kestrelos

v1.1.12 b8d4ab7b48

v1.1.12 Stable

Keli Grubb released this 2026-08-23 17:25:46 +00:00 | 0 commits to main since this release

Changelog

Changed

update all non-major dependencies (#47)

This PR contains the following updates:

Package	Change	Age	Confidence
@vitest/coverage-v8 (source)	`4.1.10` → `4.1.11`
fast-xml-parser	`5.10.1` → `5.11.0`
happy-dom	`20.11.2` → `20.11.6`
hls.js	`1.7.0` → `1.7.1`
mediasoup (source)	`3.24.2` → `3.26.0`
openid-client	`6.8.5` → `6.8.7`
vitest (source)	`4.1.10` → `4.1.11`

Release Notes

vitest-dev/vitest (@vitest/coverage-v8)

`v4.1.11`

Compare Source

🐞 Bug Fixes

Revive global concurrency limit for test lifecycle [backport to v4] - by @sheremet-va and @hi-ogawa in #10992 (5146d)
browser:
- Encode iframeId in tester iframe URL [backport to v4] - by @sheremet-va, Pduhard and Claude Opus 4.8 in #10955 (10b2c)
- Trigger playwright/chromium gc on lower disk availability [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode in #10951 (9851d)
mocker:
- Restrict redirect mocks to the fs allowlist [backport to v4] - by @sheremet-va in #10974 (fe5a1)

View changes on GitHub

NaturalIntelligence/fast-xml-parser (fast-xml-parser)

`v5.11.0`

Compare Source

What's Changed

add support for endIndex in node metadata (5.x edition) by @Wain-PC in #850
fix: don't crash on a closing tag with no matching opening tag by @hdimer in #861

New Contributors

@Wain-PC made their first contribution in #850
@hdimer made their first contribution in #861

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.10.1...v5.11.0

capricorn86/happy-dom (happy-dom)

`v20.11.6`

Compare Source

👷‍♂️ Patch fixes

Updates docs for the global-registrator package - By @capricorn86 in task #2300

`v20.11.5`

Compare Source

👷‍♂️ Patch fixes

Allow explicit element types for querySelector (e.g. querySelector<HTMLInputElement>(".my-input")) - By @cyphercodes

`v20.11.4`

Compare Source

👷‍♂️ Patch fixes

Fixes the CORS check fetch() to match origins instead of host and protocol - By @rexxars in task #1490

`v20.11.3`

Compare Source

👷‍♂️ Patch fixes

Make document.links return a live HTMLCollection - By @bangseongbeom in task #2299
Copy labels array to prevent mutation of cached querySelectorAll result - By @mixelburg in task #2226

video-dev/hls.js (hls.js)

Summary

HLS.js v1.7.1 includes bug fixes and improvements over the previous release.

Changes Since The Last Release

Fix Interstitial snap-out at live edge and BUFFER_APPEND_NO_PROGRESS false positives (#7979) @robwalch
Workaround issue where ManagedMediaSource does not emit "startstreaming" when seeking (#7984)
Fix permanent stall loading fragment-hint parts of encrypted low-latency streams (#7976) @zaki699-blip
Document decode timebase change in MIGRATING (#7986) @robwalch

Demo Page

https://26ea065a.hls-js-dev.pages.dev/demo/

API and Breaking Changes

No public exports were removed and no runtime behavior changes are required to upgrade from v1.6 to v1.7. TypeScript consumers might see new compile errors where previously loose types have been narrowed. Each is listed with upgrade guidance in the migration guide:
https://github.com/video-dev/hls.js/blob/v1.7.0/MIGRATING.md#migrating-from-hlsjs-16-to-17

Some exported type dependencies ("eventemitter3", "@svta/cml-cmcd", "@svta/cml-utils", "@svta/cml-structured-field-values") have not been bundled with hls.d.ts. Please file an issue if this is blocking you from upgrading.

Feedback

Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.

versatica/mediasoup (mediasoup)

`v3.26.0`

Compare Source

Breaking change: Simulcast and SVC: Limit temporal layer to the preferred one (PR #1892).

`v3.25.0`

Compare Source

Worker: Fix undefined behavior in RtpStreamRecv::UpdateScore() when no packets were received (PR #1886).
SCTP: Fix SackChunk::GetValidatedGapAckBlocks() returning a bogus gap-ack-block (PR #1891).
Do not make generated RTCP Sender Reports depend on RTP packet arrival time (issue #1881):
- RemoteClockOffsetEstimator class (PR #1882).
- Prepare RtpStream classes for capture time based RTCP Sender Reports (PR #1883, PR #1888).
- RemoteCaptureTimeEstimator class (PR #1884).
- Estimate the capture instant of each received RTP packet (PR #1885).
- Generate RTCP Sender Reports based on the capture instant of the media rather than on the packet arrival time (PR #1887).
- SimulcastProducerStreamManager: Apply new capture time logic and fix 'abs-capture-time' rewriting (PR #1889).

panva/openid-client (openid-client)

`v6.8.7`

Compare Source

Fixes

allow destructuring the claims helper (38bd8c0), references #887

`v6.8.6`

Compare Source

Fixes

avoid undefined user-agent in fetchProtectedResource (492c3c3), references #885

If you want to rebase/retry this PR, check this box

Installation

Downloads

v1.1.11 068f82c0ff

v1.1.11 Stable

Keli Grubb released this 2026-08-19 02:11:32 +00:00 | 2 commits to main since this release

Changelog

Changed

remove unused broadcastToSession export (#45)

Removed

broadcastToSession from server/plugins/websocket.js — an exported but never-imported, never-called dead-code function. Its dependencies (getSessionConnections, addSessionConnection, removeSessionConnection) are retained since they remain actively used for per-session connection tracking within the plugin.

Notes

Full repository search confirms zero remaining references to broadcastToSession.
ESLint passes; full test suite passes (50 files, 406 tests).

Closes #40

Installation

Downloads

v1.1.10 be95b6864b

v1.1.10 Stable

Keli Grubb released this 2026-08-14 22:27:50 +00:00 | 4 commits to main since this release

Changelog

Changed

update dependencies and fix security vulnerabilities (#44)

Summary

Updates all out-of-date dependencies and applies npm audit fix to resolve 14 security vulnerabilities (3 critical, 8 high).

Dependency Updates

Package	Current → Latest
`nuxt`	4.4.8 → 4.5.2
`mediasoup`	3.20.9 → 3.24.2
`mediasoup-client`	3.21.0 → 3.22.0
`hls.js`	1.6.16 → 1.7.0
`vue`	3.5.38 → 3.5.41
`vue-router`	5.1.0 → 5.2.0
`@nuxt/icon`	2.2.3 → 2.5.0
`eslint`	10.5.0 → 10.8.1
`vitest` / `@vitest/coverage-v8`	4.1.9 → 4.1.10
`ws`	8.21.0 → 8.21.3
`openid-client`	6.8.4 → 6.8.5
`fast-xml-parser`	5.9.3 → 5.10.1
`happy-dom`	20.10.6 → 20.11.2
`@playwright/test`	1.61.1 → 1.62.1
`@nuxt/eslint`	1.16.0 → 1.17.0
`@nuxt/test-utils`	4.0.3 → 4.1.0
`@iconify-json/tabler`	1.2.35 → 1.2.38

Security Audit Fixes (`npm audit fix`)

@nuxt/devtools (critical): Unauthenticated DevTools RPC allows arbitrary command execution on the developer's host
tar (critical): Multiple process-crash/DoS vulnerabilities via crafted tar archives
esbuild (high): Arbitrary file read when running dev server on Windows
brace-expansion (high): Multiple DoS vectors (memory exhaustion, process hang)
flatted (high): Prototype pollution via parse()
svgo (high): removeScripts plugin leaves executable scripts intact

Verification

All 406 tests pass (3 skipped)
Lint clean (eslint . --max-warnings 0)
npm audit reports 0 vulnerabilities

Installation

Downloads

v1.1.9 88e520aa59

v1.1.9 Stable

Keli Grubb released this 2026-08-13 17:14:52 +00:00 | 6 commits to main since this release

Changelog

Changed

update dependency fast-xml-parser to v5.10.1 [security] (#42)

This PR contains the following updates:

Package	Change	Age	Confidence
fast-xml-parser	`5.9.3` → `5.10.1`

fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

GHSA-8r6m-32jq-jx6q

More information

Details

Impact

fast-xml-parser processes multiple "DOCTYPE" declarations within a single XML document. Each declaration passes its entities to @nodable/entities through addInputEntities().

addInputEntities() resets the entity expansion counters every time it is called. An attacker can therefore insert additional DOCTYPE declarations to repeatedly reset maxTotalExpansions and maxExpandedLength during one parse operation.

This allows a crafted XML document to exceed the configured entity-expansion limits and can cause excessive CPU use, event-loop blocking, memory exhaustion, and process termination.

Workarounds

Manually check if multiple DOCTYPEs are not present in input contents
Update to v5.10.1
Keep processEntity flag off

Severity

CVSS Score: 8.7 / 10 (High)
Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Release Notes

NaturalIntelligence/fast-xml-parser (fast-xml-parser)

`v5.10.1`

Compare Source

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.10.0...v5.10.1

`v5.10.0`

Compare Source

What's Changed

Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #849
Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #848

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.3...v5.10.0

If you want to rebase/retry this PR, check this box

Installation

Downloads

v1.1.8 6fae069dec

v1.1.8 Stable

Keli Grubb released this 2026-08-13 14:34:14 +00:00 | 8 commits to main since this release

Changelog

Changed

update https://git.keligrubb.com/actions/setup-node action to v7 (#38)

This PR contains the following updates:

Package	Type	Update	Change
https://git.keligrubb.com/actions/setup-node	action	major	`v6` → `v7`

If you want to rebase/retry this PR, check this box

Installation

Downloads

v1.1.7 4d835a4f82

v1.1.7 Stable

Keli Grubb released this 2026-08-13 14:24:18 +00:00 | 10 commits to main since this release

Changelog

Changed

update dependency supercluster to v9 (#41)

This PR contains the following updates:

Package	Change	Age	Confidence
supercluster	`^8.0.1` → `^9.0.0`

Release Notes

mapbox/supercluster (supercluster)

`v9.0.0`

Compare Source

Radically optimize memory footprint and performance — on a sample 1M points index, Supercluster now uses 94% less transient allocation, 57% lower peak heap, 65% less retained memory, and runs 23% faster. #258
Improve internal coordinate precision by 6 bits (64 times).
⚠️ Breaking: hard-cap maxZoom at 30 (it wasn't practical to use it on higher zooms anyway).
Add support for MultiPoint features. #263

If you want to rebase/retry this PR, check this box

Installation

Downloads

v1.1.6 cebeee4040

v1.1.6 Stable

Keli Grubb released this 2026-06-24 20:55:04 +00:00 | 12 commits to main since this release

Changelog

Changed

Add ADS-B, AIS, and ALPR map layers with live CoT streaming (#36)

Summary

ADS-B & AIS: OpenSky and AISStream OSINT feeds upsert into the CoT store; tactical tracks still arrive via adsbcot/aiscot on :8089. Map clients subscribe via GET /api/cot/stream (SSE) with viewport bbox filtering and Air / Surface / Team layer toggles.
ALPR (Flock/OSM): Toggleable license-plate reader layer sourced from OpenStreetMap, with SQLite cache, Overpass fallback, tiled viewport fetching, and clustered markers with direction cones.
Map performance: Ring-based tile selection (fixes zoom-out crash), immutable tile cache, incremental marker sync, split cluster load/query, and padded SSE bbox to reduce reconnect churn.

Docs

docs/tracking.md — ADS-B/AIS accuracy tiers, freshness, self-hosted receivers, optional OSINT API keys
docs/map-and-cameras.md — ALPR layer and map behavior updates

Installation

Downloads

v1.1.5 a6b87305a1

v1.1.5 Stable

Keli Grubb released this 2026-06-21 04:26:35 +00:00 | 14 commits to main since this release

Changelog

Changed

update https://git.keligrubb.com/actions/checkout action to v7 (#35)

This PR contains the following updates:

Package	Type	Update	Change
https://git.keligrubb.com/actions/checkout	action	major	`v6` → `v7`

Release Notes

actions/checkout (https://git.keligrubb.com/actions/checkout)

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

If you want to rebase/retry this PR, check this box

Installation

Downloads

v1.1.4 2a48715ea8

v1.1.4 Stable

Keli Grubb released this 2026-04-29 20:24:17 +00:00 | 17 commits to main since this release

Changelog

Changed

update all non-major dependencies (#31)

This PR contains the following updates:

Package	Change	Age	Confidence
@vitest/coverage-v8 (source)	`4.1.4` → `4.1.5`
@vue/test-utils	`2.4.6` → `2.4.8`
eslint (source)	`10.2.0` → `10.2.1`
fast-xml-parser	`5.6.0` → `5.7.2`
mediasoup (source)	`3.19.19` → `3.19.21`
mediasoup-client (source)	`3.18.8` → `3.19.0`
vitest (source)	`4.1.4` → `4.1.5`
vue (source)	`3.5.32` → `3.5.33`
vue-router (source)	`5.0.4` → `5.0.6`

Release Notes

vitest-dev/vitest (@vitest/coverage-v8)

`v4.1.5`

Compare Source

🚀 Experimental Features

coverage: Istanbul to support instrumenter option - by @BartWaardenburg and @AriPerkkio in #10119 (0e0ff)

🐞 Bug Fixes

--project negation excludes browser instances - by @felamaslen in #10131 (9423d)
Project color label on html reporter - by @hi-ogawa in #10142 (596f7)
Fix vi.defineHelper called as object method - by @hi-ogawa in #10163 (122c2)
Alias agent reporter to minimal - by @sheremet-va in #10157 (663b9)
Respect diff config options in soft assertions - by @Copilot, sheremet-va and @sheremet-va in #8696 (9787d)
Respect diff config options in soft assertions " - by @sheremet-va in #8696 (7dc6d)
ast-collect: Recognize _vi_import prefix in static test discovery - by @Yejneshwar in #10129 (32546)
coverage: Descriptive error message when reports directory is removed during test run - by @DaveT1991 and @AriPerkkio in #10117 (14133)
snapshot: Increase default snapshot max output length - by @hi-ogawa and Codex in #10150 (21e66)
ui: Fix jsx/tsx syntax highlight - by @hi-ogawa in #10152 (f1b1f)
web-worker: Support MessagePort objects referenced inside postMessage data - by @whitphx and Claude Opus 4.6 (1M context) in #9927 and #10124 (7ad7d)
api: Make test-specification options writable - by @sheremet-va in #10154 (6abd5)

View changes on GitHub

vuejs/test-utils (@vue/test-utils)

`v2.4.8`

Compare Source

compare changes

🩹 Fixes

Correct declaration entrypoint (#2826)

🤖 CI

Enable pkg.pr.new (#2827)

❤️ Contributors

Cédric Exbrayat (@cexbrayat)
Daniel Roe (@danielroe)

`v2.4.7`

Compare Source

compare changes

🚀 Enhancements

Add Chinese docs translation (#2552)
SetData()/shallowMount with initialData for components using the Composition API / <script setup> (#2655)

🩹 Fixes

Preserve code from keyboard events (#2434)
Switch browser and require exports definitions (#2501)
Re-add peer dependencies but with wider range (#2511)
Resolve warnings in docs:dev (30b7491)
Resolve TypeScript type errors in .vitepress/config (#2549)
Accept FunctionalComponent as selector (0bb947f)
Text() misses content for array functional component (#2579)
Use await in test (c5482b4)
deps: Update dependency vue-component-type-helpers to v3 (#2683)
Remove wrapper div when unmount (#2700)
Make mount options slots compatible with noUncheckedIndexedAccess true (#2713)
Add missing peerDependency @vue/compiler-dom (75801ba)
docs: Declare css module for vitepress typecheck (ddaca97)

💅 Refactors

Enforce consistent usage of type imports (#2734)

📖 Documentation

Clarify findComponent vs getComponent (#2435)
Update fr docs (67064ef)
Add note about partial transition stub support (#2431)
Fix missing data at passing data section essentials guide (dda205e)
Fix missing data at passing data section essentials guide fr (ae2c72c)
Fix plugin TS declaration example (#2466)
Fixed incorrect checkbox value check (#2495)
Capital letter in sentence fix (#2499)
Import missing DOMWrapper on Implementation of the plugin section (#2519)
Add migration step for deprecated ref syntax in findAllComponents (#2498)
Correct anchor hash links and fix typo (#2551)
Center logo on home (#2559)
zh-cn: Review a-crash-course (#2563)
Use code-group for install commands (#2571)
zh-cn: Review event-handing.md (#2572)
zh-cn: Enhance conditional-rendering.md (#2562)
zh-cn: Review easy-to-test (#2567)
zh-cn: Review passing-data.md (#2575)
zh-cn: Review async-suspense.md (#2576)
zh: 优化 API 文档格式和内容 (#2569)
zh: 更新 Vitest 模拟日期和计时器的说明 (#2578)
zh-cn: Review http-requests.md (#2580)
zh-cn: Review forms (#2582)
zh-cn: Guide/advanced/slots.md (#2565)
zh: Review extending-vtu (#2583)
zh: Review index (#2584)
Fix modelValue test example (85bfdf4)
Removes broken link from plugins.md (69bc1ce)
zh: Review transitions, component-instance, and reusability-composition (#2616)
zh: Review v-model and vuex (#2617)
zh: Review all the rest advanced guide (#2619)
zh: Review migration (#2623)
Fix a typo in transitions.md (#2635)
Update crash-course to script setup (c81aa79)
Update Essentials section to setup (composition api) (#2647)
Typos in examples (#2678)
Typo in easy-to-test.md (#2710)
Add note about mocking requestAnimationFrame for transitions (2324c65)
Updated example TodoApp to script setup (#2727)
Remove "Using data" section from "Conditional Rendering" guide and fix passing data test example (#2743)
Follow-up fixes for the conditional rendering guide (#2744)
Mention shallowMount stub name changes in migration guide (80e051a)
Update conditional rendering documentation to clarify isVisible() usage with attachTo (#2799)
Restore Options API component for data() mounting example (#2804)
Promote Vitest as recommended test runner (#2805)
api: Note that setValue does not accept objects on <select> (#2819)

🏡 Chore

Add api/index.md to docs:translation:compare (6b8681c)
Remove unnecessary generic arguments (cfd70c6)
Ignore TS error in config object (9d0a618)
Simplify eslint packages (c1d0ffd)
Use eslint v9 with flat config (2f19fdf)
Expose Stubs type publicly (#2492)
Update documentation file path (9c96594)
Use pnpm v10 (e4c2cb3)
Pnpm approve build (81c54e9)
Use github issue forms (#2673)
Exclude class components from test type-checking (0899008)
Add explicit coverage include for vitest v4 (51672b9)
Update to prettier v3.7 (fed9e7c)
Migrate to oxfmt (81c1de9)
Migrate to oxlint (a361908)
Prepare TypeScript 6 migration settings (55e1262)
Adjust tsd config for TypeScript 6 (7d23eb5)
Avoid TypeScript 6 target deprecation warning (81d063c)

🤖 CI

Remove node v22 build (7ebf58d)
Add node v22 build (57540ee)
Use "pool: threads" instead of vmThreads (d0cbb54)
Remove node v18 and add v24 (fd9cf95)
Add trusted publishing release workflow (#2825)

❤️ Contributors

Lachlan Miller (@lmiller1990)
cexbrayat (@cexbrayat)
Nicolas Bonamy (@nbonamy)
KatWorkGit (@KatWorkGit)
Wouter Kroes (@wouterkroes)
Rama Muhammad Murshal (@ramammurshal)
Evan You (@yyx990803)
Vlad Starkovsky (@starkovsky)
Joe (@joaoprp)
Priyadarshi Kumar (@Psingh132)
Sébastien Ronveaux (@sronveaux)
Gilliam (@Gi11i4m)
Baranov Dmytro (@dimas7001)
BrendonHenrique (@BrendonHenrique)
Lorenz van Herwaarden (@lorenzvanherwaarden)
wuzhiqing (@DDDDD12138)
阿菜 Cai (@RSS1102)
Jinjiang (@Jinjiang)
Kylin (@lxKylin)
Qianhe Chen (@chenqianhe)
时瑶 (@KiritaniAyaka)
h7ml (@h7ml)
Nicander (@Nicander93)
Take-John (@takejohn)
ilyasherstoboev (@ilyasherstoboev)
aimerie (@aimerie)
Miguel Rincon (@miguelrincon)
bcastlel (@bcastlel)
Claudiu (@sofuxro)
Artem Dragunov (@dragunovartem99)
Robin (@OrbisK)
Koen Mertens (@KCMertens)
meomking (@CaptainWang98)
Pepijn Olivier (@pepijnolivier)
Tomina (@Thomaash)
Gareth Jones (@G-Rath)
Jerry Hogan (@hdJerry)
Marco Pasqualetti (@marcalexiei)
guoxk (@guoxk-me)
kimulaco (@kimulaco)
Erwan IQUEL (@Olympus5)
Matt Van Horn (@mvanhorn)
Daniel Roe (@danielroe)

eslint/eslint (eslint)

`v10.2.1`

Compare Source

Bug Fixes

14be92b fix: model generator yield resumption paths in code path analysis (#20665) (sethamus)
84a19d2 fix: no-async-promise-executor false positives for shadowed Promise (#20740) (xbinaryx)
af764af fix: clarify language and processor validation errors (#20729) (Pixel998)
e251b89 fix: update eslint (#20715) (renovate[bot])

Documentation

ca92ca0 docs: reuse markdown-it instance for markdown filter (#20768) (Amaresh S M)
57d2ee2 docs: Enable Eleventy incremental mode for watch (#20767) (Amaresh S M)
c1621b9 docs: fix typos in code-path-analyzer.js (#20700) (Ayush Shukla)
1418d52 docs: Update README (GitHub Actions Bot)
39771e6 docs: Update README (GitHub Actions Bot)
71e0469 docs: fix incomplete JSDoc param description in no-shadow rule (#20728) (kuldeep kumar)
22119ce docs: clarify scope of for-direction rule with dead code examples (#20723) (Amaresh S M)
8f3fb77 docs: document meta.docs.dialects (#20718) (Pixel998)

Chores

7ddfea9 chore: update dependency prettier to v3.8.2 (#20770) (renovate[bot])
fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763) (dependabot[bot])
7246f92 test: add tests for SuppressionsService.load() error handling (#20734) (kuldeep kumar)
4f34b1e chore: update pnpm/action-setup action to v5 (#20762) (renovate[bot])
51080eb test: processor service (#20731) (kuldeep kumar)
e7e1889 chore: remove stale babel-eslint10 fixture and test (#20727) (kuldeep kumar)
4e1a87c test: remove redundant async/await in flat config array tests (#20722) (Pixel998)
066eabb test: add rule metadata coverage for languages and docs.dialects (#20717) (Pixel998)

NaturalIntelligence/fast-xml-parser (fast-xml-parser)

`v5.7.2`: backward compatibility for numerical external entity, fix #705, #817

Compare Source

allow numerical external entity for backward compatibility
fix #705: attributesGroupName working with preserveOrder
fix #817: stackoverflow when tag expression is very long

`v5.7.1`: upgrade @nodable/entities and FXB

Compare Source

Use @nodable/entities v2.1.0
- breaking changes
  - single entity scan. You're not allowed to use entity value to form another entity name.
  - you cant add numeric external entity
  - entity error message when expantion limit is crossed might change
- typings are updated for new options related to process entity
- please follow documentation of @nodable/entities for more detail.
- performance
  - if processEntities is false, then there should not be impact on performance.
  - if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%
  - if processEntities is true, and you pass entity decoder separately
    - if no entity then performance should be same as before
    - if there are entities then performance should be increased from past versions
- ignoreAttributes is not required to be set to set xml version for NCR entity value
update 'fast-xml-builder' to sanitize malicious CDATA and comment's content

`v5.7.0`

Compare Source

versatica/mediasoup (mediasoup)

`v3.19.21`

Compare Source

Worker: Fix regression in DirectTransport when closing a DataProducer or DataConsumer (PR #1780).

`v3.19.20`

Compare Source

Worker: Add useBuiltInSctpStack setting (defaults to false) to enable mediasoup built-in SCTP stack (PR #1777).

versatica/mediasoup-client (mediasoup-client)

`v3.19.0`

Compare Source

vuejs/core (vue)

`v3.5.33`

Compare Source

Bug Fixes

compiler-sfc: handle nested :deep in selector pseudos (#14725) (bb9d265), closes #14724
reactivity: unlink effect scopes on out-of-order off (#14734) (e7659be), closes #14733
runtime-dom: preserve textarea resize dimensions (#14747) (11fb2fd), closes #14741
teleport: don't move teleport children if not mounted (#14702) (6a61f44), closes #14701
transition: preserve placeholder for conditional explicit default slots (#14748) (45990ce), closes #14727

vuejs/router (vue-router)

`v5.0.6`

Compare Source

🐞 Bug Fixes

Missing closing quote in generated import - by @zjy040525 and @posva in #2688 (32f78)

View changes on GitHub

`v5.0.5`

Compare Source

🚀 Features

Enable standard schema param parsers - by @posva (ea8e3)
Normalize param parsers once - by @posva (48087)

🐞 Bug Fixes

Track definePage imports per-file to fix named view race condition - by @posva (11191)
Avoid double decoding hash on string location - by @posva (1578c)

View changes on GitHub

If you want to rebase/retry this PR, check this box

Installation

Downloads

v1.1.3 5b4bb6b33a

v1.1.3 Stable

Keli Grubb released this 2026-04-19 02:28:28 +00:00 | 19 commits to main since this release

Changelog

Changed

update dependency mediasoup-client to v3.18.8 (#30)

This PR contains the following updates:

Package	Change	Age	Confidence
mediasoup-client (source)	`3.18.7` → `3.18.8`

Release Notes

versatica/mediasoup-client (mediasoup-client)

`v3.18.8`

Compare Source

If you want to rebase/retry this PR, check this box

Installation

Downloads

v1.1.12 Stable

Changelog

Changed

Release Notes

🐞 Bug Fixes

What's Changed

New Contributors

👷‍♂️ Patch fixes

👷‍♂️ Patch fixes

👷‍♂️ Patch fixes

👷‍♂️ Patch fixes

Summary

Changes Since The Last Release

Demo Page

API and Breaking Changes

Feedback

Fixes

Fixes

Installation

v1.1.11 Stable

Changelog

Changed

Removed

Notes

Installation

v1.1.10 Stable

Changelog

Changed

Summary

Dependency Updates

Security Audit Fixes (npm audit fix)

Verification

Installation

v1.1.9 Stable

Changelog

Changed

fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

Details

Impact

Workarounds

Severity

References

Release Notes

What's Changed

Installation

v1.1.8 Stable

Changelog

Changed

Release Notes

Installation

v1.1.7 Stable

Changelog

Changed

Release Notes

Installation

v1.1.6 Stable

Changelog

Changed

Summary

Docs

Installation

v1.1.5 Stable

Changelog

Changed

Release Notes

Installation

v1.1.4 Stable

Changelog

Changed

Release Notes

🚀 Experimental Features

🐞 Bug Fixes

🩹 Fixes

🤖 CI

❤️ Contributors

🚀 Enhancements

🩹 Fixes

💅 Refactors

📖 Documentation

🏡 Chore

Security Audit Fixes (`npm audit fix`)

`v5.7.2`: backward compatibility for numerical external entity, fix #705, #817

`v5.7.1`: upgrade @nodable/entities and FXB