This PR contains the following updates:

Package Updates Summary

Type	Count
📦 NPM Packages	18
Total	18

📦 npm Dependencies

18 packages will be updated

Package	Change	Age	Adoption	Passing	Confidence
@capacitor/android (source)	`8.2.0` -> `8.3.0`
@capacitor/app (source)	`8.0.1` -> `8.1.0`
@capacitor/cli (source)	`8.2.0` -> `8.3.0`
@capacitor/core (source)	`8.2.0` -> `8.3.0`
@capacitor/ios (source)	`8.2.0` -> `8.3.0`
isomorphic-dompurify (source)	`3.5.1` -> `3.7.1`
ws (source)	`8.19.0` -> `8.20.0`
@capacitor/haptics (source)	`8.0.1` -> `8.0.2`
@capacitor/keyboard (source)	`8.0.1` -> `8.0.2`
@capacitor/status-bar (source)	`8.0.1` -> `8.0.2`
@cwcss/crosswind (source)	`0.1.3` -> `0.1.6`
@types/bun (source)	`1.3.9` -> `1.3.11`
bun (source)	`1.3.10` -> `1.3.11`
handlebars (source)	`4.7.8` -> `4.7.9`
happy-dom (source)	`20.8.4` -> `20.8.9`
liquidjs (source)	`10.25.0` -> `10.25.2`
marked (source)	`17.0.4` -> `17.0.5`
ts-broadcasting	`0.0.3` -> `0.0.4`

Release Notes

ionic-team/capacitor (@capacitor/android)

8.2.0 -> 8.3.0

`8.3.0`

Compare Source

8.3.0 (2026-03-25)

Bug Fixes

android: correctly parsing server.url when they include paths (#8391) (a9f2181)
cli: inline CSS sourcemaps in addition to JS sourcemaps (#8377) (69476ab)
http: handle URL objects on fetch (#8386) (003099a)
ios: make getArray accesible on Objective-C plugins (#8392) (afb80f2)
SystemBars: use native safe area insets on Android (#8384) ([...

[View full release notes]

Released by jcesarmobile on 3/25/2026

ionic-team/capacitor-plugins (@capacitor/app)

8.0.1 -> 8.1.0

`@capacitor/haptics@7.0.5`

Compare Source

7.0.5 (2026-03-27)

Note: Version bump only for package capacitor/haptics

Released by jcesarmobile on 3/27/2026

`@capacitor/status-bar@8.0.2`

Compare Source

8.0.2 (2026-03-25)

Bug Fixes

status-bar: add missing types (#2498) (aa683d8)

Released by jcesarmobile on 3/25/2026

`@capacitor/status-bar@7.0.6`

Compare Source

7.0.6 (2026-03-25)

Bug Fixes

status-bar: add missing types (#2498) (#2500) (83cd977)

Released by jcesarmobile on 3/25/2026

ionic-team/capacitor (@capacitor/cli)

8.2.0 -> 8.3.0

`8.3.0`

Compare Source

8.3.0 (2026-03-25)

Bug Fixes

android: correctly parsing server.url when they include paths (#8391) (a9f2181)
cli: inline CSS sourcemaps in addition to JS sourcemaps (#8377) (69476ab)
http: handle URL objects on fetch (#8386) (003099a)
ios: make getArray accesible on Objective-C plugins (#8392) (afb80f2)
SystemBars: use native safe area insets on Android (#8384) ([...

[View full release notes]

Released by jcesarmobile on 3/25/2026

ionic-team/capacitor (@capacitor/core)

8.2.0 -> 8.3.0

`8.3.0`

Compare Source

8.3.0 (2026-03-25)

Bug Fixes

android: correctly parsing server.url when they include paths (#8391) (a9f2181)
cli: inline CSS sourcemaps in addition to JS sourcemaps (#8377) (69476ab)
http: handle URL objects on fetch (#8386) (003099a)
ios: make getArray accesible on Objective-C plugins (#8392) (afb80f2)
SystemBars: use native safe area insets on Android (#8384) ([...

[View full release notes]

Released by jcesarmobile on 3/25/2026

ionic-team/capacitor (@capacitor/ios)

8.2.0 -> 8.3.0

`8.3.0`

Compare Source

8.3.0 (2026-03-25)

Bug Fixes

android: correctly parsing server.url when they include paths (#8391) (a9f2181)
cli: inline CSS sourcemaps in addition to JS sourcemaps (#8377) (69476ab)
http: handle URL objects on fetch (#8386) (003099a)
ios: make getArray accesible on Objective-C plugins (#8392) (afb80f2)
SystemBars: use native safe area insets on Android (#8384) ([...

[View full release notes]

Released by jcesarmobile on 3/25/2026

kkomelin/isomorphic-dompurify (isomorphic-dompurify)

3.5.1 -> 3.7.1

`3.7.1`

Compare Source

Bug Fix

Fixed missing browser type declarations — browser.d.ts and browser.d.mts were not included in the 3.7.0 published package due to a race condition in the build process. This caused TS7016: Could not find a declaration file for module 'isomorphic-dompurify' errors in tsgo and TypeScript 6 when resolving through the default (browser) exports condition. (#411)

Thanks to asterikx and ElPrudi for their help with the issue.

Released by kkomelin on 3/24/2026

`3.7.0`

Compare Source

TypeScript 6 compatibility fixes:

Add explicit type annotation for sanitize to satisfy TS6
Silence baseUrl deprecation warning from tsup dts build in TS6

Dependency updates:

bump typescript from 5.9.3 to 6.0.2
bump vitest from 4.1.0 to 4.1.1

Released by kkomelin on 3/24/2026

`3.6.0`

Compare Source

Dependency updates:

bump jsdom from 29.0.0 to 29.0.1
bump types/jsdom from 28.0.0 to 28.0.1
bump biomejs/biome from 2.4.7 to 2.4.8

Released by kkomelin on 3/21/2026

websockets/ws (ws)

8.19.0 -> 8.20.0

`8.20.0`

Compare Source

Features

Added exports for the PerMessageDeflate class and utilities for the Sec-WebSocket-Extensions and Sec-WebSocket-Protocol headers (d3503c1).

Released by lpinca on 3/21/2026

`8.9.0`

Compare Source

Features

Added the ability to connect to Windows named pipes (#2079).

Released by lpinca on 9/22/2022

`8.8.1`

Compare Source

Bug fixes

The Authorization and Cookie headers are no longer sent if the original request for the opening handshake is sent to an IPC server and the client is redirected to another IPC server (bc8bd34).

Released by lpinca on 7/15/2022

ionic-team/capacitor-haptics (@capacitor/haptics)

8.0.1 -> 8.0.2

`v8.0.2`

Compare Source

8.0.2 (2026-03-27)

Documentation updates

fix Capitalization on default NotificationType (#23) (797ccbe)

Released by OS-pedrogustavobilro on 3/27/2026

ionic-team/capacitor-keyboard (@capacitor/keyboard)

8.0.1 -> 8.0.2

`v8.0.2`

Compare Source

8.0.2 (2026-03-25)

Bug Fixes

android: calling ViewCompat.onApplyWindowInsets (#59) (cc74b2d)

This release is also available on:

[npm package (latest dist-tag)](https://www.npmjs.com/package/@capacitor/keyboard/v/8.0.2)

Released by capacitor-bot on 3/25/2026

ionic-team/capacitor-plugins (@capacitor/status-bar)

8.0.1 -> 8.0.2

`@capacitor/haptics@7.0.5`

Compare Source

7.0.5 (2026-03-27)

Note: Version bump only for package capacitor/haptics

Released by jcesarmobile on 3/27/2026

`@capacitor/status-bar@8.0.2`

Compare Source

8.0.2 (2026-03-25)

Bug Fixes

status-bar: add missing types (#2498) (aa683d8)

Released by jcesarmobile on 3/25/2026

`@capacitor/status-bar@7.0.6`

Compare Source

7.0.6 (2026-03-25)

Bug Fixes

status-bar: add missing types (#2498) (#2500) (83cd977)

Released by jcesarmobile on 3/25/2026

cwcss/crosswind (@cwcss/crosswind)

0.1.3 -> 0.1.6

`v0.1.6`

Compare Source

Released by github-actions[bot] on 2/6/2026

`v0.1.5`

Compare Source

Full Changelog: https://github.com/cwcss/crosswind/compare/v0.1.4...v0.1.5

Released by github-actions[bot] on 1/30/2026

`v0.1.4`

Compare Source

What's Changed

feat: new release script using pantry by glennmichael123 in cwcss/crosswind#14

New Contributors

glennmichael123 made their first contribution in cwcss/crosswind#14

Full Changelog: https://github.com/cwcss/crosswind/compare/v0.1.3...v0.1.4

Released by github-actions[bot] on 1/30/2026

DefinitelyTyped/DefinitelyTyped (@types/bun)

1.3.9 -> 1.3.11

Compare Source

TypeScript definitions for bun

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

oven-sh/bun (bun)

1.3.10 -> 1.3.11

`bun-v1.3.11`

Compare Source

To install Bun v1.3.11

curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.11:

bun upgrade

Read Bun v1.3.11's release notes on Bun's blog

Thanks to 15 contributors!

[View full release notes]

Released by Jarred-Sumner on 3/18/2026

`bun-v1.3.10`

Compare Source

To install Bun v1.3.10

curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.10:

bun upgrade

Read Bun v1.3.10's release notes on Bun's blog

Thanks to 11 contributors!

[View full release notes]

Released by Jarred-Sumner on 2/26/2026

`bun-v1.3.9`

Compare Source

To install Bun v1.3.9

curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.9:

bun upgrade

Read Bun v1.3.9's release notes on Bun's blog

Thanks to 10 contributors!

[alii](https://github.com/alii)
[billywhizz](https://github.com/billywhizz)
[chrislloyd](https://github.com/chrislloyd)
[cirospaciari](https://github.com/cirospaciari)
[ddmoney420](https://github.com/ddmoney420)
[dylan-conway](https://github.com/dylan-conway)
[jarred-sumner](https://github.com/jarred-sumner)
[robobun](https://github.com/robobun)
[[sosukesuzuki](https...

[View full release notes]

Released by Jarred-Sumner on 2/8/2026

handlebars-lang/handlebars.js (handlebars)

4.7.8 -> 4.7.9

`v4.7.9`

Compare Source

fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2
fix type "RuntimeOptions" also accepting string partials - eab1d14
feat(types): set hash to be a Record<string, any> - de4414d
fix non-contiguous program indices - 4512766
refactor: rename i to startPartIndex - e497a35
security: fix security issues - 68d8df5

[View full release notes]

Released by jaylinski on 3/26/2026

capricorn86/happy-dom (happy-dom)

20.8.4 -> 20.8.9

`v20.8.9`

Compare Source

:construction_worker_man: Patch fixes

Fixes issue where cookies from the current origin was being forwarded to the target origin in fetch requests - By capricorn86 in task #2117
- A security advisory (GHSA-w4gp-fjgq-3q4g) was reported for this security vulnerability. Big thanks to r74tech for reporting this!

Released by github-actions[bot] on 3/26/2026

`v20.8.8`

Compare Source

:construction_worker_man: Patch fixes

Fixes issue where export names can be interpolated as executable code in ESM - By capricorn86 in task #2113
- A security advisory (GHSA-6q6h-j7hj-3r64) has been reported that shows a security vulnerability where it may be possible to escape the VM context and get access to process level functionality in unsafe environments using CommonJS. Big thanks to tndud042713 for reporting this!

Released by github-actions[bot] on 3/24/2026

`v20.8.7`

Compare Source

:construction_worker_man: Patch fixes

Replace implementing Node.js Console with common IConsole interface to support latest version of Bun - By YevheniiKotyrlo in task #1845

Released by github-actions[bot] on 3/23/2026

harttle/liquidjs (liquidjs)

10.25.0 -> 10.25.2

`v10.25.2`

Compare Source

10.25.2 (2026-03-25)

Bug Fixes

handle undefined replacement argument in replace filter (#864) (0ad2b11)

Released by github-actions[bot] on 3/25/2026

`v10.25.1`

Compare Source

10.25.1 (2026-03-22)

Bug Fixes

mem limiter for invalid ranges (95ddefc)
treat args for replace_first as literal (35d5230)

Released by github-actions[bot] on 3/22/2026

`v10.9.4`

Compare Source

10.9.4 (2023-11-04)

Bug Fixes

allow unicode to be identifiers, fixes #655 (dd7616a)

Released by github-actions[bot] on 11/4/2023

markedjs/marked (marked)

17.0.4 -> 17.0.5

`v17.0.5`

Compare Source

17.0.5 (2026-03-20)

Bug Fixes

Fix catastrophic backtracking (ReDoS) in link/reflink label regex (#3918) (4625980)
prevent quadratic complexity in emStrongLDelim regex (#3906) (c732dd2)
prevent single-tilde strikethrough false positives (#3910) (5e03369)
re-assign tokenizer.lexer and renderer.parser at start of each parse call (#3907) (f3a3ec0)
trim trailing whitespace from lheading text (#3920) ([3ea7e88](https://github.com/marke...

[View full release notes]

Released by github-actions[bot] on 3/20/2026

`v9.1.6`

Compare Source

9.1.6 (2023-11-10)

Bug Fixes

fix instance options sent to lexer and parser (#3073) (f9d08cc)

Released by github-actions[bot] on 11/10/2023

`v9.1.5`

Compare Source

9.1.5 (2023-11-02)

Bug Fixes

fix emstrong unicode (#3070) (54b6d1c)

Released by github-actions[bot] on 11/2/2023

ts-broadcasting

0.0.3 -> 0.0.4

📦 View on npm

📊 Package Statistics

@capacitor/android: 1,455,877 weekly downloads
@capacitor/app: 938,565 weekly downloads
@capacitor/cli: 1,797,185 weekly downloads
@capacitor/core: 1,917,845 weekly downloads
@capacitor/ios: 1,287,152 weekly downloads
isomorphic-dompurify: 2,617,987 weekly downloads
ws: 186,650,071 weekly downloads
@capacitor/haptics: 510,783 weekly downloads
@capacitor/keyboard: 568,151 weekly downloads
@capacitor/status-bar: 688,632 weekly downloads
@cwcss/crosswind: 34,828 weekly downloads
@types/bun: 5,804,599 weekly downloads
bun: 953,648 weekly downloads
handlebars: 34,577,988 weekly downloads
happy-dom: 6,075,129 weekly downloads
liquidjs: 1,370,273 weekly downloads
marked: 34,391,705 weekly downloads
ts-broadcasting: 881 weekly downloads

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Buddy 🤖