Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 10, 2025

This PR contains the following updates:

Package Change Age Confidence
deno (source) v2.4.2 -> 2.5.6 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

denoland/deno (deno)

v2.5.6

Compare Source

  • Revert "chore: update urlpattern (#​31054)" (#​31117)
  • fix(ext/node): implement StatementSync#columns() method (#​31119)
  • fix(windows): re-allow spawning bat and cmd files (#​31118)
  • fix(windows): strip periods and trailing slashes when normalizing paths
    (#​31131)

v2.5.5

Compare Source

  • feat(unstable): ability to exclude packages from minimum dependency age
    constraint (#​31031)
  • feat(unstable): ability to only install dependencies older than a certain date
    (#​30752)
  • feat(unstable): ability to specify minimum dependency age in deno.json file
    (#​31007)
  • feat(unstable): add deno audit subcommand (#​30966)
  • feat(unstable): add process id to permission broker messages (#​31050)
  • feat(unstable): dynamic command-line completions for deno task (#​30670)
  • feat(unstable): typescript-go integration for deno check (#​30920)
  • fix(audit): handle 'review' actions (#​31100)
  • fix(check): error when type checking after deduping packages (#​31049)
  • fix(check): fall back to copying tsgo binary if rename fails (#​31074)
  • fix(check): respect "compilerOptions.skipLibCheck" for graph errors (#​30989)
  • fix(check): support isolatedDeclarations (#​31061)
  • fix(check): support text and bytes imports with --unstable-tsgo (#​31084)
  • fix(cli/args): empty permissions in config should not require -P (#​31063)
  • fix(coverage): don't process coverage for blob: urls (#​31035)
  • fix(docs): Deno.args example doesn't work (#​30969)
  • fix(docs): documented allowed subdomain should be gist and not user for
    githubusercontent.com (#​30913)
  • fix(ext/http): display localhost url once on windows (#​31088)
  • fix(ext/http): make websocket response headers mutable (#​31000)
  • fix(ext/node): dns.resolve6 compatibility (#​30974)
  • fix(ext/node): fs.read/fs.readSync and fs.write/fs.writeSync compatibility
    (#​31013)
  • fix(ext/node): path.matchesGlob compatibility (#​30976)
  • fix(ext/node): checking Symbol in env should not ask for permission
    (#​30965)
  • fix(ext/node): cpus() should not error when there's no cpu info (#​31097)
  • fix(ext/node): false deprecation warning on crypto.createHmac (#​31025)
  • fix(ext/node): handle empty writes in chunked HTTP requests (#​31066)
  • fix(ext/node): handle multiple calls in inspector.Session.post() (#​31067)
  • fix(ext/node): impl sqlite 'backup' capability (#​29842)
  • fix(ext/node): implement FileHandle.readLines() (#​31107)
  • fix(ext/node): inconsistent error message thrown by AssertionError (#​31089)
  • fix(ext/node): make kReinitializeHandle work for TLS wrap (#​31079)
  • fix(ext/node): process.moduleLoadList as undefined (#​31022)
  • fix(ext/node): support option object parameter on fs.write and
    fs.writeSync (#​30999)
  • fix(ext/web): fix promise chain leak of ReadableStream (#​30871)
  • fix(fmt/json): support hexadecimal numbers, plus sign on numbers, and words
    with underscores (#​31057)
  • fix(kv): do not error when creating kv db with relative path and -A (#​31021)
  • fix(lockfile): purged package reqs should be removed from the jsr deps when
    changing workspace config (#​30998)
  • fix(lsp): add support for source.organizeImports (#​31016)
  • fix(lsp): refresh configuration when tsconfig.json is changed (#​30993)
  • fix(napi): Fix misused napi_callback_info in CallbackInfo (#​30983)
  • fix(npm): add a deduplication pass and reduce lockfile diffs (#​30973)
  • fix(npm): handle deno run/install of npm package with only directories.bin
    (#​30919)
  • fix(npm): occasional panic when upgrading npm package constraints (#​31006)
  • fix(npm): regression resolving npm bin for default when only one entry
    (#​31055)
  • fix(process): case insenstive check for disallowing .bat and .cmd (#​30967)
  • fix(rt): prevent Event to be overwritten on bootstrap (#​30971)
  • fix(unstable): read npm lazy caching from unstable config in deno.json as well
    (#​31026)
  • fix: Deno.serve correctly passes tcpBacklog option (#​30748)
  • fix: debug log for package.json being found was incorrect (#​31062)
  • fix: regex pattern syntax in config-file.v1.json (#​31038)
  • fix: show referrer range in deno_core loader errors (#​30981)

v2.5.4

Compare Source

  • fix(cache): don't try to set up node_modules with node_modules_dir manual in
    deno cache (#​30957)
  • fix(cli): jsx pragma-related swc panics (#​30935)
  • fix(ext/node): fs.cp and fs.cpSync compatibility (#​30502)
  • fix(ext/node): fs.stat and fs.statSync compatibility (#​30866)
  • fix(ext/node): avoid stack overflow in node:zlib's gunzip (#​30865)
  • fix(ext/node): fs.realpath buffer encoding (#​30885)
  • fix(ext/node): inspect X509Certificate class (#​30882)
  • fix(ext/node): map BadResource error to the corresponding node error (#​30926)
  • fix(ext/node): omit smi from zlib.crc32 op function (#​30907)
  • fix(tunnel): prevent auth subprocess loop with tasks (#​30896)
  • fix(tunnel): unhide --tunnel flag (#​30940)
  • fix(update): preserve tilde in version range (#​30946)
  • fix(webgpu): crash after isolate disposal (#​30909)
  • fix: use ArrayIsArray primordial (#​30927)

v2.5.3

Compare Source

  • feat(unstable): add permission broker (#​30826)
  • feat(unstable): permission broker - support custom error messages (#​30902)
  • feat(unstable): support named pipes on Windows for the permission broker
    (#​30894)
  • fix(check): do not error for unsupported URL schemes (#​30904)
  • fix(clean): do not panic on failure to get local cache path in clean --except
    (#​30895)
  • fix(cli/util): terminate watch file with sigint (#​30635)
  • fix(dts): update some GPU types to not cause errors in upcoming DOM type
    declarations (#​30893)
  • fix(ext/node): allow ATTACH DATABASE with --allow-all (#​30763)
  • fix(ext/node): setTimeout promisified to handle abort signal (#​30855)
  • fix(fs): improve file stat checks (#​30876)
  • fix(fs): improve file utime checks (#​30872)
  • fix(npm): do not error when packument version contains both bundleDependencies
    and bundledDependencies (#​30875)
  • fix(unstable/tunnel): rename --connected to --tunnel and better handle
    DENO_DEPLOY_TOKEN env variable (#​30786)
  • fix: add support for passing v8 flags on deno check (#​30868)
  • fix: do not purge lockfile when linking and the linked package's reqs have not
    changed (#​30877)
  • fix: show --permission-set help only once (#​30844)

v2.5.2

Compare Source

  • feat(lsp): describe/it test editor support (#​30802)
  • fix(bundle): reload html entrypoints with --watch (#​30790)
  • fix(check): support "compilerOptions.paths" (#​30766)
  • fix(cli/bundle): respect --frozen flag deno bundle command (#​30825)
  • fix(coverage): collect coverage data for workers (#​30807)
  • fix(dts): add Uint8Array base64/hex methods (#​30686)
  • fix(dts): update stream type declarations to use Promise<void> (#​30820)
  • fix(ext/node): fs.readFile, fs.readFileSync assert encoding (#​30830)
  • fix(ext/node): fs.statfsSync and fs.statfs compatibility (#​30662)
  • fix(ext/node): accept ArrayBuffer on crypto.timingSafeEqual (#​30773)
  • fix(ext/node): crypto Cipheriv and Decipheriv base64 encoding (#​30806)
  • fix(ext/ws): send User-Agent header in WS handshake (#​30758)
  • fix(fetch): handle proxied urls correctly and add test (#​30794)
  • fix(lint): skip module graph validation (#​30815)
  • fix(tunnel): make auth more robust (#​30731)
  • fix: add top level permissions key to config file schema (#​30765)
  • fix: reject running .bat and .cmd directly on windows (#​30818)
  • fix: restore Windows debug info (#​30778)
  • perf(lsp): don't watch node_modules files (#​30768)
  • perf: stack allocated v8 scopes (#​30827)
  • perf: support negative caching of package.json (#​30792)

v2.5.1

Compare Source

  • feat(unstable): support Deno.HttpClient in WebSocket (#​30692)
  • feat(unstable): tcp proxy for Deno.HttpClient (#​30700)
  • fix(bundle): set the type of the outputFile in the deno bundle to
    Uint8Array<ArrayBuffer> (#​30716)
  • fix(check): filter resolution errors for bare ambient modules (#​30690)
  • fix(ext/fetch): mark unix and vsock proxy conns as proxy (#​30699)
  • fix(ext/node): handle falsy values enumerability in process.env (#​30708)
  • fix(ext/node): implement fchmod on windows (#​30704)
  • fix(ext/node): make fs.glob accepts URL cwd (#​30705)
  • fix(ext/node): set default callback for fs.close (#​30720)
  • fix(ext/node): validate fs.close callback function (#​30679)
  • fix(ext/node): validate fs.read on empty buffer (#​30706)
  • fix(ext/node): validate readlink arguments (#​30691)
  • fix(ffi): check that fast calls are taken (#​30658)
  • fix(http): duplicate listener should inherit onError and signal (#​30680)
  • fix(init): regression where deno init --npm stopped working on mac (#​30730)
  • fix(lsp): don't write lockfile during cache-on-save (#​30733)
  • fix(node): reduce chance of module not found error due to missing copy package
    (#​30744)
  • fix(permissions): point to correct config file in error message in workspace
    containing permissions at root (#​30742)
  • fix: Add info/hint for unstable Deno.bundle API (#​30682)

v2.5.0

Compare Source

Read more: http://deno.com/blog/v2.5

  • feat(BREAKING/fmt): prompt or require deno fmt . when providing no files and
    no config files discovered (#​30623)
  • feat(bundle): runtime API for deno bundle (#​29949)
  • feat(bundle): support html entrypoint (#​29856)
  • feat(cli): reload environment variables with --watch and --env-file
    (#​30197)
  • feat(ext/fetch): Parse unix socket and vsock proxies from env var (#​30377)
  • feat(ext/node): add sqlite-type symbol for DatabaseSync (#​30511)
  • feat(ext/process): add collector utilities to ChildProcess.stdout &
    ChildProcess.stderr (#​30552)
  • feat(fmt): apply object spacing to import/export lines (#​30371)
  • feat(install): refresh install report (#​30615)
  • feat(install): update warning for npm package build scripts (#​30527)
  • feat(lint): no-import-prefix workspace rule (#​30598)
  • feat(lint): no-unversioned-import rule (#​30609)
  • feat(node): implement async hooks for nextTick TickObject tracking (#​30578)
  • feat(npm): support bundleDependencies in npm dependencies (#​30521)
  • feat(test): Add setup and teardown APIs to Deno.test API (#​30504)
  • feat(unstable): WebSocket headers field (#​30321)
  • feat(unstable): use Node.js setTimeout and setInterval (#​29993)
  • feat: TypeScript 5.9.2 (#​30601)
  • feat: V8 14.0.0 (#​30629)
  • feat: deno run with no arguments prints list of available tasks (#​30592)
  • feat: add tcpBacklog arg to Deno.listen{Tls} and Deno.serve (#​30541)
  • feat: allow disable hostname verification in TLS (#​30409)
  • feat: permission audit log (#​30575)
  • feat: permissions in the config file (#​30330)
  • fix(bundle): avoid cloning parsed source, restore owned transpile assertion
    (#​30624)
  • fix(bundle): do not error on fallible dynamic imports/requires (#​30522)
  • fix(bundle): don't error when using npm package without bin as entrypoint
    (#​30523)
  • fix(bundle): properly display error on invalid config in watch mode (#​30621)
  • fix(cache): cache and uninstall are package manager subcommands (#​30613)
  • fix(check): don't ignore ambient declarations for existent files (#​30591)
  • fix(check): support "compilerOptions.rootDirs" in tsconfig (#​30495)
  • fix(check): support "moduleResolution": "bundler" in compiler options (#​30603)
  • fix(cli): support data urls in preload by not splitting on comma. (#​30544)
  • fix(cli/run): resolve conflict when dir has same name as a task (#​29538)
  • fix(dts): align crypto.getRandomValues in lib.deno_crypto.d.ts with
    lib.dom.d.ts and lib.webworker.d.ts (#​30647)
  • fix(dts): specify the underlying buffer type in more places (#​30640)
  • fix(ext/fetch): only uppercase known methods (#​30290)
  • fix(ext/node): Readable adapter cancel semantics (#​30526)
  • fix(ext/node): crypto.hkdfSync returns wrong result for non-Uint8Array
    TypedArray inputs (#​30463)
  • fix(ext/node): fs.exists and fs.existsSync compatibility (#​30507)
  • fix(ext/node): fs.mkdtemp and fs.mkdtempSync compatibility (#​30602)
  • fix(ext/node): fs.path' makelong and resolve compatibility (#​30503)
  • fix(ext/node): fix hang induced by maxSockets bounds (#​30622)
  • fix(ext/node): fs.symlink and fs.symlinkSync compatibility (#​30555)
  • fix(ext/node): handle null keypair in tls connect (#​30516)
  • fix(ext/node): http.server.listen to handle signal option (#​30515)
  • fix(ext/node): ignore Node.js' --experimental-* flags when spawning child
    process (#​26351)
  • fix(ext/node): implement http.res.setHeaders (#​30586)
  • fix(ext/node): path.normalize compatibility (#​30537)
  • fix(ext/node): path.relative compatibility (#​30566)
  • fix(ext/node): readline line separators (#​30630)
  • fix(ext/node): set socket.authorized to true for https request (#​30641)
  • fix(ext/node): support JS underlying stream in TLS (#​30465)
  • fix(ext/webgpu): add illegal constructor errors (#​30500)
  • fix(init): eliminate flickering progress bar (#​30496)
  • fix(init): use temp node_modules folders for deno init --npm ... (#​30492)
  • fix(install): don't try to re-symlink binaries in node_modules if the symlink
    is correct (#​30546)
  • fix(install): force refresh if cannot find version (#​30483)
  • fix(install): print install report on add, cache, and all install
    variants, move scripts and deprecation warnings after the report (#​30549)
  • fix(install/cache): better discovery for config file based on entrypoint
    (#​30608)
  • fix(lsp): auto-import dep entries from workspace member import maps (#​30667)
  • fix(lsp): goto-type-definition for builtin on startup (#​30499)
  • fix(lsp): import rewrites in moved file (#​30628)
  • fix(napi): buffer finalizer is nullable (#​30514)
  • fix(node): improve directory import error suggestion (#​30619)
  • fix(node): regression where Node fs APIs required elevated permissions on
    Windows (#​30535)
  • fix(node_resolver): incorrect resolution of require("..") (#​30524)
  • fix(npm): do not error on failure to write warned script file (#​30479)
  • fix(publish): unfurl import.meta.resolve calls (#​30663)
  • fix(tests): Switch from --nocapture to --no-capture (#​30638)
  • fix(types): specify ArrayBuffer as a backing buffer type for Response.body
    and Response.bytes (#​30435)
  • fix(types): specify ArrayBuffer as a backing buffer type for
    TextEncoder.encode() (#​30434)
  • fix(unstable): make QuicListener yield QuicIncoming (#​30150)
  • fix(unstable): support unstable-raw-imports when prewarmed (#​30530)
  • fix: add another space after warning symbol (#​30482)
  • fix: do not have duplicate progress bars for post install scripts (#​30489)
  • fix: pass npm process state when spawning script in npm package via Node APIs
    (#​30490)
  • fix: upgrade to swc_ecma_parser 23 (#​30564)

v2.4.4

Compare Source

  • feat(unstable): add json repl (#​30307)
  • feat(unstable): allow setting headers on EventSource (#​30278)
  • feat(unstable): allow specifying default path and path prefix (#​30320)
  • feat(unstable): implement custom inspect for AtomicOperation (#​30077)
  • fix(bundle): require of sub directory in npm package should consult
    package.json (#​30253)
  • fix(bundle): support importing directories with a package.json from an es
    module when bundling (#​30273)
  • fix(bundle): use non-node conditions for --platform=browser (#​30250)
  • fix(check): do not surface code resolution errors in declaration file
    dependencies (#​30296)
  • fix(compile): ensure Deno.build.standalone is set in workers (#​30335)
  • fix(ext/node): fs.open and fs.openSync compatibility (#​30191)
  • fix(ext/node): fs.rename and fs.renameSync compatibility (#​30245)
  • fix(ext/node): fs.unlink and fs.unlinkSync compatibility (#​30257)
  • fix(ext/node): accept base64url encoding on StringDecoder (#​30366)
  • fix(ext/node): assign 'ERR_BUFFER_TOO_LARGE' to codes (#​30311)
  • fix(ext/node): avoid panic when crypto.randomInt has no arguments (#​30314)
  • fix(ext/node): define fs constants correctly across platforms (#​30113)
  • fix(ext/node): fs readv promisify compatibility (#​30149)
  • fix(ext/node): handle large buffer correctly (#​30369)
  • fix(ext/node): incorrect ERR_INVALID_ARG_VALUE constructor arguments
    position (#​30309)
  • fix(ext/node): make some os exported properties read only (#​30374)
  • fix(ext/node): parse fs open options correctly (#​30300)
  • fix(ext/node): support TLS for unix sockets (#​30169)
  • fix(ext/node): use custom allocator for brotli (#​30277)
  • fix(ext/node): use primordials in
    ext/node/polyfills/internal_binding/buffer.ts (#​30287)
  • fix(ext/node): use primordials in
    ext/node/polyfills/internal_binding/node_file.ts (#​30066)
  • fix(ext/node): worker_threads handles basic require calls (#​30279)
  • fix(io): do not autoClose stdin readable stream (#​30345)
  • fix(lsp): use referrer compiler options for node_modules files (#​30275)
  • fix(publish): remove incorrect relative-package-import diagnostic when root
    of workspace is package (#​30333)
  • fix(unstable): lint node properties should be enumerable (#​30391)
  • fix(unstable): update deno_tunnel for better reconnect errors (#​30381)
  • fix(update): update version reqs even if locked to latest version (#​30249)
  • fix: android build (#​30360)
  • fix: improve handling of linked jsr packages in lockfile (#​30289)
  • fix: make unmet peer dep error message less verbose (#​30312)
  • fix: reduce progress bar flickering (#​30349)
  • fix: upgrade @​node/types to 24 (#​30343)
  • fix: upgrade deno_core to 0.355.0 (#​30352)
  • perf(napi): misc napi optimizations (#​30291)
  • perf: use more efficient structuredClone API (#​30258)
  • perf: reduce heap allocations and memory creating cjs wrapper module (#​30344)

v2.4.3

Compare Source

  • feat(unstable): add useful metadata to tunnel (#​30161)
  • fix(bundle): don't force managed npm resolution (#​30200)
  • fix(check): ensure module not found errors are surfaced (#​30181)
  • fix(compile): do not error including npm packages that don't match current
    system (#​30188)
  • fix(compile): do not include managed npm deps when graph does not have any npm
    pkgs (#​30189)
  • fix(ext/node): fs.read and fs.write promisify compatibility (#​30152)
  • fix(ext/node): add process._rawDebug (#​30141)
  • fix(ext/node): fix segmentation fault when spkac is empty (#​30207)
  • fix(ext/node): implement TLSSocket.getPeerCertificate (#​30146)
  • fix(ext/node): implement tls.checkServerIdentitiy (#​30148)
  • fix(ext/node): use Zlib base for brotli handles (#​30112)
  • fix(ext/node): use primordials in
    ext/node/polyfills/internal_binding/_listen.ts (#​30100)
  • fix(ext/node): use primordials in
    ext/node/polyfills/internal_binding/pipe_wrap.ts (#​30241)
  • fix(ext/node): validate fd is integer on fsync and fdatasync (#​30215)
  • fix(http): catch more tunnel close errors (#​30236)
  • fix(lib/node): change ERR_INVALID_PACKAGE_TARGET to
    ERR_PACKAGE_PATH_NOT_EXPORTED when no package.json#exports condition matches
    (#​29841)
  • fix(lsp): do not error for bytes or text import of json module (#​30137)
  • fix(lsp): improve renaming a file with bytes or text imports (#​30142)
  • fix(publish): improve diagnostic when importing from another package using a
    relative import (#​30203)
  • fix(regression): do not error when specifying --config flag with ../
    component (#​30208)
  • fix(task): --recursive - order tasks by package dependencies (#​30129)
  • fix(task): improve parsing of quotes in command substitution (#​30162)
  • fix(task): show package name of task when --recursive (#​30136)
  • fix(tsconfig): don't use tsc-compatible defaults for deno.json compiler
    options (#​30242)
  • fix: do not panic deserializing config with invalid number value (#​30171)
  • fix: don't invoke Proxy getter trap on console.log (#​30230)
  • fix: ensure coverage dir is stored absolute to prevent issues when cwd changes
    (#​30225)
  • fix: reduce change of corrupt lockfile error when updating dependencies in the
    config file (#​30239)
  • fix: support package.json imports in a Deno workspace (#​30198)
  • fix: tunnels in processes that don't listen (#​30178)
  • fix: update setTimeout and setInterval callback type to support strin…
    (#​30183)
  • fix: use 'deno_signals' crate for signal handling (#​30204)
  • perf(buffer): optimize Buffer.subarray and Buffer.prototype.utf8Slice (#​30213)

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Nov 10, 2025
@renovate renovate bot requested a review from a team as a code owner November 10, 2025 03:36
@renovate renovate bot enabled auto-merge (squash) November 10, 2025 03:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant