This PR contains the following updates:
Package Updates Summary
| Type | Count |
|---|---|
| 📦 NPM Packages | 13 |
| Total | 13 |
📦 npm Dependencies
13 packages will be updated
Release Notes
stacksjs/bunpress (@stacksjs/bunpress)
0.1.4 -> 0.2.31
v0.2.31
Released by github-actions[bot] on 10/30/2026
v0.2.30
Released by github-actions[bot] on 10/29/2026
v0.2.29
Released by github-actions[bot] on 10/26/2026
stacksjs/buddy-bot (buddy-bot)
0.9.19 -> 0.10.5
v0.10.5
⚡ Performance Improvements
- ai: make the Anthropic SDK an optional peer, resolved on first use (a316c78) (by Chris chrisbreuer93@gmail.com)
🔧 Chores
- release v0.10.5 (7111ccd) (by Chris chris@stacksjs.com)
Contributors
- Chris chris@stacksjs.com
Released by github-actions[bot] on 8/19/2026
v0.9.27
Released by github-actions[bot] on 8/8/2026
v0.9.26
Released by github-actions[bot] on 8/8/2026
evanw/esbuild (esbuild)
0.27.7 -> 0.28.2
v0.28.2
Fix tree shaking bug due to TypeScript import alias (
#4507)This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific
importassignment and looks something like this:import Base from './dep.js'; import Alias = Base.SomeType;Fix CSS minification bug involving
&(#4497)This release fixes a bug where esbuild's CSS minifier incorrectly removed a
&when it was unsafe to do so. Here is an example:/* Original code */ .a .b { & .b:not(& .c) { color: red; } } /* Old output (with --minify) */ .a .b{.b:not(& .c){color:red}} /* New output (with --minify) */ .a .b{& .b:not(& .c){color:red}}This should match
<span class="a"><span class="b"><span class="b">yes</span></span></span>but no...
[View full release notes]
Released by github-actions[bot] on 8/8/2026
v0.28.1
Disallow
\in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a
\backslash character. It happened due to the use of Go'spath.Clean()function, which only handles Unix-style/characters. HTTP requests with paths containing\are no longer allowed.Thanks to [dellalibera](https://github.com/dellalibera) for reporting this issue.
Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)
The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if ...
[View full release notes]
Released by github-actions[bot] on 6/11/2026
v0.28.0
Add support for
with { type: 'text' }imports (#4435)The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing
textloader. Here's an example:import string from './example.txt' with { type: 'text' } console.log(string)Add integrity checks to fallback download path (
#4343)Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the re...
[View full release notes]
Released by github-actions[bot] on 4/2/2026
oxc-project/oxc (oxc-parser)
0.121.0 -> 0.156.0
oxlint_v1.90.0
🚀 Features
cf34678oxlint: ExportOxlintrctype (#28132) (Sysix)831cdf1oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#28118) (camc314)d1b00f4linter/typescript: Implement no-unsafe-enum-assignment rule (#28117) (camc314)165c91flinter/typescript/await-thenable: SupportallowMixedPromiseArraysoption (#28116) (camc314)
🐛 Bug Fixes
7f3c908linter/eslint/array-callback-return: Check callbacks passed with extra arguments (#28133) (sarankumar)53be530linter: Filter by type aware rules when looking up tsgolint rule severity (#28138) (NavpreetSSidhu)e0f8937react-compiler: Compile atrywhosecatchis unreachable instead of panicking (#28066) (Dunqing)f5b625flinter/eslint/no-useless-concat: See through parenthesized expressions (#27984) (Rahul Kashyap)4629bb2linter/jest/no-conditional-expect: Check function expression callbacks (#28055) (camc314)5c84098semantic,linter: Report names with lone surrogates in enum...
[View full release notes]
Released by github-actions[bot] on 10/27/2026
oxfmt_v0.75.0
🐛 Bug Fixes
- 5042019 formatter: Keep fill layout for array with comment after [ (
#28170) (leaysgur) 9d37ff6formatter: Use position-based comment checks for concise arrays (#28169) (leaysgur)016c4a2formatter: Keep a comment before}inside a JSX spread child (#28103) (vidigoat)190bb1eformatter: Keep parens around an instantiation expression ending an operand through any tight parent (#28168) (leaysgur)a5314a1formatter: Keep;beforeinandinstanceofclass members (#28166) (leaysgur)3a56e7cformatter: Keep closing HTML comments at the start of a line (#28064) (Cameron)23d23d6formatter_markdown: Honor range ignore inside directives (#28164) (leaysgur)5f1fd3dformatter: Measure width heuristics by display width (#28098) (leaysgur)a5a52cfformatter: Keep parens around privateinexpressions (#28096) (leaysgur)999496eformatter: Measure a short key by its display width (#28026) (vidigoat)7e9aa44formatter: Keep parens ar...
[View full release notes]
Released by github-actions[bot] on 10/27/2026
crates_v0.156.0
💥 BREAKING CHANGES
cf8296fecmascript: [BREAKING] Fold surrogate strings with JSStr constants (#27098) (Dunqing)
🚀 Features
dd6cb2bminifier: Fold out-of-bounds string indices tovoid 0(#28004) (Dunqing)
🐛 Bug Fixes
f4dac9esemantic: Separate hoisted vars from block type bindings (#27936) (limadog9)9ec6617minifier: Keep brackets on negative and non-finite numeric keys (#27855) (Yunus Ozen)520a26eminifier: Keep the default in shorthand assignment targets (#28183) (waltu)def47b8react-compiler: Keep manual memoization as written when its dependencies can't be honoured (#28101) (Dunqing)704d8cftransformer_plugins: Keep the bare inject when references to it remain (#26965) (Bharadwaj Pendyala)6d7b372minifier: Handle sequence exprs when folding if to expr statement (#27939) (Armano)e3eca41runtime: Align async iterator throw with Babel (#28059) (camc314)af0258dparser: Parse source imports named type (#28062) (cam...
[View full release notes]
Released by github-actions[bot] on 10/27/2026
oxc-project/oxc (oxc-transform)
0.121.0 -> 0.156.0
oxlint_v1.90.0
🚀 Features
cf34678oxlint: ExportOxlintrctype (#28132) (Sysix)831cdf1oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#28118) (camc314)d1b00f4linter/typescript: Implement no-unsafe-enum-assignment rule (#28117) (camc314)165c91flinter/typescript/await-thenable: SupportallowMixedPromiseArraysoption (#28116) (camc314)
🐛 Bug Fixes
7f3c908linter/eslint/array-callback-return: Check callbacks passed with extra arguments (#28133) (sarankumar)53be530linter: Filter by type aware rules when looking up tsgolint rule severity (#28138) (NavpreetSSidhu)e0f8937react-compiler: Compile atrywhosecatchis unreachable instead of panicking (#28066) (Dunqing)f5b625flinter/eslint/no-useless-concat: See through parenthesized expressions (#27984) (Rahul Kashyap)4629bb2linter/jest/no-conditional-expect: Check function expression callbacks (#28055) (camc314)5c84098semantic,linter: Report names with lone surrogates in enum...
[View full release notes]
Released by github-actions[bot] on 10/27/2026
oxfmt_v0.75.0
🐛 Bug Fixes
- 5042019 formatter: Keep fill layout for array with comment after [ (
#28170) (leaysgur) 9d37ff6formatter: Use position-based comment checks for concise arrays (#28169) (leaysgur)016c4a2formatter: Keep a comment before}inside a JSX spread child (#28103) (vidigoat)190bb1eformatter: Keep parens around an instantiation expression ending an operand through any tight parent (#28168) (leaysgur)a5314a1formatter: Keep;beforeinandinstanceofclass members (#28166) (leaysgur)3a56e7cformatter: Keep closing HTML comments at the start of a line (#28064) (Cameron)23d23d6formatter_markdown: Honor range ignore inside directives (#28164) (leaysgur)5f1fd3dformatter: Measure width heuristics by display width (#28098) (leaysgur)a5a52cfformatter: Keep parens around privateinexpressions (#28096) (leaysgur)999496eformatter: Measure a short key by its display width (#28026) (vidigoat)7e9aa44formatter: Keep parens ar...
[View full release notes]
Released by github-actions[bot] on 10/27/2026
crates_v0.156.0
💥 BREAKING CHANGES
cf8296fecmascript: [BREAKING] Fold surrogate strings with JSStr constants (#27098) (Dunqing)
🚀 Features
dd6cb2bminifier: Fold out-of-bounds string indices tovoid 0(#28004) (Dunqing)
🐛 Bug Fixes
f4dac9esemantic: Separate hoisted vars from block type bindings (#27936) (limadog9)9ec6617minifier: Keep brackets on negative and non-finite numeric keys (#27855) (Yunus Ozen)520a26eminifier: Keep the default in shorthand assignment targets (#28183) (waltu)def47b8react-compiler: Keep manual memoization as written when its dependencies can't be honoured (#28101) (Dunqing)704d8cftransformer_plugins: Keep the bare inject when references to it remain (#26965) (Bharadwaj Pendyala)6d7b372minifier: Handle sequence exprs when folding if to expr statement (#27939) (Armano)e3eca41runtime: Align async iterator throw with Babel (#28059) (camc314)af0258dparser: Parse source imports named type (#28062) (cam...
[View full release notes]
Released by github-actions[bot] on 10/27/2026
webpack/webpack (webpack)
5.106.2 -> 5.112.2
v5.112.2
Patch Changes
Reduce repeated scans when concatenating imported modules. (by [xiaoxiaojx](https://github.com/xiaoxiaojx) in
#22865)Avoid allocating CSS module sets for single-group chunks. (by [xiaoxiaojx](https://github.com/xiaoxiaojx) in
#22866)Return the value of every module type loaded with
importModule(). (by [alexander-akait](https://github.com/alexander-akait) in#22869)
Released by github-actions[bot] on 10/23/2026
v5.112.1
Patch Changes
Rebuild a lazy barrel in watch when what it defers changes, and keep the imports and re-exports it still runs. (by [aryanraj45](https://github.com/aryanraj45) in
#22699)Rebuild under
cacheUnaffecteda module whose re-export target goes or returns. (by [aryanraj45](https://github.com/aryanraj45) in#22749)Fix "Self-reference dependency has unused export name" for CommonJS namespace re-exports. (by [alexander-akait](https://github.com/alexander-akait) in
#22791)Fix
exportType: "style"CSS modules throwing outside the runtime chunk. (by [lazerg](https://github.com/lazerg) in#22833)Fix crash when a CSS module with
exportType: "style"imports an ignored stylesheet. (by [[codeXsidd](https://github.com/co...
[View full release notes]
Released by github-actions[bot] on 10/22/2026
v5.112.0
Minor Changes
Apply
pluginsset on a multi-configuration array to theMultiCompiler. (by [alexander-akait](https://github.com/alexander-akait) in#22702)Add
optimization.minimize.css.dropOverriddenDeclarations, dropping a declaration a later one overrides where no target is named. (by [alexander-akait](https://github.com/alexander-akait) in#22175)Export more plugins under their scope, move eleven loose exports under theirs, deprecate the old, and expose
template.DependencyTemplate,module.NullFactoryandutil.makeSerializable. (by [alexander-akait](https://github.com/alexander-akait) in#22261)Let
util.makeSerializabletake several requests, current one first. (by [alexander-akait](https://github.com/alexander-akait) ...
[View full release notes]
Released by github-actions[bot] on 10/15/2026
stacksjs/bumpx (@stacksjs/bumpx)
0.2.6 -> 0.2.30
v0.2.30
Released by github-actions[bot] on 10/29/2026
v0.2.9
Released by github-actions[bot] on 7/22/2026
v0.2.8
Released by github-actions[bot] on 7/22/2026
stacksjs/gitlint (@stacksjs/gitlint)
0.1.5 -> 0.1.8
v0.1.8
Released by github-actions[bot] on 8/19/2026
v0.1.7
Released by github-actions[bot] on 7/22/2026
v0.x.x
Released by github-actions[bot] on 5/8/2026
stacksjs/logsmith (@stacksjs/logsmith)
0.2.1 -> 0.2.14
v0.2.14
🐛 Bug Fixes
- release: generate the changelog ourselves, not through bumpx (aaa65a5) (by glennmichael123 gtorregosa@gmail.com)
🧹 Chores
- release v0.2.14 (f348cbc) (by glennmichael123 gtorregosa@gmail.com)
- changelog for v0.2.13 (1c758c0) (by glennmichael123 gtorregosa@gmail.com)
- add the v0.2.13 changelog entry bumpx failed to write (bccd461) (by glennmichael123 gtorregosa@gmail.com)
📄 Miscellaneous
- Revert "chore: changelog for v0.2.13" (0965117) (by glennmichael123 gtorregosa@gmail.com)
Contributors
- glennmichael123 gtorregosa@gmail.com
Released by github-actions[bot] on 10/8/2026
v0.2.13
🐛 Bug Fixes
- parser: a hex colour is not an issue, and a cross-repo ref keeps its owner (fbcc297) (by glennmichael123 gtorregosa@gmail.com) (
#3402)
🧹 Chores
- release v0.2.13 (5746d89) (by glennmichael123 gtorregosa@gmail.com)
Contributors
- glennmichael123 gtorregosa@gmail.com
Released by github-actions[bot] on 10/7/2026
v0.2.12
Released by github-actions[bot] on 10/3/2026
stacksjs/bun-git-hooks (bun-git-hooks)
0.3.1 -> 0.3.3
v0.3.3
Released by github-actions[bot] on 8/19/2026
v0.3.2
Released by github-actions[bot] on 5/14/2026
stacksjs/bunfig (bunfig)
0.15.11 -> 0.15.21
v0.15.21
Released by github-actions[bot] on 10/18/2026
v0.15.20
Released by github-actions[bot] on 10/18/2026
v0.15.19
Released by github-actions[bot] on 8/19/2026
pickier/pickier (pickier)
0.1.28 -> 0.1.81
v0.1.81
Released by github-actions[bot] on 10/29/2026
v0.1.80
Released by github-actions[bot] on 10/29/2026
v0.1.79
Released by github-actions[bot] on 10/29/2026
📊 Package Statistics
- @stacksjs/bunpress: 86,421 weekly downloads
- @types/bun: 24,836,845 weekly downloads
- buddy-bot: 29,567 weekly downloads
- esbuild: 397,493,252 weekly downloads
- oxc-parser: 88,346,152 weekly downloads
- oxc-transform: 8,382,271 weekly downloads
- webpack: 76,441,971 weekly downloads
- @stacksjs/bumpx: 72,407 weekly downloads
- @stacksjs/gitlint: 39,946 weekly downloads
- @stacksjs/logsmith: 66,502 weekly downloads
- bun-git-hooks: 48,233 weekly downloads
- bunfig: 104,488 weekly downloads
- pickier: 72,008 weekly downloads
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Buddy 🤖