Build(deps-dev): bump the npm-development group across 1 directory with 11 updates

[dependabot]

Bumps the npm-development group with 11 updates in the / directory:

Package	From	To
@napi-rs/canvas	1.0.2	1.0.8
playwright	1.61.1	1.62.1
resedit	2.0.3	3.1.0
typescript	5.9.3	7.0.2
vitest	3.2.6	4.1.11
@testing-library/jest-dom	6.9.1	7.0.1
@testing-library/react	16.3.2	16.3.3
@types/node	24.13.2	26.4.0
electron	43.4.0	44.0.0
esbuild	0.28.1	0.28.2
jsdom	27.4.0	30.0.1

Updates @napi-rs/canvas from 1.0.2 to 1.0.8

Release notes

Sourced from @​napi-rs/canvas's releases.

v1.0.8

What's Changed

• fix: capture call-time snapshot in async encode APIs (#1313) by @​Brooooooklyn in Brooooooklyn/canvas#1323
• chore(deps): update dependency canvaskit-wasm to ^0.42.0 by @​renovate[bot] in Brooooooklyn/canvas#1322
• chore(deps): update rust to v1.98.0 by @​renovate[bot] in Brooooooklyn/canvas#1324
• fix: snapshot canvas source in drawImage to avoid per-call pixel copy by @​Brooooooklyn in Brooooooklyn/canvas#1325

Full Changelog: Brooooooklyn/canvas@v1.0.7...v1.0.8

v1.0.7

What's Changed

• perf: fast getImageData readback with runtime-dispatched SIMD unpremultiply by @​Brooooooklyn in Brooooooklyn/canvas#1319
• fix: putImageData no longer inherits transform/clip after getImageData by @​Brooooooklyn in Brooooooklyn/canvas#1320

Full Changelog: Brooooooklyn/canvas@v1.0.6...v1.0.7

v1.0.6

What's Changed

• fix: keep skia surface alive during async encode (#1312) by @​Brooooooklyn in Brooooooklyn/canvas#1314

Full Changelog: Brooooooklyn/canvas@v1.0.5...v1.0.6

v1.0.5

What's Changed

• chore(deps): lock file maintenance by @​renovate[bot] in Brooooooklyn/canvas#1307
• fix: prefer raster signatures over SVG markers by @​Brooooooklyn in Brooooooklyn/canvas#1310
• fix: reject malformed raster images by @​Brooooooklyn in Brooooooklyn/canvas#1311

Full Changelog: Brooooooklyn/canvas@v1.0.4...v1.0.5

v1.0.4

What's Changed

• chore(deps): update yarn to v4.18.0 by @​renovate[bot] in Brooooooklyn/canvas#1303
• fix(shadow): restore blur rendering performance by @​Brooooooklyn in Brooooooklyn/canvas#1305
• chore(deps): lock file maintenance by @​renovate[bot] in Brooooooklyn/canvas#1306

Full Changelog: Brooooooklyn/canvas@v1.0.3...v1.0.4

v1.0.3

What's Changed

• chore(deps): update rust to v1.96.1 by @​renovate[bot] in Brooooooklyn/canvas#1282
• chore(deps): lock file maintenance by @​renovate[bot] in Brooooooklyn/canvas#1285
• chore(deps): lock file maintenance by @​renovate[bot] in Brooooooklyn/canvas#1286
• chore(deps): update dependency electron to v43 by @​renovate[bot] in Brooooooklyn/canvas#1284
• chore(deps): update dependency oxlint-tsgolint to ^0.24.0 by @​renovate[bot] in Brooooooklyn/canvas#1283

... (truncated)

Changelog

Sourced from @​napi-rs/canvas's changelog.

1.0.8 (2026-08-24)

Bug Fixes

• capture call-time snapshot in async encode APIs (#1313) (#1323) (18c52bf)
• snapshot canvas source in drawImage to avoid per-call pixel copy (#1325) (d98574c)

1.0.7 (2026-08-18)

Bug Fixes

• putImageData no longer inherits transform/clip after getImageData (#1320) (8ed2b59)

Performance Improvements

• fast getImageData readback with runtime-dispatched SIMD unpremultiply (#1319) (196bff9)

1.0.6 (2026-08-13)

Bug Fixes

• keep skia surface alive during async encode (#1312) (#1314) (6be5aa2)

1.0.5 (2026-08-09)

Bug Fixes

• prefer raster signatures over SVG markers (#1310) (79c5d30)
• reject malformed raster images (#1311) (f471b85)

1.0.4 (2026-08-01)

Bug Fixes

• shadow: restore blur rendering performance (#1305) (4dddd0d)

1.0.3 (2026-07-28)

Bug Fixes

• deps: update rust crate imagesize to 0.15 (#1290) (2ad119e)
• deps: update rust crate infer to 0.22 (#1294) (dc3377f)
• shadow: align Canvas2D shadows with Chromium (#1300) (5646339)
• shadow: apply shadowColor alpha once instead of squaring it (#1298) (2cd4e1a), closes #1297

Features

... (truncated)

Commits

• 95db9ae 1.0.8
• d98574c fix: snapshot canvas source in drawImage to avoid per-call pixel copy (#1325)
• a7878df chore(deps): update rust to v1.98.0 (#1324)
• d651130 chore(deps): update dependency canvaskit-wasm to ^0.42.0 (#1322)
• dc8aef3 chore: preapporve canvaskit-wasm
• 18c52bf fix: capture call-time snapshot in async encode APIs (#1313) (#1323)
• 062130c 1.0.7
• 8ed2b59 fix: putImageData no longer inherits transform/clip after getImageData (#1320)
• 196bff9 perf: fast getImageData readback with runtime-dispatched SIMD unpremultiply (...
• 25ed3f2 1.0.6
• Additional commits viewable in compare view

Updates playwright from 1.61.1 to 1.62.1

Release notes

Sourced from playwright's releases.

v1.62.1

Bug Fixes

• #41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)
• #41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)
• #41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG
• #42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62
• #42013 [BUG]Image-type actionable elements are not presented in the snapshot.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
</tr></table>

... (truncated)

Commits

• 26a9e47 cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...
• 0a81d5d cherry-pick(#42040): docs(release-notes): mention the isolated headless clipb...
• 8376826 cherry-pick(#42034): fix(aria): keep icon-only clickable elements in ai snaps...
• 66c5cc9 chore: mark v1.62.1 (#42020)
• 9672bc3 cherry-pick(#42009): fix(types): support branded primitives in evaluate argum...
• 4325804 cherry-pick(#41988): fix(aria): preserve names from collapsed text contributors
• 9632f8e cherry-pick(#42005): fix(tsconfig): do not throw when "extends"/"references" ...
• e3950d9 chore: mark v1.62.0 (#41981)
• f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
• 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
• Additional commits viewable in compare view

Updates resedit from 2.0.3 to 3.1.0

Release notes

Sourced from resedit's releases.

v3.1.0

• Add MUI resource support via Mui namespace in the root namespace (e.g. ResEdit.Mui)

v3.0.2

• Update README only

v3.0.1

• Remove npm version from engines and 'engineStrict' for convenience

v3.0.0

• [Breaking changes] Drop older Node.js version (now ensures v20.19.5 or later)
• [Maybe breaking changes] Change following enum types to const object and type definition:
  • VersionFileFlags
  • VersionFileOS
  • VersionFileDriverSubtype
  • VersionFileFontSubtype
  • VersionFileType
• (development) Update devDependencies packages excluding typescript

Changelog

Sourced from resedit's changelog.

v3.1.0

• Add MUI resource support via Mui namespace in the root namespace (e.g. ResEdit.Mui)

v3.0.2

• Update README only

v3.0.1

• Remove npm version from engines and 'engineStrict' for convenience

v3.0.0

• [Breaking changes] Drop support for older Node.js version (now ensures v20.19.5 or later)
• [Maybe breaking changes] Change following enum types to const object and type definition:
  • VersionFileFlags
  • VersionFileOS
  • VersionFileDriverSubtype
  • VersionFileFontSubtype
  • VersionFileType
• (development) Update devDependencies packages excluding typescript

Commits

• d9a177e 3.1.0
• a9a5be9 Prepare for v3.1.0
• cec3dc7 Merge pull request #68 from jet2jet/feature/support_mui
• 98fd670 Add basic support for MUI resource
• 5116d31 Remove build status badge
• 4e71dc5 Push .tool-versions
• be4bc78 Update workflows
• d1ba8f6 Run npm audit fix
• a83efef Fix workflows for reducing risks
• 6f074ee Run npm audit fix
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for resedit since your current version.

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).
• fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

• npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

Commits

• 1e4744d Merge branch 'main' into ts7-release
• a5a219cmicrosoft/typescript-go#4558
• ecfe30d Update status localization
• 5de25b5 Hide executable name in TypeScript status
• d7ce74a Show bundled TypeScript version for packaged servers
• 29be66a Correct TS 7 release version to 7.0.2
• ed2bd1b Merge branch 'main' into ts7-release
• 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
• 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
• d4eaca5microsoft/typescript-go#4549
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vitest from 3.2.6 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

• runner: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by @​hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

    View changes on GitHub

... (truncated)

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
• db616d2 chore: release v4.1.10 (#10718)
• bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
• a7a61e7 chore: release v4.1.9 (#10598)
• 934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
• 7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
• a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
• e61f2dd chore: release v4.1.8
• e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
• Additional commits viewable in compare view

Updates @testing-library/jest-dom from 6.9.1 to 7.0.1

Release notes

Sourced from @​testing-library/jest-dom's releases.

v7.0.1

7.0.1 (2026-08-09)

Bug Fixes

• declare vitest as an optional peer dependency (#733) (3782c78)

v7.0.0

7.0.0 (2026-07-20)

Features

• add toContainAnyBy* and toContainOneBy* query matchers (1e39089)

BREAKING CHANGES

• @​testing-library/dom is now a required peer dependency. The minimum supported Node.js version is now 22.

Repaired release for testing-library/jest-dom#731

v6.10.0

6.10.0 (2026-07-20)

Features

• add toContainAnyBy* and toContainOneBy* query matchers (#731) (cae44df)

Commits

• 3782c78 fix: declare vitest as an optional peer dependency (#733)
• 1e39089 feat: add toContainAnyBy* and toContainOneBy* query matchers
• cae44df feat: add toContainAnyBy* and toContainOneBy* query matchers (#731)
• 55c07ce ci: switch release to npm trusted publishing (#726)
• 213256f docs: move toHaveSelection from the deprecated section (#717)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/jest-dom since your current version.

Updates @testing-library/react from 16.3.2 to 16.3.3

Release notes

Sourced from @​testing-library/react's releases.

v16.3.3

16.3.3 (2026-08-27)

Bug Fixes

• Avoid act() re-entrant when dispatching events (#1468) (20ce75f)

Commits

• 20ce75f fix: Avoid act() re-entrant when dispatching events (#1468)
• be9d81d docs: fix typos in comments and types (#1446)
• See full diff in compare view

Updates @types/node from 24.13.2 to 26.4.0

Commits

• See full diff in compare view

Updates electron from 43.4.0 to 44.0.0

Release notes

Sourced from electron's releases.

electron v44.0.0

Release Notes for v44.0.0

Stack Upgrades

• Chromium 152.0.7977.54
  • New in 152
  • New in 151
• Node v24.18.1
  • Node 24.18.1 blog post
  • Node 24.18.0 blog post
• V8 15.2

Breaking Changes

• Removed support for the Unity desktop environment on Linux. #51649
• Added select-client-certificate event support for net.request and net.fetch; requests to servers requesting a client certificate no longer fail with ERR_SSL_CLIENT_AUTH_CERT_NEEDED, and applications can now select a certificate to present. #52397
• macOS 12 (Monterey) is no longer supported by Chromium. Older versions of Electron will continue to run on Monterey, but macOS 13 (Ventura) or later will be required to run Electron v44.0.0 and higher. #51967
• ANGLE is now statically linked into the Electron binary on all platforms, matching upstream Chromium. The libEGL.(so|dylib|dll) and libGLESv2.(so|dylib|dll) libraries are no longer shipped in the distribution. #52288
• net.request now rejects requests where Sec-Fetch-Dest is document, frame, iframe, or fencedframe unless Sec-Fetch-Mode is also set to navigate. #52216
• Removed 32-bit builds (Windows ia32 and Linux armv7l). Electron is now published only for 64-bit (x64 and arm64) platforms. #52326
• The clipboard module is now aligned with the W3C Clipboard API and is no longer exposed to renderer processes. #52508
• Removed the openAsHidden option from app.setLoginItemSettings() and the openAsHidden, wasOpenedAsHidden and restoreState fields from the return value of app.getLoginItemSettings(). These only worked on macOS 12 and below, which are no longer supported. #52667

See the Breaking Changes doc for more details about these changes.

Features

• Added Notification.remove(), removeAll(), and removeGroup() static methods for macOS. #51182 (Also in 42, 43)
• Added available to process.getSystemMemoryInfo() on Linux, exposing proc/meminfo MemAvailable. #52380 (Also in 42, 43)
• Added net.WebSocket, a WHATWG-compatible WebSocket client for the main process that routes through Chromium's network stack. #51593 (Also in 42, 43)
• Added webContents.setZoomMode(mode), webContents.getZoomMode(), and webContents.zoomMode for per-WebContents zoom control. #49962
• Added webFrameMain.printToPDF() to allow printing individual frames to PDF from the main process. #52625 (Also in 42, 43)
• Added a Save/Restore Window State API for cross-platform use. #52270
• Added a badge property to MenuItem on macOS 14+ for showing a count or custom text badge next to a menu item's label. #53046
• Added support for win.setOpacity(opacity) on Linux. #51455
• Added webContents.caretBrowsingEnabled for toggling caret browsing in a WebContents. #53035
• Frameless windows on Linux now use system-themed titlebar icons for Window Controls Overlay (WCO). #52531
• Frameless windows on Linux now have rounded corners by default, just like on macOS and Windows. Rounded corners can be disabled on all platforms by setting roundedCorners: false on the window. #51459 (Also in 43)
• Restored app.setBadgeCount and win.setProgressBar for Linux. These APIs now support any dock or taskbar which implements the LauncherEntry D-Bus API, and they no longer require libunity. #52895

Fixes

• If a nativeImage was passed an image with a color profile, its pixel values will now be normalized to SRGB. This ensures that two visually identical images after color space application will receive similar pixel values when converted to a nativeImage. #48178 (Also in 43)
• Fixed DevTools Network panel missing most requests after navigating when webContents.debugger is attached. #51959 (Also in 42, 43)
• Fixed DevTools device metrics overrides persisting indefinitely when a remote debugging client disconnected without clearing them. #52930 (Also in 42, 43)
• Fixed DevTools popup and context menus not appearing when DevTools is hosted in a custom window via webContents.setDevToolsWebContents(). #52434 (Also in 42, 43)
• Fixed Window Controls Overlay caption buttons not rendering on Linux. #52580
• Fixed Windows edge case in NativeWindowViews::MoveBehindTaskBarIfNeeded(). #52000 (Also in 41, 42, 43)
• Fixed BrowserWindow.unmaximize() and restore() having no effect on Wayland when the window was maximized immediately after creation. #53124 (Also in 42)

... (truncated)

Commits

• bf0c4e6 perf: start the first sandboxed window in a pre-warmed renderer (#53144)
• b5ada5a build: update PGO profiles (#53150)
• 1736985 build: add electron_xcache host tool for cross-target V8 code caches (#53149)
• 20f8981 chore: bump chromium to 152.0.7977.54 (44-x-y) (#53049)
• c162f60 feat: add webContents.caretBrowsingEnabled (#53035)
• 98dedd2 fix: window stuck maximized on Wayland after early maximize() (#53124)
• c6f688f perf: boot every Node.js-hosting process from the Node snapshot / code cache ...
• e2ec8ff build: update PGO profiles (#53120)
• 476f0a0 fix: avoid creating webFrameMain for transient frames (#53109)
• 2fbb58a perf: trim GTK and FontConfig work off the linux startup path (#53107)
• Additional commits viewable in compare view

Updates esbuild from 0.28.1 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x
    bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scen...

  Description has been truncated