Support arbitrary wasm targets (WASI support) - RReverser, pull/1524

Allows building for targets other than wasm32-unknown-unknown, enabling WASI and other custom wasm targets.

macOS ARM (aarch64-apple-darwin) build support - kaleidawave, pull/1529

Adds native Apple Silicon support in release builds and NPM package.

Allow --split-linked-modules flag for wasm-bindgen - codeart1st, pull/1443

Custom build profile support - rafaelbeckel, pull/1428

Allows using custom cargo profiles via --profile.

Fix NPM package download URL - qinyuhang, pull/1543

Filter build artifacts to only .wasm files - drager, pull/1535

Handle undefined VERSION in installer script - BrianHung, pull/1512

Fix it_gets_wasm_bindgen_version test - mshroyer, pull/1509

Update dependencies to latest versions - drager, pull/1536

Security workflow permissions fixes - drager

Bump ring from 0.17.8 to 0.17.14 - dependabot, pull/1516

Bump brace-expansion from 1.1.11 to 1.1.12 in /npm - dependabot, pull/1515

Bump rustls from 0.23.16 to 0.23.18 - dependabot, pull/1451

Fix tar vulnerability (CVE-2026-23745) in npm package

Override tar dependency to ^7.5.3 to fix arbitrary file overwrite and symlink poisoning vulnerability (GHSA-8qq5-rm4j-mr97).

Fix axios vulnerabilities in npm package

Override axios dependency to ^0.30.0 to fix SSRF/credential leakage via absolute URL and XSRF-TOKEN leakage (CSRF) vulnerabilities.

Update documentation links to drager's repo - yutannihilation, pull/1513

Document prerequisites for webdriver tests - mshroyer, pull/1509

Requests using proxy settings from env - jjyr, pull/1438

This enables ureq to use proxy settings from env, it solves lots of pain in network restricted environments.

Update binary-install to v0.4.1 - drager, pull/1407

Release v0.4.0 of binary-install introduced a regression that caused failures on some platforms. This release fixes that regression.

Allow npm binary upgrades - net, pull/1439

Fixes an issue where upgrading wasm-pack via NPM would not update the underlying binary.
Previously, the binary was stored in the binary-install package's directory without versioning, causing version upgrades to silently fail as the old binary continued to be used.
The binary is now stored in node_modules/wasm-pack/binary/, ensuring proper version updates when upgrading the package.

Before: Upgrading from 0.12.1 to 0.13.0 would continue using the 0.12.1 binary
After: Each wasm-pack version manages its own binary, enabling proper version upgrades

Add option to skip optimization with wasm-opt - sisou, pull/1321

This feature introduces the --no-opt option to wasm-pack, providing a significant improvement in build efficiency for projects requiring multiple wasm-pack executions.

Add support geckodriver for linux-aarch64 - EstebanBorai, pull/1371

Introduces support to download Geckodriver in Linux aarch64.

Add wasm-opt linux aarch64 condition - dkristia, issue/1392, pull/1393

A linux aarch64 build for wasm-opt exists in the newest binaryen versions.

Fix passing relative paths to cargo - dfaust, issue/704, issue/1156, issue/1252, pull/1331

When building a crate located in a sub-directory, relative paths, passed as extra options to cargo (like --target-dir), are now handled correctly.

Rewrite wasm_target to use target-libdir - daidoji, issue/1342, pull/1343

Rewritten wasm_target to use target libdir from the rustc tool rather than looking through sysroot. This is to accomodate non-rustup installations.

Declare ES module in package.json - gthb, issue/1039, pull/1061

In bundler mode, generate package.json with "type": "module" and use the "main" attribute instead of the "module" attribute.

This change makes the built ES module palatable to Node.js (when run with --experimental-vm-modules --experimental-wasm-modules),
while it remains also palatable to webpack as illustrated in webpack/webpack#14313
(where the pkg subfolder is generated with wasm-pack built with this change).
This resolves the headache of using a wasm-pack-built package in a library that one needs to both run directly in Node and include in a webpack build.

Use new chromdriver endpoint and fix CI - Myriad-Dreamin, kade-robertson, issue/1315, issue/1390, pull/1325, pull/1391

Add mingw support to npm package - nathaniel-daniel, issue/1354, issue/1359, pull/1363

Fixes the NPM package's platform detection for mingw.

pkg-dir option for pack and publish commands - danielronnkvist, issue/1369, pull/1370

To be able to use these commands when the output directory option to the build command isn't the default pkg.

Optimize out-dir display - ahaoboy, issue/1395, pull/1396

Optimize out-dir display.

from:

[INFO]: 📦 Your wasm pkg is ready to publish at /root/code/fib-wasm/fib-rs/../fib-wasm/wasm.

to:

[INFO]: 📦 Your wasm pkg is ready to publish at /root/code/fib-wasm/fib-wasm/wasm.

Fix error and warnings in install script - lucashorward, issue/1159, issue/1217, issue/1283, pull/1320

Bump follow-redirects from 1.14.9 to 1.15.6 in /npm - dependabot, pull/1375

Bump rustls-webpki from 0.100.1 to 0.100.2 - dependabot, pull/1323

Bump rustix from 0.37.20 to 0.37.25 - dependabot, pull/1341

Bump rustls from 0.21.9 to 0.21.11 - dependabot, pull/1385

Bump tar from 6.1.11 to 6.2.1 in /npm - dependabot, pull/1379

Fix typo in README - Lionelf329, pull/1368

Add a description of build --target deno - puxiao, pull/1344

Document deno in build target - sigmaSd, pull/1348

Fix local navigation backing one step too far in docs - SamuSoft, pull/1387

Add --target web to quick start build command - josephrocca, pull/1367

Restore --version command - lynn, issue/1301, pull/1305

The --version command got lost in space in v0.12.0. It's now brought back!

Fix value parser for Option - Myriad-Dreamin, issue/1304, pull/1307

A value parser for OsString cannot parse a command line argument for Option,
which let it failed to specify paths for pack, publish and test commands, this faulty behavior
was introduced in v0.12.0.

Add --no-pack flag to build command - hamza1311, ashleygwilliams, issue/691, issue/811, pull/695, pull/1291

When calling wasm-pack build a user can optionally pass --no-pack and wasm-pack will build your wasm, generate js, and not build a package.json.

Add wasmbindgen option: omit_default_module_path - matthiasgeihs, pull/1272

Adds an option to call wasm-bindgen with --omit_default_module_path.

Add HTTP header USER-AGENT - LeviticusNelson, issue/1266, pull/1285

We encountered some issues when we didn't send an User-Agent. This is now fixed.

Replace curl with ureq - hamza1311, issue/650, issue/823, issue/997, issue/1079, issue/1203, issue/1234, issue/1281, pull/1290

The HTTP client is now pure Rust. Removes the dependency of openssl which have caused a lot of issues for people using wasm-pack on various distributions.

Update binary-install to 0.2.0. binary-install replaced curl with ureq - drager

See PR in binary-install repo for more information.

Remove --always-auth from npm login - EstebanBorai, pull/1288

npm login doesn't support --always-auth anymore, instead it is under the adduser subcommand.

Turn off cargo colors during log level test - dtolnay, pull/1294

Fix getting the target-dir in wasm_bindgen_build - tomasol, issue/1278, pull/1279

Fixes a wasm-pack panic if --target-dir was supplied (and arguments are not sorted).

Respect package.readme in Cargo.toml - heaths, issue/1215, pull/1298, pull/1216

wasm-pack now respects specifying readme=false:

[package]
readme = false

Bump cargo-generate version to 0.18.2 - sassman, issue/1245 pull/1269

Replace unmaintained actions-rs/toolchain action in CI workflows - striezel, pull/1246

Now we are using https://github.com/dtolnay/rust-toolchain instead.

Update several dependencies - hamza1311, pull/1292

Updated clap, toml, predicates and serial_test to their latest versions.

Fix discovery of locally installed wasm-opt - Liamolucko, issue/1247, pull/1257

Fix wasm-pack bin script entry - ahippler, issue/1248, pull/1250

Make Deno target available - egfx-notifications, issue/672, issue/879, pull/1117

Add support for more platforms to installer script - omninonsense, issue/1064, issue/952, issue/1125, pull/1122

This makes the installation script work on M1 macs, as well as inside docker (especially when combined with buildx) for aarch64/arm64 architectures.

Add Linux arm64 support - nnelgxorz, issue/1169, pull/1170

Add support for workspace inheritance - printfn, issue/1180, pull/1185

--target-dir as extra option is now considered as expected - sassman, issue/1076, pull/1082

Pass through --weak-refs --reference-types flags to bindgen - serprex, issue/930, pull/937

Fix binaryen URL and use updated binary-install to fix installation on macOS - matheus23, printfn, pull/1188

Use the updated binary-install crate (drager/binary-install#21), switches from failure to anyhow to match what binary-install uses, and fixes wasm-opt installation on macOS.

Mark snippets and the bundler target's main file as having side effects - Liamolucko, issue/972, rustwasm/wasm-bindgen/3276, pull/1224

Fix typos in non-rustup-setups.md - dallasbrittany, issue/1141, pull/1142

Fix typos in considerations.md - lhjt, pull/1066

Grammar and typo fixes - helixbass, pull/1143

Replace two mentions of wasm-pack init with wasm-pack build in the docs - mstange, pull/1086

Update npm installation link - benediktwerner, pull/1227

Bump wasm-opt to version 108 - MichaelMauderer, issue/1135 pull/1136

Update binary-install to v1.0.1 - EverlastingBugstopper, pull/1130

Add back run.js to npm installer - EverlastingBugstopper, pull/1149

Fix some typos in the codebase - striezel, pull/1220

Update actions/checkout in GitHub Actions workflows to v3 - striezel, pull/1221

Update actions/cache in GitHub Actions workflows to v3 - striezel, pull/1222

Update JamesIves/github-pages-deploy-action in GHA workflow to v4.4.1 - striezel, pull/1223

Use bash to create release tarballs - nasso, issue/1097 pull/1144

Fixes Windows installer failure due to malformatted tar.

Clean up package.json from previous runs - main--, issue/1110-comment pull/1119

Remove the package.json file from previous runs to avoid crashes.

Do not remove the pkg directory - huntc, issue/1099 pull/1110

A recent change ensured that the pkg directory was removed as the first step of attempting to create it.
Unfortunately, this caused a problem for webpack when watching the pkg directory.
Webpack was unable to recover its watching and so any watch server must be restarted,
which is a blocker when using it. This PR and release fixes this.

Bump regex from 1.5.4 to 1.5.6 - dependabot, pull/1147

Version 1.5.5 of the regex crate fixed a security bug in the regex compiler.

Bump openssl-src from 111.17.0+1.1.1m to 111.20.0+1.1.1o - dependabot, pull/1146

Bring in bug fixes from the new version of openssl-src.

Add support for macos aarch64 - d3lm, issue/913 pull/1088

This fixes aarch64 for MacOS and will download x86_64-apple-darwin.

Add linux/arm64 to release workflow - nacardin, issue/1064 pull/1065

Force axios version - drager, pull/1094

Forces npm package axios to version 0.21.2 in order to get security fix for a security vulnerability present in axios before version 0.21.2.