#​36573)
  • fix(ext/fetch): enforce permissions for proxy transports (#​36217)
  • fix(ext/fetch): only retry transport errors on pooled connections (#​36415)
  • fix(ext/fetch): raise default HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE to 256KB
    
(#​36558)
  • fix(ext/http): keep request body readable after response is sent (#​36629)
  • fix(ext/http): route invalid async responses to onError (#​36437)
  • fix(ext/napi): don't invoke napi_wrap finalizer twice at teardown (#​36556)
  • fix(ext/napi): run JS-calling finalizers safely, NULL string result, and
    
Float16Array (#​36572)
  • fix(ext/napi): surface OS error and path on addon load failure (#​36630)
  • fix(ext/napi): track pending finalizers by identity (#​36551)
  • fix(ext/napi): wake the event loop at the next uv_timer deadline (#​36559)
  • fix(ext/net): skip unsupported DNS records in ANY queries (#​36650)
  • fix(ext/node): accept string ports in dns.lookupService (#​36546)
  • fix(ext/node): build the proxied request target with the URL parser (#​36557)
  • fix(ext/node): do not resume client TLS sessions unless requested (#​36592)
  • fix(ext/node): fix perf_hooks detail.req.url proxied path duplication (#​36407)
  • fix(ext/node): handle readv short reads (#​36211)
  • fix(ext/node): require sys permission for inspector.open (#​36465)
  • fix(ext/node_sqlite): invalidate sessions on database close (#​36633)
  • fix(ext/tls): avoid panic for mismatched client certificate and key (#​36457)
  • fix(ext/web): clean up abort handlers when listeners are removed (#​36226)
  • fix(ext/web): close transfer MessagePort when a transferred readable is
    
cancelled (#​36270)
  • fix(ext/web): snapshot SharedArrayBuffer input in TextDecoder.decode()
    
(#​36611)
  • fix(fetch): require an initial multipart boundary (#​36470)
  • fix(ffi): validate struct return buffers (#​36373)
  • fix(fmt): honor .editorconfig when formatting from stdin (#​36267)
  • fix(fs): require write permission for creating opens (#​36497)
  • fix(fs): use a private FsFile constructor token (#​36439)
  • fix(glob): retain valid gitignore rules after parse errors (#​36478)
  • fix(http): preserve keep-alive after reading request body (#​36690)
  • fix(http): truncate streaming responses to content length (#​36496)
  • fix(lsp): restrict registry completion endpoint schemes (#​36477)
  • fix(node): check reads during require resolution (#​36461)
  • fix(node): match domain uncaught exception handling (#​36475)
  • fix(node): preserve v8 deserializer view offsets (#​36460)
  • fix(node): validate Brotli encoder operations (#​36530)
  • fix(node): validate raw outgoing HTTP headers (#​36471)
  • fix(node/crypto): preserve binary key export passphrases (#​36443)
  • fix(node_crypto): apply RFC 7748 scalar decoding for X448 (#​36466)
  • fix(node_crypto): size cipher updates by byte length (#​36459)
  • fix(node_shim): preserve explicit argument delimiters (#​36435)
  • fix(npm): flatten single-resolution peers when building package ids (#​36608)
  • fix(npm): match peer fallbacks when checking peer resolution cache (#​36607)
  • fix(npm): remove arrayref dependency (#​36653)
  • fix(npm): resolve bare npm specifier when latest is too new for min dependency
    
age (#​36619)
  • fix(npm): use cached abbreviated metadata under --cached-only (#​36526)
  • fix(npm): validate tar paths before extraction (#​36468)
  • fix(os): serialize process environment updates (#​36074)
  • fix(permissions): check resolved IP against import deny list (#​36486)
  • fix(process): reject NULs in Windows arguments (#​36436)
  • fix(process): validate whitespace-only loader environment values (#​36431)
  • fix(publish): authenticate the package existence check so private packages
    
work (#​36656)
  • fix(publish): memoize publish order depth (#​36215)
  • fix(publish): reject invalid JSR package names (#​36474)
  • fix(repl): skip regex literals when validating input (#​36375)
  • fix(runtime): unregister dropped signal resources (#​36213)
  • fix(web): keep MessagePort resource identifiers private (#​36440)
  • fix: bugs in primordials related to ObjectCreate and
    ObjectDefineProperties (#​36541)
  • fix: prevent threadpool starvation with concurrent file locks (#​32789)
  • perf(core): grow the op driver's future arena on demand (#​36678)
  • perf(core): uncontended-borrow fast path for AsyncRefCell (#​36679)
  • perf(core): use index-based SafeArrayIterator in primordials (#​36543)
  • perf(core): zero-copy snapshot rehydration, drop bincode (#​36680)
  • perf(ext/web): apply the base64url op design to standard base64 (#​36422)
  • perf(ext/websocket): shrink the op_ws_create future (#​36681)
v2.9.5
Compare Source
  • feat(add): --unscoped flag to alias packages by their unscoped name (#​36319)
  • feat(task): add --members flag to run tasks in workspace members only (#​35748)
  • feat: add Blob/Body textStream() (#​35616)
  • feat: add experimental QuickJS backend (#​36194)
  • fix(bundle): avoid esbuild protocol deadlock (#​36427)
  • fix(bundle): respect runtime file permissions (#​36107)
  • fix(cjs): use loader sources for recursive analysis (#​36111)
  • fix(cli): escape control characters in external metadata (#​36198)
  • fix(core): don't resolve internal module imports with the user's import map
    
(#​36303)
  • fix(crypto): add "raw-secret" to KeyFormat type (#​35708)
  • fix(desktop): handle colored HMR URLs and page loads (#​36316)
  • fix(desktop): retain update signature verification op (#​36152)
  • fix(ext/crypto): allow deriveBits with length 0 (#​36283)
  • fix(ext/napi): polyfill uv_handle_size and uv_strerror (#​36308)
  • fix(ext/net): release completed QUIC stream resources (#​36247)
  • fix(ext/net): require --allow-sys for node:dns.getServers() (#​35941)
  • fix(ext/node): Node compat for web streams (#​36285)
  • fix(ext/node): apply backpressure in Readable.toWeb() (#​36321)
  • fix(ext/node): defer TLS write completion callback to avoid reentrancy panic
    
(#​35867)
  • fix(ext/node): don't fire http2 settings callback after session destroy
    
(#​36230)
  • fix(ext/node): gate constrained memory cgroup reads (#​36218)
  • fix(ext/node): handle pre-quoted shell arguments (#​36371)
  • fix(ext/node): implement node:test tags (#​36292)
  • fix(ext/node): implement util.diff (#​36289)
  • fix(ext/node): implement v8.promiseHooks API (#​36281)
  • fix(ext/node): sort fs.readdir entries to match Node.js (#​36341)
  • fix(ext/node): stop http2 file reads after stream close (#​36300)
  • fix(ext/node): store blocklist ranges compactly (#​36212)
  • fix(ext/node): support the fs flush option for writes (#​36290)
  • fix(ext/node): use signatureAlgorithm digest for X509 ECDSA verify (#​36326)
  • fix(ext/node_crypto): use named group exponent sizes (#​36347)
  • fix(ext/web): attach Node error codes to WHATWG API validation errors (#​36288)
  • fix(ext/websocket): disable HTTP/2 server push on wss upgrade path (#​36327)
  • fix(fetch): scope redirect-sensitive headers by origin (#​36361)
  • fix(ffi): reject resizable buffers in nonblocking calls (#​36259)
  • fix(fmt): accept xml and svg extensions for stdin (#​36149)
  • fix(fmt): update lax-markup to 0.3.2, lax-css and lax-sql to 0.3.0 (#​36397)
  • fix(http): preserve stripped headers across redirects (#​36360)
  • fix(inspector): validate request host headers (#​36348)
  • fix(net): cancel pending writes on stream close (#​36369)
  • fix(net): clean up concurrently dropped load-balanced listeners (#​36246)
  • fix(net): handle malformed DNS record text (#​36374)
  • fix(node): clean up Web Stream finished listeners (#​36227)
  • fix(node): retain consumed HTTP stream wrapper (#​36254)
  • fix(npm): ignore invalid package bin targets (#​36354)
  • fix(npm): tolerate malformed scripts field in packuments (#​36324)
  • fix(npmrc): match auth configs by authority and path (#​36359)
  • fix(outdated): don't report JSR pre-release versions as latest (#​36325)
  • fix(publish): report when the registry rejects a provenance attestation
    
(#​36404)
  • fix(resolver): don't treat deno eval modules as npm package files (#​36304)
  • fix(runtime): map notify's Windows missing-path error to NotFound (#​35864)
  • fix(sync-types): add reason to too_many_arguments allows (lint)
  • fix(telemetry): handle reentrant attribute conversion (#​36256)
  • fix(webgpu): own mapped range backing stores (#​36257)
  • fix(webstorage): preserve Storage constructor name (#​35944)
  • fix: capitalize IP in help text (#​36170)
  • fix: upgrade deno_task_shell to 0.33.3 (#​36406)
  • fix: wire no-legacy-abort unstable flag from deno.json config (#​36312)
  • perf(core): run the common-path tick drain in Rust (#​36157)
  • perf(ext/node): bypass dns lookup on literal IPs in udp send (#​35909)
  • perf(ext/web): implement base64url encode/decode as simdutf ops (#​36398)
  • perf(fs): open files on the blocking pool in async readFile/writeFile (#​36160)
  • perf: order startup functions in release builds (#​36219)
  • perf: reduce eager module evaluation at startup (#​36331)
  • perf: remove Linux unwind tables from release artifacts (#​36265)
v2.9.4
Compare Source
  • feat(desktop): enable --hmr for React Router (#​35900)
  • feat(ext/node): add a byteLength/length parameter to
    
Buffer.indexOf/lastIndexOf/includes (#​35872)
  • feat(ext/node): support raw chacha20 cipher in crypto.createCipheriv (#​36016)
  • feat: upgrade V8 to 150.2.0 (#​36098)
  • fix(add): support --minimum-dependency-age flag in deno add/remove (#​36099)
  • fix(cache): store Web Cache under origin data (#​36145)
  • fix(canvas): require FFI permission for native window handles (#​36080)
  • fix(clean): reject symlinked node_modules cleanup roots (#​36190)
  • fix(compile): bump libsui to 0.16.4 to fix Windows resource SizeOfImage
    
(#​36242)
  • fix(core): allow dynamic imports during cached module evaluation (#​36258)
  • fix(core): bound error graph conversion (#​36070)
  • fix(core): enforce JSON requests in FsModuleLoader (#​36137)
  • fix(core): handle malformed error constructors (#​36071)
  • fix(core): stop rejected dynamic imports before loading (#​36136)
  • fix(desktop): make BrowserWindow bindings typeable (#​35907)
  • fix(desktop): preserve binding wrappers after lazy op upgrade (#​36065)
  • fix(desktop): strip runtime extension from app name (#​36060)
  • fix(ext/napi): cancel async sends after close (#​36077)
  • fix(ext/napi): scope callback info per invocation (#​36076)
  • fix(ext/node): apply backpressure to http2 stream writes (#​36044)
  • fix(ext/node): don't leave 0-byte .heapsnapshot files near the heap limit
    
(#​36113)
  • fix(ext/node): implement worker_threads.locks via Web Locks (#​35963)
  • fix(ext/node): node:sqlite backup() and deserialize() argument validation
    
(#​36127)
  • fix(ext/node): retry DNS query when its per-attempt timeout fires (#​35955)
  • fix(ext/node): stop http2 file reads on stream close (#​36061)
  • fix(ext/web): handle failed webtransport datagram setup (#​36067)
  • fix(ext/webidl): implement async_sequence for ReadableStream.from (#​35976)
  • fix(fetch): bound multipart part headers (#​36096)
  • fix(fmt): keep embedded CSS custom property indentation stable (#​35949)
  • fix(fs): require sys permission for umask (#​36222)
  • fix(http): preserve trust proxy environment setting (#​36073)
  • fix(init): validate temporary node_modules parent (#​36142)
  • fix(jupyter): report codemirror_mode as a string (#​36241)
  • fix(loader): reject non-JSON modules for JSON imports (#​36135)
  • fix(napi): synchronize external string finalizers (#​36078)
  • fix(net): clean up cancellation resources on early errors (#​36229)
  • fix(net): limit WebTransport handshake frame buffering (#​36068)
  • fix(node_http2): clean up destroyed sessions (#​36043)
  • fix(node_resolver): handle CJS filesystem path edge cases (#​36112)
  • fix(node_stream): handle Web Stream adapter errors (#​36193)
  • fix(npm): avoid following lock poll symlinks (#​36192)
  • fix(npm): download tarballs from the configured registry instead of
    
registry.npmjs.org (#​36187)
  • fix(npm): reject symlinked package materialization dirs (#​36191)
  • fix(outdated): keep type-only dependencies in the lockfile (#​36140)
  • fix(pack): support file paths longer than the tar name field (#​36105)
  • fix(permissions): escape bidi controls in prompts (#​36195)
  • fix(process): avoid collisions in Windows stdio pipe names (#​36081)
  • fix(publish): constrain generated source rewrites (#​36109)
  • fix(release): insert into versions.json in semver order (#​36097)
  • fix(rt): isolate extracted native addons (#​36144)
  • fix(runtime): bridge console to the inspector regardless of --inspect flag
    
(#​35795)
  • fix(runtime): give worker isolate threads the stack size we report (#​36114)
  • fix(test): escape control characters in test names (#​36196)
  • fix(tests): make npm test registry tolerate a bad advisories request body
    
(#​36138)
  • fix(tls): resolve sni requests concurrently (#​36062)
  • fix(update): don't downgrade lockfile when npm cache is stale (#​35904)
  • fix(webtransport): avoid url parse panic (#​36066)
  • fix(webtransport): validate certificate dates (#​36069)
  • fix(x): honor --minimum-dependency-age and deno.json minimumDependencyAge
    
(#​36025)
  • fix: discover config file for jsr: entrypoints (#​35838)
  • fix: handle UTF-16 diagnostic columns (#​36028)
  • perf(core): avoid duplicating lazy ESM snapshot sources (#​36262)
  • perf(snapshot): mangle internal source identifiers (#​36263)
  • perf: compress bundled AppImage runtimes (#​36261)
  • perf: use FxHash for hot internal hash maps (#​36100)
v2.9.3
Compare Source
  • feat(cli): deno add --no-save and --save-optional (#​36039)
  • feat(cli): add --min-dep-age alias (#​35914)
  • feat(compile): support aarch64-pc-windows-msvc target (#​36004)
  • feat(ext/fetch): add http2MaxHeaderListSize option to
    Deno.createHttpClient (#​33194)
  • fix(bundle): preserve raw imports in watch mode (#​36040)
  • fix(canvas): don't hold SurfaceData mut borrow over window resize (#​35993)
  • fix(config): reject out-of-range minimum dependency ages (#​36051)
  • fix(core): block user ext imports after resolution (#​36012)
  • fix(core): deactivate idle TTY write handles (#​35886)
  • fix(core): restrict extension loaders to internal modules (#​36013)
  • fix(core): root slow op string coercions (#​36018)
  • fix(desktop): don't let op_desktop_send_error_report target caller-supplied
    
URLs (#​35940)
  • fix(ext/http): don't panic recycling cancelled record on native response
    
(#​36053)
  • fix(ext/napi): don't free threadsafe function on abort while refs remain
    
(#​36032)
  • fix(ext/napi): don't resurrect a released threadsafe function in acquire
    
(#​36054)
  • fix(ext/node): add deprecation warning for Duplex.toWeb({ type }) DEP0201
    
(#​35972)
  • fix(ext/node): guard sqlite deserialize during callbacks (#​36023)
  • fix(ext/node): handle UTF-16 assert source positions (#​36029)
  • fix(ext/node): handle sqlite conversion failures (#​36024)
  • fix(ext/node): respect base64 buffer ranges (#​36030)
  • fix(ext/process): don't double-close extra stdio pipe handles on Windows
    
(#​36005)
  • fix(lsp): respect lint rule exclusion for no-slow-types diagnostics (#​35924)
  • fix(node): stop active read on stream close to avoid leaking Socket/TCPWrap
    
(#​35898)
  • fix(node_http2): keep header validation enabled (#​36042)
  • fix(node_http2): validate serialized headers (#​36041)
  • fix(npm): don't fetch registry info for deprecated packages under
    
--cached-only (#​35903)
  • fix(npm): normalize path in BYONM read permission check (#​35882)
  • fix(pm): hint about minimumDependencyAge when no version is old enough
    
(#​35890)
  • fix(release): only strip Mach-O signature for x86_64-apple-darwin (#​35902)
  • fix(release): strip Mach-O signature before patchver on apple targets (#​35897)
  • fix(runtime): guard usage op output buffers (#​36020)
  • fix(serde_v8): handle deserialization exceptions (#​36021)
  • fix(web): guard encodeInto fallback result buffer (#​36019)
  • fix(web): support Event subclasses with readonly toStringTag (#​35920)
  • fix(worker): remove imported ops during bootstrap (#​36014)
  • fix: don't print duplicate parse diagnostics (#​35933)
  • perf(ext/crypto): batch randomUUID generation (#​35953)
  • perf(ext/fetch): remove quadratic line buffering in EventSource (#​35881)
  • perf(ext/node): cache compiled glob matchers + bump bundled minimatch to
    
10.2.5 (#​35873)
  • perf(ext/node): fast path fs cp (#​35856)
  • perf(ext/node): right-size small socket reads instead of pinning the 64KB slab
    
(#​35779)
  • perf(ext/node): speed up sqlite.StatementSync.all() and run() (#​35863)
  • perf(ext/web): avoid copy-back in op_base64_atob large path (#​35862)
v2.9.2
Compare Source
  • feat(desktop): autodetect React Router framework (#​35557)
  • feat(desktop): enable --hmr for Vite and Nuxt (#​35851)
  • feat(desktop): run HMR by framework dev server (#​35722)
  • feat(desktop): window opacity and transparency APIs (#​35646)
  • feat(desktop): wire --exclude-unused-npm through to compile (#​35740)
  • feat(ext/node): implement v8.setHeapSnapshotNearHeapLimit (#​35694)
  • feat(ext/telemetry): honor OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT (#​35068)
  • feat(inspector): start inspector server on SIGUSR1 (#​35738)
  • feat(node): implement getTestContext() in node:test (#​35678)
  • feat: support wildcard patterns in minimumDependencyAge.exclude (#​35746)
  • fix(check): don't interleave errors with "Check" lines in a workspace (#​35687)
  • fix(compile): bump libsui to 0.16.1 to survive eu-strip in flatpak (#​35699)
  • fix(compile): bump libsui to 0.16.3 to fix segfault under gVisor/Cloud Run
    
(#​35701)
  • fix(core): don't drain microtasks in mod_evaluate_sync mid-evaluation (#​35707)
  • fix(coverage): count a branch-junction line as covered when either arm runs
    
(#​35858)
  • fix(coverage): don't count V8 block-boundary gaps as branches (#​35767)
  • fix(coverage): don't let a trailing comment change a line's hit count (#​35741)
  • fix(deploy): disable config discovery and refresh the cached CLI version
    
(#​35754)
  • fix(desktop): attribute bind calls to the registering window id (#​35654)
  • fix(desktop): honor desktop.backend from deno.json (#​35815
  • fix(desktop): pin @​std/http in generated Vite SPA entrypoint + add hermetic
    
compile test (#​35676)
  • fix(desktop): rename launcher to so it self-loads the runtime (#​35709)
  • fix(desktop): run framework build step before bundling output (#​35603)
  • fix(desktop): surface compiled-app startup errors instead of exiting silently
    
(#​35567)
  • fix(dprint): exclude tools/lzld submodule (#​35778)
  • fix(ext): throw DataCloneError when posting non-serializable values (#​35604)
  • fix(ext/cache): implement Cache.keys() (#​35455)
  • fix(ext/fetch): reject transport failures with Node's "fetch failed" shape
    
(#​35618)
  • fix(ext/http): error non-Uint8Array response streams (#​35783)
  • fix(ext/http): honor explicit content-length header on HEAD responses (#​35728)
  • fix(ext/http): point legacy abort warning at docs.deno.com/go link (#​35713)
  • fix(ext/napi): add uv_cond_* polyfills for native addons (#​35536)
  • fix(ext/net): abort pending Deno.connect during DNS resolution (#​35729)
  • fix(ext/node): allow adopting inherited extra stdio TCP fds (#​35805)
  • fix(ext/node): don't panic when main module path has invalid percent-encoding
    
(#​35534)
  • fix(ext/node): don't schedule a pause in inspector.waitForDebugger() (#​35796)
  • fix(ext/node): flush StringDecoder in cipher final() for stream ciphers
    
(#​35800)
  • fix(ext/node): mark TLSWrap dead on teardown before tls_conn check (#​35706)
  • fix(ext/node): report all active resources from process.getActiveResourcesInfo
    
(#​35532)
  • fix(ext/node): require --allow-net=unix for node:net unix sockets (#​35835)
  • fix(ext/node): support fd 3 pipes in spawned Deno children (#​34133)
  • fix(ext/signals): unregister handler when SignalStream is dropped (#​35832)
  • fix(ext/web): resolve pending BYOB read when teeing a byte stream that closes
    
(#​35828)
  • fix(fmt): format Astro inline scripts as TypeScript (#​35852)
  • fix(fs): support pre-1970 (negative) timestamps in FsStat (#​35517)
  • fix(inspector): close WebSocket connections when the runtime is torn down
    
(#​35791)
  • fix(install): don't panic on jsr specifier with a tag like @​latest (#​35605)
  • fix(install): don't write through hardlinks when copying package files
    
(#​35735)
  • fix(install): make setup cache packages hash deterministic (#​35825)
  • fix(install): resolve lifecycle script dependency bins against the hoisted
    
layout (#​35762)
  • fix(install): support uninstalling multiple global packages (#​29352)
  • fix(lint): don't error on non-analyzable package exports like CSS files
    
(#​35732)
  • fix(lint): include config file in workspace member invalid version error
    
(#​35759)
  • fix(lsp): fix CPU busy loop by creating tokio runtime before JsRuntime in TSC
    
thread (#​35595)
  • fix(node/fs): implement followSymlinks option for fs.glob() (#​35524)
  • fix(npm): don't re-fetch packuments on every run when registry has no time
    
data (#​35834)
  • fix(npm): don't retain full npm exports value + fix --watch memory leak
    
(#​35677)
  • fix(npm): widen node_modules lock staleness margin to avoid false preemption
    
(#​35806)
  • fix(permissions): split comma-separated paths in --ignore-read (#​35661)
  • fix(test): run Node-API finalizers at test worker shutdown (#​35695)
  • fix(watch): accept watch paths in fmt/lint/bench --watch (#​35720)
  • fix(watch): execute preload modules under --watch (#​35792)
  • fix(watch): terminate on Ctrl+C while blocked in synchronous code (#​35826)
  • fix: enable rusqlite "fallible_uint" feature in workspace deps (#​35681)
  • perf(config): literal-suffix reject and prune irrelevant globs per base
    
(#​35688)
  • perf(core): defer residual lazy source registration (#​35731)
  • perf(ext/fetch): stream wasm bytes to the compiler from Rust (#​35704)
  • perf(ext/node): remove per-chunk copying on TLSWrap data paths (#​35705)
  • perf(ext/node): zero-copy async Buffer writes on the stream_wrap path (#​35780)
  • perf(ext/web): identity pipeThrough writable bypass (#​35799)
  • perf(ext/web): persistent pump for the generic pipeTo loop (#​35813)
  • perf(ext/web): pump readableStreamCollectIntoUint8Array with a persistent read
    
request (#​35790)
  • perf(ext/web): reduce per-chunk allocations on stream read and tee paths
    
(#​35786)
  • perf(ext/web): reduce per-chunk overhead in Web Streams (#​35773)
  • perf(ext/web): run synchronous pull completion without a microtask hop
    
(#​35788)
  • perf(ext/web): shared underlying-source algorithms, hoist resource-bridge read
    
request (#​35810)
  • perf(ext/web): sync fast path for ReadableStream async iterator next()
    
(#​35842)
  • perf(ext/web): synchronous transform fast path for TransformStream (#​35844)
  • perf(npm): index packuments with SIMD JSON scanner (#​35698)
  • perf(streams): offload resource-backed pipeTo to Rust via op_pipe (#​35689)
  • perf(workers): optimize message passing (#​35110)
  • perf(workers): return raw buffer from receive ops for no-transferable messages
    
(#​35756)
  • perf: use V8 native queueMicrotask instead of op (#​35787)
v2.9.1
Compare Source
  • feat(check): add --desktop flag to type-check for deno desktop (#​35644)
  • feat(desktop): register deep-link URL schemes at bundle time (#​35466)
  • feat: update laufey to 0.5.0 (#​35663)
  • fix(bundle): emit CSSStyleSheet for CSS raw imports (#​35598)
  • fix(cache): skip checksums for cached 404 entries (#​35526)
  • fix(config): don't strip workspace-member includes from deploy config (#​34788)
  • fix(core): apply deferred fast-call op upgrade to the captured bootstrap clone
    
(#​35630)
  • fix(core): prevent shared-buffer timer expiry race from losing timers (#​35312)
  • fix(desktop): default window title to app name instead of laufey_webview
    
(#​35541)
  • fix(desktop): detect SvelteKit adapter-node and error on unsupported adapters
    
(#​35533)
  • fix(desktop): discover deno.json in the project dir for deno desktop .
    
(#​35660)
  • fix(desktop): don't delete user directories that collide with app name
    
(#​35513)
  • fix(desktop): repair webview and raw backends on Windows (laufey v0.4.1)
    
(#​35566)
  • fix(desktop): resolve launcher symlink so .deb/.rpm apps find the backend
    
(#​35632)
  • fix(desktop): set LAUFEY_RUNTIME_PATH in Linux app launcher (#​35580)
  • fix(desktop): show macOS tray icon in bundled .app launched via Finder
    
(#​35626)
  • fix(desktop): use zstd for appimage squashfs (#​35506)
  • fix(doc): strip blockquote > prefixes from JSDoc code blocks (#​34866)
  • fix(ext/fetch): include path and reason when fetching a file:// URL fails
    
(#​35606)
  • fix(ext/node): check permissions when binding node:net unix sockets (#​35564)
  • fix(ext/node): export report as named export from node:process (#​35400)
  • fix(ext/node): mock.reset() should also reset MockTimers (#​35588)
  • fix(ext/node): pass Deno subcommands through child_process spawn (#​35599)
  • fix(ext/node): send TLS close_notify on JS stream-backed socket shutdown
    
(#​35582)
  • fix(ext/node_sqlite): keep attach limit capped under scoped permissions
    
(#​35232)
  • fix(ext/web): make URL and URLSearchParams non-serializable (#​35423)
  • fix(fmt): stable formatting of multi-line html/svg tagged templates (#​35540)
  • fix(inspector): support Chrome worker debugging (#​35629)
  • fix(install): pin pre-release npm versions added via dist-tag (#​35586)
  • fix(jupyter): register stdin peer only after ZMTP handshake completes (#​35585)
  • fix(lib): add PerformanceObserver and PerformanceObserverEntryList types
    
(#​35640)
  • fix(libs/http): add missing write_flushed in
    poll_start_fixed_response_with (#​35649)
  • fix(lsp): watch .wasm files for changes (#​35560)
  • fix(node): load graph-backed TypeScript modules synchronously (#​35527)
  • fix(npm): decode percent-encoded subpath of npm specifiers (#​35505)
  • fix(npm): fall back for age-filtered npm dist-tags (#​35561)
  • fix(npm): normalize bin names with path separators (#​35555)
  • fix(npm): realpath npm bin main module (#​35554)
  • fix(npm): show scoped-registry auth hint on tarball 404 (#​35514)
  • fix(npm): use case-insensitive match for trust-policy-exclude (#​35520)
  • fix(rt_desktop): reveal initial window on first paint (startup black flash)
    
(#​35620)
  • fix: correct property name for JSX new line configuration in schema file
    
(#​35565)
  • fix: resolve LAUFEY_VERSION from crate-local Cargo.lock during publish
    
(#​35507)
  • fix: show clear error when V8 fails to create worker threads (#​32856)
  • perf(core/webidl): check next method outside of iterator loop (#​35480)
  • perf(ext/fetch): fast-path Response reconstruction (#​35495)
  • perf(ext/http): coalesce chunked response writes into a single write (#​35523)
v2.9.0
Compare Source
Read more: http://deno.com/blog/v2.9
  • feat(bundle): add --declaration flag to generate rolled-up .d.ts files
    
(#​33838)
  • feat(cli): add deno link and deno unlink subcommands (#​34359)
  • feat(cli): add deno watch subcommand (#​35301)
  • feat(cli): add deno list subcommand to list declared dependencies (#​34972)
  • feat(cli): auto-migrate pnpm-workspace.yaml on resolution failure (#​34993)
  • feat(cli): provide a node on PATH when Node.js is not installed (#​34969)
  • feat(compile): persist Web Storage/KV in a per-app data directory (#​34618)
  • feat(coverage): add configurable coverage thresholds (#​35056)
  • feat(desktop): --compress for self-extracting app bundles (#​35420)
  • feat(desktop): add Linux .deb and .rpm installer output formats (#​35296)
  • feat(desktop): add Windows .msi installer output format (#​35378)
  • feat(desktop): autodetect Vite framework (#​35470)
  • feat(desktop): default UI backend to webview (#​35442)
  • feat(ext/crypto): support remaining modern WebCrypto algorithms (#​35223)
  • feat(ext/http): deprecation warning for legacy request abort (#​34397)
  • feat(ext/net): implement Happy Eyeballs for Deno.connect and
    Deno.connectTls (#​31726)
  • feat(ext/node): implement node:test mock.module (#​35329)
  • feat(ext/node): implement node:test mock.timers (#​33946)
  • feat(ext/web): web locks api (#​31166)
  • feat(fmt): add sortNamedImports and sortNamedExports options (#​33313)
  • feat(fmt): infer config from .editorconfig (#​34071)
  • feat(fmt): use lax-css for CSS, SCSS, and Less (#​35160)
  • feat(fmt): use lax-markup for HTML, XML, SVG, and components ([#​35174](https://redirect.gi
✂ Note
PR body was truncated to here.
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.3chore(deps): update dependency deno to v2.7.4Mar 5, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
5 times, most recently
from
906567b to
f63f10fCompareMarch 11, 2026 13:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.4chore(deps): update dependency deno to v2.7.5Mar 11, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f63f10f to
f46c778CompareMarch 18, 2026 12:36
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.5chore(deps): update dependency deno to v2.7.6Mar 18, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f46c778 to
62b45e6CompareMarch 19, 2026 17:56
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.6chore(deps): update dependency deno to v2.7.7Mar 19, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
62b45e6 to
f45b439CompareMarch 20, 2026 21:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.7chore(deps): update dependency deno to v2.7.8Mar 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
a4f65a8 to
314e963CompareMarch 27, 2026 13:13
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.8chore(deps): update dependency deno to v2.7.9Mar 27, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
314e963 to
12f833cCompareMarch 31, 2026 20:45
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.9chore(deps): update dependency deno to v2.7.10Mar 31, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
85f743e to
91c4835CompareApril 4, 2026 09:12
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.10chore(deps): update dependency deno to v2.7.11Apr 4, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
91c4835 to
fd15c1fCompareApril 10, 2026 01:55
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.11chore(deps): update dependency deno to v2.7.12Apr 10, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5683292 to
b4efd08CompareApril 12, 2026 09:55
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
1a1eb22 to
95cdc65CompareApril 22, 2026 18:08
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.12chore(deps): update dependency deno to v2.7.13Apr 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5764cc4 to
694818bCompareMay 17, 2026 16:59
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
d85b44b to
4e3fd3eCompareMay 28, 2026 19:03
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.14chore(deps): update dependency deno to v2.8.1May 28, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
4e3fd3e to
7920c67CompareMay 30, 2026 05:30
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.1chore(deps): update deno monorepo to v2.8.1Jun 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
7920c67 to
e5b5cc9CompareJune 3, 2026 14:41
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.1chore(deps): update deno monorepo to v2.8.2Jun 3, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
dedcb9d to
f647f79CompareJune 11, 2026 04:48
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f647f79 to
6c55738CompareJune 12, 2026 00:54
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.2chore(deps): update deno monorepo to v2.8.3Jun 12, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
fa2f4ac to
a39b68bCompareJune 18, 2026 22:51
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.3chore(deps): update deno monorepoJun 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
13b132f to
e6e2547CompareJune 23, 2026 19:31
@renovaterenovateBot
changed the title
chore(deps): update deno monorepochore(deps): update dependency deno to v2.8.3Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
e6e2547 to
895a0bbCompareJune 25, 2026 18:49
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.3chore(deps): update dependency deno to v2.9.0Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
895a0bb to
5fb112cCompareJune 27, 2026 02:14
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.9.0chore(deps): update dependency deno to v2.9.1Jul 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
56218c8 to
5798b64CompareJuly 8, 2026 19:59
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@w3nl

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
chore(deps): update dependency deno to v2.9.6 - #489
Open
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Open
chore(deps): update dependency deno to v2.9.6#489
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Conversation
@renovate
@renovaterenovateBot
commented
Mar 4, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
ℹ️ Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
PackageChangeAgeConfidence
deno (source)2.7.1 → 2.9.6ageconfidence
Release Notes
denoland/deno (deno)
v2.9.6
Compare Source
  • feat(compressible): add support for 'text/x-component' content type (#​36450)
  • feat(desktop): clipboard api (#​35750)
  • feat(desktop): support checked, icon, and tooltip on menu items (#​36649)
  • fix(bundle): isolate esbuild downloads from workspace registries (#​36467)
  • fix(cache): combine duplicate headers for Vary matching (#​36476)
  • fix(cli_parser): remove orphaned sync-types parser
  • fix(core): cap adaptive buffer initial allocations (#​36432)
  • fix(core): make Unix pipe fd ownership explicit (#​36353)
  • fix(core): make user timer waker state thread-safe (#​36495)
  • fix(coverage): compare a range against a line in V8's units (#​36613)
  • fix(crypto): preserve RSA-OAEP label bytes (#​36441)
  • fix(desktop): keep dots in the app name when resolving the runtime library
    
(#​36006)
  • fix(desktop): keep the macOS bundle signature valid unless an update is
    
applied (#​36574)
  • fix(desktop): never block the JS thread on the error-report dialog (#​36575)
  • fix(desktop): propagate deno.json version and license into packaged installers
    
(#​36577)
  • fix(desktop): run Vite-based HMR dev servers inside the desktop runtime
    
(#​36488)
  • fix(desktop): transport binding args and results as DesktopValue so Uint8Array
    
survives (#​36573)
  • fix(ext/fetch): enforce permissions for proxy transports (#​36217)
  • fix(ext/fetch): only retry transport errors on pooled connections (#​36415)
  • fix(ext/fetch): raise default HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE to 256KB
    
(#​36558)
  • fix(ext/http): keep request body readable after response is sent (#​36629)
  • fix(ext/http): route invalid async responses to onError (#​36437)
  • fix(ext/napi): don't invoke napi_wrap finalizer twice at teardown (#​36556)
  • fix(ext/napi): run JS-calling finalizers safely, NULL string result, and
    
Float16Array (#​36572)
  • fix(ext/napi): surface OS error and path on addon load failure (#​36630)
  • fix(ext/napi): track pending finalizers by identity (#​36551)
  • fix(ext/napi): wake the event loop at the next uv_timer deadline (#​36559)
  • fix(ext/net): skip unsupported DNS records in ANY queries (#​36650)
  • fix(ext/node): accept string ports in dns.lookupService (#​36546)
  • fix(ext/node): build the proxied request target with the URL parser (#​36557)
  • fix(ext/node): do not resume client TLS sessions unless requested (#​36592)
  • fix(ext/node): fix perf_hooks detail.req.url proxied path duplication (#​36407)
  • fix(ext/node): handle readv short reads (#​36211)
  • fix(ext/node): require sys permission for inspector.open (#​36465)
  • fix(ext/node_sqlite): invalidate sessions on database close (#​36633)
  • fix(ext/tls): avoid panic for mismatched client certificate and key (#​36457)
  • fix(ext/web): clean up abort handlers when listeners are removed (#​36226)
  • fix(ext/web): close transfer MessagePort when a transferred readable is
    
cancelled (#​36270)
  • fix(ext/web): snapshot SharedArrayBuffer input in TextDecoder.decode()
    
(#​36611)
  • fix(fetch): require an initial multipart boundary (#​36470)
  • fix(ffi): validate struct return buffers (#​36373)
  • fix(fmt): honor .editorconfig when formatting from stdin (#​36267)
  • fix(fs): require write permission for creating opens (#​36497)
  • fix(fs): use a private FsFile constructor token (#​36439)
  • fix(glob): retain valid gitignore rules after parse errors (#​36478)
  • fix(http): preserve keep-alive after reading request body (#​36690)
  • fix(http): truncate streaming responses to content length (#​36496)
  • fix(lsp): restrict registry completion endpoint schemes (#​36477)
  • fix(node): check reads during require resolution (#​36461)
  • fix(node): match domain uncaught exception handling (#​36475)
  • fix(node): preserve v8 deserializer view offsets (#​36460)
  • fix(node): validate Brotli encoder operations (#​36530)
  • fix(node): validate raw outgoing HTTP headers (#​36471)
  • fix(node/crypto): preserve binary key export passphrases (#​36443)
  • fix(node_crypto): apply RFC 7748 scalar decoding for X448 (#​36466)
  • fix(node_crypto): size cipher updates by byte length (#​36459)
  • fix(node_shim): preserve explicit argument delimiters (#​36435)
  • fix(npm): flatten single-resolution peers when building package ids (#​36608)
  • fix(npm): match peer fallbacks when checking peer resolution cache (#​36607)
  • fix(npm): remove arrayref dependency (#​36653)
  • fix(npm): resolve bare npm specifier when latest is too new for min dependency
    
age (#​36619)
  • fix(npm): use cached abbreviated metadata under --cached-only (#​36526)
  • fix(npm): validate tar paths before extraction (#​36468)
  • fix(os): serialize process environment updates (#​36074)
  • fix(permissions): check resolved IP against import deny list (#​36486)
  • fix(process): reject NULs in Windows arguments (#​36436)
  • fix(process): validate whitespace-only loader environment values (#​36431)
  • fix(publish): authenticate the package existence check so private packages
    
work (#​36656)
  • fix(publish): memoize publish order depth (#​36215)
  • fix(publish): reject invalid JSR package names (#​36474)
  • fix(repl): skip regex literals when validating input (#​36375)
  • fix(runtime): unregister dropped signal resources (#​36213)
  • fix(web): keep MessagePort resource identifiers private (#​36440)
  • fix: bugs in primordials related to ObjectCreate and
    ObjectDefineProperties (#​36541)
  • fix: prevent threadpool starvation with concurrent file locks (#​32789)
  • perf(core): grow the op driver's future arena on demand (#​36678)
  • perf(core): uncontended-borrow fast path for AsyncRefCell (#​36679)
  • perf(core): use index-based SafeArrayIterator in primordials (#​36543)
  • perf(core): zero-copy snapshot rehydration, drop bincode (#​36680)
  • perf(ext/web): apply the base64url op design to standard base64 (#​36422)
  • perf(ext/websocket): shrink the op_ws_create future (#​36681)
v2.9.5
Compare Source
  • feat(add): --unscoped flag to alias packages by their unscoped name (#​36319)
  • feat(task): add --members flag to run tasks in workspace members only (#​35748)
  • feat: add Blob/Body textStream() (#​35616)
  • feat: add experimental QuickJS backend (#​36194)
  • fix(bundle): avoid esbuild protocol deadlock (#​36427)
  • fix(bundle): respect runtime file permissions (#​36107)
  • fix(cjs): use loader sources for recursive analysis (#​36111)
  • fix(cli): escape control characters in external metadata (#​36198)
  • fix(core): don't resolve internal module imports with the user's import map
    
(#​36303)
  • fix(crypto): add "raw-secret" to KeyFormat type (#​35708)
  • fix(desktop): handle colored HMR URLs and page loads (#​36316)
  • fix(desktop): retain update signature verification op (#​36152)
  • fix(ext/crypto): allow deriveBits with length 0 (#​36283)
  • fix(ext/napi): polyfill uv_handle_size and uv_strerror (#​36308)
  • fix(ext/net): release completed QUIC stream resources (#​36247)
  • fix(ext/net): require --allow-sys for node:dns.getServers() (#​35941)
  • fix(ext/node): Node compat for web streams (#​36285)
  • fix(ext/node): apply backpressure in Readable.toWeb() (#​36321)
  • fix(ext/node): defer TLS write completion callback to avoid reentrancy panic
    
(#​35867)
  • fix(ext/node): don't fire http2 settings callback after session destroy
    
(#​36230)
  • fix(ext/node): gate constrained memory cgroup reads (#​36218)
  • fix(ext/node): handle pre-quoted shell arguments (#​36371)
  • fix(ext/node): implement node:test tags (#​36292)
  • fix(ext/node): implement util.diff (#​36289)
  • fix(ext/node): implement v8.promiseHooks API (#​36281)
  • fix(ext/node): sort fs.readdir entries to match Node.js (#​36341)
  • fix(ext/node): stop http2 file reads after stream close (#​36300)
  • fix(ext/node): store blocklist ranges compactly (#​36212)
  • fix(ext/node): support the fs flush option for writes (#​36290)
  • fix(ext/node): use signatureAlgorithm digest for X509 ECDSA verify (#​36326)
  • fix(ext/node_crypto): use named group exponent sizes (#​36347)
  • fix(ext/web): attach Node error codes to WHATWG API validation errors (#​36288)
  • fix(ext/websocket): disable HTTP/2 server push on wss upgrade path (#​36327)
  • fix(fetch): scope redirect-sensitive headers by origin (#​36361)
  • fix(ffi): reject resizable buffers in nonblocking calls (#​36259)
  • fix(fmt): accept xml and svg extensions for stdin (#​36149)
  • fix(fmt): update lax-markup to 0.3.2, lax-css and lax-sql to 0.3.0 (#​36397)
  • fix(http): preserve stripped headers across redirects (#​36360)
  • fix(inspector): validate request host headers (#​36348)
  • fix(net): cancel pending writes on stream close (#​36369)
  • fix(net): clean up concurrently dropped load-balanced listeners (#​36246)
  • fix(net): handle malformed DNS record text (#​36374)
  • fix(node): clean up Web Stream finished listeners (#​36227)
  • fix(node): retain consumed HTTP stream wrapper (#​36254)
  • fix(npm): ignore invalid package bin targets (#​36354)
  • fix(npm): tolerate malformed scripts field in packuments (#​36324)
  • fix(npmrc): match auth configs by authority and path (#​36359)
  • fix(outdated): don't report JSR pre-release versions as latest (#​36325)
  • fix(publish): report when the registry rejects a provenance attestation
    
(#​36404)
  • fix(resolver): don't treat deno eval modules as npm package files (#​36304)
  • fix(runtime): map notify's Windows missing-path error to NotFound (#​35864)
  • fix(sync-types): add reason to too_many_arguments allows (lint)
  • fix(telemetry): handle reentrant attribute conversion (#​36256)
  • fix(webgpu): own mapped range backing stores (#​36257)
  • fix(webstorage): preserve Storage constructor name (#​35944)
  • fix: capitalize IP in help text (#​36170)
  • fix: upgrade deno_task_shell to 0.33.3 (#​36406)
  • fix: wire no-legacy-abort unstable flag from deno.json config (#​36312)
  • perf(core): run the common-path tick drain in Rust (#​36157)
  • perf(ext/node): bypass dns lookup on literal IPs in udp send (#​35909)
  • perf(ext/web): implement base64url encode/decode as simdutf ops (#​36398)
  • perf(fs): open files on the blocking pool in async readFile/writeFile (#​36160)
  • perf: order startup functions in release builds (#​36219)
  • perf: reduce eager module evaluation at startup (#​36331)
  • perf: remove Linux unwind tables from release artifacts (#​36265)
v2.9.4
Compare Source
  • feat(desktop): enable --hmr for React Router (#​35900)
  • feat(ext/node): add a byteLength/length parameter to
    
Buffer.indexOf/lastIndexOf/includes (#​35872)
  • feat(ext/node): support raw chacha20 cipher in crypto.createCipheriv (#​36016)
  • feat: upgrade V8 to 150.2.0 (#​36098)
  • fix(add): support --minimum-dependency-age flag in deno add/remove (#​36099)
  • fix(cache): store Web Cache under origin data (#​36145)
  • fix(canvas): require FFI permission for native window handles (#​36080)
  • fix(clean): reject symlinked node_modules cleanup roots (#​36190)
  • fix(compile): bump libsui to 0.16.4 to fix Windows resource SizeOfImage
    
(#​36242)
  • fix(core): allow dynamic imports during cached module evaluation (#​36258)
  • fix(core): bound error graph conversion (#​36070)
  • fix(core): enforce JSON requests in FsModuleLoader (#​36137)
  • fix(core): handle malformed error constructors (#​36071)
  • fix(core): stop rejected dynamic imports before loading (#​36136)
  • fix(desktop): make BrowserWindow bindings typeable (#​35907)
  • fix(desktop): preserve binding wrappers after lazy op upgrade (#​36065)
  • fix(desktop): strip runtime extension from app name (#​36060)
  • fix(ext/napi): cancel async sends after close (#​36077)
  • fix(ext/napi): scope callback info per invocation (#​36076)
  • fix(ext/node): apply backpressure to http2 stream writes (#​36044)
  • fix(ext/node): don't leave 0-byte .heapsnapshot files near the heap limit
    
(#​36113)
  • fix(ext/node): implement worker_threads.locks via Web Locks (#​35963)
  • fix(ext/node): node:sqlite backup() and deserialize() argument validation
    
(#​36127)
  • fix(ext/node): retry DNS query when its per-attempt timeout fires (#​35955)
  • fix(ext/node): stop http2 file reads on stream close (#​36061)
  • fix(ext/web): handle failed webtransport datagram setup (#​36067)
  • fix(ext/webidl): implement async_sequence for ReadableStream.from (#​35976)
  • fix(fetch): bound multipart part headers (#​36096)
  • fix(fmt): keep embedded CSS custom property indentation stable (#​35949)
  • fix(fs): require sys permission for umask (#​36222)
  • fix(http): preserve trust proxy environment setting (#​36073)
  • fix(init): validate temporary node_modules parent (#​36142)
  • fix(jupyter): report codemirror_mode as a string (#​36241)
  • fix(loader): reject non-JSON modules for JSON imports (#​36135)
  • fix(napi): synchronize external string finalizers (#​36078)
  • fix(net): clean up cancellation resources on early errors (#​36229)
  • fix(net): limit WebTransport handshake frame buffering (#​36068)
  • fix(node_http2): clean up destroyed sessions (#​36043)
  • fix(node_resolver): handle CJS filesystem path edge cases (#​36112)
  • fix(node_stream): handle Web Stream adapter errors (#​36193)
  • fix(npm): avoid following lock poll symlinks (#​36192)
  • fix(npm): download tarballs from the configured registry instead of
    
registry.npmjs.org (#​36187)
  • fix(npm): reject symlinked package materialization dirs (#​36191)
  • fix(outdated): keep type-only dependencies in the lockfile (#​36140)
  • fix(pack): support file paths longer than the tar name field (#​36105)
  • fix(permissions): escape bidi controls in prompts (#​36195)
  • fix(process): avoid collisions in Windows stdio pipe names (#​36081)
  • fix(publish): constrain generated source rewrites (#​36109)
  • fix(release): insert into versions.json in semver order (#​36097)
  • fix(rt): isolate extracted native addons (#​36144)
  • fix(runtime): bridge console to the inspector regardless of --inspect flag
    
(#​35795)
  • fix(runtime): give worker isolate threads the stack size we report (#​36114)
  • fix(test): escape control characters in test names (#​36196)
  • fix(tests): make npm test registry tolerate a bad advisories request body
    
(#​36138)
  • fix(tls): resolve sni requests concurrently (#​36062)
  • fix(update): don't downgrade lockfile when npm cache is stale (#​35904)
  • fix(webtransport): avoid url parse panic (#​36066)
  • fix(webtransport): validate certificate dates (#​36069)
  • fix(x): honor --minimum-dependency-age and deno.json minimumDependencyAge
    
(#​36025)
  • fix: discover config file for jsr: entrypoints (#​35838)
  • fix: handle UTF-16 diagnostic columns (#​36028)
  • perf(core): avoid duplicating lazy ESM snapshot sources (#​36262)
  • perf(snapshot): mangle internal source identifiers (#​36263)
  • perf: compress bundled AppImage runtimes (#​36261)
  • perf: use FxHash for hot internal hash maps (#​36100)
v2.9.3
Compare Source
  • feat(cli): deno add --no-save and --save-optional (#​36039)
  • feat(cli): add --min-dep-age alias (#​35914)
  • feat(compile): support aarch64-pc-windows-msvc target (#​36004)
  • feat(ext/fetch): add http2MaxHeaderListSize option to
    Deno.createHttpClient (#​33194)
  • fix(bundle): preserve raw imports in watch mode (#​36040)
  • fix(canvas): don't hold SurfaceData mut borrow over window resize (#​35993)
  • fix(config): reject out-of-range minimum dependency ages (#​36051)
  • fix(core): block user ext imports after resolution (#​36012)
  • fix(core): deactivate idle TTY write handles (#​35886)
  • fix(core): restrict extension loaders to internal modules (#​36013)
  • fix(core): root slow op string coercions (#​36018)
  • fix(desktop): don't let op_desktop_send_error_report target caller-supplied
    
URLs (#​35940)
  • fix(ext/http): don't panic recycling cancelled record on native response
    
(#​36053)
  • fix(ext/napi): don't free threadsafe function on abort while refs remain
    
(#​36032)
  • fix(ext/napi): don't resurrect a released threadsafe function in acquire
    
(#​36054)
  • fix(ext/node): add deprecation warning for Duplex.toWeb({ type }) DEP0201
    
(#​35972)
  • fix(ext/node): guard sqlite deserialize during callbacks (#​36023)
  • fix(ext/node): handle UTF-16 assert source positions (#​36029)
  • fix(ext/node): handle sqlite conversion failures (#​36024)
  • fix(ext/node): respect base64 buffer ranges (#​36030)
  • fix(ext/process): don't double-close extra stdio pipe handles on Windows
    
(#​36005)
  • fix(lsp): respect lint rule exclusion for no-slow-types diagnostics (#​35924)
  • fix(node): stop active read on stream close to avoid leaking Socket/TCPWrap
    
(#​35898)
  • fix(node_http2): keep header validation enabled (#​36042)
  • fix(node_http2): validate serialized headers (#​36041)
  • fix(npm): don't fetch registry info for deprecated packages under
    
--cached-only (#​35903)
  • fix(npm): normalize path in BYONM read permission check (#​35882)
  • fix(pm): hint about minimumDependencyAge when no version is old enough
    
(#​35890)
  • fix(release): only strip Mach-O signature for x86_64-apple-darwin (#​35902)
  • fix(release): strip Mach-O signature before patchver on apple targets (#​35897)
  • fix(runtime): guard usage op output buffers (#​36020)
  • fix(serde_v8): handle deserialization exceptions (#​36021)
  • fix(web): guard encodeInto fallback result buffer (#​36019)
  • fix(web): support Event subclasses with readonly toStringTag (#​35920)
  • fix(worker): remove imported ops during bootstrap (#​36014)
  • fix: don't print duplicate parse diagnostics (#​35933)
  • perf(ext/crypto): batch randomUUID generation (#​35953)
  • perf(ext/fetch): remove quadratic line buffering in EventSource (#​35881)
  • perf(ext/node): cache compiled glob matchers + bump bundled minimatch to
    
10.2.5 (#​35873)
  • perf(ext/node): fast path fs cp (#​35856)
  • perf(ext/node): right-size small socket reads instead of pinning the 64KB slab
    
(#​35779)
  • perf(ext/node): speed up sqlite.StatementSync.all() and run() (#​35863)
  • perf(ext/web): avoid copy-back in op_base64_atob large path (#​35862)
v2.9.2
Compare Source
  • feat(desktop): autodetect React Router framework (#​35557)
  • feat(desktop): enable --hmr for Vite and Nuxt (#​35851)
  • feat(desktop): run HMR by framework dev server (#​35722)
  • feat(desktop): window opacity and transparency APIs (#​35646)
  • feat(desktop): wire --exclude-unused-npm through to compile (#​35740)
  • feat(ext/node): implement v8.setHeapSnapshotNearHeapLimit (#​35694)
  • feat(ext/telemetry): honor OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT (#​35068)
  • feat(inspector): start inspector server on SIGUSR1 (#​35738)
  • feat(node): implement getTestContext() in node:test (#​35678)
  • feat: support wildcard patterns in minimumDependencyAge.exclude (#​35746)
  • fix(check): don't interleave errors with "Check" lines in a workspace (#​35687)
  • fix(compile): bump libsui to 0.16.1 to survive eu-strip in flatpak (#​35699)
  • fix(compile): bump libsui to 0.16.3 to fix segfault under gVisor/Cloud Run
    
(#​35701)
  • fix(core): don't drain microtasks in mod_evaluate_sync mid-evaluation (#​35707)
  • fix(coverage): count a branch-junction line as covered when either arm runs
    
(#​35858)
  • fix(coverage): don't count V8 block-boundary gaps as branches (#​35767)
  • fix(coverage): don't let a trailing comment change a line's hit count (#​35741)
  • fix(deploy): disable config discovery and refresh the cached CLI version
    
(#​35754)
  • fix(desktop): attribute bind calls to the registering window id (#​35654)
  • fix(desktop): honor desktop.backend from deno.json (#​35815
  • fix(desktop): pin @​std/http in generated Vite SPA entrypoint + add hermetic
    
compile test (#​35676)
  • fix(desktop): rename launcher to so it self-loads the runtime (#​35709)
  • fix(desktop): run framework build step before bundling output (#​35603)
  • fix(desktop): surface compiled-app startup errors instead of exiting silently
    
(#​35567)
  • fix(dprint): exclude tools/lzld submodule (#​35778)
  • fix(ext): throw DataCloneError when posting non-serializable values (#​35604)
  • fix(ext/cache): implement Cache.keys() (#​35455)
  • fix(ext/fetch): reject transport failures with Node's "fetch failed" shape
    
(#​35618)
  • fix(ext/http): error non-Uint8Array response streams (#​35783)
  • fix(ext/http): honor explicit content-length header on HEAD responses (#​35728)
  • fix(ext/http): point legacy abort warning at docs.deno.com/go link (#​35713)
  • fix(ext/napi): add uv_cond_* polyfills for native addons (#​35536)
  • fix(ext/net): abort pending Deno.connect during DNS resolution (#​35729)
  • fix(ext/node): allow adopting inherited extra stdio TCP fds (#​35805)
  • fix(ext/node): don't panic when main module path has invalid percent-encoding
    
(#​35534)
  • fix(ext/node): don't schedule a pause in inspector.waitForDebugger() (#​35796)
  • fix(ext/node): flush StringDecoder in cipher final() for stream ciphers
    
(#​35800)
  • fix(ext/node): mark TLSWrap dead on teardown before tls_conn check (#​35706)
  • fix(ext/node): report all active resources from process.getActiveResourcesInfo
    
(#​35532)
  • fix(ext/node): require --allow-net=unix for node:net unix sockets (#​35835)
  • fix(ext/node): support fd 3 pipes in spawned Deno children (#​34133)
  • fix(ext/signals): unregister handler when SignalStream is dropped (#​35832)
  • fix(ext/web): resolve pending BYOB read when teeing a byte stream that closes
    
(#​35828)
  • fix(fmt): format Astro inline scripts as TypeScript (#​35852)
  • fix(fs): support pre-1970 (negative) timestamps in FsStat (#​35517)
  • fix(inspector): close WebSocket connections when the runtime is torn down
    
(#​35791)
  • fix(install): don't panic on jsr specifier with a tag like @​latest (#​35605)
  • fix(install): don't write through hardlinks when copying package files
    
(#​35735)
  • fix(install): make setup cache packages hash deterministic (#​35825)
  • fix(install): resolve lifecycle script dependency bins against the hoisted
    
layout (#​35762)
  • fix(install): support uninstalling multiple global packages (#​29352)
  • fix(lint): don't error on non-analyzable package exports like CSS files
    
(#​35732)
  • fix(lint): include config file in workspace member invalid version error
    
(#​35759)
  • fix(lsp): fix CPU busy loop by creating tokio runtime before JsRuntime in TSC
    
thread (#​35595)
  • fix(node/fs): implement followSymlinks option for fs.glob() (#​35524)
  • fix(npm): don't re-fetch packuments on every run when registry has no time
    
data (#​35834)
  • fix(npm): don't retain full npm exports value + fix --watch memory leak
    
(#​35677)
  • fix(npm): widen node_modules lock staleness margin to avoid false preemption
    
(#​35806)
  • fix(permissions): split comma-separated paths in --ignore-read (#​35661)
  • fix(test): run Node-API finalizers at test worker shutdown (#​35695)
  • fix(watch): accept watch paths in fmt/lint/bench --watch (#​35720)
  • fix(watch): execute preload modules under --watch (#​35792)
  • fix(watch): terminate on Ctrl+C while blocked in synchronous code (#​35826)
  • fix: enable rusqlite "fallible_uint" feature in workspace deps (#​35681)
  • perf(config): literal-suffix reject and prune irrelevant globs per base
    
(#​35688)
  • perf(core): defer residual lazy source registration (#​35731)
  • perf(ext/fetch): stream wasm bytes to the compiler from Rust (#​35704)
  • perf(ext/node): remove per-chunk copying on TLSWrap data paths (#​35705)
  • perf(ext/node): zero-copy async Buffer writes on the stream_wrap path (#​35780)
  • perf(ext/web): identity pipeThrough writable bypass (#​35799)
  • perf(ext/web): persistent pump for the generic pipeTo loop (#​35813)
  • perf(ext/web): pump readableStreamCollectIntoUint8Array with a persistent read
    
request (#​35790)
  • perf(ext/web): reduce per-chunk allocations on stream read and tee paths
    
(#​35786)
  • perf(ext/web): reduce per-chunk overhead in Web Streams (#​35773)
  • perf(ext/web): run synchronous pull completion without a microtask hop
    
(#​35788)
  • perf(ext/web): shared underlying-source algorithms, hoist resource-bridge read
    
request (#​35810)
  • perf(ext/web): sync fast path for ReadableStream async iterator next()
    
(#​35842)
  • perf(ext/web): synchronous transform fast path for TransformStream (#​35844)
  • perf(npm): index packuments with SIMD JSON scanner (#​35698)
  • perf(streams): offload resource-backed pipeTo to Rust via op_pipe (#​35689)
  • perf(workers): optimize message passing (#​35110)
  • perf(workers): return raw buffer from receive ops for no-transferable messages
    
(#​35756)
  • perf: use V8 native queueMicrotask instead of op (#​35787)
v2.9.1
Compare Source
  • feat(check): add --desktop flag to type-check for deno desktop (#​35644)
  • feat(desktop): register deep-link URL schemes at bundle time (#​35466)
  • feat: update laufey to 0.5.0 (#​35663)
  • fix(bundle): emit CSSStyleSheet for CSS raw imports (#​35598)
  • fix(cache): skip checksums for cached 404 entries (#​35526)
  • fix(config): don't strip workspace-member includes from deploy config (#​34788)
  • fix(core): apply deferred fast-call op upgrade to the captured bootstrap clone
    
(#​35630)
  • fix(core): prevent shared-buffer timer expiry race from losing timers (#​35312)
  • fix(desktop): default window title to app name instead of laufey_webview
    
(#​35541)
  • fix(desktop): detect SvelteKit adapter-node and error on unsupported adapters
    
(#​35533)
  • fix(desktop): discover deno.json in the project dir for deno desktop .
    
(#​35660)
  • fix(desktop): don't delete user directories that collide with app name
    
(#​35513)
  • fix(desktop): repair webview and raw backends on Windows (laufey v0.4.1)
    
(#​35566)
  • fix(desktop): resolve launcher symlink so .deb/.rpm apps find the backend
    
(#​35632)
  • fix(desktop): set LAUFEY_RUNTIME_PATH in Linux app launcher (#​35580)
  • fix(desktop): show macOS tray icon in bundled .app launched via Finder
    
(#​35626)
  • fix(desktop): use zstd for appimage squashfs (#​35506)
  • fix(doc): strip blockquote > prefixes from JSDoc code blocks (#​34866)
  • fix(ext/fetch): include path and reason when fetching a file:// URL fails
    
(#​35606)
  • fix(ext/node): check permissions when binding node:net unix sockets (#​35564)
  • fix(ext/node): export report as named export from node:process (#​35400)
  • fix(ext/node): mock.reset() should also reset MockTimers (#​35588)
  • fix(ext/node): pass Deno subcommands through child_process spawn (#​35599)
  • fix(ext/node): send TLS close_notify on JS stream-backed socket shutdown
    
(#​35582)
  • fix(ext/node_sqlite): keep attach limit capped under scoped permissions
    
(#​35232)
  • fix(ext/web): make URL and URLSearchParams non-serializable (#​35423)
  • fix(fmt): stable formatting of multi-line html/svg tagged templates (#​35540)
  • fix(inspector): support Chrome worker debugging (#​35629)
  • fix(install): pin pre-release npm versions added via dist-tag (#​35586)
  • fix(jupyter): register stdin peer only after ZMTP handshake completes (#​35585)
  • fix(lib): add PerformanceObserver and PerformanceObserverEntryList types
    
(#​35640)
  • fix(libs/http): add missing write_flushed in
    poll_start_fixed_response_with (#​35649)
  • fix(lsp): watch .wasm files for changes (#​35560)
  • fix(node): load graph-backed TypeScript modules synchronously (#​35527)
  • fix(npm): decode percent-encoded subpath of npm specifiers (#​35505)
  • fix(npm): fall back for age-filtered npm dist-tags (#​35561)
  • fix(npm): normalize bin names with path separators (#​35555)
  • fix(npm): realpath npm bin main module (#​35554)
  • fix(npm): show scoped-registry auth hint on tarball 404 (#​35514)
  • fix(npm): use case-insensitive match for trust-policy-exclude (#​35520)
  • fix(rt_desktop): reveal initial window on first paint (startup black flash)
    
(#​35620)
  • fix: correct property name for JSX new line configuration in schema file
    
(#​35565)
  • fix: resolve LAUFEY_VERSION from crate-local Cargo.lock during publish
    
(#​35507)
  • fix: show clear error when V8 fails to create worker threads (#​32856)
  • perf(core/webidl): check next method outside of iterator loop (#​35480)
  • perf(ext/fetch): fast-path Response reconstruction (#​35495)
  • perf(ext/http): coalesce chunked response writes into a single write (#​35523)
v2.9.0
Compare Source
Read more: http://deno.com/blog/v2.9
  • feat(bundle): add --declaration flag to generate rolled-up .d.ts files
    
(#​33838)
  • feat(cli): add deno link and deno unlink subcommands (#​34359)
  • feat(cli): add deno watch subcommand (#​35301)
  • feat(cli): add deno list subcommand to list declared dependencies (#​34972)
  • feat(cli): auto-migrate pnpm-workspace.yaml on resolution failure (#​34993)
  • feat(cli): provide a node on PATH when Node.js is not installed (#​34969)
  • feat(compile): persist Web Storage/KV in a per-app data directory (#​34618)
  • feat(coverage): add configurable coverage thresholds (#​35056)
  • feat(desktop): --compress for self-extracting app bundles (#​35420)
  • feat(desktop): add Linux .deb and .rpm installer output formats (#​35296)
  • feat(desktop): add Windows .msi installer output format (#​35378)
  • feat(desktop): autodetect Vite framework (#​35470)
  • feat(desktop): default UI backend to webview (#​35442)
  • feat(ext/crypto): support remaining modern WebCrypto algorithms (#​35223)
  • feat(ext/http): deprecation warning for legacy request abort (#​34397)
  • feat(ext/net): implement Happy Eyeballs for Deno.connect and
    Deno.connectTls (#​31726)
  • feat(ext/node): implement node:test mock.module (#​35329)
  • feat(ext/node): implement node:test mock.timers (#​33946)
  • feat(ext/web): web locks api (#​31166)
  • feat(fmt): add sortNamedImports and sortNamedExports options (#​33313)
  • feat(fmt): infer config from .editorconfig (#​34071)
  • feat(fmt): use lax-css for CSS, SCSS, and Less (#​35160)
  • feat(fmt): use lax-markup for HTML, XML, SVG, and components ([#​35174](https://redirect.gi
✂ Note
PR body was truncated to here.
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.3chore(deps): update dependency deno to v2.7.4Mar 5, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
5 times, most recently
from
906567b to
f63f10fCompareMarch 11, 2026 13:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.4chore(deps): update dependency deno to v2.7.5Mar 11, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f63f10f to
f46c778CompareMarch 18, 2026 12:36
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.5chore(deps): update dependency deno to v2.7.6Mar 18, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f46c778 to
62b45e6CompareMarch 19, 2026 17:56
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.6chore(deps): update dependency deno to v2.7.7Mar 19, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
62b45e6 to
f45b439CompareMarch 20, 2026 21:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.7chore(deps): update dependency deno to v2.7.8Mar 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
a4f65a8 to
314e963CompareMarch 27, 2026 13:13
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.8chore(deps): update dependency deno to v2.7.9Mar 27, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
314e963 to
12f833cCompareMarch 31, 2026 20:45
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.9chore(deps): update dependency deno to v2.7.10Mar 31, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
85f743e to
91c4835CompareApril 4, 2026 09:12
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.10chore(deps): update dependency deno to v2.7.11Apr 4, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
91c4835 to
fd15c1fCompareApril 10, 2026 01:55
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.11chore(deps): update dependency deno to v2.7.12Apr 10, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5683292 to
b4efd08CompareApril 12, 2026 09:55
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
1a1eb22 to
95cdc65CompareApril 22, 2026 18:08
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.12chore(deps): update dependency deno to v2.7.13Apr 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5764cc4 to
694818bCompareMay 17, 2026 16:59
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
d85b44b to
4e3fd3eCompareMay 28, 2026 19:03
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.14chore(deps): update dependency deno to v2.8.1May 28, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
4e3fd3e to
7920c67CompareMay 30, 2026 05:30
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.1chore(deps): update deno monorepo to v2.8.1Jun 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
7920c67 to
e5b5cc9CompareJune 3, 2026 14:41
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.1chore(deps): update deno monorepo to v2.8.2Jun 3, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
dedcb9d to
f647f79CompareJune 11, 2026 04:48
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f647f79 to
6c55738CompareJune 12, 2026 00:54
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.2chore(deps): update deno monorepo to v2.8.3Jun 12, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
fa2f4ac to
a39b68bCompareJune 18, 2026 22:51
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.3chore(deps): update deno monorepoJun 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
13b132f to
e6e2547CompareJune 23, 2026 19:31
@renovaterenovateBot
changed the title
chore(deps): update deno monorepochore(deps): update dependency deno to v2.8.3Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
e6e2547 to
895a0bbCompareJune 25, 2026 18:49
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.3chore(deps): update dependency deno to v2.9.0Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
895a0bb to
5fb112cCompareJune 27, 2026 02:14
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.9.0chore(deps): update dependency deno to v2.9.1Jul 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
56218c8 to
5798b64CompareJuly 8, 2026 19:59
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@w3nl

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
chore(deps): update dependency deno to v2.9.6 - #489
Open
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Open
chore(deps): update dependency deno to v2.9.6#489
renovate[bot] wants to merge 1 commit into
masterfrom 
renovate/deno-monorepo
Conversation
@renovate
@renovaterenovateBot
commented
Mar 4, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
ℹ️ Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
PackageChangeAgeConfidence
deno (source)2.7.1 → 2.9.6ageconfidence
Release Notes
denoland/deno (deno)
v2.9.6
Compare Source
  • feat(compressible): add support for 'text/x-component' content type (#​36450)
  • feat(desktop): clipboard api (#​35750)
  • feat(desktop): support checked, icon, and tooltip on menu items (#​36649)
  • fix(bundle): isolate esbuild downloads from workspace registries (#​36467)
  • fix(cache): combine duplicate headers for Vary matching (#​36476)
  • fix(cli_parser): remove orphaned sync-types parser
  • fix(core): cap adaptive buffer initial allocations (#​36432)
  • fix(core): make Unix pipe fd ownership explicit (#​36353)
  • fix(core): make user timer waker state thread-safe (#​36495)
  • fix(coverage): compare a range against a line in V8's units (#​36613)
  • fix(crypto): preserve RSA-OAEP label bytes (#​36441)
  • fix(desktop): keep dots in the app name when resolving the runtime library
    
(#​36006)
  • fix(desktop): keep the macOS bundle signature valid unless an update is
    
applied (#​36574)
  • fix(desktop): never block the JS thread on the error-report dialog (#​36575)
  • fix(desktop): propagate deno.json version and license into packaged installers
    
(#​36577)
  • fix(desktop): run Vite-based HMR dev servers inside the desktop runtime
    
(#​36488)
  • fix(desktop): transport binding args and results as DesktopValue so Uint8Array
    
survives (#​36573)
  • fix(ext/fetch): enforce permissions for proxy transports (#​36217)
  • fix(ext/fetch): only retry transport errors on pooled connections (#​36415)
  • fix(ext/fetch): raise default HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE to 256KB
    
(#​36558)
  • fix(ext/http): keep request body readable after response is sent (#​36629)
  • fix(ext/http): route invalid async responses to onError (#​36437)
  • fix(ext/napi): don't invoke napi_wrap finalizer twice at teardown (#​36556)
  • fix(ext/napi): run JS-calling finalizers safely, NULL string result, and
    
Float16Array (#​36572)
  • fix(ext/napi): surface OS error and path on addon load failure (#​36630)
  • fix(ext/napi): track pending finalizers by identity (#​36551)
  • fix(ext/napi): wake the event loop at the next uv_timer deadline (#​36559)
  • fix(ext/net): skip unsupported DNS records in ANY queries (#​36650)
  • fix(ext/node): accept string ports in dns.lookupService (#​36546)
  • fix(ext/node): build the proxied request target with the URL parser (#​36557)
  • fix(ext/node): do not resume client TLS sessions unless requested (#​36592)
  • fix(ext/node): fix perf_hooks detail.req.url proxied path duplication (#​36407)
  • fix(ext/node): handle readv short reads (#​36211)
  • fix(ext/node): require sys permission for inspector.open (#​36465)
  • fix(ext/node_sqlite): invalidate sessions on database close (#​36633)
  • fix(ext/tls): avoid panic for mismatched client certificate and key (#​36457)
  • fix(ext/web): clean up abort handlers when listeners are removed (#​36226)
  • fix(ext/web): close transfer MessagePort when a transferred readable is
    
cancelled (#​36270)
  • fix(ext/web): snapshot SharedArrayBuffer input in TextDecoder.decode()
    
(#​36611)
  • fix(fetch): require an initial multipart boundary (#​36470)
  • fix(ffi): validate struct return buffers (#​36373)
  • fix(fmt): honor .editorconfig when formatting from stdin (#​36267)
  • fix(fs): require write permission for creating opens (#​36497)
  • fix(fs): use a private FsFile constructor token (#​36439)
  • fix(glob): retain valid gitignore rules after parse errors (#​36478)
  • fix(http): preserve keep-alive after reading request body (#​36690)
  • fix(http): truncate streaming responses to content length (#​36496)
  • fix(lsp): restrict registry completion endpoint schemes (#​36477)
  • fix(node): check reads during require resolution (#​36461)
  • fix(node): match domain uncaught exception handling (#​36475)
  • fix(node): preserve v8 deserializer view offsets (#​36460)
  • fix(node): validate Brotli encoder operations (#​36530)
  • fix(node): validate raw outgoing HTTP headers (#​36471)
  • fix(node/crypto): preserve binary key export passphrases (#​36443)
  • fix(node_crypto): apply RFC 7748 scalar decoding for X448 (#​36466)
  • fix(node_crypto): size cipher updates by byte length (#​36459)
  • fix(node_shim): preserve explicit argument delimiters (#​36435)
  • fix(npm): flatten single-resolution peers when building package ids (#​36608)
  • fix(npm): match peer fallbacks when checking peer resolution cache (#​36607)
  • fix(npm): remove arrayref dependency (#​36653)
  • fix(npm): resolve bare npm specifier when latest is too new for min dependency
    
age (#​36619)
  • fix(npm): use cached abbreviated metadata under --cached-only (#​36526)
  • fix(npm): validate tar paths before extraction (#​36468)
  • fix(os): serialize process environment updates (#​36074)
  • fix(permissions): check resolved IP against import deny list (#​36486)
  • fix(process): reject NULs in Windows arguments (#​36436)
  • fix(process): validate whitespace-only loader environment values (#​36431)
  • fix(publish): authenticate the package existence check so private packages
    
work (#​36656)
  • fix(publish): memoize publish order depth (#​36215)
  • fix(publish): reject invalid JSR package names (#​36474)
  • fix(repl): skip regex literals when validating input (#​36375)
  • fix(runtime): unregister dropped signal resources (#​36213)
  • fix(web): keep MessagePort resource identifiers private (#​36440)
  • fix: bugs in primordials related to ObjectCreate and
    ObjectDefineProperties (#​36541)
  • fix: prevent threadpool starvation with concurrent file locks (#​32789)
  • perf(core): grow the op driver's future arena on demand (#​36678)
  • perf(core): uncontended-borrow fast path for AsyncRefCell (#​36679)
  • perf(core): use index-based SafeArrayIterator in primordials (#​36543)
  • perf(core): zero-copy snapshot rehydration, drop bincode (#​36680)
  • perf(ext/web): apply the base64url op design to standard base64 (#​36422)
  • perf(ext/websocket): shrink the op_ws_create future (#​36681)
v2.9.5
Compare Source
  • feat(add): --unscoped flag to alias packages by their unscoped name (#​36319)
  • feat(task): add --members flag to run tasks in workspace members only (#​35748)
  • feat: add Blob/Body textStream() (#​35616)
  • feat: add experimental QuickJS backend (#​36194)
  • fix(bundle): avoid esbuild protocol deadlock (#​36427)
  • fix(bundle): respect runtime file permissions (#​36107)
  • fix(cjs): use loader sources for recursive analysis (#​36111)
  • fix(cli): escape control characters in external metadata (#​36198)
  • fix(core): don't resolve internal module imports with the user's import map
    
(#​36303)
  • fix(crypto): add "raw-secret" to KeyFormat type (#​35708)
  • fix(desktop): handle colored HMR URLs and page loads (#​36316)
  • fix(desktop): retain update signature verification op (#​36152)
  • fix(ext/crypto): allow deriveBits with length 0 (#​36283)
  • fix(ext/napi): polyfill uv_handle_size and uv_strerror (#​36308)
  • fix(ext/net): release completed QUIC stream resources (#​36247)
  • fix(ext/net): require --allow-sys for node:dns.getServers() (#​35941)
  • fix(ext/node): Node compat for web streams (#​36285)
  • fix(ext/node): apply backpressure in Readable.toWeb() (#​36321)
  • fix(ext/node): defer TLS write completion callback to avoid reentrancy panic
    
(#​35867)
  • fix(ext/node): don't fire http2 settings callback after session destroy
    
(#​36230)
  • fix(ext/node): gate constrained memory cgroup reads (#​36218)
  • fix(ext/node): handle pre-quoted shell arguments (#​36371)
  • fix(ext/node): implement node:test tags (#​36292)
  • fix(ext/node): implement util.diff (#​36289)
  • fix(ext/node): implement v8.promiseHooks API (#​36281)
  • fix(ext/node): sort fs.readdir entries to match Node.js (#​36341)
  • fix(ext/node): stop http2 file reads after stream close (#​36300)
  • fix(ext/node): store blocklist ranges compactly (#​36212)
  • fix(ext/node): support the fs flush option for writes (#​36290)
  • fix(ext/node): use signatureAlgorithm digest for X509 ECDSA verify (#​36326)
  • fix(ext/node_crypto): use named group exponent sizes (#​36347)
  • fix(ext/web): attach Node error codes to WHATWG API validation errors (#​36288)
  • fix(ext/websocket): disable HTTP/2 server push on wss upgrade path (#​36327)
  • fix(fetch): scope redirect-sensitive headers by origin (#​36361)
  • fix(ffi): reject resizable buffers in nonblocking calls (#​36259)
  • fix(fmt): accept xml and svg extensions for stdin (#​36149)
  • fix(fmt): update lax-markup to 0.3.2, lax-css and lax-sql to 0.3.0 (#​36397)
  • fix(http): preserve stripped headers across redirects (#​36360)
  • fix(inspector): validate request host headers (#​36348)
  • fix(net): cancel pending writes on stream close (#​36369)
  • fix(net): clean up concurrently dropped load-balanced listeners (#​36246)
  • fix(net): handle malformed DNS record text (#​36374)
  • fix(node): clean up Web Stream finished listeners (#​36227)
  • fix(node): retain consumed HTTP stream wrapper (#​36254)
  • fix(npm): ignore invalid package bin targets (#​36354)
  • fix(npm): tolerate malformed scripts field in packuments (#​36324)
  • fix(npmrc): match auth configs by authority and path (#​36359)
  • fix(outdated): don't report JSR pre-release versions as latest (#​36325)
  • fix(publish): report when the registry rejects a provenance attestation
    
(#​36404)
  • fix(resolver): don't treat deno eval modules as npm package files (#​36304)
  • fix(runtime): map notify's Windows missing-path error to NotFound (#​35864)
  • fix(sync-types): add reason to too_many_arguments allows (lint)
  • fix(telemetry): handle reentrant attribute conversion (#​36256)
  • fix(webgpu): own mapped range backing stores (#​36257)
  • fix(webstorage): preserve Storage constructor name (#​35944)
  • fix: capitalize IP in help text (#​36170)
  • fix: upgrade deno_task_shell to 0.33.3 (#​36406)
  • fix: wire no-legacy-abort unstable flag from deno.json config (#​36312)
  • perf(core): run the common-path tick drain in Rust (#​36157)
  • perf(ext/node): bypass dns lookup on literal IPs in udp send (#​35909)
  • perf(ext/web): implement base64url encode/decode as simdutf ops (#​36398)
  • perf(fs): open files on the blocking pool in async readFile/writeFile (#​36160)
  • perf: order startup functions in release builds (#​36219)
  • perf: reduce eager module evaluation at startup (#​36331)
  • perf: remove Linux unwind tables from release artifacts (#​36265)
v2.9.4
Compare Source
  • feat(desktop): enable --hmr for React Router (#​35900)
  • feat(ext/node): add a byteLength/length parameter to
    
Buffer.indexOf/lastIndexOf/includes (#​35872)
  • feat(ext/node): support raw chacha20 cipher in crypto.createCipheriv (#​36016)
  • feat: upgrade V8 to 150.2.0 (#​36098)
  • fix(add): support --minimum-dependency-age flag in deno add/remove (#​36099)
  • fix(cache): store Web Cache under origin data (#​36145)
  • fix(canvas): require FFI permission for native window handles (#​36080)
  • fix(clean): reject symlinked node_modules cleanup roots (#​36190)
  • fix(compile): bump libsui to 0.16.4 to fix Windows resource SizeOfImage
    
(#​36242)
  • fix(core): allow dynamic imports during cached module evaluation (#​36258)
  • fix(core): bound error graph conversion (#​36070)
  • fix(core): enforce JSON requests in FsModuleLoader (#​36137)
  • fix(core): handle malformed error constructors (#​36071)
  • fix(core): stop rejected dynamic imports before loading (#​36136)
  • fix(desktop): make BrowserWindow bindings typeable (#​35907)
  • fix(desktop): preserve binding wrappers after lazy op upgrade (#​36065)
  • fix(desktop): strip runtime extension from app name (#​36060)
  • fix(ext/napi): cancel async sends after close (#​36077)
  • fix(ext/napi): scope callback info per invocation (#​36076)
  • fix(ext/node): apply backpressure to http2 stream writes (#​36044)
  • fix(ext/node): don't leave 0-byte .heapsnapshot files near the heap limit
    
(#​36113)
  • fix(ext/node): implement worker_threads.locks via Web Locks (#​35963)
  • fix(ext/node): node:sqlite backup() and deserialize() argument validation
    
(#​36127)
  • fix(ext/node): retry DNS query when its per-attempt timeout fires (#​35955)
  • fix(ext/node): stop http2 file reads on stream close (#​36061)
  • fix(ext/web): handle failed webtransport datagram setup (#​36067)
  • fix(ext/webidl): implement async_sequence for ReadableStream.from (#​35976)
  • fix(fetch): bound multipart part headers (#​36096)
  • fix(fmt): keep embedded CSS custom property indentation stable (#​35949)
  • fix(fs): require sys permission for umask (#​36222)
  • fix(http): preserve trust proxy environment setting (#​36073)
  • fix(init): validate temporary node_modules parent (#​36142)
  • fix(jupyter): report codemirror_mode as a string (#​36241)
  • fix(loader): reject non-JSON modules for JSON imports (#​36135)
  • fix(napi): synchronize external string finalizers (#​36078)
  • fix(net): clean up cancellation resources on early errors (#​36229)
  • fix(net): limit WebTransport handshake frame buffering (#​36068)
  • fix(node_http2): clean up destroyed sessions (#​36043)
  • fix(node_resolver): handle CJS filesystem path edge cases (#​36112)
  • fix(node_stream): handle Web Stream adapter errors (#​36193)
  • fix(npm): avoid following lock poll symlinks (#​36192)
  • fix(npm): download tarballs from the configured registry instead of
    
registry.npmjs.org (#​36187)
  • fix(npm): reject symlinked package materialization dirs (#​36191)
  • fix(outdated): keep type-only dependencies in the lockfile (#​36140)
  • fix(pack): support file paths longer than the tar name field (#​36105)
  • fix(permissions): escape bidi controls in prompts (#​36195)
  • fix(process): avoid collisions in Windows stdio pipe names (#​36081)
  • fix(publish): constrain generated source rewrites (#​36109)
  • fix(release): insert into versions.json in semver order (#​36097)
  • fix(rt): isolate extracted native addons (#​36144)
  • fix(runtime): bridge console to the inspector regardless of --inspect flag
    
(#​35795)
  • fix(runtime): give worker isolate threads the stack size we report (#​36114)
  • fix(test): escape control characters in test names (#​36196)
  • fix(tests): make npm test registry tolerate a bad advisories request body
    
(#​36138)
  • fix(tls): resolve sni requests concurrently (#​36062)
  • fix(update): don't downgrade lockfile when npm cache is stale (#​35904)
  • fix(webtransport): avoid url parse panic (#​36066)
  • fix(webtransport): validate certificate dates (#​36069)
  • fix(x): honor --minimum-dependency-age and deno.json minimumDependencyAge
    
(#​36025)
  • fix: discover config file for jsr: entrypoints (#​35838)
  • fix: handle UTF-16 diagnostic columns (#​36028)
  • perf(core): avoid duplicating lazy ESM snapshot sources (#​36262)
  • perf(snapshot): mangle internal source identifiers (#​36263)
  • perf: compress bundled AppImage runtimes (#​36261)
  • perf: use FxHash for hot internal hash maps (#​36100)
v2.9.3
Compare Source
  • feat(cli): deno add --no-save and --save-optional (#​36039)
  • feat(cli): add --min-dep-age alias (#​35914)
  • feat(compile): support aarch64-pc-windows-msvc target (#​36004)
  • feat(ext/fetch): add http2MaxHeaderListSize option to
    Deno.createHttpClient (#​33194)
  • fix(bundle): preserve raw imports in watch mode (#​36040)
  • fix(canvas): don't hold SurfaceData mut borrow over window resize (#​35993)
  • fix(config): reject out-of-range minimum dependency ages (#​36051)
  • fix(core): block user ext imports after resolution (#​36012)
  • fix(core): deactivate idle TTY write handles (#​35886)
  • fix(core): restrict extension loaders to internal modules (#​36013)
  • fix(core): root slow op string coercions (#​36018)
  • fix(desktop): don't let op_desktop_send_error_report target caller-supplied
    
URLs (#​35940)
  • fix(ext/http): don't panic recycling cancelled record on native response
    
(#​36053)
  • fix(ext/napi): don't free threadsafe function on abort while refs remain
    
(#​36032)
  • fix(ext/napi): don't resurrect a released threadsafe function in acquire
    
(#​36054)
  • fix(ext/node): add deprecation warning for Duplex.toWeb({ type }) DEP0201
    
(#​35972)
  • fix(ext/node): guard sqlite deserialize during callbacks (#​36023)
  • fix(ext/node): handle UTF-16 assert source positions (#​36029)
  • fix(ext/node): handle sqlite conversion failures (#​36024)
  • fix(ext/node): respect base64 buffer ranges (#​36030)
  • fix(ext/process): don't double-close extra stdio pipe handles on Windows
    
(#​36005)
  • fix(lsp): respect lint rule exclusion for no-slow-types diagnostics (#​35924)
  • fix(node): stop active read on stream close to avoid leaking Socket/TCPWrap
    
(#​35898)
  • fix(node_http2): keep header validation enabled (#​36042)
  • fix(node_http2): validate serialized headers (#​36041)
  • fix(npm): don't fetch registry info for deprecated packages under
    
--cached-only (#​35903)
  • fix(npm): normalize path in BYONM read permission check (#​35882)
  • fix(pm): hint about minimumDependencyAge when no version is old enough
    
(#​35890)
  • fix(release): only strip Mach-O signature for x86_64-apple-darwin (#​35902)
  • fix(release): strip Mach-O signature before patchver on apple targets (#​35897)
  • fix(runtime): guard usage op output buffers (#​36020)
  • fix(serde_v8): handle deserialization exceptions (#​36021)
  • fix(web): guard encodeInto fallback result buffer (#​36019)
  • fix(web): support Event subclasses with readonly toStringTag (#​35920)
  • fix(worker): remove imported ops during bootstrap (#​36014)
  • fix: don't print duplicate parse diagnostics (#​35933)
  • perf(ext/crypto): batch randomUUID generation (#​35953)
  • perf(ext/fetch): remove quadratic line buffering in EventSource (#​35881)
  • perf(ext/node): cache compiled glob matchers + bump bundled minimatch to
    
10.2.5 (#​35873)
  • perf(ext/node): fast path fs cp (#​35856)
  • perf(ext/node): right-size small socket reads instead of pinning the 64KB slab
    
(#​35779)
  • perf(ext/node): speed up sqlite.StatementSync.all() and run() (#​35863)
  • perf(ext/web): avoid copy-back in op_base64_atob large path (#​35862)
v2.9.2
Compare Source
  • feat(desktop): autodetect React Router framework (#​35557)
  • feat(desktop): enable --hmr for Vite and Nuxt (#​35851)
  • feat(desktop): run HMR by framework dev server (#​35722)
  • feat(desktop): window opacity and transparency APIs (#​35646)
  • feat(desktop): wire --exclude-unused-npm through to compile (#​35740)
  • feat(ext/node): implement v8.setHeapSnapshotNearHeapLimit (#​35694)
  • feat(ext/telemetry): honor OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT (#​35068)
  • feat(inspector): start inspector server on SIGUSR1 (#​35738)
  • feat(node): implement getTestContext() in node:test (#​35678)
  • feat: support wildcard patterns in minimumDependencyAge.exclude (#​35746)
  • fix(check): don't interleave errors with "Check" lines in a workspace (#​35687)
  • fix(compile): bump libsui to 0.16.1 to survive eu-strip in flatpak (#​35699)
  • fix(compile): bump libsui to 0.16.3 to fix segfault under gVisor/Cloud Run
    
(#​35701)
  • fix(core): don't drain microtasks in mod_evaluate_sync mid-evaluation (#​35707)
  • fix(coverage): count a branch-junction line as covered when either arm runs
    
(#​35858)
  • fix(coverage): don't count V8 block-boundary gaps as branches (#​35767)
  • fix(coverage): don't let a trailing comment change a line's hit count (#​35741)
  • fix(deploy): disable config discovery and refresh the cached CLI version
    
(#​35754)
  • fix(desktop): attribute bind calls to the registering window id (#​35654)
  • fix(desktop): honor desktop.backend from deno.json (#​35815
  • fix(desktop): pin @​std/http in generated Vite SPA entrypoint + add hermetic
    
compile test (#​35676)
  • fix(desktop): rename launcher to so it self-loads the runtime (#​35709)
  • fix(desktop): run framework build step before bundling output (#​35603)
  • fix(desktop): surface compiled-app startup errors instead of exiting silently
    
(#​35567)
  • fix(dprint): exclude tools/lzld submodule (#​35778)
  • fix(ext): throw DataCloneError when posting non-serializable values (#​35604)
  • fix(ext/cache): implement Cache.keys() (#​35455)
  • fix(ext/fetch): reject transport failures with Node's "fetch failed" shape
    
(#​35618)
  • fix(ext/http): error non-Uint8Array response streams (#​35783)
  • fix(ext/http): honor explicit content-length header on HEAD responses (#​35728)
  • fix(ext/http): point legacy abort warning at docs.deno.com/go link (#​35713)
  • fix(ext/napi): add uv_cond_* polyfills for native addons (#​35536)
  • fix(ext/net): abort pending Deno.connect during DNS resolution (#​35729)
  • fix(ext/node): allow adopting inherited extra stdio TCP fds (#​35805)
  • fix(ext/node): don't panic when main module path has invalid percent-encoding
    
(#​35534)
  • fix(ext/node): don't schedule a pause in inspector.waitForDebugger() (#​35796)
  • fix(ext/node): flush StringDecoder in cipher final() for stream ciphers
    
(#​35800)
  • fix(ext/node): mark TLSWrap dead on teardown before tls_conn check (#​35706)
  • fix(ext/node): report all active resources from process.getActiveResourcesInfo
    
(#​35532)
  • fix(ext/node): require --allow-net=unix for node:net unix sockets (#​35835)
  • fix(ext/node): support fd 3 pipes in spawned Deno children (#​34133)
  • fix(ext/signals): unregister handler when SignalStream is dropped (#​35832)
  • fix(ext/web): resolve pending BYOB read when teeing a byte stream that closes
    
(#​35828)
  • fix(fmt): format Astro inline scripts as TypeScript (#​35852)
  • fix(fs): support pre-1970 (negative) timestamps in FsStat (#​35517)
  • fix(inspector): close WebSocket connections when the runtime is torn down
    
(#​35791)
  • fix(install): don't panic on jsr specifier with a tag like @​latest (#​35605)
  • fix(install): don't write through hardlinks when copying package files
    
(#​35735)
  • fix(install): make setup cache packages hash deterministic (#​35825)
  • fix(install): resolve lifecycle script dependency bins against the hoisted
    
layout (#​35762)
  • fix(install): support uninstalling multiple global packages (#​29352)
  • fix(lint): don't error on non-analyzable package exports like CSS files
    
(#​35732)
  • fix(lint): include config file in workspace member invalid version error
    
(#​35759)
  • fix(lsp): fix CPU busy loop by creating tokio runtime before JsRuntime in TSC
    
thread (#​35595)
  • fix(node/fs): implement followSymlinks option for fs.glob() (#​35524)
  • fix(npm): don't re-fetch packuments on every run when registry has no time
    
data (#​35834)
  • fix(npm): don't retain full npm exports value + fix --watch memory leak
    
(#​35677)
  • fix(npm): widen node_modules lock staleness margin to avoid false preemption
    
(#​35806)
  • fix(permissions): split comma-separated paths in --ignore-read (#​35661)
  • fix(test): run Node-API finalizers at test worker shutdown (#​35695)
  • fix(watch): accept watch paths in fmt/lint/bench --watch (#​35720)
  • fix(watch): execute preload modules under --watch (#​35792)
  • fix(watch): terminate on Ctrl+C while blocked in synchronous code (#​35826)
  • fix: enable rusqlite "fallible_uint" feature in workspace deps (#​35681)
  • perf(config): literal-suffix reject and prune irrelevant globs per base
    
(#​35688)
  • perf(core): defer residual lazy source registration (#​35731)
  • perf(ext/fetch): stream wasm bytes to the compiler from Rust (#​35704)
  • perf(ext/node): remove per-chunk copying on TLSWrap data paths (#​35705)
  • perf(ext/node): zero-copy async Buffer writes on the stream_wrap path (#​35780)
  • perf(ext/web): identity pipeThrough writable bypass (#​35799)
  • perf(ext/web): persistent pump for the generic pipeTo loop (#​35813)
  • perf(ext/web): pump readableStreamCollectIntoUint8Array with a persistent read
    
request (#​35790)
  • perf(ext/web): reduce per-chunk allocations on stream read and tee paths
    
(#​35786)
  • perf(ext/web): reduce per-chunk overhead in Web Streams (#​35773)
  • perf(ext/web): run synchronous pull completion without a microtask hop
    
(#​35788)
  • perf(ext/web): shared underlying-source algorithms, hoist resource-bridge read
    
request (#​35810)
  • perf(ext/web): sync fast path for ReadableStream async iterator next()
    
(#​35842)
  • perf(ext/web): synchronous transform fast path for TransformStream (#​35844)
  • perf(npm): index packuments with SIMD JSON scanner (#​35698)
  • perf(streams): offload resource-backed pipeTo to Rust via op_pipe (#​35689)
  • perf(workers): optimize message passing (#​35110)
  • perf(workers): return raw buffer from receive ops for no-transferable messages
    
(#​35756)
  • perf: use V8 native queueMicrotask instead of op (#​35787)
v2.9.1
Compare Source
  • feat(check): add --desktop flag to type-check for deno desktop (#​35644)
  • feat(desktop): register deep-link URL schemes at bundle time (#​35466)
  • feat: update laufey to 0.5.0 (#​35663)
  • fix(bundle): emit CSSStyleSheet for CSS raw imports (#​35598)
  • fix(cache): skip checksums for cached 404 entries (#​35526)
  • fix(config): don't strip workspace-member includes from deploy config (#​34788)
  • fix(core): apply deferred fast-call op upgrade to the captured bootstrap clone
    
(#​35630)
  • fix(core): prevent shared-buffer timer expiry race from losing timers (#​35312)
  • fix(desktop): default window title to app name instead of laufey_webview
    
(#​35541)
  • fix(desktop): detect SvelteKit adapter-node and error on unsupported adapters
    
(#​35533)
  • fix(desktop): discover deno.json in the project dir for deno desktop .
    
(#​35660)
  • fix(desktop): don't delete user directories that collide with app name
    
(#​35513)
  • fix(desktop): repair webview and raw backends on Windows (laufey v0.4.1)
    
(#​35566)
  • fix(desktop): resolve launcher symlink so .deb/.rpm apps find the backend
    
(#​35632)
  • fix(desktop): set LAUFEY_RUNTIME_PATH in Linux app launcher (#​35580)
  • fix(desktop): show macOS tray icon in bundled .app launched via Finder
    
(#​35626)
  • fix(desktop): use zstd for appimage squashfs (#​35506)
  • fix(doc): strip blockquote > prefixes from JSDoc code blocks (#​34866)
  • fix(ext/fetch): include path and reason when fetching a file:// URL fails
    
(#​35606)
  • fix(ext/node): check permissions when binding node:net unix sockets (#​35564)
  • fix(ext/node): export report as named export from node:process (#​35400)
  • fix(ext/node): mock.reset() should also reset MockTimers (#​35588)
  • fix(ext/node): pass Deno subcommands through child_process spawn (#​35599)
  • fix(ext/node): send TLS close_notify on JS stream-backed socket shutdown
    
(#​35582)
  • fix(ext/node_sqlite): keep attach limit capped under scoped permissions
    
(#​35232)
  • fix(ext/web): make URL and URLSearchParams non-serializable (#​35423)
  • fix(fmt): stable formatting of multi-line html/svg tagged templates (#​35540)
  • fix(inspector): support Chrome worker debugging (#​35629)
  • fix(install): pin pre-release npm versions added via dist-tag (#​35586)
  • fix(jupyter): register stdin peer only after ZMTP handshake completes (#​35585)
  • fix(lib): add PerformanceObserver and PerformanceObserverEntryList types
    
(#​35640)
  • fix(libs/http): add missing write_flushed in
    poll_start_fixed_response_with (#​35649)
  • fix(lsp): watch .wasm files for changes (#​35560)
  • fix(node): load graph-backed TypeScript modules synchronously (#​35527)
  • fix(npm): decode percent-encoded subpath of npm specifiers (#​35505)
  • fix(npm): fall back for age-filtered npm dist-tags (#​35561)
  • fix(npm): normalize bin names with path separators (#​35555)
  • fix(npm): realpath npm bin main module (#​35554)
  • fix(npm): show scoped-registry auth hint on tarball 404 (#​35514)
  • fix(npm): use case-insensitive match for trust-policy-exclude (#​35520)
  • fix(rt_desktop): reveal initial window on first paint (startup black flash)
    
(#​35620)
  • fix: correct property name for JSX new line configuration in schema file
    
(#​35565)
  • fix: resolve LAUFEY_VERSION from crate-local Cargo.lock during publish
    
(#​35507)
  • fix: show clear error when V8 fails to create worker threads (#​32856)
  • perf(core/webidl): check next method outside of iterator loop (#​35480)
  • perf(ext/fetch): fast-path Response reconstruction (#​35495)
  • perf(ext/http): coalesce chunked response writes into a single write (#​35523)
v2.9.0
Compare Source
Read more: http://deno.com/blog/v2.9
  • feat(bundle): add --declaration flag to generate rolled-up .d.ts files
    
(#​33838)
  • feat(cli): add deno link and deno unlink subcommands (#​34359)
  • feat(cli): add deno watch subcommand (#​35301)
  • feat(cli): add deno list subcommand to list declared dependencies (#​34972)
  • feat(cli): auto-migrate pnpm-workspace.yaml on resolution failure (#​34993)
  • feat(cli): provide a node on PATH when Node.js is not installed (#​34969)
  • feat(compile): persist Web Storage/KV in a per-app data directory (#​34618)
  • feat(coverage): add configurable coverage thresholds (#​35056)
  • feat(desktop): --compress for self-extracting app bundles (#​35420)
  • feat(desktop): add Linux .deb and .rpm installer output formats (#​35296)
  • feat(desktop): add Windows .msi installer output format (#​35378)
  • feat(desktop): autodetect Vite framework (#​35470)
  • feat(desktop): default UI backend to webview (#​35442)
  • feat(ext/crypto): support remaining modern WebCrypto algorithms (#​35223)
  • feat(ext/http): deprecation warning for legacy request abort (#​34397)
  • feat(ext/net): implement Happy Eyeballs for Deno.connect and
    Deno.connectTls (#​31726)
  • feat(ext/node): implement node:test mock.module (#​35329)
  • feat(ext/node): implement node:test mock.timers (#​33946)
  • feat(ext/web): web locks api (#​31166)
  • feat(fmt): add sortNamedImports and sortNamedExports options (#​33313)
  • feat(fmt): infer config from .editorconfig (#​34071)
  • feat(fmt): use lax-css for CSS, SCSS, and Less (#​35160)
  • feat(fmt): use lax-markup for HTML, XML, SVG, and components ([#​35174](https://redirect.gi
✂ Note
PR body was truncated to here.
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.3chore(deps): update dependency deno to v2.7.4Mar 5, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
5 times, most recently
from
906567b to
f63f10fCompareMarch 11, 2026 13:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.4chore(deps): update dependency deno to v2.7.5Mar 11, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f63f10f to
f46c778CompareMarch 18, 2026 12:36
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.5chore(deps): update dependency deno to v2.7.6Mar 18, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f46c778 to
62b45e6CompareMarch 19, 2026 17:56
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.6chore(deps): update dependency deno to v2.7.7Mar 19, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
62b45e6 to
f45b439CompareMarch 20, 2026 21:39
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.7chore(deps): update dependency deno to v2.7.8Mar 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
a4f65a8 to
314e963CompareMarch 27, 2026 13:13
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.8chore(deps): update dependency deno to v2.7.9Mar 27, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
314e963 to
12f833cCompareMarch 31, 2026 20:45
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.9chore(deps): update dependency deno to v2.7.10Mar 31, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
85f743e to
91c4835CompareApril 4, 2026 09:12
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.10chore(deps): update dependency deno to v2.7.11Apr 4, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
91c4835 to
fd15c1fCompareApril 10, 2026 01:55
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.11chore(deps): update dependency deno to v2.7.12Apr 10, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5683292 to
b4efd08CompareApril 12, 2026 09:55
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
3 times, most recently
from
1a1eb22 to
95cdc65CompareApril 22, 2026 18:08
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.12chore(deps): update dependency deno to v2.7.13Apr 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
5764cc4 to
694818bCompareMay 17, 2026 16:59
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
d85b44b to
4e3fd3eCompareMay 28, 2026 19:03
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.7.14chore(deps): update dependency deno to v2.8.1May 28, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
4e3fd3e to
7920c67CompareMay 30, 2026 05:30
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.1chore(deps): update deno monorepo to v2.8.1Jun 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
7920c67 to
e5b5cc9CompareJune 3, 2026 14:41
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.1chore(deps): update deno monorepo to v2.8.2Jun 3, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
dedcb9d to
f647f79CompareJune 11, 2026 04:48
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
f647f79 to
6c55738CompareJune 12, 2026 00:54
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.2chore(deps): update deno monorepo to v2.8.3Jun 12, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
fa2f4ac to
a39b68bCompareJune 18, 2026 22:51
@renovaterenovateBot
changed the title
chore(deps): update deno monorepo to v2.8.3chore(deps): update deno monorepoJun 22, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
2 times, most recently
from
13b132f to
e6e2547CompareJune 23, 2026 19:31
@renovaterenovateBot
changed the title
chore(deps): update deno monorepochore(deps): update dependency deno to v2.8.3Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
e6e2547 to
895a0bbCompareJune 25, 2026 18:49
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.8.3chore(deps): update dependency deno to v2.9.0Jun 25, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
from
895a0bb to
5fb112cCompareJune 27, 2026 02:14
@renovaterenovateBot
changed the title
chore(deps): update dependency deno to v2.9.0chore(deps): update dependency deno to v2.9.1Jul 2, 2026
@renovate
renovateBotforce-pushed
the
renovate/deno-monorepo
branch
4 times, most recently
from
56218c8 to
5798b64CompareJuly 8, 2026 19:59
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@w3nl