chore(deps): update github actions (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/cache	action	major	v3 → v5
actions/checkout	action	major	v3 → v6
crazy-max/ghaction-github-labeler	action	major	v4 → v6
deno (source)	uses-with	major	v1.x → 2.x
github/codeql-action	action	major	v2 → v4

---

Release Notes

actions/cache (actions/cache)

v5

Compare Source

v4

Compare Source

actions/checkout (actions/checkout)

v6

Compare Source

v5

Compare Source

v4

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

crazy-max/ghaction-github-labeler (crazy-max/ghaction-github-labeler)

v6

Compare Source

v5

Compare Source

denoland/deno (deno)

v2.7.9

Compare Source

• fix(cli): show clean error instead of panic for invalid
  --unsafely-ignore-certificate-errors value (#​32868)
• fix(compile): strip duplicate exe path from argv when standalone binary
  relaunches (#​33016)
• fix(compile): use execPath for process.argv[1] in standalone binaries (#​32990)
• fix(ext/http): use clone_external in op_http_metric_handle_otel_error (#​33005)
• fix(ext/node): util.stripVTControlCharacters compatibility (#​32942)
• fix(ext/node): add Symbol.dispose and Symbol.asyncDispose to fs.Dir (#​33000)
• fix(ext/node): rewrite Windows TTY reading to match libuv (console mode,
  encoding, raw + line mode) (#​32999)
• fix(ext/node): use constant-time comparison for secret key equality (#​32994)
• fix(publish): vite import.meta.hot not type checking (#​32127)
• perf(ops): replace per-op generated slow metrics wrappers with shared dispatch
  (#​32889)

v2.7.8

Compare Source

• feat(core): implement NodeRuntime CDP domain and fix --inspect-brk blocking
  (#​32714)
• feat(ext/crypto): implement P-521 sign, verify, and ECDH derive (#​32602)
• feat(ext/napi): add node_api_create_object_with_named_properties (#​32906)
• feat(ext/telemetry): add console exporter for OpenTelemetry (#​32717)
• feat(ext/telemetry): copy relevant span attributes to HTTP metrics (#​32720)
• feat: use lockfile from jsr package for global install (#​32490)
• fix(audit): respect package.json overrides in vulnerability checks (#​32878)
• fix(cli): fix arrow keys in interactive picker on Windows (#​32978)
• fix(cli): parse --frozen flag for deno update and deno outdated (#​32975)
• fix(compile): skip Node-to-Deno arg translation in standalone binaries
  (#​32980)
• fix(ext/console): handle throwing Symbol.toStringTag getter gracefully
  (#​32917)
• fix(ext/napi): pass valid env to tsfn call_js_cb after close race (#​32957)
• fix(ext/node): fs.cp across allowed dirs with ignored read permissions
  (#​32927)
• fix(ext/node): child_process improvements (internalMessage, argv0, DEP0190)
  (#​32885)
• fix(ext/node): close libuv handle on HandleWrap.close() for new-style handles
  (#​32958)
• fix(ext/node): defer uv_write callbacks to prevent re-entrancy panic (#​32919)
• fix(ext/node): do not throw error for readline.createInterface outside TTY
  (#​32874)
• fix(ext/node): don't fire upgrade event for h2c requests (#​32866)
• fix(ext/node): drain all ready connections in poll_tcp_handle to prevent
  accept starvation (#​32943)
• fix(ext/node): emit request "close" before socket "free" in keep-alive path
  (#​32811)
• fix(ext/node): enable node compat test for v8.getHeapStatistics (#​32833)
• fix(ext/node): enable node:fs compat tests + lchmod fix (#​32892)
• fix(ext/node): fix Buffer.concat truncating buffers larger than 4GB (#​32913)
• fix(ext/node): fix IPC stdio handling in child_process (#​32920)
• fix(ext/node): fix node:domain across async boundaries (#​32897)
• fix(ext/node): freeze os.constants.signals to match Node.js (#​32836)
• fix(ext/node): implement process.threadCpuUsage() (#​32829)
• fix(ext/node): improve process.hrtime argument validation (#​32837)
• fix(ext/node): improve readline and EventEmitter compat (#​32826)
• fix(ext/node): pass uid/gid to spawn and implement process.getgroups (#​32772)
• fix(ext/node): preserve TLS upgrade state on reconnect (#​32838)
• fix(ext/node): return all own properties from VM context property enumerator
  (#​32911)
• fix(ext/node): set fd property on TTY ReadStream and WriteStream (#​32880)
• fix(ext/node): sqlite prepare() options, defensive default, iterator
  invalidation (#​32756)
• fix(ext/node): support http2 createConnection sockets (#​32733)
• fix(ext/node): support numeric FDs in child_process stdio array (#​32959)
• fix(ext/node): update process.versions.napi to 9 (#​32870)
• fix(ext/web): AbortSignal.any() memory leak with long-lived signals (#​32916)
• fix(ext/web): handle null options in removeEventListener (#​32605)
• fix(fmt): delegate component expression formatting to markup_fmt (#​29763)
• fix(fmt): update markup_fmt to 0.27.0 and malva to 0.15.2 (#​32949)
• fix(inspector): send executionContextDestroyed on process.exit() (#​32934)
• fix(lockfile): truncate frozen lockfile error diff to 50 lines (#​32976)
• fix(napi): add test coverage and fix escape_handle/throw bugs (#​32960)
• fix(node/http): stop leaking TCP wrappers on HTTPS upgrade with
  createConnection TLSSocket (#​32961)
• fix(npm): approve-scripts detects packages when lockfile is disabled
  (#​32842)
• fix(npm): create shims for all bin entries during global npm install (#​32607)
• fix(npm): skip file: and link: dependencies in npm packages (#​32876)
• fix(npm): use box-drawing style for deprecated package warnings (#​32979)
• fix(resolver): fall through to .deno/ when BYONM node_modules version
  mismatches (#​32981)
• fix(resolver): prefer exact version match in BYONM npm resolution (#​32977)
• fix: handle inner quotes in double-quoted env values in .env file (#​32930)
• fix: include Temporal types in deno types output (#​32952)
• fix: make flamegraph SVG fill full browser viewport (#​32727)
• fix: rewrite approve_scripts_no_lock as PTY tests, skip lockfile test on
  Windows (#​32853)
• fix: skip flaky test-process-threadCpuUsage-worker-threads on Windows (#​32886)
• perf(ext/web): use simdutf for base64 encode/decode (#​32743)
• perf: upgrade to jsonc-parser 0.32 (#​32864)

v2.7.7

Compare Source

• fix(core): implement select fallback on macOS (#​32812)
• fix(ext/node): add disabled process function stubs in worker threads (#​32809)
• fix(ext/node): add key/IV length validation for aes-128-cbc and ecb cipher
  modes (#​32824)
• fix(ext/node): improve node:dns module compatibility (#​32704)
• fix(ext/node): improve process.title and support --title flag (#​32201)
• fix(ext/node): set kLastWriteWasAsync in JS write path to prevent double
  callback (#​32814)
• fix(ext/node): skip normalization in path.win32.join for reserved device names
  (#​32808)
• fix(ext/node): support interface option for IPv6 multicast membership (#​32754)
• fix(ext/node): use constant-time comparison for GCM auth tag verification
  (#​32817)
• fix(ext/node): validate process.exitCode and fix process constructor name
  (#​32806)
• fix(watch): support graceful shutdown via SIGTERM dispatch (#​32564)
• perf(ext/webidl): optimize dictionary converters (#​32729)

v2.7.6

Compare Source

• feat(core): add cloneable resource registry for structured clone (#​32672)
• feat(core): update v8 to 146.8.0 with foreground task ownership (#​32771)
• feat(eval): auto-detect CJS vs ESM in deno eval (#​32472)
• feat(ext/node): add MIMEType, convertProcessSignalToExitCode, Symbol.dispose
  for ChildProcess (#​32793)
• feat(ext/signals): support additional signals on Windows (#​32689)
• feat(ext/telemetry): support array values in OTEL attributes (#​32748)
• feat: add --cpu-prof-flamegraph to generate interactive SVG flamegraphs
  (#​32572)
• fix(cli): update typescript-go to 2026-03-09 (#​32656)
• fix(core): don't panic in to_v8_error when JS error builder callback fails
  (#​32749)
• fix(core): prevent panic when multiple lazy-loaded ESM modules are loaded
  during TLA (#​32769)
• fix(coverage): don't mark lines uncovered when zero-count range only partially
  overlaps (#​32601)
• fix(ext/console): make timer and counter state per-instance to fix OTEL
  console wrapping (#​32719)
• fix(ext/crypto): support structuredClone for CryptoKey (#​32674)
• fix(ext/fetch): retry on stale pooled HTTP/1.1 connections (#​32566)
• fix(ext/ffi): retain backing store references in nonblocking calls (#​32775)
• fix(ext/napi): call wrap/ref finalizers at shutdown (#​32592)
• fix(ext/napi): keep event loop alive while uv_async_t handle is active
  (#​32702)
• fix(ext/napi): prevent spurious TypeError from napi_coerce_to_object on
  null/undefined (#​32695)
• fix(ext/node): accept all TypedArrays in spawnSync input option (#​32712)
• fix(ext/node): allow IPv6 multicast addresses in UDP
  addMembership/dropMembership (#​32739)
• fix(ext/node): allow passing FileHandle as fd argument for WriteStream
  and ReadStream (#​32770)
• fix(ext/node): emit "connect" event on http.Server for CONNECT requests
  (#​32599)
• fix(ext/node): enable 8 already-passing child_process compat tests (#​32710)
• fix(ext/node): fix 8 Node.js compat test failures (#​32755)
• fix(ext/node): fix AbortController signal handling in child_process s…
  (#​32713)
• fix(ext/node): fix Buffer.concat, expose internal/buffer, implement
  markAsUntransferable (#​32760)
• fix(ext/node): fix IPC message prototype for child_process JSON (#​32731)
• fix(ext/node): fix TLA stall with native TTY handles and make stdio
  indestructible (#​32792)
• fix(ext/node): fix TLS JSStreamSocket resource leak causing process hang
  (#​32325)
• fix(ext/node): fix multiple deepEqual comparison issues (#​32763)
• fix(ext/node): fix perm checks in TCPWrap (#​32721)
• fix(ext/node): fix send() validation in child_process IPC (#​32779)
• fix(ext/node): handle cargo features during publish (#​32636)
• fix(ext/node): handle signal 0 in child_process.kill() (#​32294)
• fix(ext/node): implement safe, add, rem options for crypto.generatePrime
  (#​32618)
• fix(ext/node): improve Node.js crypto compatibility (#​32690)
• fix(ext/node): improve X509Certificate Node.js compatibility (#​32671)
• fix(ext/node): improve crypto.generateKeyPair validation (#​32620)
• fix(ext/node): improve worker_threads path validation and error handling
  (#​32791)
• fix(ext/node): include prototype env vars in child_process spawn (#​32699)
• fix(ext/node): remove extra properties from node:fs exports (#​32670)
• fix(ext/node): require --allow-net for udp.send (#​32774)
• fix(ext/node): rewrite node:tty on top of uv compat (#​32777)
• fix(ext/node): set up stdio streams on failed child_process spawn (#​32698)
• fix(ext/node): signal listeners added via process.once can now be removed
  (#​32606)
• fix(ext/node): support encrypted PEM export and deprecated hash option in
  crypto keygen (#​32703)
• fix(ext/node): use non-blocking write in fs.writev (#​32673)
• fix(ext/node): validate handle type in child_process send() (#​32711)
• fix(ext/node): wrap non-Error unhandled rejections in ERR_UNHANDLED_REJECTION
  (#​32535)
• fix(ext/otel): don't mark server spans as error for 4xx responses (#​32722)
• fix(ext/signals): prevent panic on FreeBSD (#​32518)
• fix(ext/telemetry): add log.iostream attribute to console logs (#​32723)
• fix(ext/telemetry): add exception.* attributes to OTEL log records (#​32726)
• fix(ext/web): support %j JSON format specifier in console.log (#​32684)
• fix(ext/web): upgrade QuotaExceededError to DOMException derived interface
  (#​32244)
• fix(lsp): align organize imports output with tsgo (#​32677)
• fix(npm): handle read-only bin files when setting up node_modules/.bin
  (#​32632)
• fix(npm): resolve bundled npm deps in packages properly when not using a
  node_modules directory (#​32679)
• fix(npm): retain authorization header on http->https redirect (#​29878)
• fix(npm): support npmrc certfile + keyfile (#​32655)
• fix(process): allow unref'd child processes to outlive parent (#​32563)
• fix(repl): fix panic when pressing Tab at beginning of line (#​32750)
• fix(runtime): apply source maps to CPU profiler output (#​32634)
• fix(runtime): display proper error when throwing in event handlers (#​32663)
• fix(runtime): reduce memory retention after web worker termination (#​32617)
• fix(runtime): use XML-valid entity in flamegraph SVG (#​32716)
• fix(test): allow test functions to override reported location (#​32732)
• fix(tsc): move more node resolution errors to typescript diagnostics (#​32697)
• fix(watch): dispatch unload and process exit events on restart (#​32664)
• fix(web): support structuredClone for DOMException (#​32675)
• fix: restore --env-file parent directory traversal and do not error in
  deno compile for not found env file (#​32686)
• fix: wake event loop when V8 posts foreground tasks from background threads
  (#​32450)
• perf(core): optimize V8-to-Rust string conversion with ValueView (#​32688)
• perf(ext/napi): use threadpool for async work instead of spawning threads
  (#​32776)
• perf(ext/node): move fs.cpSync implementation to rust (#​32687)
• perf(ext/web): add write buffering for FsFile.writable streams (#​32676)
• perf(ext/web): optimize TextEncoder/TextDecoder hot paths (#​32735)
• perf(ext/web): optimize URLPattern ops to reduce serde overhead and GC
  pressure (#​32766)
• perf(ext/web): optimize node:buffer base64 encode/decode (#​32647)
• perf(ext/web): reduce promise allocations in streams (#​32652)
• perf(fmt): speed up file diffing (#​30644)
• perf(install): avoid unnecessary package info fetches when running lifecycle
  scripts (#​32653)
• perf(linux): trim glibc malloc arena after module loading (#​32662)
• perf(lsp): replace dissimilar with imara-diff (#​32700)
• perf(npm): run lifecycle scripts in parallel (#​32666)

v2.7.5

Compare Source

• feat(coverage): add function coverage to summary and HTML reports (#​32507)
• feat(doc): support npm packages in deno doc (#​32435)
• feat(ext/node): add node_api_create_object_with_properties API (#​31443)
• feat(ext/node): implement KeyObject.toCryptoKey() and
  KeyObject.from(CryptoKey) (#​32523)
• feat(otel): allow feeding permission audit data into OTEL (#​32501)
• feat: --cpu-prof flags for CPU profiles (#​31909)
• fix(console): prevent multi-line object values in console.table (#​32604)
• fix(core): switch to V8 Explicit microtask policy for correct nextTick
  ordering (#​32466)
• fix(ext/http): allow rejecting HTTP upgrades with non-101 status codes
  (#​32615)
• fix(ext/napi): run async work execute callback on a worker thread (#​32560)
• fix(ext/node): add node_api_create_property_key_(latin1/utf8) (#​32559)
• fix(ext/node): add missing http2 header constants (#​32611)
• fix(ext/node): emit DEP0198 warning for SHAKE digests without outputLength
  (#​32521)
• fix(ext/node): emit correct error codes for unsupported PQC key types (#​32533)
• fix(ext/node): fix multiple DiffieHellman crypto bugs (#​32531)
• fix(ext/node): fix multiple node:dgram compatibility issues (#​32520)
• fix(ext/node): handle generateKeyPair 2-arg call and enable PQC tests (#​32619)
• fix(ext/node): implement ECDH.convertKey and fix related ECDH bugs (#​32532)
• fix(ext/node): implement node:v8 heap APIs (#​32483)
• fix(ext/node): implement proper resourceLimits for node:worker_threads
  (#​32430)
• fix(ext/node): improve getCipherInfo and allow repeated Hmac digest() (#​32522)
• fix(ext/node): improve node:dns compat (#​32536)
• fix(ext/node): initialize debuglog testEnabled with safe default (#​32598)
• fix(ext/node): make TTY stdout/stderr indestructible (#​32530)
• fix(ext/node): make tty ReadStream/WriteStream callable without new (#​32537)
• fix(ext/node): multiple readline improvements (#​32538)
• fix(ext/node): napi_set_instance_data on exit (#​32509)
• fix(ext/node): rewrite http2 implementation (#​32418)
• fix(ext/node): run worker_threads eval code in sloppy mode (#​32428)
• fix(ext/node): support des-ede3-cbc cipher and allow Cipheriv/Decipheriv
  without new (#​32519)
• fix(ext/node): use max salt length as default for RSA-PSS signing (#​32534)
• fix(ext/otel): remove panicking unwraps in telemetry code (#​32557)
• fix(ext/websocket): handle non-ASCII bytes in WebSocket response headers
  (#​32594)
• fix(lsp): properly sync root files with tsgo (#​32455)
• fix(lsp): tsgo scope attribution for asset files (#​32608)
• fix(napi): remove unimplemented Node-API symbols from napi_sys (#​32593)
• fix(npm): memoize peer cache hit checks to prevent combinatorial explosion
  (#​32609)
• fix(npm): support npmrc email authorization (#​32616)
• fix: ensure binaries distributed in @deno/... npm packages are exectuable
  (#​32581)
• fix: flush CPU profile and coverage data on Deno.exit() (#​32591)
• fix: normalize capture to boolean in removeEventListener options (#​32508)
• fix: prevent panic on dynamic import with non-string error name (#​32498)
• fix: set process.features.openssl_is_boringssl to true (#​32512)
• fix: support value substitution when loading environment variable files
  (#​32495)
• perf(ext/node): move most fs.cp logic to rust (#​32580)
• perf(lsp): drop jsx import source cache (#​32506)
• perf(npm): improve decompression speed more (#​32547)
• perf(npm): less syscalls in tarball extraction (#​32541)
• perf(npm): remove folder canonicalization in tarball extract (#​32540)
• perf(npm): use libdeflater and preallocate buffer (#​32511)

v2.7.4

Compare Source

• Reland refactor(core): move nextTick/immediate queues into core, replace ops
  with shared buffers (#​32440) (#​32465)
• Revert "refactor(core): move nextTick/immediate queues into core, replace ops
  with shared buffers (#​32440) (#​32462)
• fix(core): uv_compat cleanup and fixes (#​32458)
• fix(deploy): correctly handle version lookup (#​32489)
• fix(ext/node): deep assert compatibility (#​32434)
• fix(ext/node): use sync writes for TTY stdout/stderr WriteStream (#​32488)
• fix(test): restart all tests on env file change (#​32461)
• perf(npm): actually improve npm install -g deno binary startup performance
  (#​32467)

v2.7.3

Compare Source

• fix(deploy): dont use jsr api for deploy subcommand (#​32441)
• fix(ext/node): handle partial writes to process.stdout/stderr (#​32433)
• fix(ext/node): make UDP socket ops synchronous, implement missing dgram
  methods (#​32381)
• fix(ext/node): support HTTP over Windows named pipes in node:http (#​32414)
• fix(npm): don't panic when peer dep is not in snapshot (#​32454)
• fix(npm): regression where resolution was missing dependencies (#​32453)
• perf(npm): improve npm install -g deno binary startup performance (#​32439)

v2.7.1

Compare Source

v2.6.8

Compare Source

• feat(npm): support jsr: scheme in package.json (#​31938)
• feat: Windows on ARM builds (#​31917)
• fix(ext/node): enable defensive option on DatabaseSync (#​32004)
• fix(ext/node): error formatting compatibility (#​31970)
• fix(ext/node): implement sqlite' SQLTagStore (#​31945)
• fix(ext/node): use primordials in _fs_fchown.ts (#​32007)
• fix(flags): correct zsh completions for script arg (#​31994)
• fix(install): clean up associated config and lock files during uninstall
  (#​31984)
• fix(types): correct types for Worker events (#​31981)
• fix: Reload the CronHandlerImpl if necessary when the control socket
  receives new envs (#​31996)
• fix: upgrade deno_core to 0.383.0 (#​32014)

v2.6.7

Compare Source

• feat(ext/node): implement mock API for node:test module (#​31954)
• feat(node): implement FileHandle.readv() method (#​31943)
• feat(npm): use JSR for @jsr scope (#​31925)
• feat: External Socket-Based Cron Implementation (#​31952)
• feat: V8 14.5 (#​31873)
• feat: add --inspect-publish-uid flag for VSCode debugging (#​31927)
• fix(ext/http): use serve address override only once (#​31935)
• fix(ext/net): remove socket file when dropping unix listener (#​31947)
• fix(ext/node): sqlite's StatementSync compatibility (#​31941)
• fix(ext/node): align assert throws/rejects signatures (#​31934)
• fix(ext/node): fix usage of new V8 string APIs (#​31963)
• fix(ext/node): implement sqlite's missing options (#​31919)
• fix(ext/node): pass test-child-process-bad-stdio node compat test (#​31851)
• fix(ext/node): read NODE_OPTIONS for --require and --inspect-publish-uid
  (#​31949)
• fix(ext/node): retry stale keepAlive connections in http client (#​31932)
• fix(ext/node): support setImmediate promisify.custom (#​31920)
• fix(ext/node): use primordials in _fs_ftruncate.ts (#​31944)
• fix(ext/node): use primordials in ext/node/polyfills/tls.ts (#​31816)
• fix(ext/web): support object in DOMException second argument for Node.js
  compat (#​31939)
• fix(node): throw ERR_INVALID_ARG_TYPE for invalid fs.readFile path (#​31918)
• fix(unstable): lint ast comments from first file showing in others (#​31956)
• fix(x): use local npm package even if npm specifier is used, forward unstable
  flags (#​31942)
• fix: allow reading /dev/tty without requiring --allow-all (#​31105)
• fix: enable edns for Deno.resolveDns (#​31951)
• fix: graceful server shutdown with open, un-upgraded connections (#​31959)
• fix: use locked-tripwire to prevent unlocked cargo installs (#​31973)

v2.6.6

Compare Source

• feat(cli/tsc): show progress bar for TSGO downloads (#​31893)
• feat(inspector): accept bare host and bare port for --inspect flag (#​31881)
• feat(inspector/unstable): add /ws/events endpoint in inspector server, notify
  watcher restart event in it (#​31901)
• feat(task): globstar, failglob, nullglob, and pipefail support
  (#​31913)
• feat: instrument cron with OTEL (#​31916)
• fix(check): improve @types/ package resolution for the global resolver
  (#​31868)
• fix(doc): non-determinism in deno doc --lint (#​31911)
• fix(dx): always spawn subprocess for dx (#​31897)
• fix(ext/crypto): add support for SHA3 (#​31668)
• fix(ext/node): assert compatibility (#​31821)
• fix(ext/node): fix deadline resolution for queued timers (#​31860)
• fix(ext/node): implement PerformanceObserver (#​31875)
• fix(ext/node): implement getValidStdio for child_process (#​31850)
• fix(ext/node): improve child_process CLI argument parsing (#​31825)
• fix(ext/node): inspector.open() and inspector.close() (#​31898)
• fix(ext/node): prevent derefencing symlinks on fs.rm (#​31886)
• fix(ext/node): properly implement process.features (#​31864)
• fix(ext/node): validate fd in tty.isatty and enable pseudo-tty tests (#​31892)
• fix(ext/sqlite): double free of Session after database closed (#​31830)
• fix(ext/web): export PerformanceObserver and PerformanceObserverEntryList
  (#​31887)
• fix(publish): do not include tsconfig imports in publish graph (#​31907)
• fix(publish): include npm:@​types/ package resolution in published packages
  (#​31855)
• fix: don't ever set 1005 outbound close code (#​31845)

v2.6.5

Compare Source

• feat(ext/canvas): support gif, webp for createImageBitmap (#​31402)
• feat(ext/web): add performance.clearResourceTimings() and
  setResourceTimingBufferSize() (#​31603)
• feat(node/fs): implement FileHandle.readableWebStream() (#​31745)
• fix(audit): respect --level flag for exit code (#​31721)
• fix(ci): rename trusted-signing-action to artifact-signing-action (#​31849)
• fix(cli/test): close Node HTTP connections before sanitizer check (#​31782)
• fix(ext/fetch): read file urls via vfs (#​31814)
• fix(ext/fetch): support ipv6 destination host with http and socks proxy
  (#​31683)
• fix(ext/node): DatabaseSync garbage collection invalidating associated
  resources (#​31737)
• fix(ext/node): add tls.setDefaultCACertificates support (#​31522)
• fix(ext/node): emit deprecation warning for SlowBuffer (#​31772)
• fix(ext/node): fix use-after-free in StatementSync JS iterator (#​31770)
• fix(ext/node): use correct block sizes for HMAC algorithms (#​31775)
• fix(ext/web): handle empty TextDecoder input when stream is true (#​31691)
• fix(io): ignore BrokenPipe error in op_print (#​31844)
• fix(node/child_process): ChildProcess constructor without args (#​31838)
• fix(node/child_process): improve arg type validation for execFile and fork
  (#​31829)
• fix(node/child_process): reject null bytes in arguments (#​31828)
• fix(node/child_process): use correct syscall name in spawn error (#​31836)
• fix(npm): deduplication pass for initially partially resolved graphs (#​31787)
• fix(runtime): handle options parameter in Deno.errors.* constructors
  (#​31510)
• fix(task): preserve signal-based exit codes for child processes (#​31789)
• fix(tsgo): nil deref for exported symbols (#​31786)
• fix(webgpu): correctly expose GPUCompilationInfo & GPUCompilationMessage
  (#​31780)
• fix: add more details when panicking getting dir path from deno.json (#​31805)
• fix: allow multiple --allow-all args (#​31833)
• fix: queue dynamic imports for modules with pending TLA (#​31670)
• fix: update config schema for read permission to include ignore property
  (#​31785)

v2.6.4

Compare Source

• fix(compile): make compile work with --unstable-npm-lazy-caching (#​31704)
• fix(ext/node): enable keepAlive connection reuse for HTTP Agent (#​31709)
• fix(ext/node): handle errors in sqlite session filter callback (#​31756)
• fix(ext/node): support TypedArray and DataView targets in Buffer.copy()
  (#​31734)
• fix(ext/node): support for inspector.url() (#​31705)
• fix(ext/node): support numbered positional parameters in node:sqlite (#​31722)
• fix(ext/websocket): prevent sending multiple close frames (#​31747)
• fix(install): wait for package installations before applying patches (#​31711)
• fix(node/crypto): integrate async_hooks for domain error handling (#​31751)
• fix(serve): net permissions in config file (#​31718)
• fix(task): prioritize member package.json when deno.json only in root
  (#​31736)
• fix(webgpu): update wgpu to 28.0.0 (#​31163)
• fix: deno cross compile for intel mac target (#​31714)
• fix: update urlpattern to 0.4.2 (#​31193)

v2.6.3

Compare Source

• fix(check): improve node types handling
• Revert "fix(ext/node): stub out Module.register and Module.registerHooks"
  (#​31684)

v2.6.2

Compare Source

• feat(unstable): add sandbox subcommand (#​31568)
• fix(audit): fix deserde for transitive npm audit actions (#​31671)
• fix(check): handle workspace members having different jsx import sources and
  importing each other (#​31654)
• fix(check): regression with tsgo and node globals (#​31621)
• fix(cli): deno tunnel when token storage isn't working or without deno.json
  (#​31584)
• fix(compile): ensure temp dir exists during x64 codesign (#​31672)
• fix(ext/node): sqlite:backup compatibility (#​31610)
• fix(ext/node): add error handling functions and tests for UV bindings (#​31639)
• fix(ext/node): avoid env permission for TERM in console and readline (#​31638)
• fix(ext/node): fix hot loop in setImmediate with a pending timer (#​31643)
• fix(ext/node): stub out Module.register and Module.registerHooks (#​31666)
• fix(ext/node): support named pipe listen, connect and open (#​31624)
• fix(ext/telemetry): otel baggage propagation (#​31620)
• fix(fetch): fix SOCKS5 proxy URL validation logic (#​31604)
• fix(flags): implement a better sandbox subcommand (#​31657)
• fix(inspector): worker debugging support via CDP (#​31527)
• fix(x): cache on demand when running, resolve packages with only one binary,
  don't fail on node-gyp if not present (#​31619)
• fix(x): fix shim script when use custom alias name, re-enable alias tests
  (#​31653)
• fix: panic on dropped inspector session (#​31658)
• fix: update glob implementation to match with latest node (#​31627)

v2.6.1

Compare Source

• feat(unstable): deploy config allow app to be optional (#​31567)
• fix(add): include type-only imports when building graph (#​31552)
• fix(cli): add streams as transferable types (#​31586)
• fix(compile): intel mac compile fix (#​31575)
• fix(compile): sentinal conflict with strtab on intel mac (#​31587)
• fix(ext/node): DatabaseSync compatibility (#​31515)
• fix(x): correct alias deno command location for Windows (#​31573)
• fix(x): fix executing native binary on windows + some cleanup (#​31551)
• fix: --preload and --require flags only available in runtime subcommands
  (#​31614)
• fix: adjust deno_cache version ([#​31553](https:

---

Configuration

📅 Schedule: Branch creation - "before 12pm on Sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.