Update dependency deno to v2.7.14 - autoclosed

[daniel-renovator]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
deno (source)	v2.7.1 → 2.7.14

---

Release Notes

denoland/deno (deno)

v2.7.14

Compare Source

• feat(ext/node): add fs.Utf8Stream
• feat(upgrade): delta updates via bsdiff patches (#​33274)
• fix(bundle): treat CSS same-document fragment URLs as external (#​33492)
• fix(cache): add missing CacheStorage.keys() and Cache.keys() methods (#​33275)
• fix(config): don't exclude workspace members from deploy file patterns
  (#​33562)
• fix(coverage): exclude transformer-injected helpers from coverage (#​33481)
• fix(doc): remove background from operators in dark mode code blocks (#​33267)
• fix(ext/bundle): clearer error when Deno.bundle is called in compiled binary
  (#​33503)
• fix(ext/crypto): throw TypeMismatchError for non-TypedArray in getRand
  (#​33470)
• fix(ext/fetch): don't mutate caller's options in Deno.createHttpClient
  (#​33497)
• fix(ext/fetch): use byte ReadableStream for Node Readable request bodies
  (#​33432)
• fix(ext/fs): normalize Deno.watchFs paths so events drop ./ segments (#​33490)
• fix(ext/napi): implement napi_async_init and napi_async_destroy (#​33282)
• fix(ext/net): default Deno.listenDatagram hostname to 0.0.0.0 (#​33496)
• fix(ext/node): accept X.509v1 server certs in tls.createServer (#​33505)
• fix(ext/node): accept string mode in fs.mkdir and fs.mkdirSync (#​33409)
• fix(ext/node): add Server BlockList, asyncDispose, and misc net improvements
  (#​33417)
• fix(ext/node): add _idleStart and _idleTimeout to Timeout (#​33604)
• fix(ext/node): align crypto random* validation with Node (#​33456)
• fix(ext/node): align fs.truncate / ftruncate argument validation with Node
  (#​33418)
• fix(ext/node): align module.builtinModules / getBuiltinModule with Node
  (#​33404)
• fix(ext/node): align node:module behavior with Node (#​33482)
• fix(ext/node): align node:test it/describe with Node, enable passing
  compat tests (#​33593)
• fix(ext/node): align util.styleText with Node (#​33547)
• fix(ext/node): allow https.Agent() without new, enable passing compat
  tests (#​33601)
• fix(ext/node): async fs.stat/lstat throwIfNoEntry + deprecate fs.Stats
  (#​33436)
• fix(ext/node): attach input URL to ERR_INVALID_FILE_URL_PATH (#​33398)
• fix(ext/node): attach path/syscall to fs.lstat / realpath / link errors
  (#​33446)
• fix(ext/node): brand-check SecureContext._external accessor (#​33569)
• fix(ext/node): cache hash digest so it survives stream.pipeline (#​33440)
• fix(ext/node): cancelling Readable.toWeb(req) no longer destroys the socket
  (#​33570)
• fix(ext/node): close fd on error in http2 stream respondWithFile (#​33614)
• fix(ext/node): correct buffer-length check in Readable._fromList decoder
  branch (#​33624)
• fix(ext/node): defer drain in http2 shutdownWritable so pushStream after end()
  works (#​33619)
• fix(ext/node): drain pending TLS cleartext in enc_write_cb (#​33378)
• fix(ext/node): emit Buffer for http2 'goaway' opaqueData (#​33502)
• fix(ext/node): emit DEP0031 deprecation warning for ecdh.setPublicKey(
  (#​33468)
• fix(ext/node): emit DEP0182 deprecation for short AES-GCM auth tag (#​33469)
• fix(ext/node): emit HPE_INVALID_TRANSFER_ENCODING for CL+chunked respo
  (#​33488)
• fix(ext/node): emit StatWatcher 'stop' event asynchronously (#​33448)
• fix(ext/node): emit TimeoutNaNWarning for invalid timer durations (#​33472)
• fix(ext/node): emit http2 frameError on send failure with translated HTTP/2
  error code (#​33631)
• fix(ext/node): emit stream-level PROTOCOL_ERROR in node:http2
• fix(ext/node): emit tlsClientError instead of crashing on TLS init failure
  (#​33429)
• fix(ext/node): enable test-als-defaultvalue-original (AsyncLocalStorage
  default value) (#​33464)
• fix(ext/node): encode http2 headers as Latin-1 to fix response splitting
  (#​33531)
• fix(ext/node): encode more chars in url.pathToFileURL() (#​33397)
• fix(ext/node): enforce HTTP/2 server header list size limits (#​33494)
• fix(ext/node): enforce http2 maxSessionInvalidFrames limit (#​33515)
• fix(ext/node): expose http2 sensitive headers received with NV_FLAG_NO_INDEX
  flag (#​33626)
• fix(ext/node): fix EEXIST error and data loss in writeFileSync on Windows
  (#​33413)
• fix(ext/node): fix ERR_INVALID_CHAR message & OutgoingMessage.prototype.write
  (#​33430)
• fix(ext/node): fix TLS client certificate authentication verification (#​33576)
• fix(ext/node): fix TLS socket error ordering and app data leak before identity
  verification (#​33585)
• fix(ext/node): fix TLS socket lifecycle and readStop backpressure (#​33524)
• fix(ext/node): fix closeIdleConnections destroying active connections (#​33596)
• fix(ext/node): fix fs.glob skipping siblings with */../ patterns (#​33372)
• fix(ext/node): fix spawnSync internal API for monkey-patching and killSignal
  (#​33545)
• fix(ext/node): flush GOAWAY before destroying http2 socket and expose
  internal/http2/core (#​33566)
• fix(ext/node): flush HTTP/2 client preface after settings submission (#​33387)
• fix(ext/node): forward enableConnectProtocol setting to peer in HTTP/2
  SETTINGS frame (#​33616)
• fix(ext/node): handle undefined http2 ping payload and cancel pending pings on
  destroy (#​33561)
• fix(ext/node): hide aggregateTwoErrors frame in AggregateError stack (#​33402)
• fix(ext/node): honor http2 strictFieldWhitespaceValidation option (#​33506)
• fix(ext/node): honor requestCert/ca on node:tls server, populate
  getPeerCertificate() (#​33439)
• fix(ext/node): honor weight option in http2 client.request and emit DEP0194
  (#​33622)
• fix(ext/node): http2 createConnection support and per-frame socket writes
  (#​33520)
• fix(ext/node): implement BlockList.rules / isBlockList / toJSON / fromJSON
  (#​33445)
• fix(ext/node): implement Socket.resetAndDestroy with TCP RST in node:net
  (#​33415)
• fix(ext/node): implement StatWatcher.ref() / unref() (#​33408)
• fix(ext/node): implement dns Resolver cancel() and timeout support (#​33580)
• fix(ext/node): implement dns.reverse() and fix dns.lookup() family parameter
  (#​33579)
• fix(ext/node): implement fs.mkdtempDisposableSync /
  fsPromises.mkdtempDisposable (#​33533)
• fix(ext/node): implement node:cluster fork/Worker and worker-side detection
  (#​33493)
• fix(ext/node): implement process.debugPort with ToInt32 coercion (#​33403)
• fix(ext/node): import kIncomingMessage/kServerResponse in http2 allowHTTP1
  fallback (#​33435)
• fix(ext/node): improve Node.js timer compatibility (#​33479)
• fix(ext/node): improve perf_hooks timerify and add missing exports (#​33581)
• fix(ext/node): include accepted values in Console colorMode error (#​33424)
• fix(ext/node): isolate parentPort from globalThis in worker_threads (#​32596)
• fix(ext/node): make Buffer.prototype methods generic-callable (#​33466)
• fix(ext/node): make http2 session.origin() round-trip origins and respect TLS
  servername (#​33629)
• fix(ext/node): make process.constructor a proper instanceof check (#​33447)
• fix(ext/node): name custom-promisified functions after their originals
  (#​33407)
• fix(ext/node): null-proto child_process options to block prototype pollution
  (#​33555)
• fix(ext/node): pass reusePort flags in Server.listen() without host (#​33530)
• fix(ext/node): pass signal name to process signal handlers (#​33425)
• fix(ext/node): pass stream fd to child process stdio instead of inheriting
  (#​33525)
• fix(ext/node): plumb llhttp error code, reason, and bytes parsed through
  HTTPParser (#​33591)
• fix(ext/node): prevent duplicate close emit when http2 client socket i
  (#​33538)
• fix(ext/node): re-arm Windows named pipe server after accept (#​33369)
• fix(ext/node): rebind http2 state buffers post-snapshot, enforce
  maxHeaderListPairs (#​33495)
• fix(ext/node): reject non-ArrayBufferView data in fs.writeFileSync (#​33406)
• fix(ext/node): rename _destroySsl to _destroySSL to match Node.js API (#​33599)
• fix(ext/node): replace unwrap with error propagation in parallel cp (#​33396)
• fix(ext/node): return relative path from fs.watch with recursive option
  (#​33428)
• fix(ext/node): strip trailing dot from SRV target in dns.resolveSrv() (#​33578)
• fix(ext/node): submit http2 RST_STREAM before flushing END_STREAM DATA frame
  on respondWithFD read (#​33633)
• fix(ext/node): support ALPNCallback in http2.createSecureServer (#​33521)
• fix(ext/node): support BlockList, AbortSignal, and constructor options in
  node:net Socket (#​33414)
• fix(ext/node): support ignore option in fs.watch and fs.promises.watch
  (#​33610)
• fix(ext/node): support encoding option in fs.readdir; don't double-call glob
  callback (#​33501)
• fix(ext/node): support http2 pushStream and client push events (#​33516)
• fix(ext/node): support reusePort option and fix bind/pipe handling in node:net
  (#​33416)
• fix(ext/node): support util.promisify on http2.connect (#​33489)
• fix(ext/node): support v1 X.509 certs and http2 ALPN fallback (#​33510)
• fix(ext/node): throw ERR_INVALID_ARG_VALUE when rmdir gets options.recursive
  (#​33565)
• fix(ext/node): throw ERR_INVALID_URL from http/https request string URL
  (#​33427)
• fix(ext/node): throw TypeError for Symbol keys/values in process.env (#​33399)
• fix(ext/node): timer _destroyed flag, Symbol.dispose, and setInterval abort
  (#​33528)
• fix(ext/node): track http2 custom settings and SETTINGS ACK callbacks (#​33518)
• fix(ext/node): treat unsolicited HTTP/2 PING ACK as connection-level protocol
  error (#​33625)
• fix(ext/node): use AbortSignal.addEventListener in addAbortListener (#​33557)
• fix(ext/node): use ERR_INVALID_ARG_TYPE for tls.createServer non-object
  options (#​33589)
• fix(ext/node): use ERR_INVALID_ARG_VALUE in module.createRequire (#​33449)
• fix(ext/node): use Node's address-type check in dgram Socket.send (#​33420)
• fix(ext/node): use node:timers for http server connection checks, expo
  (#​33483)
• fix(ext/node): use proper error codes for require() invalid arguments (#​33609)
• fix(ext/node): validate fs.watch boolean options (#​33627)
• fix(ext/node): validate boolean arg in process.setSourceMapsEnabled (#​33473)
• fix(ext/node): validate ciphers option in tls.createSecureContext() (#​33597)
• fix(ext/node): validate dgram options.recvBufferSize / sendBufferSize (#​33444)
• fix(ext/node): validate oaepHash in publicEncrypt/privateDecrypt (#​33388)
• fix(ext/node): validate options.type in Readable.toWeb (#​33560)
• fix(ext/node): validate process.chdir argument is a string (#​33401)
• fix(ext/node): walk sandbox prototype chain in vm property_query (#​33463)
• fix(ext/node): wire JSStreamSocket handle write/shutdown for http2 (#​33526)
• fix(ext/node): wire up captureRejection handler for http2 servers (#​33542)
• fix(ext/node): yield to I/O in http2 write path so stream pipeline finishes
  (#​33541)
• fix(ext/web): align AbortSignal.timeout error message with Node (#​33460)
• fix(ext/web): allow transferring non-serializable types in structuredClone
  (#​33491)
• fix(ext/web): handle late write racing with TransformStream cancel (#​33478)
• fix(ext/web): narrow ReadableStreamBYOBRequest.view to Uint8Array (#​33477)
• fix(ext/web): retain source from MessageEventInit (#​33500)
• fix(ext/web): route console.dirxml through the log printer (#​33443)
• fix(ext/web): set ERR_MISSING_ARGS code on URL.revokeObjectURL no-arg (#​33471)
• fix(ext/web): structuredClone of non-serializable Web types throws
  DataCloneError (#​33465)
• fix(ext/webidl): set ERR_ILLEGAL_CONSTRUCTOR code on illegal constructor calls
  (#​33535)
• fix(ext/webidl): set ERR_INVALID_THIS code on brand-check TypeError (#​33467)
• fix(node/buffer): fix panic in transcode with odd-length UTF-16LE input
  (#​33390)
• fix(node/compat): disable flaky test-child-process-exec-kill-throws on Windows
  (#​33426)
• fix(node/compat): disable flaky test-fs-read-stream-pos on Windows (#​33421)
• fix(node/compat): fix shard report merging and fetching in CI reporting
  (#​33431)
• fix(permissions): normalize paths for macOS filesystem comparison (#​33451)
• fix(task): match workspace directory name in --filter (#​33499)
• fix(task): use explicit workspace root check in directory-name fallback
  (#​33540)
• fix(x): forward --unstable-* flags to JSR and URL targets (#​33450)
• fix: bound fs.readFile on non-terminating sources (#​33262)
• fix: drop config-only unstable features from unstable_args() (#​33452)
• fix: match single-char wildcard segments in npm package imports (#​33513)
• perf(ext/node): pool 64KB read buffers to reduce allocation pressure (#​33395)
• perf: optimize worker and MessagePort message passing (#​32657)
• perf: upgrade rusty_v8 to 147.4.0 (#​33422)

v2.7.13

Compare Source

• feat(ext/node): implement node:repl module (#​32799)
• feat(ext/node): rewrite node:http with llhttp and native TCPWrap (#​33208)
• feat(upgrade): support installing from a PR (#​33252)
• fix(audit): migrate to bulk advisory endpoint (#​33292)
• fix(console): find nodejs.util.inspect.custom on Proxy objects via get trap
  (#​33265)
• fix(doc): Add Prism support for JSX/TSX code blocks (#​33255)
• fix(ext/http): treat empty Host header as missing in request URL (#​33234)
• fix(ext/napi): defer GC weak-callback finalizers to the event loop (#​33260)
• fix(ext/napi): implement real V8 handle scopes and callback scopes (#​33281)
• fix(ext/napi): implement zero-copy external Latin-1 strings (#​33283)
• fix(ext/node): ChildProcess.kill() returns false when process already exited
  (#​33305)
• fix(ext/node): address node:http rewrite review comments (#​33299)
• fix(ext/node): auto-start server-side STARTTLS handshake, add TLS upgrade
  tests (#​33303)
• fix(ext/node): defer JS stream encOut to avoid reentrant CppGC borrow (#​33304)
• fix(ext/node): enable HTTP parser consume fast path (#​33354)
• fix(ext/node): enforce maxHeaderSize in HTTP parser (#​33306)
• fix(ext/node): fix EEXIST error and file corruption with writeFileSync on
  Windows (#​33253)
• fix(ext/node): fix Module._resolveLookupPaths and require.resolve compat
  (#​33261)
• fix(ext/node): fix multiple http2 bugs (#​33315)
• fix(ext/node): fix playwright on windows (#​33295)
• fix(ext/node): flush HTTP/2 HEADERS frame after client request (#​33300)
• fix(ext/node): free uv_write and uv_shutdown requests in every exit path
  (#​33350)
• fix(ext/node): http client compat improvements (#​33337)
• fix(ext/node): http2 improvements — constants, error codes, settings,
  validation (#​33332)
• fix(ext/node): improve node:tls compat (validation, pipes, JS streams)
  (#​33331)
• fix(ext/node): support FD-indexed stdio inheritance in spawnSync (#​33341)
• fix(ext/node): support RSA-PSS keys in crypto.verify with null algorithm
  (#​33314)
• fix(runtime): warn on unsupported web Worker options and fix recv panic
  (#​33310)
• fix(test): fix specific_canary upgrade test on Windows (#​33286)
• fix: add note for canary's 30-day retention period (#​33271)
• fix: restore glibc < 2.27 compatibility for Linux release builds (#​33259)
• fix: update v8 crate to 147.2.1 (#​33318)
• perf(ext/node): elide async_hooks emit in timers when no hooks registered
  (#​33355)
• perf(ext/node): flush-free header fast path in HTTP parser (#​33351)
• perf(ext/node): reduce writev op allocations and write copies (#​33352)
• perf(libs/core): poll only ready handles and yield between I/O batches
  (#​33349)
• perf: reduce memory usage of Command.output() (#​33335)

v2.7.12

Compare Source

• feat(ext/node): add fs.SyncWriteStream (#​33226)
• feat(ext/node): add llhttp-based HTTPParser with native cppgc binding (#​33202)
• feat(ext/node): add native TLSWrap cppgc object (Rust core) (#​33183)
• feat: native uv_pipe_t implementation with NativePipe and FdTable (#​33165)
• fix(core): fix uv_pipe_open handle lifecycle to match libuv (#​33225)
• fix(core): free UvLoopInner on uv_loop_t drop to prevent worker memory leak
  (#​33200)
• fix(core): handle WouldBlock in op_print for non-blocking stdio (#​33221)
• fix(core): use c_char instead of i8 in uv_buf_t base cast (#​33179)
• fix(ext/napi): use per-isolate Private key for napi_wrap/napi_unwrap (#​33204)
• fix(ext/node): add dns.getDefaultResultOrder() API (#​33197)
• fix(ext/node): create net.Socket from file descriptors (#​33150)
• fix(ext/node): implement TCP.open(fd) (#​33155)
• fix(ext/node): implement timeout, killSignal, and pid for child_process
  spawnSync (#​32810)
• fix(ext/node): implement uv_ref for native TCP handles (#​33174)
• fix(ext/node): remove dead legacy TCP server accept path (#​33172)
• fix(ext/node): return real OS file descriptors from node:fs APIs (#​33039)
• fix(ext/node): rewrite Pipe.open(fd) to use raw fd ops (#​33136)
• fix(ext/node): support numeric FDs in child_process stdio array (#​33140)
• fix(ext/node): throw on cipher update with input >= 2^31-1 bytes (#​33201)
• fix(ext/webgpu): accept ArrayBuffer in GPUQueue.writeBuffer() as data
  source (#​33152)
• fix(io): remove global stdio statics, handle non-blocking stdin (#​33219)
• fix(node): validate resolved main path stays within package directory (#​33170)
• fix(otel): add timeout to OTEL HTTP exporter to prevent hangs (#​33159)
• fix(permissions): check deny rules against resolved IPs to prevent numeric
  hostname bypass (#​33203)
• fix(permissions): normalize IPv4-mapped IPv6 addresses in net permission
  checks (#​33223)
• fix(repl): surface CDP protocol errors and fix race in wait_for_response
  (#​33190)
• fix(runtime): cache canonicalized watch paths, fix spurious events (#​33123)
• fix(schema): fix the publish: false of deno.json schema (#​33196)
• fix: linked packages with peer deps failing to cache from lockfile (#​33143)
• fix: update release template workflow URLs to .generated.yml (#​33116)
• perf(ext/node): use aws-lc-sys EVP API for chacha20-poly1305 (#​33110)

v2.7.11

Compare Source

• feat: add alpha and beta release channel support (#​33098)
• fix(ext/node): fire fs.watch events for immediate writes (#​32935) (#​32989)
• fix(watch): reduce graceful shutdown timeout from 5s to 500ms (#​33099)

v2.7.10

Compare Source

• feat: add include and exclude fields to compile config (#​33024)
• fix(ext/http): gracefully handle consumed external in OTel ops (#​33027)
• fix(ext/node): process.argv[0] is equivalent to execPath (#​28915)
• fix(ext/node): add chacha20-poly1305 cipher support (#​33084)
• fix(ext/node): drain pending messages before emitting worker exit event
  (#​32623)
• fix(ext/node): escape shell metacharacters in child_process args on Windows
  (#​33071)
• fix(ext/node): fix BadResource error in FileHandle.readLines() (#​32685)
• fix(ext/node): improve GCM cipher compat with Node.js (#​33079)
• fix(ext/node): improve sign/verify crypto compat with Node.js (#​33083)
• fix(ext/node): return pid from spawnSync (#​33081)
• fix(ext/web): fix infinite loop in WebTransport datagram overflow handling
  (#​33075)
• fix(install): all package.json aliases should be added to node_modules
  (#​33068)
• fix(lsp): don't double-encode query/fragment in notebook cell URIs (#​33070)
• fix(lsp): suggest import map aliases in auto-imports for local directories
  (#​33048)
• fix(npm): resolve linked packages not published to npm registry (#​33021)
• fix(outdated): use dist-tags.latest for Latest column, matching npm/pnpm/bun
  (#​32939)
• fix(resolver): resolve npm packages that shadow Node built-in names in BYONM
  mode (#​32865)
• fix(serde_v8): use actual bytes written in to_utf8_slow (#​33074)
• fix: use case-insensitive path matching for permissions on Windows (#​33073)

v2.7.9

Compare Source

• fix(cli): show clean error instead of panic for invalid
  --unsafely-ignore-certificate-errors value (#​32868)
• fix(compile): strip duplicate exe path from argv when standalone binary
  relaunches (#​33016)
• fix(compile): use execPath for process.argv[1] in standalone binaries (#​32990)
• fix(ext/http): use clone_external in op_http_metric_handle_otel_error (#​33005)
• fix(ext/node): util.stripVTControlCharacters compatibility (#​32942)
• fix(ext/node): add Symbol.dispose and Symbol.asyncDispose to fs.Dir (#​33000)
• fix(ext/node): rewrite Windows TTY reading to match libuv (console mode,
  encoding, raw + line mode) (#​32999)
• fix(ext/node): use constant-time comparison for secret key equality (#​32994)
• fix(publish): vite import.meta.hot not type checking (#​32127)
• perf(ops): replace per-op generated slow metrics wrappers with shared dispatch
  (#​32889)

v2.7.8

Compare Source

• feat(core): implement NodeRuntime CDP domain and fix --inspect-brk blocking
  (#​32714)
• feat(ext/crypto): implement P-521 sign, verify, and ECDH derive (#​32602)
• feat(ext/napi): add node_api_create_object_with_named_properties (#​32906)
• feat(ext/telemetry): add console exporter for OpenTelemetry (#​32717)
• feat(ext/telemetry): copy relevant span attributes to HTTP metrics (#​32720)
• feat: use lockfile from jsr package for global install (#​32490)
• fix(audit): respect package.json overrides in vulnerability checks (#​32878)
• fix(cli): fix arrow keys in interactive picker on Windows (#​32978)
• fix(cli): parse --frozen flag for deno update and deno outdated (#​32975)
• fix(compile): skip Node-to-Deno arg translation in standalone binaries
  (#​32980)
• fix(ext/console): handle throwing Symbol.toStringTag getter gracefully
  (#​32917)
• fix(ext/napi): pass valid env to tsfn call_js_cb after close race (#​32957)
• fix(ext/node): fs.cp across allowed dirs with ignored read permissions
  (#​32927)
• fix(ext/node): child_process improvements (internalMessage, argv0, DEP0190)
  (#​32885)
• fix(ext/node): close libuv handle on HandleWrap.close() for new-style handles
  (#​32958)
• fix(ext/node): defer uv_write callbacks to prevent re-entrancy panic (#​32919)
• fix(ext/node): do not throw error for readline.createInterface outside TTY
  (#​32874)
• fix(ext/node): don't fire upgrade event for h2c requests (#​32866)
• fix(ext/node): drain all ready connections in poll_tcp_handle to prevent
  accept starvation (#​32943)
• fix(ext/node): emit request "close" before socket "free" in keep-alive path
  (#​32811)
• fix(ext/node): enable node compat test for v8.getHeapStatistics (#​32833)
• fix(ext/node): enable node:fs compat tests + lchmod fix (#​32892)
• fix(ext/node): fix Buffer.concat truncating buffers larger than 4GB (#​32913)
• fix(ext/node): fix IPC stdio handling in child_process (#​32920)
• fix(ext/node): fix node:domain across async boundaries (#​32897)
• fix(ext/node): freeze os.constants.signals to match Node.js (#​32836)
• fix(ext/node): implement process.threadCpuUsage() (#​32829)
• fix(ext/node): improve process.hrtime argument validation (#​32837)
• fix(ext/node): improve readline and EventEmitter compat (#​32826)
• fix(ext/node): pass uid/gid to spawn and implement process.getgroups (#​32772)
• fix(ext/node): preserve TLS upgrade state on reconnect (#​32838)
• fix(ext/node): return all own properties from VM context property enumerator
  (#​32911)
• fix(ext/node): set fd property on TTY ReadStream and WriteStream (#​32880)
• fix(ext/node): sqlite prepare() options, defensive default, iterator
  invalidation (#​32756)
• fix(ext/node): support http2 createConnection sockets (#​32733)
• fix(ext/node): support numeric FDs in child_process stdio array (#​32959)
• fix(ext/node): update process.versions.napi to 9 (#​32870)
• fix(ext/web): AbortSignal.any() memory leak with long-lived signals (#​32916)
• fix(ext/web): handle null options in removeEventListener (#​32605)
• fix(fmt): delegate component expression formatting to markup_fmt (#​29763)
• fix(fmt): update markup_fmt to 0.27.0 and malva to 0.15.2 (#​32949)
• fix(inspector): send executionContextDestroyed on process.exit() (#​32934)
• fix(lockfile): truncate frozen lockfile error diff to 50 lines (#​32976)
• fix(napi): add test coverage and fix escape_handle/throw bugs (#​32960)
• fix(node/http): stop leaking TCP wrappers on HTTPS upgrade with
  createConnection TLSSocket (#​32961)
• fix(npm): approve-scripts detects packages when lockfile is disabled
  (#​32842)
• fix(npm): create shims for all bin entries during global npm install (#​32607)
• fix(npm): skip file: and link: dependencies in npm packages (#​32876)
• fix(npm): use box-drawing style for deprecated package warnings (#​32979)
• fix(resolver): fall through to .deno/ when BYONM node_modules version
  mismatches (#​32981)
• fix(resolver): prefer exact version match in BYONM npm resolution (#​32977)
• fix: handle inner quotes in double-quoted env values in .env file (#​32930)
• fix: include Temporal types in deno types output (#​32952)
• fix: make flamegraph SVG fill full browser viewport (#​32727)
• fix: rewrite approve_scripts_no_lock as PTY tests, skip lockfile test on
  Windows (#​32853)
• fix: skip flaky test-process-threadCpuUsage-worker-threads on Windows (#​32886)
• perf(ext/web): use simdutf for base64 encode/decode (#​32743)
• perf: upgrade to jsonc-parser 0.32 (#​32864)

v2.7.7

Compare Source

• fix(core): implement select fallback on macOS (#​32812)
• fix(ext/node): add disabled process function stubs in worker threads (#​32809)
• fix(ext/node): add key/IV length validation for aes-128-cbc and ecb cipher
  modes (#​32824)
• fix(ext/node): improve node:dns module compatibility (#​32704)
• fix(ext/node): improve process.title and support --title flag (#​32201)
• fix(ext/node): set kLastWriteWasAsync in JS write path to prevent double
  callback (#​32814)
• fix(ext/node): skip normalization in path.win32.join for reserved device names
  (#​32808)
• fix(ext/node): support interface option for IPv6 multicast membership (#​32754)
• fix(ext/node): use constant-time comparison for GCM auth tag verification
  (#​32817)
• fix(ext/node): validate process.exitCode and fix process constructor name
  (#​32806)
• fix(watch): support graceful shutdown via SIGTERM dispatch (#​32564)
• perf(ext/webidl): optimize dictionary converters (#​32729)

v2.7.6

Compare Source

• feat(core): add cloneable resource registry for structured clone (#​32672)
• feat(core): update v8 to 146.8.0 with foreground task ownership (#​32771)
• feat(eval): auto-detect CJS vs ESM in deno eval (#​32472)
• feat(ext/node): add MIMEType, convertProcessSignalToExitCode, Symbol.dispose
  for ChildProcess (#​32793)
• feat(ext/signals): support additional signals on Windows (#​32689)
• feat(ext/telemetry): support array values in OTEL attributes (#​32748)
• feat: add --cpu-prof-flamegraph to generate interactive SVG flamegraphs
  (#​32572)
• fix(cli): update typescript-go to 2026-03-09 (#​32656)
• fix(core): don't panic in to_v8_error when JS error builder callback fails
  (#​32749)
• fix(core): prevent panic when multiple lazy-loaded ESM modules are loaded
  during TLA (#​32769)
• fix(coverage): don't mark lines uncovered when zero-count range only partially
  overlaps (#​32601)
• fix(ext/console): make timer and counter state per-instance to fix OTEL
  console wrapping (#​32719)
• fix(ext/crypto): support structuredClone for CryptoKey (#​32674)
• fix(ext/fetch): retry on stale pooled HTTP/1.1 connections (#​32566)
• fix(ext/ffi): retain backing store references in nonblocking calls (#​32775)
• fix(ext/napi): call wrap/ref finalizers at shutdown (#​32592)
• fix(ext/napi): keep event loop alive while uv_async_t handle is active
  (#​32702)
• fix(ext/napi): prevent spurious TypeError from napi_coerce_to_object on
  null/undefined (#​32695)
• fix(ext/node): accept all TypedArrays in spawnSync input option (#​32712)
• fix(ext/node): allow IPv6 multicast addresses in UDP
  addMembership/dropMembership (#​32739)
• fix(ext/node): allow passing FileHandle as fd argument for WriteStream
  and ReadStream (#​32770)
• fix(ext/node): emit "connect" event on http.Server for CONNECT requests
  (#​32599)
• fix(ext/node): enable 8 already-passing child_process compat tests (#​32710)
• fix(ext/node): fix 8 Node.js compat test failures (#​32755)
• fix(ext/node): fix AbortController signal handling in child_process s…
  (#​32713)
• fix(ext/node): fix Buffer.concat, expose internal/buffer, implement
  markAsUntransferable (#​32760)
• fix(ext/node): fix IPC message prototype for child_process JSON (#​32731)
• fix(ext/node): fix TLA stall with native TTY handles and make stdio
  indestructible (#​32792)
• fix(ext/node): fix TLS JSStreamSocket resource leak causing process hang
  (#​32325)
• fix(ext/node): fix multiple deepEqual comparison issues (#​32763)
• fix(ext/node): fix perm checks in TCPWrap (#​32721)
• fix(ext/node): fix send() validation in child_process IPC (#​32779)
• fix(ext/node): handle cargo features during publish (#​32636)
• fix(ext/node): handle signal 0 in child_process.kill() (#​32294)
• fix(ext/node): implement safe, add, rem options for crypto.generatePrime
  (#​32618)
• fix(ext/node): improve Node.js crypto compatibility (#​32690)
• fix(ext/node): improve X509Certificate Node.js compatibility (#​32671)
• fix(ext/node): improve crypto.generateKeyPair validation (#​32620)
• fix(ext/node): improve worker_threads path validation and error handling
  (#​32791)
• fix(ext/node): include prototype env vars in child_process spawn (#​32699)
• fix(ext/node): remove extra properties from node:fs exports (#​32670)
• fix(ext/node): require --allow-net for udp.send (#​32774)
• fix(ext/node): rewrite node:tty on top of uv compat (#​32777)
• fix(ext/node): set up stdio streams on failed child_process spawn (#​32698)
• fix(ext/node): signal listeners added via process.once can now be removed
  (#​32606)
• fix(ext/node): support encrypted PEM export and deprecated hash option in
  crypto keygen (#​32703)
• fix(ext/node): use non-blocking write in fs.writev (#​32673)
• fix(ext/node): validate handle type in child_process send() (#​32711)
• fix(ext/node): wrap non-Error unhandled rejections in ERR_UNHANDLED_REJECTION
  (#​32535)
• fix(ext/otel): don't mark server spans as error for 4xx responses (#​32722)
• fix(ext/signals): prevent panic on FreeBSD (#​32518)
• fix(ext/telemetry): add log.iostream attribute to console logs (#​32723)
• fix(ext/telemetry): add exception.* attributes to OTEL log records (#​32726)
• fix(ext/web): support %j JSON format specifier in console.log (#​32684)
• fix(ext/web): upgrade QuotaExceededError to DOMException derived interface
  (#​32244)
• fix(lsp): align organize imports output with tsgo (#​32677)
• fix(npm): handle read-only bin files when setting up node_modules/.bin
  (#​32632)
• fix(npm): resolve bundled npm deps in packages properly when not using a
  node_modules directory (#​32679)
• fix(npm): retain authorization header on http->https redirect (#​29878)
• fix(npm): support npmrc certfile + keyfile (#​32655)
• fix(process): allow un

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.63%. Comparing base (71e6a54) to head (33d6970).

Additional details and impacted files

@@            Coverage Diff             @@
##             main      #82      +/-   ##
==========================================
+ Coverage   96.35%   97.63%   +1.28%     
==========================================
  Files          11       11              
  Lines         466      466              
  Branches       58       58              
==========================================
+ Hits          449      455       +6     
+ Misses         17       10       -7     
- Partials        0        1       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.