You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.
Fix compiler.logDiagnostics option not working (#1483)
With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.
Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)
When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.
⚠️ This can degrade performance if you have a custom maxWorkers setting. Previously, it was applied incorrectly and could lead to Vitest using too many resources. For example, a lower number would still open too many browsers. Fixing it means Vitest opens less instances by default now.
Improved performance of getComputedStyle() and computed CSS property reads, including with stylesheets containing attribute selectors. (@scttcper, @asamuzaK)
Fixed slowdowns when focusing elements and running interaction tests, which regressed in v30.1.2. (@scttcper)
Fixed XMLHttpRequest reusing credentials supplied to xhr.open() after cross-origin redirects, including in response to authentication challenges from the destination.
Fixed XMLHttpRequest incorrectly sending and accepting cookies after cross-origin redirects back to the document's origin when xhr.withCredentials is false.
Fixed exceptions from malformed CSS math functions, such as calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@rnavarro)
Fixed CSS shorthands overwriting longhands with higher priority or specificity during style computation, including declarations containing CSS variables.
Fixed getComputedStyle() returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.
Fixed computed background positions to resolve font-relative lengths using the final font size and handle multiple image layers correctly.
Fixed computed 'color' values depending on property read order, including unresolved color-mix() results, which regressed in v29.0.2.
Fixed currentcolor border colors incorrectly becoming transparent when 'color' uses light-dark() or relative color syntax.
Fixed CSS calculations that reduce to a percentage incorrectly producing pixel values, which regressed in v30.0.0.
Fixed numeric font weights in the 'font' shorthand incorrectly setting 'line-height'.
Fixed selector matching involving XML namespaces, and selectors such as [data-a|=""] failing to match empty values and values beginning with -. (@asamuzaK)
nodejs/node (node)
v24.22.1: 2026-10-21, Version 24.22.1 'Krypton' (LTS), @aduh95
Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.
This PR includes no changesets
When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types
✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.23%. Comparing base (5d09b5f) to head (b985502).
✅ All tests successful. No failed tests found.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
21.2.3→21.2.421.2.3→21.2.44.11.0→4.13.011.12.0→11.12.14.17.25→4.17.2724.19.1→24.19.26.1.1→6.1.25.0.3→5.0.55.0.3→5.0.530.1.2→30.1.324.21→24.2224.21.0→24.22.10.71.0→0.74.01.86.0→1.89.012.9.1→12.15.019.3.0→19.3.119.3.0→19.3.119.3.0→19.3.10.23.0→0.23.18.3.2→8.3.55.0.3→5.0.5Release Notes
conventional-changelog/commitlint (@commitlint/cli)
v21.2.4Compare Source
Note: Version bump only for package @commitlint/cli
conventional-changelog/commitlint (@commitlint/config-conventional)
v21.2.4Compare Source
Note: Version bump only for package @commitlint/config-conventional
splitio/javascript-client (@splitsoftware/splitio)
v11.12.1Compare Source
vitejs/vite-plugin-react (@vitejs/plugin-react)
v6.1.2Compare Source
Fix HMR for compound components (#1484)
Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.
Fix
compiler.logDiagnosticsoption not working (#1483)With
oxc-transform-react>= 0.148, thelogDiagnosticswas not working. This version fixes it and requiresoxc-transform-react>= 0.152 as a peer dependency if you are using thecompileroption.compiler.logDiagnosticsoption is now deprecated and should be swapped for the builtincompiler.reportDiagnostics.Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)
When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.
vitest-dev/vitest (@vitest/coverage-v8)
v5.0.5Compare Source
🐞 Bug Fixes
fs.denywith api token file - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11578 (28dc1)--changed- by @sheremet-va in #11583 (14921)datato theimport.meta.hotstub - by @sheremet-va in #11590 (3a828)skipinskipIf, ignoreundefinedoptions - by @sheremet-va in #11591 (d523a)&#​39;failed&#​39;on worker crash - by @AriPerkkio in #11568 (6ae8e)View changes on GitHub
v5.0.4Compare Source
🚀 Features
test.ui.themeoption - by @sheremet-va in #11499 (1da66)--changed- by @sheremet-va in #11424 (a2336)🐞 Bug Fixes
:in project and change the shape ofresultscache - by @sheremet-va in #11453 (9673c)$string values whentaskTitleValueFormatTruncateis 0 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11485 (4f7e1)maxWorkerssetting. Previously, it was applied incorrectly and could lead to Vitest using too many resources. For example, a lower number would still open too many browsers. Fixing it means Vitest opens less instances by default now.allowExternalfails to include uncovered files - by @AriPerkkio in #11513 (4ef00)MapandSetdeep equality in some assertions - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11402 (b4e79)thistomodule.exports- by @sheremet-va in #11504 (b618a)🏎 Performance
View changes on GitHub
jsdom/jsdom (jsdom)
v30.1.3Compare Source
getComputedStyle()and computed CSS property reads, including with stylesheets containing attribute selectors. (@scttcper, @asamuzaK)XMLHttpRequestreusing credentials supplied toxhr.open()after cross-origin redirects, including in response to authentication challenges from the destination.XMLHttpRequestincorrectly sending and accepting cookies after cross-origin redirects back to the document's origin whenxhr.withCredentialsis false.calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@rnavarro)getComputedStyle()ignoring style rules nested inside multiple@mediarules.getComputedStyle()returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.color-mix()results, which regressed in v29.0.2.currentcolorborder colors incorrectly becoming transparent when 'color' useslight-dark()or relative color syntax.[data-a|=""]failing to match empty values and values beginning with-. (@asamuzaK)nodejs/node (node)
v24.22.1: 2026-10-21, Version 24.22.1 'Krypton' (LTS), @aduh95Compare Source
This is a security release.
Notable Changes
BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH(Antoine du Hamel)0ed4268(Evgenii Kliuchnikov)Commits
2a73ee5a89] - crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel) #668774d6990b33c] - crypto: reset random caches across snapshots (Filip Skokan) nodejs-private/node-private#9874b3c9bbf9f] - crypto: harden X.509 conversion and formatting (Filip Skokan) nodejs-private/node-private#10079243b105b6] - crypto: update root certificates to NSS 3.129 (Node.js GitHub Bot) #664961e39cd53c7] - deps: update c-ares to 1.34.9 (Node.js GitHub Bot) #6686849dff6f57a] - deps: brotli: cherry-pick0ed4268(Evgenii Kliuchnikov) nodejs-private/node-private#1002fca511adc5] - deps: V8: backport93cd21e(Joyee Cheung) nodejs-private/node-private#100818711c7567] - deps: update timezone to 2026e (Node.js GitHub Bot) #66419fa77cfb1ad] - deps: update timezone to 2026d (Node.js GitHub Bot) #66333b84f9f186b] - deps: update archs files for openssl-3.5.9 (Node.js GitHub Bot) #66396ff0664c3ba] - deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot) #663961d4c89ef87] - deps: update undici to 7.30.1 (Node.js GitHub Bot) #66764843a1627dc] - dns: validate resolve inputs for null bytes (James M Snell) nodejs-private/node-private#98496c3ccb1fc] - http: ensure agent data guard works without I/O (James M Snell) nodejs-private/node-private#9838dc18a6218] - permission: check permission model in realpathSync (RafaelGSS) nodejs-private/node-private#973b5f41529df] - src: exposeBROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH(Antoine du Hamel) nodejs-private/node-private#100201acf0ee74] - tls: reject chains containing blocked public keys (Ulises Gascón) #66871935918e342] - tls: reject non-canonical IP addresses (Matteo Collina) nodejs-private/node-private#982de49c913f2] - tls: fix ip normalization regression (James M Snell) nodejs-private/node-private#9859dc4bb57f0] - tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett) #66855v24.22.0: 2026-10-14, Version 24.22.0 'Krypton' (LTS), @richardlau prepared by @aduh95Compare Source
Notable Changes
ddbf974b47] - (SEMVER-MINOR) crypto: addcrypto.parsePKCS12()(Brian Muenzenmeyer) #65627c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #65553a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #6548451aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #66090acc1578179] - doc: deprecateServer.prototype._listen2innode:net(Antoine du Hamel) #65593a7f8de6362] - (SEMVER-MINOR) net: support sendingnet.BoundSocketto threads and child processes (Guy Bedford) #6472560c3eb61bd] - (SEMVER-MINOR) perf_hooks: implementSlidingWindowHistogram(James M Snell) #658256b3e6f9d5c] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #6580675456a3512] - (SEMVER-MINOR) perf_hooks: implement HistogrammeanCIAPI (James M Snell) #6560672d1b40c56] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #6543441161dda87] - (SEMVER-MINOR) sqlite: addStatementSync.prototype.close()(Guilherme Araújo) #64232adbc757d70] - (SEMVER-MINOR) sqlite: addStatementSync.prototype[Symbol.dispose]()(Guilherme Araújo) #64232241339f072] - (SEMVER-MINOR) src,lib: addutil.markPromiseAsHandled(James M Snell) #6580563b0974d9e] - (SEMVER-MINOR) util: implementutil.throttle(James M Snell) #65899a3bbb5a26f] - (SEMVER-MINOR) util: implementdebounce(James M Snell) #65899Commits
e6832b2cb1] - assert: fix TypeError on deepStrictEqual with null Map key or Set member (Sergey Sannikov) #64449a079177d9f] - benchmark: add --csv option to compare.js with --analyze (James M Snell) #6592210b1a0f70f] - benchmark: fix max-regressions detection in compare.js (James M Snell) #65587e0c7ba8ad5] - benchmark: add --analyze option to benchmark/scatter.js (James M Snell) #6559421fed10bb0] - benchmark: add crypto class benchmarks (Filip Skokan) #65518fa912242b7] - buffer: fix unaligned UTF-16LE decoding (Matteo Collina) #65905a6bd0c1413] - build: suppress OpenSSL asm warnings with clang (Richard Lau) #6602394e12139ee] - build: derive V8_LOGGING_LEVEL from dcheck_always_on (Joyee Cheung) #657447a2f322943] - build: fix quiet default for make builds (Shelley Vohr) #65826c280d650b0] - build: allow linking shared dependencies in the GN build (Shelley Vohr) #657974b23a4472c] - build: enable the V8 sandbox in shared-cage builds (Shelley Vohr) #62237676e15c003] - build: define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage (Shelley Vohr) #65464f784058482] - build: remove obsolete configure flags (Chengzhong Wu) #65456f63f37d243] - build: activate correct default flags for riscv64 (Stewart X Addison) #65708da46ac075d] - build: derive NODE_ARCH from target_cpu in the GN build (Shelley Vohr) #65491249e9a16dd] - build,src: gate jspi flag on V8_ENABLE_WEBASSEMBLY (Piotr Kubaj) #66082146f00f64b] - child_process: clear timeout timer on spawn-time error too (kishore280) #6550613987f4418] - crypto: remove redundentstd::movecall (Antoine du Hamel) #66111ef957ac85f] - crypto: skip private RSA parameters in key details (Filip Skokan) #661088feccc5e22] - crypto: use provider EC group names (Filip Skokan) #66108764e0d1120] - crypto: fetch ciphers for private-key encoding (Filip Skokan) #6610850ffed1979] - crypto: decode PKCS#1 keys through providers (Filip Skokan) #6610856c16b2fd6] - crypto: derive keys through EVP_KDF (Filip Skokan) #66108a4effe6809] - crypto: use names for asymmetric key algorithms (Filip Skokan) #65966ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #656278e631aa48f] - crypto: add Hybrid KEMs to Web Cryptography (Filip Skokan) #657595c51129e16] - crypto: optimize private EC JWK import (Filip Skokan) #65908c2ec40c2d7] - crypto: disable non-FIPS WebCrypto paths in FIPS mode (Filip Skokan) #65172e198aa0f79] - crypto: read RSA-PSS restrictions from provider (Filip Skokan) #66108253784f0e9] - crypto: optimize and benchmark key preparation (Filip Skokan) #6589280a6ad509b] - crypto: avoid EC reconstruction for signature sizing (Filip Skokan) #659085b592b772c] - crypto: avoid EC raw export reconstruction (Filip Skokan) #65908ee956ae3bf] - crypto: export EC JWK coordinates directly (Filip Skokan) #65908684008be58] - crypto: read EC curve metadata directly (Filip Skokan) #65908f4665f1c41] - crypto: validate the limit of PBKDF2 iterations (Filip Skokan) #65704624abbecd7] - crypto: use primordials in HKDF info validation (Filip Skokan) #65704e4d916f175] - crypto: add mgf1Hash for RSA-OAEP (Adam Mcgrath) #65073db8a9162a8] - crypto: fix multi-prime RSA JWKs (Filip Skokan) #65649022ac83504] - crypto: cache valid ECDH key pairs (Filip Skokan) #65615c61953ebcc] - crypto: add strict mode to --force-fips (Filip Skokan) #65645db6ea132a5] - crypto: add FIPS indicator diagnostics channel (Filip Skokan) #65645c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #655532b62aafd20] - crypto: validate JWK usages before key_ops (Filip Skokan) #65550ec7819db69] - crypto: fix RSA-PSS oversized salt handling (Filip Skokan) #65550a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #6548451aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #634115a46a9acbb] - crypto: improve SubtleCrypto.supports() accuracy (Filip Skokan) #65222191ebfb26c] - crypto: fix public PKCS8 export error (한국) #65609b6d7ed372b] - crypto: fix private SPKI export error (Filip Skokan) #6555079509c25a4] - crypto: correct CCM decryption FIPS error message (kyungrae) #654509adc87bc16] - crypto: harden X509Certificate state (Filip Skokan) #65518c63aa331b4] - crypto: optimize key slot caching (Filip Skokan) #6551887daea43a7] - crypto: add null checks for OPENSSL_INIT_new() (Nora Dossche) #6345798ca5e9358] - crypto: prevent Hmac.digest() from returning uninitialized memory (Matteo Collina) #651120c090a28cd] - crypto: avoid throwing CryptoKey brand checks (Filip Skokan) [#65503](https://redirect.github.coConfiguration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.