Skip to content

chore(deps): update dependency deno to v2#62

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/deno-2.x
Open

chore(deps): update dependency deno to v2#62
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/deno-2.x

Conversation

@renovate

@renovate renovate Bot commented Oct 11, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
deno (source) v1.x → 2.x age adoption passing confidence

Release Notes

denoland/deno (deno)

v2.9.3

Compare Source

  • feat(cli): deno add --no-save and --save-optional (#​36039)
  • feat(cli): add --min-dep-age alias (#​35914)
  • feat(compile): support aarch64-pc-windows-msvc target (#​36004)
  • feat(ext/fetch): add http2MaxHeaderListSize option to
    Deno.createHttpClient (#​33194)
  • fix(bundle): preserve raw imports in watch mode (#​36040)
  • fix(canvas): don't hold SurfaceData mut borrow over window resize (#​35993)
  • fix(config): reject out-of-range minimum dependency ages (#​36051)
  • fix(core): block user ext imports after resolution (#​36012)
  • fix(core): deactivate idle TTY write handles (#​35886)
  • fix(core): restrict extension loaders to internal modules (#​36013)
  • fix(core): root slow op string coercions (#​36018)
  • fix(desktop): don't let op_desktop_send_error_report target caller-supplied
    URLs (#​35940)
  • fix(ext/http): don't panic recycling cancelled record on native response
    (#​36053)
  • fix(ext/napi): don't free threadsafe function on abort while refs remain
    (#​36032)
  • fix(ext/napi): don't resurrect a released threadsafe function in acquire
    (#​36054)
  • fix(ext/node): add deprecation warning for Duplex.toWeb({ type }) DEP0201
    (#​35972)
  • fix(ext/node): guard sqlite deserialize during callbacks (#​36023)
  • fix(ext/node): handle UTF-16 assert source positions (#​36029)
  • fix(ext/node): handle sqlite conversion failures (#​36024)
  • fix(ext/node): respect base64 buffer ranges (#​36030)
  • fix(ext/process): don't double-close extra stdio pipe handles on Windows
    (#​36005)
  • fix(lsp): respect lint rule exclusion for no-slow-types diagnostics (#​35924)
  • fix(node): stop active read on stream close to avoid leaking Socket/TCPWrap
    (#​35898)
  • fix(node_http2): keep header validation enabled (#​36042)
  • fix(node_http2): validate serialized headers (#​36041)
  • fix(npm): don't fetch registry info for deprecated packages under
    --cached-only (#​35903)
  • fix(npm): normalize path in BYONM read permission check (#​35882)
  • fix(pm): hint about minimumDependencyAge when no version is old enough
    (#​35890)
  • fix(release): only strip Mach-O signature for x86_64-apple-darwin (#​35902)
  • fix(release): strip Mach-O signature before patchver on apple targets (#​35897)
  • fix(runtime): guard usage op output buffers (#​36020)
  • fix(serde_v8): handle deserialization exceptions (#​36021)
  • fix(web): guard encodeInto fallback result buffer (#​36019)
  • fix(web): support Event subclasses with readonly toStringTag (#​35920)
  • fix(worker): remove imported ops during bootstrap (#​36014)
  • fix: don't print duplicate parse diagnostics (#​35933)
  • perf(ext/crypto): batch randomUUID generation (#​35953)
  • perf(ext/fetch): remove quadratic line buffering in EventSource (#​35881)
  • perf(ext/node): cache compiled glob matchers + bump bundled minimatch to
    10.2.5 (#​35873)
  • perf(ext/node): fast path fs cp (#​35856)
  • perf(ext/node): right-size small socket reads instead of pinning the 64KB slab
    (#​35779)
  • perf(ext/node): speed up sqlite.StatementSync.all() and run() (#​35863)
  • perf(ext/web): avoid copy-back in op_base64_atob large path (#​35862)

v2.9.2

Compare Source

  • feat(desktop): autodetect React Router framework (#​35557)
  • feat(desktop): enable --hmr for Vite and Nuxt (#​35851)
  • feat(desktop): run HMR by framework dev server (#​35722)
  • feat(desktop): window opacity and transparency APIs (#​35646)
  • feat(desktop): wire --exclude-unused-npm through to compile (#​35740)
  • feat(ext/node): implement v8.setHeapSnapshotNearHeapLimit (#​35694)
  • feat(ext/telemetry): honor OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT (#​35068)
  • feat(inspector): start inspector server on SIGUSR1 (#​35738)
  • feat(node): implement getTestContext() in node:test (#​35678)
  • feat: support wildcard patterns in minimumDependencyAge.exclude (#​35746)
  • fix(check): don't interleave errors with "Check" lines in a workspace (#​35687)
  • fix(compile): bump libsui to 0.16.1 to survive eu-strip in flatpak (#​35699)
  • fix(compile): bump libsui to 0.16.3 to fix segfault under gVisor/Cloud Run
    (#​35701)
  • fix(core): don't drain microtasks in mod_evaluate_sync mid-evaluation (#​35707)
  • fix(coverage): count a branch-junction line as covered when either arm runs
    (#​35858)
  • fix(coverage): don't count V8 block-boundary gaps as branches (#​35767)
  • fix(coverage): don't let a trailing comment change a line's hit count (#​35741)
  • fix(deploy): disable config discovery and refresh the cached CLI version
    (#​35754)
  • fix(desktop): attribute bind calls to the registering window id (#​35654)
  • fix(desktop): honor desktop.backend from deno.json (#​35815
  • fix(desktop): pin @​std/http in generated Vite SPA entrypoint + add hermetic
    compile test (#​35676)
  • fix(desktop): rename launcher to so it self-loads the runtime (#​35709)
  • fix(desktop): run framework build step before bundling output (#​35603)
  • fix(desktop): surface compiled-app startup errors instead of exiting silently
    (#​35567)
  • fix(dprint): exclude tools/lzld submodule (#​35778)
  • fix(ext): throw DataCloneError when posting non-serializable values (#​35604)
  • fix(ext/cache): implement Cache.keys() (#​35455)
  • fix(ext/fetch): reject transport failures with Node's "fetch failed" shape
    (#​35618)
  • fix(ext/http): error non-Uint8Array response streams (#​35783)
  • fix(ext/http): honor explicit content-length header on HEAD responses (#​35728)
  • fix(ext/http): point legacy abort warning at docs.deno.com/go link (#​35713)
  • fix(ext/napi): add uv_cond_* polyfills for native addons (#​35536)
  • fix(ext/net): abort pending Deno.connect during DNS resolution (#​35729)
  • fix(ext/node): allow adopting inherited extra stdio TCP fds (#​35805)
  • fix(ext/node): don't panic when main module path has invalid percent-encoding
    (#​35534)
  • fix(ext/node): don't schedule a pause in inspector.waitForDebugger() (#​35796)
  • fix(ext/node): flush StringDecoder in cipher final() for stream ciphers
    (#​35800)
  • fix(ext/node): mark TLSWrap dead on teardown before tls_conn check (#​35706)
  • fix(ext/node): report all active resources from process.getActiveResourcesInfo
    (#​35532)
  • fix(ext/node): require --allow-net=unix for node:net unix sockets (#​35835)
  • fix(ext/node): support fd 3 pipes in spawned Deno children (#​34133)
  • fix(ext/signals): unregister handler when SignalStream is dropped (#​35832)
  • fix(ext/web): resolve pending BYOB read when teeing a byte stream that closes
    (#​35828)
  • fix(fmt): format Astro inline scripts as TypeScript (#​35852)
  • fix(fs): support pre-1970 (negative) timestamps in FsStat (#​35517)
  • fix(inspector): close WebSocket connections when the runtime is torn down
    (#​35791)
  • fix(install): don't panic on jsr specifier with a tag like @​latest (#​35605)
  • fix(install): don't write through hardlinks when copying package files
    (#​35735)
  • fix(install): make setup cache packages hash deterministic (#​35825)
  • fix(install): resolve lifecycle script dependency bins against the hoisted
    layout (#​35762)
  • fix(install): support uninstalling multiple global packages (#​29352)
  • fix(lint): don't error on non-analyzable package exports like CSS files
    (#​35732)
  • fix(lint): include config file in workspace member invalid version error
    (#​35759)
  • fix(lsp): fix CPU busy loop by creating tokio runtime before JsRuntime in TSC
    thread (#​35595)
  • fix(node/fs): implement followSymlinks option for fs.glob() (#​35524)
  • fix(npm): don't re-fetch packuments on every run when registry has no time
    data (#​35834)
  • fix(npm): don't retain full npm exports value + fix --watch memory leak
    (#​35677)
  • fix(npm): widen node_modules lock staleness margin to avoid false preemption
    (#​35806)
  • fix(permissions): split comma-separated paths in --ignore-read (#​35661)
  • fix(test): run Node-API finalizers at test worker shutdown (#​35695)
  • fix(watch): accept watch paths in fmt/lint/bench --watch (#​35720)
  • fix(watch): execute preload modules under --watch (#​35792)
  • fix(watch): terminate on Ctrl+C while blocked in synchronous code (#​35826)
  • fix: enable rusqlite "fallible_uint" feature in workspace deps (#​35681)
  • perf(config): literal-suffix reject and prune irrelevant globs per base
    (#​35688)
  • perf(core): defer residual lazy source registration (#​35731)
  • perf(ext/fetch): stream wasm bytes to the compiler from Rust (#​35704)
  • perf(ext/node): remove per-chunk copying on TLSWrap data paths (#​35705)
  • perf(ext/node): zero-copy async Buffer writes on the stream_wrap path (#​35780)
  • perf(ext/web): identity pipeThrough writable bypass (#​35799)
  • perf(ext/web): persistent pump for the generic pipeTo loop (#​35813)
  • perf(ext/web): pump readableStreamCollectIntoUint8Array with a persistent read
    request (#​35790)
  • perf(ext/web): reduce per-chunk allocations on stream read and tee paths
    (#​35786)
  • perf(ext/web): reduce per-chunk overhead in Web Streams (#​35773)
  • perf(ext/web): run synchronous pull completion without a microtask hop
    (#​35788)
  • perf(ext/web): shared underlying-source algorithms, hoist resource-bridge read
    request (#​35810)
  • perf(ext/web): sync fast path for ReadableStream async iterator next()
    (#​35842)
  • perf(ext/web): synchronous transform fast path for TransformStream (#​35844)
  • perf(npm): index packuments with SIMD JSON scanner (#​35698)
  • perf(streams): offload resource-backed pipeTo to Rust via op_pipe (#​35689)
  • perf(workers): optimize message passing (#​35110)
  • perf(workers): return raw buffer from receive ops for no-transferable messages
    (#​35756)
  • perf: use V8 native queueMicrotask instead of op (#​35787)

v2.9.1

Compare Source

  • feat(check): add --desktop flag to type-check for deno desktop (#​35644)
  • feat(desktop): register deep-link URL schemes at bundle time (#​35466)
  • feat: update laufey to 0.5.0 (#​35663)
  • fix(bundle): emit CSSStyleSheet for CSS raw imports (#​35598)
  • fix(cache): skip checksums for cached 404 entries (#​35526)
  • fix(config): don't strip workspace-member includes from deploy config (#​34788)
  • fix(core): apply deferred fast-call op upgrade to the captured bootstrap clone
    (#​35630)
  • fix(core): prevent shared-buffer timer expiry race from losing timers (#​35312)
  • fix(desktop): default window title to app name instead of laufey_webview
    (#​35541)
  • fix(desktop): detect SvelteKit adapter-node and error on unsupported adapters
    (#​35533)
  • fix(desktop): discover deno.json in the project dir for deno desktop .
    (#​35660)
  • fix(desktop): don't delete user directories that collide with app name
    (#​35513)
  • fix(desktop): repair webview and raw backends on Windows (laufey v0.4.1)
    (#​35566)
  • fix(desktop): resolve launcher symlink so .deb/.rpm apps find the backend
    (#​35632)
  • fix(desktop): set LAUFEY_RUNTIME_PATH in Linux app launcher (#​35580)
  • fix(desktop): show macOS tray icon in bundled .app launched via Finder
    (#​35626)
  • fix(desktop): use zstd for appimage squashfs (#​35506)
  • fix(doc): strip blockquote > prefixes from JSDoc code blocks (#​34866)
  • fix(ext/fetch): include path and reason when fetching a file:// URL fails
    (#​35606)
  • fix(ext/node): check permissions when binding node:net unix sockets (#​35564)
  • fix(ext/node): export report as named export from node:process (#​35400)
  • fix(ext/node): mock.reset() should also reset MockTimers (#​35588)
  • fix(ext/node): pass Deno subcommands through child_process spawn (#​35599)
  • fix(ext/node): send TLS close_notify on JS stream-backed socket shutdown
    (#​35582)
  • fix(ext/node_sqlite): keep attach limit capped under scoped permissions
    (#​35232)
  • fix(ext/web): make URL and URLSearchParams non-serializable (#​35423)
  • fix(fmt): stable formatting of multi-line html/svg tagged templates (#​35540)
  • fix(inspector): support Chrome worker debugging (#​35629)
  • fix(install): pin pre-release npm versions added via dist-tag (#​35586)
  • fix(jupyter): register stdin peer only after ZMTP handshake completes (#​35585)
  • fix(lib): add PerformanceObserver and PerformanceObserverEntryList types
    (#​35640)
  • fix(libs/http): add missing write_flushed in
    poll_start_fixed_response_with (#​35649)
  • fix(lsp): watch .wasm files for changes (#​35560)
  • fix(node): load graph-backed TypeScript modules synchronously (#​35527)
  • fix(npm): decode percent-encoded subpath of npm specifiers (#​35505)
  • fix(npm): fall back for age-filtered npm dist-tags (#​35561)
  • fix(npm): normalize bin names with path separators (#​35555)
  • fix(npm): realpath npm bin main module (#​35554)
  • fix(npm): show scoped-registry auth hint on tarball 404 (#​35514)
  • fix(npm): use case-insensitive match for trust-policy-exclude (#​35520)
  • fix(rt_desktop): reveal initial window on first paint (startup black flash)
    (#​35620)
  • fix: correct property name for JSX new line configuration in schema file
    (#​35565)
  • fix: resolve LAUFEY_VERSION from crate-local Cargo.lock during publish
    (#​35507)
  • fix: show clear error when V8 fails to create worker threads (#​32856)
  • perf(core/webidl): check next method outside of iterator loop (#​35480)
  • perf(ext/fetch): fast-path Response reconstruction (#​35495)
  • perf(ext/http): coalesce chunked response writes into a single write (#​35523)

v2.9.0

Compare Source

Read more: http://deno.com/blog/v2.9

  • feat(bundle): add --declaration flag to generate rolled-up .d.ts files
    (#​33838)
  • feat(cli): add deno link and deno unlink subcommands (#​34359)
  • feat(cli): add deno watch subcommand (#​35301)
  • feat(cli): add deno list subcommand to list declared dependencies (#​34972)
  • feat(cli): auto-migrate pnpm-workspace.yaml on resolution failure (#​34993)
  • feat(cli): provide a node on PATH when Node.js is not installed (#​34969)
  • feat(compile): persist Web Storage/KV in a per-app data directory (#​34618)
  • feat(coverage): add configurable coverage thresholds (#​35056)
  • feat(desktop): --compress for self-extracting app bundles (#​35420)
  • feat(desktop): add Linux .deb and .rpm installer output formats (#​35296)
  • feat(desktop): add Windows .msi installer output format (#​35378)
  • feat(desktop): autodetect Vite framework (#​35470)
  • feat(desktop): default UI backend to webview (#​35442)
  • feat(ext/crypto): support remaining modern WebCrypto algorithms (#​35223)
  • feat(ext/http): deprecation warning for legacy request abort (#​34397)
  • feat(ext/net): implement Happy Eyeballs for Deno.connect and
    Deno.connectTls (#​31726)
  • feat(ext/node): implement node:test mock.module (#​35329)
  • feat(ext/node): implement node:test mock.timers (#​33946)
  • feat(ext/web): web locks api (#​31166)
  • feat(fmt): add sortNamedImports and sortNamedExports options (#​33313)
  • feat(fmt): infer config from .editorconfig (#​34071)
  • feat(fmt): use lax-css for CSS, SCSS, and Less (#​35160)
  • feat(fmt): use lax-markup for HTML, XML, SVG, and components (#​35174)
  • feat(fmt): use lax-sql for SQL formatting (#​35161)
  • feat(http): allow disabling serve compression (#​35253)
  • feat(http): disable Deno.serve automatic compression by default (#​35486)
  • feat(install): create node_modules for workspace members (#​34970)
  • feat(install): seed deno.lock from bun.lock (#​35394)
  • feat(install): seed deno.lock from package-lock.json (#​35330)
  • feat(install): seed deno.lock from pnpm-lock.yaml (#​35346)
  • feat(install): seed deno.lock from yarn.lock (#​35350)
  • feat(install): warn on package.json engines mismatch (#​34225)
  • feat(lockfile): auto-resolve git merge conflicts in deno.lock (#​34726)
  • feat(lsp): add inferred type request (#​35099)
  • feat(napi): implement Node-API version 10 (#​35270)
  • feat(node): bump reported process.version to v26.3.0 (#​34747)
  • feat(npm): install jsr deps into node_modules via npm-compat registry (#​35029)
  • feat(npm): publishing-trust ranking and no-downgrade trust policy (#​34927)
  • feat(runtime): add request_builder_hook for fetch token and cdn-loop headers
    (#​35088)
  • feat(task): add --if-present flag to deno task (#​35315)
  • feat(task): add --jobs/--concurrency flag to deno task (#​35318)
  • feat(task): input-based caching with files/output/env (#​34509)
  • feat(task): set npm_execpath, npm_node_execpath and npm_command for
    package.json scripts (#​35317)
  • feat(test): add --changed and --related flags to deno test (#​35199)
  • feat(test): add --shard flag to split a test run across machines (#​35057)
  • feat(test): add Deno.test.each for parameterized tests (#​34938)
  • feat(test): add retry and repeats options to Deno.test (#​35053)
  • feat(test): built-in snapshot testing via t.assertSnapshot (#​35139)
  • feat(test): show sub-millisecond test durations (#​35200)
  • feat(unstable): CSS module imports (with { type: "css" }) (#​35093)
  • feat: deno desktop subcommand (#​33441)
  • feat: deno remove --global as alias for deno uninstall --global (#​35327)
  • feat: add "preferPackageJson" deno.json setting (#​35392)
  • feat: add stable --unsafe-proto flag (#​34738)
  • feat: enable default minimum dependency age (#​35458)
  • feat: stabilize "links" field in deno.json (#​34996)
  • feat: stabilize bare node built-in resolution (#​33316)
  • feat: support ignore option in Deno.watchFs (#​31582)
  • feat: support navigator.userAgentData (#​34743)
  • fix(check): treat npm .d.ts as CJS based on package.json (#​35166)
  • fix(core): always register isolate to prevent silent foreground task drop
    (#​35408)
  • fix(core): don't cache WebIDL sequence keys in thread-local v8::Eternal
    (#​35462)
  • fix(core): handle async op promise id wraparound (#​35126)
  • fix(core): make uv_compat ready queues thread-safe (#​35175)
  • fix(core): preserve custom .stack getters in error/test formatter (#​35246)
  • fix(core): unwrap global exports in Wasm ESM integration (#​34912)
  • fix(coverage): don't panic in summary reporter without a common root (#​35211)
  • fix(coverage): merge coverage for modules loaded with different hash/search
    params (#​35354)
  • fix(deploy): use JSR latest for deploy CLI (#​35493)
  • fix(desktop): Wayland support for CEF and webview backends (#​35425)
  • fix(desktop): add Bluetooth usage descriptions to macOS Info.plist (#​35472)
  • fix(desktop): add macOS desktop Info.plist keys (#​35484)
  • fix(desktop): correct libdenort unpack path with non-executable extension
    (#​35267)
  • fix(desktop): hide bundled libc++ symbols so the desktop runtime can be
    dlopen'd on Linux (#​35424)
  • fix(desktop): use native Wayland instead of XWayland on Wayland systems
    (#​35485)
  • fix(ext/crypto): allow deriving AES-OCB keys (#​35426)
  • fix(ext/crypto): clamp X448 scalar per RFC 7748 (#​35157)
  • fix(ext/crypto): pad JWK to multiple of 8 bytes for AES-KW wrap (#​35475)
  • fix(ext/fetch): keep content-encoding and content-length on decompressed
    responses (#​35124)
  • fix(ext/fetch): require --allow-net for Unix proxy in createHttpClient
    (#​35231)
  • fix(ext/fs): truncate should not follow a terminal symlink (#​35239)
  • fix(ext/http): apply automatic compression for zero-arg serve handlers
    (#​35490)
  • fix(ext/http): close active WebSockets on Deno.serve shutdown (#​35105)
  • fix(ext/kv): validate remote KV URL when opening the connection (#​35106)
  • fix(ext/napi): restore Explicit microtask policy in napi_resolve_deferred
    (#​35212)
  • fix(ext/net): cancel in-flight reads when closing TCP/Unix/Vsock streams
    (#​35294)
  • fix(ext/net): set transport on address for TlsListener (#​35258)
  • fix(ext/node): allow registerHooks with no resolve or load hook (#​35235)
  • fix(ext/node): avoid panic deserializing empty buffers over child_process IPC
    (#​35340)
  • fix(ext/node): avoid panic when vm.SourceTextModule uses import.meta (#​35375)
  • fix(ext/node): check --allow-net for proxied request target in node:http(s)
    (#​35241)
  • fix(ext/node): don't apply requestTimeout to active streaming responses
    (#​35291)
  • fix(ext/node): fail node:test on unhandled rejection and enforce timeout
    (#​35297)
  • fix(ext/node): fix node:test hook ordering and error handling (#​35393)
  • fix(ext/node): forward permissions when spawning deno with subcommand args
    (#​35443)
  • fix(ext/node): implement process.resourceUsage() (#​35468)
  • fix(ext/node): implement t.assert.fileSnapshot for node:test (#​35478)
  • fix(ext/node): implement test.TestContext.runOnly (#​35158)
  • fix(ext/node): implement worker_threads.isInternalThread (#​35234)
  • fix(ext/node): import attributes and custom module types in registerHooks ESM
    hooks (#​35028)
  • fix(ext/node): initialize named stdio exports lazily (#​35428)
  • fix(ext/node): keep dns.lookup permission token internal (#​35224)
  • fix(ext/node): make registerHooks resolve hook work for nested imports
    (#​35169)
  • fix(ext/node): preserve AsyncLocalStorage context across node:net callbacks
    (#​35237)
  • fix(ext/node): restore Node binding signature for zlib write/writeSync
    (#​35238)
  • fix(ext/node): single source of truth for emulated Node version (#​35273)
  • fix(ext/node): stop coloring non-TTY streams in util.styleText (#​35236)
  • fix(ext/node): support AbortSignal.timeout in node:test mock.timers (#​35474)
  • fix(ext/node): support HTTP/2 on the DENO_SERVE_ADDRESS override listener
    (#​35089)
  • fix(ext/node): trace v8 serializer delegate (#​35132)
  • fix(ext/signals): build windows-sys only on Windows (#​35283)
  • fix(install): remove stale root node_modules symlink on deno remove (#​35137)
  • fix(install): resolve package.json dependencies in global install (#​35135)
  • fix(install): seed pnpm workspace members and catalog deps (#​35376)
  • fix(jupyter): report cell errors instead of failing silently (#​35328)
  • fix(lsp): honor --env-file from deno.json test task in test runner (#​34905)
  • fix(lsp): include tsconfig roots in script names (#​34136)
  • fix(lsp): make requests work for files opened from node_modules (#​35176)
  • fix(lsp): report TS2307 for unresolved imports in .d.ts entrypoints (#​35469)
  • fix(node): expose lazy console stdio streams (console._stdout/_stderr)
    (#​35488)
  • fix(node): propagate source thread id to process workerMessage event
    (#​35374)
  • fix(node/test): route nested top-level test() to a subtest (#​35406)
  • fix(npm): avoid spurious npm re-resolution that fails under --cached-only
    (#​35051)
  • fix(npm): don't apply import map to npm bin main module (#​35097)
  • fix(npm): make peer dependency warning actionable and show importers (#​35242)
  • fix(npm): slim cached full packument when minimumDependencyAge is set (#​35285)
  • fix(npm): support catalog: protocol in deno.json imports (#​35168)
  • fix(npm): symlink workspace npm members into root node_modules by name
    (#​35383)
  • fix(pack): include assets matched by publish.include in the tarball (#​35331)
  • fix(pack): surface slow type diagnostics (#​35379)
  • fix(permissions): don't require --allow-run for process.kill on self (#​34382)
  • fix(permissions): require --allow-net for Unix domain socket ops (#​34395)
  • fix(permissions): treat Windows \\?\ verbatim paths as equivalent (#​35096)
  • fix(publish): continue publishing workspace after a package fails (#​35133)
  • fix(publish): skip already-published versions before type checking (#​35134)
  • fix(repl): highlight regex literals correctly (#​35103)
  • fix(resolver): better hint when importing a linked package by the wrong name
    (#​35319)
  • fix(resolver): resolve linked packages by bare specifier (#​35228)
  • fix(runtime): capture blob worker roots before revocation (#​35128)
  • fix(runtime): don't silently lose Deno.watchFs events (#​35122)
  • fix(runtime): make Deno.test.* sub-methods no-op under deno run (#​35344)
  • fix(runtime): suggest --unstable-unsafe-proto after proto access (#​35192)
  • fix(serve): exit cleanly on SIGTERM/SIGINT in deno serve (#​32862)
  • fix(serve): shut down old workers on watcher restart (#​35136)
  • fix(serve): update request_signal_streaming spec for legacy abort warning
    (#​35193)
  • fix(task): set npm lifecycle env vars when running package.json scripts
    (#​35252)
  • fix(test): ignorelist leaks from sanitizer-ignoring tests (#​35005)
  • fix(test): skip invalid doctest import bindings (#​35382)
  • fix(test/node): mark test-worker-fshandles-open-close-on-termination as flaky
    (#​35387)
  • fix(tests): skip npm/playwright_compat on windows-aarch64 (#​35358)
  • fix(update): refetch npm metadata so stale cache doesn't hide newer versions
    (#​35380)
  • fix(upgrade): stream zstd delta patch to avoid 2GiB OOM (#​35284)
  • fix: Headers inspect for duplicate Set-Cookie values (#​35461)
  • fix: accept U+30FB KATAKANA MIDDLE DOT in identifiers (#​35147)
  • fix: cache 404 responses for remote modules (#​35138)
  • perf(core): reduce snapshotted cppgc op member templates (#​35298)
  • perf(core): skip source ASCII checks in release runtime setup (#​35186)
  • perf(ext/crypto): port WebCrypto from JS to Rust (#​34966)
  • perf(ext/web): port console/inspect to Rust (cppgc object wrap) (#​35087)
  • perf(macos): enable chained fixups to cut pre-main startup (~0.8ms) (#​35409)
  • perf(runtime): lazy-load node:buffer and node:timers globals (#​35373)
  • perf(snapshot): guard against lazy modules leaking into eager snapshot
    (#​35332)
  • perf(snapshot): minify snapshot sources (#​35183)
  • perf(workers): incremental message-passing cleanups (#​35108)
  • perf: V8 code cache for residual lazy-loaded ESM modules (#​35338)
  • perf: gate eager node bootstrap to node workers (#​35337)
  • perf: lazy-load OSX frameworks with lzld (#​35341)
  • perf: startup profiling instrumentation + clap fast-path (#​35263)
  • perf: startup time (22ms -> 15ms) (#​34450)

v2.8.3

Compare Source

  • feat(cli): suggest DENO_TLS_CA_STORE on untrusted TLS certificate (#​34756)
  • feat(cli): support --env-file in dependency and registry subcommands (#​34843)
  • feat(compile): support watch mode (#​34860)
  • feat(config): support globs in links (#​34849)
  • feat(ext/crypto): implement SubtleCrypto.supports() static method (#​34903)
  • feat(ext/crypto): support ML-DSA JWK import/export (#​34914)
  • feat(ext/fetch): support priority in RequestInit (#​34716)
  • feat(ext/node): auto-instrument node:http2 with OpenTelemetry (#​34510)
  • feat(ext/node): notify control socket when node:http server starts serving
    (#​34949)
  • feat(ext/telemetry): honor OTEL_SPAN_ATTRIBUTE_COUNT_LIMIT (#​34787)
  • feat(ext/telemetry): honor OTEL_SPAN_EVENT_COUNT_LIMIT (#​34795)
  • feat(ext/telemetry): support OTEL_TRACES_SAMPLER (#​34764)
  • feat(fmt): add JSON trailing comma config (#​33383)
  • feat(info): add localPath to npm packages in deno info --json (#​34806)
  • feat(info): support --minimum-dependency-age flag (#​34762)
  • feat(lsp): add "Debug" code lens for test steps (#​34742)
  • feat(lsp): add Deno.test ignore and only code actions (#​34861)
  • feat(lsp): diagnose import map files (#​34864)
  • feat(lsp): provide hover info for import map resolutions (#​34854)
  • feat(lsp): report deno doc --lint diagnostics (#​34733)
  • feat(lsp): show no-slow-types diagnostics for JSR packages (#​34740)
  • feat(outdated): warn about packages skipped due to registry errors (#​34974)
  • feat(test): forward shebang permissions into deno test --doc (#​35052)
  • feat(workspace): auto-discover external deno.json import maps (#​34803)
  • feat(x): add deno x --ignore-scripts (#​34952)
  • feat: bump-version -c to handle deno.json + package.json in same dir
    (#​34770)
  • fix(add): accept npm version ranges on the command line (#​34799)
  • fix(bundle): apply node-style CJS interop on all platforms (#​34939)
  • fix(bundle): don't panic when esbuild binary is busy or unavailable (#​34845)
  • fix(bundle): instantiate .wasm imports instead of emitting raw bytes (#​34923)
  • fix(bundle): rename sourcemap for HTML entrypoints (#​34901)
  • fix(bundle): respect --check and run the type checker (#​33514)
  • fix(cache): retry locked cache database instead of deleting it (#​34873)
  • fix(check): honor ts suppressions for unresolved imports (#​34163)
  • fix(check): ignore doc comment dynamic imports (#​34888)
  • fix(check): surface unresolved imports in .d.ts entrypoints (#​34168)
  • fix(check): treat .d.ts in ESM-supporting npm packages as ESM (#​34613)
  • fix(clean): keep cleaning when cache files are locked and report holders
    (#​34946)
  • fix(clean): support deno clean --dry-run without --except (#​34846)
  • fix(cli): accept allow-import for deno add (#​35019)
  • fix(cli): check worker's own permissions for dynamic asset imports (#​34707)
  • fix(cli): collect re-exported names for deno test --doc injection (#​33511)
  • fix(cli): don't let --env-file set Deno's own runtime control vars (#​35032)
  • fix(cli): don't suggest non-existent subcommand-flag combinations (#​34810)
  • fix(cli): generate type-only doc-test imports under verbatimModuleSyntax
    (#​33508)
  • fix(cli): include the typed name in unrecognized subcommand error (#​34882)
  • fix(cli): strip trailing CR from args so CRLF shebangs work (#​34968)
  • fix(compile): prune managed npm snapshot to graph-reachable packages (#​34741)
  • fix(compile): resolve bare npm imports in --bundle worker sources (#​34967)
  • fix(compile): run forked child's module instead of entrypoint (#​34687)
  • fix(compile): support fs.fstatSync on vfs (#​34892)
  • fix(console): %c colors with same red component as previous color (#​34784)
  • fix(core): don't set ERR_MODULE_NOT_FOUND code on module linking errors
    (#​34800)
  • fix(core): externalize lazy loaded sources (#​34936)
  • fix(core): silence too_many_arguments on Callable trait method (#​33475)
  • fix(core): use isolate_unchecked accessors for fast &v8::Isolate args
    (#​33474)
  • fix(coverage): exclude linked/patched packages from coverage report (#​34834)
  • fix(coverage): improve HTML report PageSpeed score (#​34980)
  • fix(dotenv): include underscore in unbraced variable names ([#​34797](https://redirect.github.com/de

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/deno-2.x branch from 0a71cb9 to 69ded3c Compare November 30, 2025 01:47
@renovate
renovate Bot force-pushed the renovate/deno-2.x branch from 69ded3c to e8319d3 Compare January 19, 2026 22:06
@renovate
renovate Bot force-pushed the renovate/deno-2.x branch from e8319d3 to 025fcd4 Compare March 17, 2026 05:56
@renovate
renovate Bot force-pushed the renovate/deno-2.x branch from 025fcd4 to b8cd883 Compare April 21, 2026 10:07
@renovate
renovate Bot force-pushed the renovate/deno-2.x branch from b8cd883 to eb89d34 Compare May 3, 2026 17:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants