What's Changed

Fixes GHSA-7f2v-3qq3-vvjf for v5 releases

• fix: improve expressions by @markov00 in #4147
• chore(build): remove schema publish from long term support branch by @hydrosquall in #4154
• build: bump lockfile for 5.33.1 release by @hydrosquall in #4158

Full Changelog: v5.33.0...v5.33.1

What's Changed

• feat: switch to npm, use native fetch by @domoritz in #4047
• chore: remove sourcemaps for bundled files by @domoritz in #4049
• fix: correct mode handling in loader by @domoritz in #4048
• chore: delete map files and old compatibility libraries by @domoritz in #4053
• chore(deps-dev): bump @types/node from 22.13.14 to 22.13.15 by @dependabot[bot] in #4058
• chore(deps-dev): bump typescript-eslint from 8.28.0 to 8.29.0 by @dependabot[bot] in #4057
• chore(deps-dev): bump rollup from 4.37.0 to 4.38.0 by @dependabot[bot] in #4056
• chore(deps-dev): bump vega-datasets from 3.0.1 to 3.1.0 by @dependabot[bot] in #4054
• chore(deps-dev): bump @definitelytyped/dtslint from 0.2.29 to 0.2.30 by @dependabot[bot] in #4055
• docs: addition of the labelled donut example by @PBI-David in #4062
• docs: update of the labelled donut example by @PBI-David in #4064
• chore(deps-dev): bump @types/node from 22.13.15 to 22.15.3 by @dependabot[bot] in #4070
• chore(deps-dev): bump rollup from 4.38.0 to 4.40.1 by @dependabot[bot] in #4068
• chore(deps-dev): bump jsdom from 26.0.0 to 26.1.0 by @dependabot[bot] in #4069
• chore(deps-dev): bump @eslint/js from 9.23.0 to 9.25.1 by @dependabot[bot] in #4067
• chore(deps-dev): bump typescript-eslint from 8.29.0 to 8.31.1 by @dependabot[bot] in #4066
• chore(deps-dev): bump @definitelytyped/dtslint from 0.2.30 to 0.2.32 by @dependabot[bot] in #4079
• chore(deps): bump tar-fs from 2.1.2 to 2.1.3 in the npm_and_yarn group by @dependabot[bot] in #4080
• chore(deps-dev): bump typescript from 5.8.2 to 5.8.3 by @dependabot[bot] in #4076
• chore(deps-dev): bump @types/node from 22.15.3 to 22.15.29 by @dependabot[bot] in #4075
• chore(deps-dev): bump @babel/eslint-parser from 7.27.0 to 7.27.1 by @dependabot[bot] in #4077
• chore(deps-dev): bump eslint from 9.23.0 to 9.28.0 by @dependabot[bot] in #4078
• docs: update versions in docs by @domoritz in #4050
• fix: update file name in weather example by @domoritz in #4083
• ci: switch to supported node versions by @domoritz in #4084
• docs: replace version in specs by @domoritz in #4085
• ci: disable flaky ci test by @domoritz in #4086
• chore: update deps by @domoritz in #4088
• chore(deps): bump canvas from 3.1.1 to 3.1.2 by @dependabot[bot] in #4093
• chore(deps-dev): bump rollup from 4.44.0 to 4.44.1 by @dependabot[bot] in #4092
• chore(deps-dev): bump lerna from 8.2.2 to 8.2.3 by @dependabot[bot] in #4091
• chore(deps-dev): bump prettier from 3.5.3 to 3.6.2 by @dependabot[bot] in #4090
• chore(deps-dev): bump @types/node from 24.0.3 to 24.0.8 by @dependabot[bot] in #4089
• docs: Update links to Prefuse and Protovis by @star1327p in #4095
• chore(deps-dev): bump axios from 1.10.0 to 1.11.0 in the npm_and_yarn group by @dependabot[bot] in #4096
• ci: create merge-dependabot.yml by @domoritz in #4102
• chore(deps-dev): bump typescript-eslint from 8.34.1 to 8.38.0 by @dependabot[bot] in #4101
• chore(deps-dev): bump eslint from 9.29.0 to 9.32.0 by @dependabot[bot] in #4100
• chore(deps-dev): bump @babel/plugin-transform-runtime from 7.27.4 to 7.28.0 by @dependabot[bot] in #4099
• chore(deps-dev): bump @babel/core from 7.27.4 to 7.28.0 by @dependabot[bot] in #4098
• chore(deps-dev): bump @eslint/js from 9.29.0 to 9.32.0 by @dependabot[bot] in #4097
• chore(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @dependabot[bot] in #4107
• chore(deps): bump amannn/action-semantic-pull-request from 5 to 6 by @dependabot[bot] in #4106
• chore(deps-dev): bump typescript-eslint from 8.38.0 to 8.41.0 by @dependabot[bot] in #4112
• chore(deps-dev): bump @babel/plugin-transform-runtime from 7.28.0 to 7.28.3 by @dependabot[bot] in #4111
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #4109
• chore(deps): bump canvas from 3.1.2 to 3.2.0 by @dependabot[bot] in #4108
• chore(deps-dev): bump @babel/cli from 7.27.2 to 7.28.3 by @dependabot[bot] in #4114
• chore(deps-dev): bump @definitelytyped/dtslint from 0.2.32 to 0.2.33 by @dependabot[bot] in #4113
• chore(deps-dev): bump @babel/eslint-parser from 7.27.5 to 7.28.0 by @dependabot[bot] in #4117
• chore(deps-dev): bump @types/node from 24.0.8 to 24.3.0 by @dependabot[bot] in #4116
• chore(deps): bump the npm_and_yarn group with 2 updates by @dependabot[bot] in #4115
• chore(deps-dev): bump @babel/preset-env from 7.27.2 to 7.28.3 by @dependabot[bot] in #4119
• chore(deps-dev): bump eslint from 9.32.0 to 9.34.0 by @dependabot[bot] in #4118
• chore(deps-dev): bump vega-datasets from 3.1.0 to 3.2.1 by @dependabot[bot] in #4110
• chore(deps-dev): bump globals from 16.2.0 to 16.3.0 by @dependabot[bot] in #4121
• chore(deps-dev): bump typescript from 5.8.3 to 5.9.2 by @dependabot[bot] in #4122
• chore(deps-dev): bump rollup from 4.44.1 to 4.50.0 by @dependabot[bot] in #4124
• chore(deps-dev): bump @babel/core from 7.28.0 to 7.28.3 by @dependabot[bot] in #4123
• feat: use blazediff to speed up visual diffs by @teimurjan in #4125
• fix: Typo in codegen expression by @hydrosquall in #4128
• fix: fix handling of null values in stringValue by @domoritz in #4127
• fix: replace all problematic Unicode characters by @basbroek in #4130
• chore: v6.2.0 by @lsh in #4126

New Contributors

• @teimurjan made their first contribution in #4125

Full Changelog: v6.1.2...v6.2.0

Full Changelog: v6.1.1...v6.1.2

Full Changelog: v6.1.0...v6.1.1

What's Changed

• chore: bump cli to v6.0.0 by @lsh in #4043
• fix: update version in specs by @domoritz in #4045
• feat: export schema from vega package by @domoritz in #4046

Full Changelog: v6.0.0...v6.1.0

changes since v5.33.0

monorepo

• Vega is now ESM only! (via #4018) (Thanks @domoritz!)
• (fix) Correct browser export syntax (via #4039) (Thanks @domoritz!)
• (fix) Fix source maps (via #4041) (Thanks @domoritz!)
• (fix) handle string datetime in interpreter (via #4042) (Thanks @domoritz!)

vega-typings

• Expose resetSVGDefIds (via #4012) (Thanks @domoritz!)

docs

• Update deps and datasets (via #4036) (Thanks @domoritz!)

Changes since v5.32.0

docs

• Add release number to docs for base64 encode/decode (atob, btoa) (via #4023). (Thanks @hydrosquall!)
• Fix docs for exponential regression (via #4024). (Thanks @elliot-at-looker!)

Changes since v5.31.0

vega-expression

• Add base64 string encoder/decoder to vega-expression and vega-interpreter (via #4009). (Thanks @hydrosquall!)

vega-typings

• Add Typescript Types for vega-loader (via #4000). (Thanks @hydrosquall!)

docs

• Correct data year citation in dorling-cartogram example (via #4006). (Thanks @dsmedia!)
• Update typo in vega.timeFloor description (via #4010). (Thanks @hydrosquall!)
• Add Security Advisory Policy for Vega (via #4008). (Thanks @hydrosquall!)
• Replace redirect url in expressions.md (via #3996). (Thanks @dangotbanned!)
• correct queries to query in crossfilter.md (via #4005). (Thanks @danmarshall!)

changes since v5.30.0

vega-utils

• use Object.hasOwn instead of Object.prototype.hasOwnProperty (via #3951). (Thanks @domoritz!)

vega-parser

• Add discrete legend type (via #3957). (Thanks @hydrosquall!)

vega-functions

• Add sort function to vega-functions (and vega-interpreter) (via #3973). (Thanks @hydrosquall!)

vega-selections

• Add field predicate types to selectionTest (via #3675). (Thanks @jonathanzong!)

monorepo

• Replace flights-5k.json external reference (via #3999). (Thanks @dwootton!)

docs

• Update packed bubble example (via #3955). (Thanks @PBI-David!)
• Correct typo in production rules documentation (via #3958). (Thanks @shanebruggeman!)
• Update README.md to fix broken link to current roadmap (via #3979). (Thanks @cahogan & @joelostblom!)

Changes since v5.29.0

vega-functions

• make default vega format null as "null" (via #3926). (Thanks @kanitw & @domoritz )!

docs

• Add 4 new examples (via #3851). (Thanks @avatorl & @domoritz!)

monorepo

• Deploy editor preview (via #3925, #3931). (Thanks @hydrosquall!)
• Bump all vega-* deps in topological order to eliminate version mismatches within the monorepo (via #3932). (Thanks @lsh!)