• See full diff in compare view

Sourced from eslint-plugin-n's releases.

v18.1.0

18.1.0 (2026-06-08)

🌟 Features

• Allow workspace root dependencies for no-extraneous-import (#536) (fd4f84e)
• support devEngines.runtime from package.json (#530) (9ef3c32)

🩹 Fixes

• Allow leading forwardslash in package.json "files" field (#534) (#535) (5fde036)
• no-extraneous-import for type-only @​types dependencies (#533) (63a90ef)
• prefer-promises/fs: add missing fs.promises APIs (cp, glob, lutimes, opendir, rm, statfs) (#532) (75fbe34)

📚 Documentation

• fix usage in README.md (c1b1b84)
• Update online playground link in README (058916a)

Sourced from eslint-plugin-n's changelog.

18.1.0 (2026-06-08)

🌟 Features

• Allow workspace root dependencies for no-extraneous-import (#536) (fd4f84e)
• support devEngines.runtime from package.json (#530) (9ef3c32)

🩹 Fixes

• Allow leading forwardslash in package.json "files" field (#534) (#535) (5fde036)
• no-extraneous-import for type-only @​types dependencies (#533) (63a90ef)
• prefer-promises/fs: add missing fs.promises APIs (cp, glob, lutimes, opendir, rm, statfs) (#532) (75fbe34)

📚 Documentation

• fix usage in README.md (c1b1b84)
• Update online playground link in README (058916a)

• fc70bdf chore(master): release 18.1.0 (#528)
• fd4f84e feat: Allow workspace root dependencies for no-extraneous-import (#536)
• 5fde036 fix: Allow leading forwardslash in package.json "files" field (#534) (#535)
• 63a90ef fix: no-extraneous-import for type-only @​types dependencies (#533)
• 75fbe34 fix(prefer-promises/fs): add missing fs.promises APIs (cp, glob, lutimes, ope...
• 058916a docs: Update online playground link in README
• 9ef3c32 feat: support devEngines.runtime from package.json (#530)
• c1b1b84 docs: fix usage in README.md
• See full diff in compare view

Sourced from js-yaml's changelog.

[4.2.0] - 2026-06-01

Added

• Added docs/safety.md with notes about processing untrusted YAML.
• Added maxDepth (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.
• Added maxMergeSeqLength (20) loader option. Not a problem after merge fix, but an additional restriction for safety.
• Added sourcemaps to dist/ builds.

Changed

• Stop resolving numbers with underscores as numeric scalars, #627.
• Switched dev toolchains to Vite / neostandard.
• Updated demo.
• Reorganized tests.
• dist/ files are no longer kept in the repository.

Fixed

• Fix parsing of properties on the first implicit block mapping key, #62.
• Fix trailing whitespace handling when folding flow scalar lines, #307.
• Reject top-level block scalars without content indentation, #280.
• Ensure numbers survive round-trip, #737.
• Fix test coverage for issue #221.
• Fix flow scalar trailing whitespace folding, #307.
• Fix digits in YAML named tag handles.

Security

• Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K).

[3.14.2] - 2025-11-15

Security

• Backported v4.1.1 fix to v3

• See full diff in compare view

Sourced from prettier's releases.

3.8.4

• Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (prettier/prettier#17746 by @​byplayer)

🔗 Changelog

Sourced from prettier's changelog.

3.8.4

diff

Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (#17746 by @​byplayer)

Prettier was removing blank lines between list items and their nested sub-lists, converting loose lists into tight lists and changing their semantic meaning.

<!-- Input -->
- a


b


c

d



<!-- Prettier 3.8.3 -->

a

b


c

d



<!-- Prettier 3.8.4 -->


a

b



c

d

• 1c6ba55 Release 3.8.4
• 4a673dc Fix blank lines between list items and nested sub-lists being removed in Mark...
• 074aaed Replace main branch in changelog link with tags (#19054)
• c22a003 Bump Prettier dependency to 3.8.3
• 07bad1f Clean changelog_unreleased
• See full diff in compare view

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

• 6117d7c Version 19.2.7 (#36591)
• See full diff in compare view

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

• See full diff in compare view

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

• 6117d7c Version 19.2.7 (#36591)
• See full diff in compare view

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

• See full diff in compare view

Sourced from dompurify's releases.

DOMPurify 3.4.8

• Cleaned up the repository root, renamed some and removed unneeded files
• Fixed an issue with handling of Trusted Types policies, thanks @​fulstadev
• Fixed the node iterator for better template scrubbing, thanks @​IamLeandrooooo
• Included formerly missing LICENSE-MPL in published npm package, thanks @​asamuzaK
• Bumped several dependencies where possible

• bcdd828 release: 3.4.8 (#1439)
• See full diff in compare view

• See full diff in compare view

Sourced from wrangler's releases.

wrangler@4.99.0

Minor Changes

• #14169 0706fbf Thanks @​edmundhung! - Introduce createTestHarness() for integration testing Workers

  It runs Workers in a local preview environment using production build output and works with both Wrangler projects and Workers built by the Cloudflare Vite plugin.

  Use it from any Node.js test runner to send requests to individual Workers, trigger scheduled events, reset the server between tests, and mock outbound requests with libraries that intercept globalThis.fetch(), such as MSW.

  You can also capture structured logs from your Workers with getLogs(), or dump out a diagnostic timeline with debug() when tests fail:

  import { createTestHarness } from "wrangler";
  const server = createTestHarness({
  workers: [
  { configPath: "./dist/web_worker/wrangler.json" },
  { configPath: "./dist/api_worker/wrangler.json" },
  ],
  });
  await server.listen();
  await server.fetch("http://example.com");
  const apiWorker = server.getWorker("api-worker");
  await apiWorker.fetch("http://example.com/users/123");
  await apiWorker.scheduled({ cron: "0 0 * * *" });
  server.getLogs();
  if (testFailed) {
  server.debug();
  }
  await server.reset();
  await server.close();

• #14174 8cf8c61 Thanks @​oliy! - Surface pipeline status and failure reasons in wrangler pipelines list and wrangler pipelines get

  wrangler pipelines list now includes a Status column, and when any pipelines are in a failed state it prints a summary of each failing pipeline along with the reason reported by the API.

  wrangler pipelines get now shows the pipeline Status in the general details and, for failed pipelines, highlights the failure with the reason returned by the server so it is clear why a pipeline is not running.

• #14211 a61ac29 Thanks @​james-elicx! - Add --version-tag support to wrangler versions deploy to deploy a version by its tag

  You can now roll out or roll back a version by the tag it was uploaded with (e.g. a commit SHA passed to --tag at upload time) instead of first looking up its Version ID:

  wrangler versions deploy --version-tag <sha>@100%

... (truncated)

• 8a4bfe5 Version Packages (#14179)
• f8d7700 feat(wrangler): capture runtime logs and print debug timelines with `createTe...
• 4bb572f Bump the workerd-and-workers-types group with 2 updates (#14231)
• dcd116a feat(wrangler): improve createTestHarness() configuration setup (#14227)
• 75e652a Revert "Make Ctrl+C triggered during the skills-install prompt dismiss it per...
• e13b8c0 [C3] Bump @​angular/create from 21.2.13 to 22.0.0 in /packages/create-cloudfla...
• a61ac29 [wrangler] Add --version-tag support to versions deploy (#14211)
• 24497d0 Bump the workerd-and-workers-types group with 2 updates (#14217)
• 0706fbf feat(wrangler): createTestHarness API (#14169)
• 8923f97 Preserve all deployment-affecting CLI flags in the interactive deploy config ...
• Additional commits viewable in compare view

Sourced from start-server-and-test's releases.

v3.0.9

3.0.9 (2026-06-09)

Bug Fixes

• normalize package.json with npm 11 (#481) (5df0c8f)

v3.0.8

3.0.8 (2026-06-05)

Bug Fixes

• make npm scripts cross-platform (#477) (a54ba5b)

v3.0.7

3.0.7 (2026-06-04)

Bug Fixes

• deps: update lazy-ass to v2 (#474) (c138a9d)

v3.0.6

3.0.6 (2026-06-02)

Bug Fixes

• deps: remove bluebird and use native Promise (#467) (c748117)

• 5df0c8f fix: normalize package.json with npm 11 (#481)
• a54ba5b fix: make npm scripts cross-platform (#477)
• fd6d077 docs: README cleanup and tweaks (#478)
• d958d5a chore(deps): upgrade major devDependencies (#476)
• c138a9d fix(deps): update lazy-ass to v2 (#474)
• 301399e test: fix typos, wrong assertion, and placeholder test (#473)
• 93f02cf chore(ci): drop Node.js 25 from tests (#471)
• c748117 fix(deps): remove bluebird and use native Promise (#467)
• a5e1cfb chore: add .gitattributes to enforce LF line endings (#468)
• 719581b chore(deps): add minimum release age for installation / updating (#470)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions