This PR contains the following updates:
Package Updates Summary
| Type | Count |
|---|---|
| 📦 NPM Packages | 39 |
| 🔧 System Dependencies | 1 |
| Total | 40 |
📦 npm Dependencies
39 packages will be updated
🔧 System Dependencies
| Package | Change | Type | File |
|---|---|---|---|
| bun.com | ^1.3.4 → ^1.3.11 | 🟢 patch | deps.yaml |
Release Notes
ionic-team/capacitor (@capacitor/android)
8.3.0 -> 8.5.2
8.5.2
8.5.2 (2026-09-11)
Bug Fixes
- android: add null checks for plugin annotation when retrieving permissions (
#8400) (035b16a) - ios: do not forward scene lifecycle events to the page before it has loaded (
#8595) (c567328) - resolve issues with safe area / systembars plugin (
#8535) (e37d9c6)
Released by jcesarmobile on 9/11/2026
8.5.1
8.5.1 (2026-08-31)
Bug Fixes
- block navigation to the internal HTTP proxy path (ee586ae)
- cli: use POSIX paths in CapApp-SPM Package.swift (
#8549) (5e5bb3b) - core: prevent removeListener from removing wrong listener (
#8271) (5ac4dd6)
Released by jcesarmobile on 8/31/2026
8.4.3
8.4.3 (2026-08-31)
Bug Fixes
- block navigation to the internal HTTP proxy path (745b5f8)
- block the HTTP proxy path in subframes (af9a287)
Released by jcesarmobile on 8/31/2026
ionic-team/capacitor (@capacitor/cli)
8.3.0 -> 8.5.2
8.5.2
8.5.2 (2026-09-11)
Bug Fixes
- android: add null checks for plugin annotation when retrieving permissions (
#8400) (035b16a) - ios: do not forward scene lifecycle events to the page before it has loaded (
#8595) (c567328) - resolve issues with safe area / systembars plugin (
#8535) (e37d9c6)
Released by jcesarmobile on 9/11/2026
8.5.1
8.5.1 (2026-08-31)
Bug Fixes
- block navigation to the internal HTTP proxy path (ee586ae)
- cli: use POSIX paths in CapApp-SPM Package.swift (
#8549) (5e5bb3b) - core: prevent removeListener from removing wrong listener (
#8271) (5ac4dd6)
Released by jcesarmobile on 8/31/2026
8.4.3
8.4.3 (2026-08-31)
Bug Fixes
- block navigation to the internal HTTP proxy path (745b5f8)
- block the HTTP proxy path in subframes (af9a287)
Released by jcesarmobile on 8/31/2026
ionic-team/capacitor (@capacitor/core)
8.3.0 -> 8.5.2
8.5.2
8.5.2 (2026-09-11)
Bug Fixes
- android: add null checks for plugin annotation when retrieving permissions (
#8400) (035b16a) - ios: do not forward scene lifecycle events to the page before it has loaded (
#8595) (c567328) - resolve issues with safe area / systembars plugin (
#8535) (e37d9c6)
Released by jcesarmobile on 9/11/2026
8.5.1
8.5.1 (2026-08-31)
Bug Fixes
- block navigation to the internal HTTP proxy path (ee586ae)
- cli: use POSIX paths in CapApp-SPM Package.swift (
#8549) (5e5bb3b) - core: prevent removeListener from removing wrong listener (
#8271) (5ac4dd6)
Released by jcesarmobile on 8/31/2026
8.4.3
8.4.3 (2026-08-31)
Bug Fixes
- block navigation to the internal HTTP proxy path (745b5f8)
- block the HTTP proxy path in subframes (af9a287)
Released by jcesarmobile on 8/31/2026
ionic-team/capacitor (@capacitor/ios)
8.3.0 -> 8.5.2
8.5.2
8.5.2 (2026-09-11)
Bug Fixes
- android: add null checks for plugin annotation when retrieving permissions (
#8400) (035b16a) - ios: do not forward scene lifecycle events to the page before it has loaded (
#8595) (c567328) - resolve issues with safe area / systembars plugin (
#8535) (e37d9c6)
Released by jcesarmobile on 9/11/2026
8.5.1
8.5.1 (2026-08-31)
Bug Fixes
- block navigation to the internal HTTP proxy path (ee586ae)
- cli: use POSIX paths in CapApp-SPM Package.swift (
#8549) (5e5bb3b) - core: prevent removeListener from removing wrong listener (
#8271) (5ac4dd6)
Released by jcesarmobile on 8/31/2026
8.4.3
8.4.3 (2026-08-31)
Bug Fixes
- block navigation to the internal HTTP proxy path (745b5f8)
- block the HTTP proxy path in subframes (af9a287)
Released by jcesarmobile on 8/31/2026
stacksjs/ts-cloud (@stacksjs/ts-cloud)
0.7.127 -> 0.16.15
v0.16.15
Changelog
🐛 Bug Fixes
- liveness: stop restarting a unit during its startup, and back off repeated restarts (4b0bfa1) (by Chris chrisbreuer93@gmail.com)
🔧 Chores
- release v0.16.15 (ac46492) (by Chris chrisbreuer93@gmail.com)
Contributors
- Chris chrisbreuer93@gmail.com
Released by github-actions[bot] on 9/28/2026
v0.16.14
Changelog
🐛 Bug Fixes
- cdn: share identical Cloudflare rules across a zone's tenants (0497d9b) (by Chris chrisbreuer93@gmail.com)
🔧 Chores
- release v0.16.14 (93dec01) (by Chris chrisbreuer93@gmail.com)
Contributors
- Chris chrisbreuer93@gmail.com
Released by github-actions[bot] on 9/28/2026
v0.16.13
Changelog
🐛 Bug Fixes
- deploy: keep stx image variants in shared/ so a release starts warm (d89dee2) (by Chris chrisbreuer93@gmail.com)
🔧 Chores
- release v0.16.13 (66d7b56) (by Chris chrisbreuer93@gmail.com)
Contributors
- Chris chrisbreuer93@gmail.com
Released by github-actions[bot] on 9/25/2026
oven-sh/bun (bun)
1.3.14 -> 1.4.2
Bun is a fast all-in-one JavaScript runtime.
capricorn86/happy-dom (happy-dom)
20.10.2 -> 20.14.5
v20.14.5
:construction_worker_man: Patch fixes
- Preserve character references in comment data - By hampustagerud in task
#2409
Released by github-actions[bot] on 9/12/2026
v20.14.4
:construction_worker_man: Patch fixes
- End comments at the first comment end tag when it overlaps a comment start tag - By hampustagerud in task
#2407
Released by github-actions[bot] on 9/12/2026
v20.14.3
:construction_worker_man: Patch fixes
- Avoids cloning all properties in CSSPropertyManager.toString - By erictheswift in task
#2363
Released by github-actions[bot] on 9/9/2026
kkomelin/isomorphic-dompurify (isomorphic-dompurify)
4.2.0 -> 4.4.0
Makes it possible to use DOMPurify on server and client in the same way.
nodeca/js-yaml (js-yaml)
5.2.2 -> 5.4.2
YAML 1.2 parser and serializer
jsdom/jsdom (jsdom)
30.0.0 -> 30.1.1
v30.1.1
- Fixed spurious window
blurandfocusoutevents and incorrectevent.relatedTargetvalues when focusing an element after removing the previously focused element, which regressed in v30.1.0. (asamuzaK) - Fixed focus and blur behavior across frames, and focusing the document's viewport through
document.documentElement.focus(). (asamuzaK) - Fixed focus targets removed or disabled by
blurlisteners becoming active, and text selections made by focus and blur listeners being overwritten. (asamuzaK) - Fixed
element.focus()incorrectly focusing disabled form controls and<input type="hidden">elements withtabindex="". (scttcper) - Fixed invalid
style.setProperty()calls changing existing!importantpriorities, serialized styles, or mutation records. (FedgeNo) - Fixed
!importanthandling when updating CSS longhands after...
[View full release notes]
Released by domenic on 9/22/2026
v30.1.0
jsdom is feeling the AGI!
This release is dedicated to scttcper, who unleashed codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.
We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.
Thanks to scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).
- Added named access to elements on
document, such asdocument.myFormfor<form name="myForm">. (vojtisprime11) - Added
QuotaExceededError, including its use for storage quota errors and oversizedcrypto.getRandomValues()requests. - Added support for the relaxed DOM naming rules when creating elements, attributes...
[View full release notes]
Released by domenic on 9/17/2026
v30.0.1
- Fixed
getComputedStyle()withcalc()and other functions throwing an exception, which regressed in v30.0.0. (asamuzaK) - Sped up up range operations on large documents (leonidaz)
Released by domenic on 7/29/2026
prettier/prettier (prettier)
3.8.1 -> 3.9.9
3.9.9
- Markdown: Fix text with
$been incorrectly parsed as math syntax (#20140by [fisker](https://github.com/fisker))
Released by fisker on 9/23/2026
3.9.8
- Markdown: Don't let Liquid objects interrupt paragraphs (
#20087by [seiyab](https://github.com/seiyab))
Released by fisker on 9/17/2026
3.9.7
- Support Angular 22.2
- Fix regressions in v3.9
Released by fisker on 9/16/2026
tinylibs/tinybench (tinybench)
6.0.2 -> 6.2.0
🔎 A simple, tiny and lightweight benchmarking library!
Microsoft/vscode-languageserver-node (vscode-languageserver-types)
3.17.5 -> 3.18.4
Types used by the Language server for node
websockets/ws (ws)
8.21.0 -> 8.22.0
8.22.0
Features
- Introduced the
protocolsoption (8b918b0).
Bug fixes
- Calling
websocket.close()with invalid arguments no longer transitions the state toWebSocket.CLOSING(#2337).
Released by lpinca on 9/26/2026
8.21.3
Bug fixes
- The server now correctly rejects permessage-deflate offers if the incoming
client_max_window_bitsparameter value is smaller than its configuredclientMaxWindowBits(e97a20e).
Released by lpinca on 8/6/2026
8.21.2
Bug fixes
Released by lpinca on 8/3/2026
11ty/eleventy (@11ty/eleventy)
3.1.5 -> 3.1.6
v3.1.6
- Fixes Node 26
module.registerdeprecation warning shown in console#4283(fixed in v4 alphas in#4271) - Minor dependency upgrades for
npm auditfixesliquidjsupgrade from1.25.0to1.27.0markdown-itupgrade from14.1.1to14.2.0
- Adds Node 26 to CI for v3 branch
- Opt out of package manager cache for GitHub Actions CI release workflow (hardening security)
Milestone: https://github.com/11ty/eleventy/milestone/52?closed=1 Full Changelog: https://github.com/11ty/eleventy/compare/v3.1.5...v3.1.6
Released by zachleat on 6/2/2026
ionic-team/capacitor-plugins (@capacitor/app)
8.1.0 -> 8.1.1
The App API handles high level App state and events.For example, this API emits events when the app enters and leaves the foreground, handles deeplinks, opens other apps, and manages persisted plugin state.
Note: This PR body was truncated due to GitHub's character limit. View the full details in the individual commits.
This PR was generated by Buddy 🤖