v0.4.1

2026-05-29

Bugfixes

• fix: fix typings to match actual exports (#​1985)

v5.4.0

2026-05-29

Features

• feat: named exports for reserved-word keys + fix duplicate default export in dataToEsm (#​2002)

v1.15.43

Compare Source

Bug Fixes

• (es/es2022) Correct scope for private property brand checks (#​11953) (fb5afa2)

• (es/minifier) Preserve cooked when concatenating template literals (#​11939) (a7244a6)

• (es/minifier) Gate Number(x) -> +x on unsafe flag (#​11944) (#​11949) (6176019)

• (es/parser) Parse Flow bare renders types (#​11929) (a71c8eb)

• (es/parser) Allow no-default builds (#​11956) (baab240)

• (es/react-compiler) Skip TypeScript this pseudo-params in scope collector (#​11940) (9066c43)

• (es/react-compiler) Scope ClassStaticBlock and TsModuleBlock as var boundaries (#​11943) (1ee74a0)

• (react-compiler) Avoid reporting non-fatal success errors as diagnostics (#​11951) (cb4cb23)

• (react-compiler) React compiler AST conversion for wrapped assignment targets (#​11952) (fc9b453)

• (react-compiler) Disable parser default features (#​11957) (75ddb28)

Documentation

• Document untrusted input security scope (#​11937) (677305b)

Features

• (es/react-compiler) Add React Compiler (#​11917) (b182fbd)

• (swc) Gate react compiler re-export (#​11941) (dcc0f2d)

Miscellaneous Tasks

• (es/react-compiler) Update forked react compiler to 0.2.0 (#​11946) (6fbe188)

Refactor

• (es/react-compiler) Preserve TS metadata during AST roundtrip (#​11950) (9c4dec3)

• Remove production tracing hooks (#​11945) (0dffdc4)

v1.15.41

Compare Source

Bug Fixes

• (bindings/node) Preserve source context for AST transforms (#​11920) (b6dfa74)

• (es/codegen) Emit export as namespace correctly (#​11923) (4e1f832)

• (es/codegen) Emit export as namespace minified correctly (#​11924) (7157499)

• (es/compat) Rewrite this in destructuring defaults (#​11909) (68af779)

• (es/decorators) Delay 2022 decorator initializers after private fields (#​11847) (3f1a4f5)

• (es/decorators) Handle import types in decorator metadata (#​11916) (f411429)

• (es/fixer) Preserve new tagged template callee parens (#​11922) (242a03a)

• (es/minifier) Handle unknown member props (#​11927) (e59ba68)

• (es/parser) Handle Flow async generic arrows (#​11926) (b9b8993)

• (es/renamer) Avoid duplicate mangled names across eval scope boundaries (#​11913) (4a1af84)

• (plugin) Avoid importing __free from env (#​11908) (4584296)

• (swc) Preserve plugin error context (#​11904) (4e2e9fc)

• (swc_common) Fix sourcemap panic for multibyte mapping positions (#​11918) (40c1601)

Documentation

• Fix architecture fixer link (#​11911) (51cbc8c)

Performance

• Lazily compute source file hashes (#​11879) (a3cfbd7)

• Optimize Atom equality (#​11902) (c6f8cb0)

Revert

• (es/decorators) Revert decorator initializer ordering (#​11901) (a3f23b1)

• (swc_common) Revert sourcemap multibyte mapping clamp (#​11919) (08b4200)

v8.17.0

Compare Source

v17.7.0

Compare Source

v11.17.0

Compare Source

Features

• ae8ac4e #​9534 add min-release-age-exclude config (@​JamieMagee, @​caseyjhol)
• 8ff3e48 #​9483 allowScripts tooling and inBundle hardening (#​9483) (@​github-actions[bot], @​JamieMagee)

Bug Fixes

• 847cdf8 #​9541 match dotted and versioned args in approve-scripts/deny-scripts (@​owlstronaut)
• d99f7cb #​9535 emit valid JSON from approve-scripts/deny-scripts --json (@​owlstronaut)
• 351a309 #​9499 pass script-shell to publish lifecycle hooks (#​9499) (@​github-actions[bot])
• 4fa81df #​9497 recognize allowScripts for local link targets (#​9497) (@​github-actions[bot], @​cyphercodes, @​cyphercodes)
• 95cf2e9 #​9489 validate registry path for allow-remote tarballs (@​Abhinav-143x)
• 9dd219b #​9462 respect allowScripts policy in prune, dedupe, uninstall, audit, and link (#​9462) (@​github-actions[bot], @​JamieMagee)
• cd8d18a #​9482 list pending scripts in approve-scripts when ignore-scripts is set (#​9482) (@​github-actions[bot], @​JamieMagee)
• c14e87c #​9481 suggest --allow-scripts for global installs in unreviewed-scripts warnings (#​9481) (@​github-actions[bot], @​JamieMagee)
• 7ade52e #​9465 invalid issue template YAML indentation (#​9465) (@​github-actions[bot], @​fallintoplace)
• c069622 #​9464 show full parent command path in subcommand usage errors (#​9464) (@​owlstronaut)
• 1bb62bb #​9454 config: clarify --all help so it's accurate for approve-scripts and deny-scripts (@​JamieMagee)
• 84eeb5f #​9431 audit: don't apply min-release-age before filter when verifying installed signatures (@​JamieMagee)
• 3bd3377 #​9426 block forbidden keys in Queryable setter to prevent prototype pollution (@​12122J, @​claude)

Documentation

• a86a7a9 #​9522 approve-scripts only throws EGLOBAL when run with -g (@​JamieMagee)
• 693bb3d #​9508 clarify package.json override value specs (#​9508) (@​github-actions[bot], @​ded-furby)
• ccffe4a #​9501 use the latest version for global update and outdated's wanted (#​9501) (@​github-actions[bot], @​liangmiQwQ)
• 66e97c2 #​9478 update minimum npm required for npm trust (@​meeech)

Dependencies

• bd09b87 #​9542 postcss-selector-parser@7.1.4
• 95bfc4c #​9542 tinyglobby@0.2.17
• 8c0d5fd #​9542 tar@7.5.16
• 967d377 #​9542 semver@7.8.4
• cdaac1b #​9542 pacote@21.5.1
• 25c8a9e #​9542 node-gyp@12.4.0

Chores

• 2922fa4 #​9542 dev dependency updates (@​owlstronaut)
• workspace: @npmcli/arborist@9.8.0
• workspace: @npmcli/config@10.11.0
• workspace: libnpmdiff@8.1.10
• workspace: libnpmexec@10.3.0
• workspace: libnpmfund@7.0.24
• workspace: libnpmpack@9.1.10

v25.2.0

Compare Source

🎉 Features

• add page locale emulation (#​15075) (c528f65)
• add waitForFunction to webWorkers (#​15100) (0bdfa77)
• allow extensions to run over websockets (#​15059) (b84d8a1)
• roll to Chrome 150.0.7871.24 (#​15126) (b74ed1c)
• roll to Firefox 152.0 (#​15125) (87be906)

🛠️ Fixes

• apply allowlist to non-auto-attach sessions (#​15136) (5c7a0e0)
• await for Worker script exection (#​15099) (dc469b8)
• block service worker registrations (#​15135) (d03617c)
• correct screencast frame timing so playback matches real time (#​15112) (525b384)
• remove global skipDownload early return to include other configs (#​15130) (5b1cb20)
• roll to Firefox 152.0.1 (#​15134) (fd12dd6)
• webmcp: invalidate webmcp tools on context destruction (#​15068) (8e9c0fa)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.0.4 to 3.0.5

📄 Documentation

• clarify the network allowlist/blocklist implementation (#​15148) (a7f124c)
• Update Page.target deprecation message to cover broader usage. (#​15108) (882c43d)

⚡ Performance

• cdp: parallelize extension workers fetching (#​15057) (fdee509)
• optimize headersArray iteration in HTTPRequest (#​15004) (eb95798)
• optimize property descriptors iteration in JSHandle (#​15094) (2483b65)
• parallelize iframe population in accessibility snapshots (#​15083) (7e3d42e)

🏗️ Refactor

• sync accessing debugger (#​15066) (9046239)

v19.2.7: 19.2.7 (June 1st, 2026)

Compare Source

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6
  (#​36566 by @​unstubbable)

v7.18.0

Compare Source

Patch Changes

• Updated dependencies:
  • react-router@7.18.0

v7.17.0

Compare Source

Patch Changes

• Updated dependencies:
  • react-router@7.17.0

v7.16.0

Compare Source

Patch Changes

• Remove stale/invalid unpkg field from package.json. This was removed from other packages with the release of v7 but missed in the react-router-dom re-export package (#​15075)
• Updated dependencies:
  • react-router@7.16.0

v4.62.2

Compare Source

2026-06-19

Bug Fixes

• Do not add spurious side-effect-free external imports to chunks when using minChunkSize (#​6411)

Pull Requests

• #​6411: Skip side-effect-free external imports when hoisting is disabled (@​morgan-coded, @​lukastaegert)
• #​6416: refactor(rust/parser_ast): extract property AstConverter write buffer kind logic to new method (@​fabianbernhart, @​lukastaegert)

v4.62.1

Compare Source

2026-06-19

Bug Fixes

• Preserve multipart file extensions when deconflicting output chunks (#​6408)
• Fix an issue where getLogFilter would match additional logs (#​6415)

Pull Requests

• #​6393: Use import attributes for importing JSON (@​selfisekai, @​lukastaegert)
• #​6408: fix: insert conflict numbers before first extension in multi-extension filenames (@​LeSingh1, @​lukastaegert)
• #​6415: fix: advance value past wildcard prefix before suffix check in getLogFilter (@​JSap0914, @​lukastaegert)
• #​6417: chore(deps): update msys2/setup-msys2 digest to 66cd2cc (@​renovate[bot])
• #​6418: fix(deps): update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6419: chore(deps): update dependency eslint-plugin-unicorn to v66 (@​renovate[bot])
• #​6420: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)

v4.62.0

Compare Source

2026-06-13

Features

• Ensure that shared dependencies between manual chunks and entry points receive a serparate chunk (#​6374)

Pull Requests

• #​6374: Extract the static dependencies imported by manual chunks into separate chunks (@​TrickyPi, @​lukastaegert)
• #​6405: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6406: chore(deps): pin dependency concurrently to v9 (@​renovate[bot], @​lukastaegert)
• #​6407: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​6409: chore(deps): update minor/patch updates to v6.2.0 (@​renovate[bot])
• #​6410: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​6412: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6413: chore(deps): update dependency eslint-plugin-unicorn to v65 (@​renovate[bot])
• #​6414: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)

v4.61.1

Compare Source

2026-06-04

Bug Fixes

• Avoid extraneous newlines when adding headers via plugins (#​6403)
• Fix a rare issue where starting Rollup would hang on Windows (#​6404)

Pull Requests

• #​6402: Improve documentation for manualPureFunctions (@​lukastaegert)
• #​6403: Does not add an extra leading line feed for addons (@​TrickyPi)
• #​6404: fix: set report.excludeNetwork=true before getReport() to avoid blocking PTR lookups (@​jdz321, @​lukastaegert)

v4.61.0

Compare Source

2026-06-01

Features

• Sort entry modules to make chunk hashes deterministic (#​6391)

Pull Requests

• #​6376: Eliminate AWS credential exposure on fork PRs in REPL artefact workflow (@​lukastaegert)
• #​6378: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6379: chore(deps): update dependency lint-staged to v17 (@​renovate[bot], @​lukastaegert)
• #​6380: chore(deps): update dependency lru-cache to v11 (@​renovate[bot], @​lukastaegert)
• #​6381: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6382: chore(deps): update dependency @​types/node to ^20.19.41 (@​renovate[bot])
• #​6386: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6387: chore(deps): update aws-actions/configure-aws-credentials action to v6 (@​renovate[bot])
• #​6388: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6389: chore(deps): lock file maintenance (@​renovate[bot])
• #​6391: Sort entry modules to make chunk hash names deterministic (@​TrickyPi)
• #​6394: fix(deps): update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6395: chore(deps): update react monorepo to v19 (@​renovate[bot], @​lukastaegert)
• #​6396: fix(deps): update rust crate swc_compiler_base to v57 (@​renovate[bot], @​lukastaegert)
• #​6397: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6400: docs: fix broken links (@​jiyujie2006)

v0.35.2

Compare Source

v0.35.1

Compare Source

• TypeScript: Ensure type definitions are published for both ESM and CJS.
  #​4537

• WebAssembly: Ensure wrapper file is published.
  #​4538

v0.35.0

Compare Source

• Breaking: Drop support for Node.js 18, now requires Node.js >= 20.9.0.

• Breaking: Remove install script from package.json file.
  Compiling from source is now opt-in via the build script.

• Breaking: Lossy AVIF output is now tuned using SSIMULACRA2-based iq quality metrics.

• Breaking: Add limitInputChannels with a default value of 5.

• Breaking: Remove deprecated failOnError constructor property.

• Breaking: Remove deprecated paletteBitDepth from metadata response.

• Breaking: Remove deprecated properties from sharpen operation.

• Breaking: Rename format.jp2k as format.jp2 for API consistency.

• Upgrade to libvips v8.18.3 for upstream bug fixes.

• Remove experimental status from WebAssembly binaries.

• Add prebuilt binaries for FreeBSD (WebAssembly).

• Deprecate Windows 32-bit (win32-ia32) prebuilt binaries.

• Ensure TIFF output bitdepth option is limited to 1, 2 or 4.

• Add AVIF/HEIF tune option for control over quality metrics.
  #​4227

• Add keepGainMap and withGainMap to process HDR JPEG images with embedded gain maps.
  #​4314

• Add toUint8Array for output image as a TypedArray backed by a transferable ArrayBuffer.
  #​4355

• Require prebuilt binaries using static paths to aid code bundling.
  #​4380

• TypeScript: Ensure FormatEnum keys match reality.
  #​4475

• Add margin option to trim operation.
  #​4480
  @​eddienubes

• Ensure HEIF primary item is used as default page/frame.
  #​4487

• Add image Media Type (MIME Type) to metadata response.
  #​4492

• Add withDensity to set output density in EXIF metadata.
  #​4496

• Improve pkg-config path discovery.
  #​4504

• Add WebP exact option for control over transparent pixel colour values.

• Add support for ECMAScript Modules (ESM).
  #​4509
  @​florian-lefebvre

v2.9.18: Turborepo v2.9.18

Compare Source

What's Changed

Changelog

• release(turborepo): 2.9.17 by @​github-actions[bot] in #​13047
• ci: Fetch version.txt via API in docs alias failure notification by @​anthonyshew in #​13050
• fix: Harden cache archive symlink restore by @​anthonyshew in #​13051
• chore: Remove web UI mode by @​anthonyshew in #​13052
• fix: Harden query server file access by @​anthonyshew in #​13053
• fix: Confine prune patch paths by @​anthonyshew in #​13054
• fix: Prevent git argument injection in SCM refs by @​anthonyshew in #​13055
• fix: Strip special mode bits from cache restore by @​anthonyshew in #​13056
• fix: Contain incremental cache outputs by @​anthonyshew in #​13057
• fix(turborepo): Normalize Windows daemon path hash by @​Balance8 in #​13020
• fix: Preserve vt100 cell byte counts by @​anthonyshew in #​13058
• fix: Separate artifact signature fields by @​anthonyshew in #​13059
• fix: Validate OidHash hex buffers by @​anthonyshew in #​13060
• fix: Block self-hosted login URLs from attempting to use Vercel's SSO by @​anthonyshew in #​13061

New Contributors

• @​Balance8 made their first contribution in #​13020

Full Changelog: vercel/turborepo@v2.9.17...v2.9.18

v2.9.17: Turborepo v2.9.17

Compare Source

What's Changed

Changelog

• fix: Keep non-PTY stdin alive for persistent tasks by @​anthonyshew in #​12972
• release(turborepo): 2.9.16 by @​github-actions[bot] in #​12970
• release(turborepo): 2.9.17-canary.1 by @​github-actions[bot] in #​12973
• fix: Add auth HTTP timeouts by @​anthonyshew in #​12976
• fix: Detect affected root tasks in query by @​anthonyshew in #​12977
• fix: Wait for Windows graceful shutdown by @​anthonyshew in #​12979
• release(turborepo): 2.9.17-canary.2 by @​github-actions[bot] in #​12980
• test: Skip installs for JSON output fixtures by @​anthonyshew in #​12981
• feat: Add Rsbuild examples by @​Nsttt in #​12942
• test: Skip installs for single package dry runs by @​anthonyshew in #​12982
• test: Skip Corepack setup without installs by @​anthonyshew in #​12983
• test: Skip installs for metadata-only Rust tests by @​anthonyshew in #​12985
• test: Skip remaining unnecessary fixture installs by @​anthonyshew in #​12986
• test: Add final hash contract snapshots by @​anthonyshew in #​12984
• test: Trim run logging integration matrix by @​anthonyshew in #​12987
• test: Trim affected query integration matrix by @​anthonyshew in #​12988
• test: Narrow Windows integration test group by @​anthonyshew in #​12989
• test: Trim task dependency integration coverage by @​anthonyshew in #​12990
• test: Trim affected integration coverage by @​anthonyshew in #​12991
• test: Collapse integration test matrices by @​anthonyshew in #​12992
• test: Collapse non-watch integration matrices by @​anthonyshew in #​12993
• test: Collapse summary and caching test setup by @​anthonyshew in #​12994
• test: Trim lockfile-aware caching integration matrix by @​anthonyshew in #​12995
• test: Move inference, env, and otel coverage lower by @​anthonyshew in #​12996
• test: Trim turborepo-scm subprocess tests by @​anthonyshew in #​12998
• test: Remove Windows nextest thread cap by @​anthonyshew in #​12999
• test: Trim workspace config integration tests by @​anthonyshew in #​13000
• test: Trim run logging integration coverage by @​anthonyshew in #​13001
• test: Trim summary inference and single package tests by @​anthonyshew in #​13002
• test: Trim continue and persistent integration tests by @​anthonyshew in #​13004
• test: Trim force and workspace inheritance tests by @​anthonyshew in #​13005
• test: Trim SCM regression matrix by @​anthonyshew in #​13006
• test: Trim miscellaneous integration tests by @​anthonyshew in #​13007
• test: Trim affected and cache integration coverage by @​anthonyshew in #​13008
• refactor: Split engine builder modules by @​anthonyshew in #​13009
• refactor: Split process child module by @​anthonyshew in [#

✂ Note

PR body was truncated to here.