chore(deps): update github actions (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/cache	action	major	v3 → v5
actions/checkout	action	major	v3 → v6
crazy-max/ghaction-github-labeler	action	major	v4 → v6
deno (source)	uses-with	major	v1.x → 2.x
github/codeql-action	action	major	v2 → v4

---

Release Notes

actions/cache (actions/cache)

v5

Compare Source

v4

Compare Source

actions/checkout (actions/checkout)

v6

Compare Source

v5

Compare Source

v4

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

crazy-max/ghaction-github-labeler (crazy-max/ghaction-github-labeler)

v6

Compare Source

v5

Compare Source

denoland/deno (deno)

v2.7.7

Compare Source

• fix(core): implement select fallback on macOS (#​32812)
• fix(ext/node): add disabled process function stubs in worker threads (#​32809)
• fix(ext/node): add key/IV length validation for aes-128-cbc and ecb cipher
  modes (#​32824)
• fix(ext/node): improve node:dns module compatibility (#​32704)
• fix(ext/node): improve process.title and support --title flag (#​32201)
• fix(ext/node): set kLastWriteWasAsync in JS write path to prevent double
  callback (#​32814)
• fix(ext/node): skip normalization in path.win32.join for reserved device names
  (#​32808)
• fix(ext/node): support interface option for IPv6 multicast membership (#​32754)
• fix(ext/node): use constant-time comparison for GCM auth tag verification
  (#​32817)
• fix(ext/node): validate process.exitCode and fix process constructor name
  (#​32806)
• fix(watch): support graceful shutdown via SIGTERM dispatch (#​32564)
• perf(ext/webidl): optimize dictionary converters (#​32729)

v2.7.6

Compare Source

• feat(core): add cloneable resource registry for structured clone (#​32672)
• feat(core): update v8 to 146.8.0 with foreground task ownership (#​32771)
• feat(eval): auto-detect CJS vs ESM in deno eval (#​32472)
• feat(ext/node): add MIMEType, convertProcessSignalToExitCode, Symbol.dispose
  for ChildProcess (#​32793)
• feat(ext/signals): support additional signals on Windows (#​32689)
• feat(ext/telemetry): support array values in OTEL attributes (#​32748)
• feat: add --cpu-prof-flamegraph to generate interactive SVG flamegraphs
  (#​32572)
• fix(cli): update typescript-go to 2026-03-09 (#​32656)
• fix(core): don't panic in to_v8_error when JS error builder callback fails
  (#​32749)
• fix(core): prevent panic when multiple lazy-loaded ESM modules are loaded
  during TLA (#​32769)
• fix(coverage): don't mark lines uncovered when zero-count range only partially
  overlaps (#​32601)
• fix(ext/console): make timer and counter state per-instance to fix OTEL
  console wrapping (#​32719)
• fix(ext/crypto): support structuredClone for CryptoKey (#​32674)
• fix(ext/fetch): retry on stale pooled HTTP/1.1 connections (#​32566)
• fix(ext/ffi): retain backing store references in nonblocking calls (#​32775)
• fix(ext/napi): call wrap/ref finalizers at shutdown (#​32592)
• fix(ext/napi): keep event loop alive while uv_async_t handle is active
  (#​32702)
• fix(ext/napi): prevent spurious TypeError from napi_coerce_to_object on
  null/undefined (#​32695)
• fix(ext/node): accept all TypedArrays in spawnSync input option (#​32712)
• fix(ext/node): allow IPv6 multicast addresses in UDP
  addMembership/dropMembership (#​32739)
• fix(ext/node): allow passing FileHandle as fd argument for WriteStream
  and ReadStream (#​32770)
• fix(ext/node): emit "connect" event on http.Server for CONNECT requests
  (#​32599)
• fix(ext/node): enable 8 already-passing child_process compat tests (#​32710)
• fix(ext/node): fix 8 Node.js compat test failures (#​32755)
• fix(ext/node): fix AbortController signal handling in child_process s…
  (#​32713)
• fix(ext/node): fix Buffer.concat, expose internal/buffer, implement
  markAsUntransferable (#​32760)
• fix(ext/node): fix IPC message prototype for child_process JSON (#​32731)
• fix(ext/node): fix TLA stall with native TTY handles and make stdio
  indestructible (#​32792)
• fix(ext/node): fix TLS JSStreamSocket resource leak causing process hang
  (#​32325)
• fix(ext/node): fix multiple deepEqual comparison issues (#​32763)
• fix(ext/node): fix perm checks in TCPWrap (#​32721)
• fix(ext/node): fix send() validation in child_process IPC (#​32779)
• fix(ext/node): handle cargo features during publish (#​32636)
• fix(ext/node): handle signal 0 in child_process.kill() (#​32294)
• fix(ext/node): implement safe, add, rem options for crypto.generatePrime
  (#​32618)
• fix(ext/node): improve Node.js crypto compatibility (#​32690)
• fix(ext/node): improve X509Certificate Node.js compatibility (#​32671)
• fix(ext/node): improve crypto.generateKeyPair validation (#​32620)
• fix(ext/node): improve worker_threads path validation and error handling
  (#​32791)
• fix(ext/node): include prototype env vars in child_process spawn (#​32699)
• fix(ext/node): remove extra properties from node:fs exports (#​32670)
• fix(ext/node): require --allow-net for udp.send (#​32774)
• fix(ext/node): rewrite node:tty on top of uv compat (#​32777)
• fix(ext/node): set up stdio streams on failed child_process spawn (#​32698)
• fix(ext/node): signal listeners added via process.once can now be removed
  (#​32606)
• fix(ext/node): support encrypted PEM export and deprecated hash option in
  crypto keygen (#​32703)
• fix(ext/node): use non-blocking write in fs.writev (#​32673)
• fix(ext/node): validate handle type in child_process send() (#​32711)
• fix(ext/node): wrap non-Error unhandled rejections in ERR_UNHANDLED_REJECTION
  (#​32535)
• fix(ext/otel): don't mark server spans as error for 4xx responses (#​32722)
• fix(ext/signals): prevent panic on FreeBSD (#​32518)
• fix(ext/telemetry): add log.iostream attribute to console logs (#​32723)
• fix(ext/telemetry): add exception.* attributes to OTEL log records (#​32726)
• fix(ext/web): support %j JSON format specifier in console.log (#​32684)
• fix(ext/web): upgrade QuotaExceededError to DOMException derived interface
  (#​32244)
• fix(lsp): align organize imports output with tsgo (#​32677)
• fix(npm): handle read-only bin files when setting up node_modules/.bin
  (#​32632)
• fix(npm): resolve bundled npm deps in packages properly when not using a
  node_modules directory (#​32679)
• fix(npm): retain authorization header on http->https redirect (#​29878)
• fix(npm): support npmrc certfile + keyfile (#​32655)
• fix(process): allow unref'd child processes to outlive parent (#​32563)
• fix(repl): fix panic when pressing Tab at beginning of line (#​32750)
• fix(runtime): apply source maps to CPU profiler output (#​32634)
• fix(runtime): display proper error when throwing in event handlers (#​32663)
• fix(runtime): reduce memory retention after web worker termination (#​32617)
• fix(runtime): use XML-valid entity in flamegraph SVG (#​32716)
• fix(test): allow test functions to override reported location (#​32732)
• fix(tsc): move more node resolution errors to typescript diagnostics (#​32697)
• fix(watch): dispatch unload and process exit events on restart (#​32664)
• fix(web): support structuredClone for DOMException (#​32675)
• fix: restore --env-file parent directory traversal and do not error in
  deno compile for not found env file (#​32686)
• fix: wake event loop when V8 posts foreground tasks from background threads
  (#​32450)
• perf(core): optimize V8-to-Rust string conversion with ValueView (#​32688)
• perf(ext/napi): use threadpool for async work instead of spawning threads
  (#​32776)
• perf(ext/node): move fs.cpSync implementation to rust (#​32687)
• perf(ext/web): add write buffering for FsFile.writable streams (#​32676)
• perf(ext/web): optimize TextEncoder/TextDecoder hot paths (#​32735)
• perf(ext/web): optimize URLPattern ops to reduce serde overhead and GC
  pressure (#​32766)
• perf(ext/web): optimize node:buffer base64 encode/decode (#​32647)
• perf(ext/web): reduce promise allocations in streams (#​32652)
• perf(fmt): speed up file diffing (#​30644)
• perf(install): avoid unnecessary package info fetches when running lifecycle
  scripts (#​32653)
• perf(linux): trim glibc malloc arena after module loading (#​32662)
• perf(lsp): replace dissimilar with imara-diff (#​32700)
• perf(npm): run lifecycle scripts in parallel (#​32666)

v2.7.5

Compare Source

• feat(coverage): add function coverage to summary and HTML reports (#​32507)
• feat(doc): support npm packages in deno doc (#​32435)
• feat(ext/node): add node_api_create_object_with_properties API (#​31443)
• feat(ext/node): implement KeyObject.toCryptoKey() and
  KeyObject.from(CryptoKey) (#​32523)
• feat(otel): allow feeding permission audit data into OTEL (#​32501)
• feat: --cpu-prof flags for CPU profiles (#​31909)
• fix(console): prevent multi-line object values in console.table (#​32604)
• fix(core): switch to V8 Explicit microtask policy for correct nextTick
  ordering (#​32466)
• fix(ext/http): allow rejecting HTTP upgrades with non-101 status codes
  (#​32615)
• fix(ext/napi): run async work execute callback on a worker thread (#​32560)
• fix(ext/node): add node_api_create_property_key_(latin1/utf8) (#​32559)
• fix(ext/node): add missing http2 header constants (#​32611)
• fix(ext/node): emit DEP0198 warning for SHAKE digests without outputLength
  (#​32521)
• fix(ext/node): emit correct error codes for unsupported PQC key types (#​32533)
• fix(ext/node): fix multiple DiffieHellman crypto bugs (#​32531)
• fix(ext/node): fix multiple node:dgram compatibility issues (#​32520)
• fix(ext/node): handle generateKeyPair 2-arg call and enable PQC tests (#​32619)
• fix(ext/node): implement ECDH.convertKey and fix related ECDH bugs (#​32532)
• fix(ext/node): implement node:v8 heap APIs (#​32483)
• fix(ext/node): implement proper resourceLimits for node:worker_threads
  (#​32430)
• fix(ext/node): improve getCipherInfo and allow repeated Hmac digest() (#​32522)
• fix(ext/node): improve node:dns compat (#​32536)
• fix(ext/node): initialize debuglog testEnabled with safe default (#​32598)
• fix(ext/node): make TTY stdout/stderr indestructible (#​32530)
• fix(ext/node): make tty ReadStream/WriteStream callable without new (#​32537)
• fix(ext/node): multiple readline improvements (#​32538)
• fix(ext/node): napi_set_instance_data on exit (#​32509)
• fix(ext/node): rewrite http2 implementation (#​32418)
• fix(ext/node): run worker_threads eval code in sloppy mode (#​32428)
• fix(ext/node): support des-ede3-cbc cipher and allow Cipheriv/Decipheriv
  without new (#​32519)
• fix(ext/node): use max salt length as default for RSA-PSS signing (#​32534)
• fix(ext/otel): remove panicking unwraps in telemetry code (#​32557)
• fix(ext/websocket): handle non-ASCII bytes in WebSocket response headers
  (#​32594)
• fix(lsp): properly sync root files with tsgo (#​32455)
• fix(lsp): tsgo scope attribution for asset files (#​32608)
• fix(napi): remove unimplemented Node-API symbols from napi_sys (#​32593)
• fix(npm): memoize peer cache hit checks to prevent combinatorial explosion
  (#​32609)
• fix(npm): support npmrc email authorization (#​32616)
• fix: ensure binaries distributed in @deno/... npm packages are exectuable
  (#​32581)
• fix: flush CPU profile and coverage data on Deno.exit() (#​32591)
• fix: normalize capture to boolean in removeEventListener options (#​32508)
• fix: prevent panic on dynamic import with non-string error name (#​32498)
• fix: set process.features.openssl_is_boringssl to true (#​32512)
• fix: support value substitution when loading environment variable files
  (#​32495)
• perf(ext/node): move most fs.cp logic to rust (#​32580)
• perf(lsp): drop jsx import source cache (#​32506)
• perf(npm): improve decompression speed more (#​32547)
• perf(npm): less syscalls in tarball extraction (#​32541)
• perf(npm): remove folder canonicalization in tarball extract (#​32540)
• perf(npm): use libdeflater and preallocate buffer (#​32511)

v2.7.4

Compare Source

• Reland refactor(core): move nextTick/immediate queues into core, replace ops
  with shared buffers (#​32440) (#​32465)
• Revert "refactor(core): move nextTick/immediate queues into core, replace ops
  with shared buffers (#​32440) (#​32462)
• fix(core): uv_compat cleanup and fixes (#​32458)
• fix(deploy): correctly handle version lookup (#​32489)
• fix(ext/node): deep assert compatibility (#​32434)
• fix(ext/node): use sync writes for TTY stdout/stderr WriteStream (#​32488)
• fix(test): restart all tests on env file change (#​32461)
• perf(npm): actually improve npm install -g deno binary startup performance
  (#​32467)

v2.7.3

Compare Source

• fix(deploy): dont use jsr api for deploy subcommand (#​32441)
• fix(ext/node): handle partial writes to process.stdout/stderr (#​32433)
• fix(ext/node): make UDP socket ops synchronous, implement missing dgram
  methods (#​32381)
• fix(ext/node): support HTTP over Windows named pipes in node:http (#​32414)
• fix(npm): don't panic when peer dep is not in snapshot (#​32454)
• fix(npm): regression where resolution was missing dependencies (#​32453)
• perf(npm): improve npm install -g deno binary startup performance (#​32439)

v2.7.1

Compare Source

v2.6.8

Compare Source

• feat(npm): support jsr: scheme in package.json (#​31938)
• feat: Windows on ARM builds (#​31917)
• fix(ext/node): enable defensive option on DatabaseSync (#​32004)
• fix(ext/node): error formatting compatibility (#​31970)
• fix(ext/node): implement sqlite' SQLTagStore (#​31945)
• fix(ext/node): use primordials in _fs_fchown.ts (#​32007)
• fix(flags): correct zsh completions for script arg (#​31994)
• fix(install): clean up associated config and lock files during uninstall
  (#​31984)
• fix(types): correct types for Worker events (#​31981)
• fix: Reload the CronHandlerImpl if necessary when the control socket
  receives new envs (#​31996)
• fix: upgrade deno_core to 0.383.0 (#​32014)

v2.6.7

Compare Source

• feat(ext/node): implement mock API for node:test module (#​31954)
• feat(node): implement FileHandle.readv() method (#​31943)
• feat(npm): use JSR for @jsr scope (#​31925)
• feat: External Socket-Based Cron Implementation (#​31952)
• feat: V8 14.5 (#​31873)
• feat: add --inspect-publish-uid flag for VSCode debugging (#​31927)
• fix(ext/http): use serve address override only once (#​31935)
• fix(ext/net): remove socket file when dropping unix listener (#​31947)
• fix(ext/node): sqlite's StatementSync compatibility (#​31941)
• fix(ext/node): align assert throws/rejects signatures (#​31934)
• fix(ext/node): fix usage of new V8 string APIs (#​31963)
• fix(ext/node): implement sqlite's missing options (#​31919)
• fix(ext/node): pass test-child-process-bad-stdio node compat test (#​31851)
• fix(ext/node): read NODE_OPTIONS for --require and --inspect-publish-uid
  (#​31949)
• fix(ext/node): retry stale keepAlive connections in http client (#​31932)
• fix(ext/node): support setImmediate promisify.custom (#​31920)
• fix(ext/node): use primordials in _fs_ftruncate.ts (#​31944)
• fix(ext/node): use primordials in ext/node/polyfills/tls.ts (#​31816)
• fix(ext/web): support object in DOMException second argument for Node.js
  compat (#​31939)
• fix(node): throw ERR_INVALID_ARG_TYPE for invalid fs.readFile path (#​31918)
• fix(unstable): lint ast comments from first file showing in others (#​31956)
• fix(x): use local npm package even if npm specifier is used, forward unstable
  flags (#​31942)
• fix: allow reading /dev/tty without requiring --allow-all (#​31105)
• fix: enable edns for Deno.resolveDns (#​31951)
• fix: graceful server shutdown with open, un-upgraded connections (#​31959)
• fix: use locked-tripwire to prevent unlocked cargo installs (#​31973)

v2.6.6

Compare Source

• feat(cli/tsc): show progress bar for TSGO downloads (#​31893)
• feat(inspector): accept bare host and bare port for --inspect flag (#​31881)
• feat(inspector/unstable): add /ws/events endpoint in inspector server, notify
  watcher restart event in it (#​31901)
• feat(task): globstar, failglob, nullglob, and pipefail support
  (#​31913)
• feat: instrument cron with OTEL (#​31916)
• fix(check): improve @types/ package resolution for the global resolver
  (#​31868)
• fix(doc): non-determinism in deno doc --lint (#​31911)
• fix(dx): always spawn subprocess for dx (#​31897)
• fix(ext/crypto): add support for SHA3 (#​31668)
• fix(ext/node): assert compatibility (#​31821)
• fix(ext/node): fix deadline resolution for queued timers (#​31860)
• fix(ext/node): implement PerformanceObserver (#​31875)
• fix(ext/node): implement getValidStdio for child_process (#​31850)
• fix(ext/node): improve child_process CLI argument parsing (#​31825)
• fix(ext/node): inspector.open() and inspector.close() (#​31898)
• fix(ext/node): prevent derefencing symlinks on fs.rm (#​31886)
• fix(ext/node): properly implement process.features (#​31864)
• fix(ext/node): validate fd in tty.isatty and enable pseudo-tty tests (#​31892)
• fix(ext/sqlite): double free of Session after database closed (#​31830)
• fix(ext/web): export PerformanceObserver and PerformanceObserverEntryList
  (#​31887)
• fix(publish): do not include tsconfig imports in publish graph (#​31907)
• fix(publish): include npm:@​types/ package resolution in published packages
  (#​31855)
• fix: don't ever set 1005 outbound close code (#​31845)

v2.6.5

Compare Source

• feat(ext/canvas): support gif, webp for createImageBitmap (#​31402)
• feat(ext/web): add performance.clearResourceTimings() and
  setResourceTimingBufferSize() (#​31603)
• feat(node/fs): implement FileHandle.readableWebStream() (#​31745)
• fix(audit): respect --level flag for exit code (#​31721)
• fix(ci): rename trusted-signing-action to artifact-signing-action (#​31849)
• fix(cli/test): close Node HTTP connections before sanitizer check (#​31782)
• fix(ext/fetch): read file urls via vfs (#​31814)
• fix(ext/fetch): support ipv6 destination host with http and socks proxy
  (#​31683)
• fix(ext/node): DatabaseSync garbage collection invalidating associated
  resources (#​31737)
• fix(ext/node): add tls.setDefaultCACertificates support (#​31522)
• fix(ext/node): emit deprecation warning for SlowBuffer (#​31772)
• fix(ext/node): fix use-after-free in StatementSync JS iterator (#​31770)
• fix(ext/node): use correct block sizes for HMAC algorithms (#​31775)
• fix(ext/web): handle empty TextDecoder input when stream is true (#​31691)
• fix(io): ignore BrokenPipe error in op_print (#​31844)
• fix(node/child_process): ChildProcess constructor without args (#​31838)
• fix(node/child_process): improve arg type validation for execFile and fork
  (#​31829)
• fix(node/child_process): reject null bytes in arguments (#​31828)
• fix(node/child_process): use correct syscall name in spawn error (#​31836)
• fix(npm): deduplication pass for initially partially resolved graphs (#​31787)
• fix(runtime): handle options parameter in Deno.errors.* constructors
  (#​31510)
• fix(task): preserve signal-based exit codes for child processes (#​31789)
• fix(tsgo): nil deref for exported symbols (#​31786)
• fix(webgpu): correctly expose GPUCompilationInfo & GPUCompilationMessage
  (#​31780)
• fix: add more details when panicking getting dir path from deno.json (#​31805)
• fix: allow multiple --allow-all args (#​31833)
• fix: queue dynamic imports for modules with pending TLA (#​31670)
• fix: update config schema for read permission to include ignore property
  (#​31785)

v2.6.4

Compare Source

• fix(compile): make compile work with --unstable-npm-lazy-caching (#​31704)
• fix(ext/node): enable keepAlive connection reuse for HTTP Agent (#​31709)
• fix(ext/node): handle errors in sqlite session filter callback (#​31756)
• fix(ext/node): support TypedArray and DataView targets in Buffer.copy()
  (#​31734)
• fix(ext/node): support for inspector.url() (#​31705)
• fix(ext/node): support numbered positional parameters in node:sqlite (#​31722)
• fix(ext/websocket): prevent sending multiple close frames (#​31747)
• fix(install): wait for package installations before applying patches (#​31711)
• fix(node/crypto): integrate async_hooks for domain error handling (#​31751)
• fix(serve): net permissions in config file (#​31718)
• fix(task): prioritize member package.json when deno.json only in root
  (#​31736)
• fix(webgpu): update wgpu to 28.0.0 (#​31163)
• fix: deno cross compile for intel mac target (#​31714)
• fix: update urlpattern to 0.4.2 (#​31193)

v2.6.3

Compare Source

• fix(check): improve node types handling
• Revert "fix(ext/node): stub out Module.register and Module.registerHooks"
  (#​31684)

v2.6.2

Compare Source

• feat(unstable): add sandbox subcommand (#​31568)
• fix(audit): fix deserde for transitive npm audit actions (#​31671)
• fix(check): handle workspace members having different jsx import sources and
  importing each other (#​31654)
• fix(check): regression with tsgo and node globals (#​31621)
• fix(cli): deno tunnel when token storage isn't working or without deno.json
  (#​31584)
• fix(compile): ensure temp dir exists during x64 codesign (#​31672)
• fix(ext/node): sqlite:backup compatibility (#​31610)
• fix(ext/node): add error handling functions and tests for UV bindings (#​31639)
• fix(ext/node): avoid env permission for TERM in console and readline (#​31638)
• fix(ext/node): fix hot loop in setImmediate with a pending timer (#​31643)
• fix(ext/node): stub out Module.register and Module.registerHooks (#​31666)
• fix(ext/node): support named pipe listen, connect and open (#​31624)
• fix(ext/telemetry): otel baggage propagation (#​31620)
• fix(fetch): fix SOCKS5 proxy URL validation logic (#​31604)
• fix(flags): implement a better sandbox subcommand (#​31657)
• fix(inspector): worker debugging support via CDP (#​31527)
• fix(x): cache on demand when running, resolve packages with only one binary,
  don't fail on node-gyp if not present (#​31619)
• fix(x): fix shim script when use custom alias name, re-enable alias tests
  (#​31653)
• fix: panic on dropped inspector session (#​31658)
• fix: update glob implementation to match with latest node (#​31627)

v2.6.1

Compare Source

• feat(unstable): deploy config allow app to be optional (#​31567)
• fix(add): include type-only imports when building graph (#​31552)
• fix(cli): add streams as transferable types (#​31586)
• fix(compile): intel mac compile fix (#​31575)
• fix(compile): sentinal conflict with strtab on intel mac (#​31587)
• fix(ext/node): DatabaseSync compatibility (#​31515)
• fix(x): correct alias deno command location for Windows (#​31573)
• fix(x): fix executing native binary on windows + some cleanup (#​31551)
• fix: --preload and --require flags only available in runtime subcommands
  (#​31614)
• fix: adjust deno_cache version (#​31553)
• fix: source map file names to non-existent paths (#​31564)

v2.6.0

Compare Source

Read more: http://deno.com/blog/v2.6

• feat(BREAKING/install): require -- for script arg in deno install -g and
  support installing multiple packages (#​31292)
• feat(cli): add approve-scripts AKA "approve-builds" subcommand (#​31472)
• feat(cli): filter out common internal frames that add noise, dim and grey
  internal frames in stack traces (#​31247)
• feat(cli): print working dir in grey in stack traces, relative paths in
  check + compile output (#​31194)
• feat(config): allow storing npm constraints to allow running lifecycle scripts
  for (#​31075)
• feat(coverage): add dark-mode toggle for html output (#​31140)
• feat(ext/node): implement FileHandle.appendFile(data[, options]) (#​31301)
• feat(ext/web): add ImageData Float16Array support (#​31394)
• feat(ext/web): stabilize BroadcastChannel (#​30770)
• feat(ext/web): transferable {Readable,Writable,Transform}Stream (#​31126)
• feat(init/npm): add --yes flag to bypass prompt (#​31499)
• feat(install): add --lockfile-only flag (#​31376)
• feat(lint): plugin API has env and read access (#​31327)
• feat(node): allow subpath imports that start with '#/' (#​31520)
• feat(permissions): allow Deno.env.toObject() for partial env permission
  (#​31267)
• feat(permissions): allow flags should override deny when more specific
  (#​31224)
• feat(process): support integer signals in Deno.kill and child.kill (#​31153)
• feat(unstable): add socket.dev integration for deno audit (#​31106)
• feat(unstable): support authenticated socket.dev audit reports (#​31370)
• feat(upgrade): ability to show additional message on upgrade (#​31170)
• feat: V8 14.2 (#​31178)
• feat: --ignore-read (#​31363)
• feat: deno init --empty (#​31516)
• feat: add --require run arg to support commonJS (#​31201)
• feat: add Float16Array support (#​31410)
• feat: add --ignore-env=... (#​31187)
• feat: add deno x (alias dx) for conveniently running binaries from
  packages (#​31138)
• feat: add native source maps support (#​31268)
• feat: include @types/node type declarations out of the box (#​31502)
• feat: support publish: false in deno.json (#​30852)
• feat: use Node.js timers by default (#​31272)
• feat: wasm source phase imports (#​31486)
• fix(audit): remove unwrap in favor of log, don't print empty reports (#​31479)
• fix(bundle): Deno.bundle work in Worker (#​31316)
• fix(bundle): avoid name clash in hack (#​31409)
• fix(bundle): do not error on failing to clean up esbuild dir (#​31408)
• fix(bundle): don't use createRequire when targeting browser in Deno.bundle
  (#​31534)
• fix(bundle): fix import.meta.main transform with jsr entrypoint (#​31415)
• fix(bundle): support android (#​31521)
• fix(bundle): treat bun specifiers as external by default (#​31411)
• fix(check): ensure @types/node is cached when already in resolution (#​31235)
• fix(check): fix nil deref with --unstable-tsgo (#​31416)
• fix(check): move types not found error to tsc diagnostic (#​31509)
• fix(check): move unknown builtin node: module errors to tsc diagnostics
  (#​31449)
• fix(cli): make --eval-file flag work without equals sign (#​31151)
• fix(cli): put tasks first in zsh dynamic completions (#​31350)
• fix(compile): support --preload flag in deno compile (#​31152)
• fix(config): support UTF-16 surrogate pairs in unicode escape sequences in
  json config (#​31264)
• fix(deps): use windows-sys for all windows targets (#​31308)
• fix(ext/napi): suppress deprecated Buffer warnings (#​31245)
• fix(ext/net): support IPv6 zone indices in Deno.connect() (#​31123)
• fix(ext/node): Add sqlite setAllowUnknownNamedParameters option (#​31202)
• fix(ext/node): FileHandle compatibility (#​31164)
• fix(ext/node): StatementSync.iterate() should reset is_iter_finished flag
  on every call (#​31361)
• fix(ext/node): url.domainToASCII returns empty string for invalid domains
  (#​31219)
• fix(ext/node): autopadding behavior on crypto.Cipheriv (#​31389)
• fix(ext/node): define process.versions.sqlite (#​31277)
• fix(ext/node): ensure 'exit' event is fired only once for worker_threads
  (#​31231)
• fix(ext/node): export ppid (#​31137)
• fix(ext/node): fix sqlite extension used for testing; ensure related tests are
  actually meaningful (#​31455)
• fix(ext/node): implement DatabaseSync.aggregate() (#​31461)
• fix(ext/node): implement DatabaseSync.function() and better error details
  (#​31386)
• fix(ext/node): implement dns.lookupService (#​31310)
• fix(ext/node): implement process.setegid() (#​31155)
• fix(ext/node): implement process.setgid() and process.setuid() (#​31162)
• fix(ext/node): implement process:seteuid() (#​31160)
• fix(ext/node): implement performance.timerify() (#​31238)
• fix(ext/node): implement util.getSystemErrorMessage() (#​31147)
• fix(ext/node): prevent cipher operations after finalize (#​31533)
• fix(ext/node): reimplement setImmediate API (#​30328)
• fix(ext/node): respect abort signal option on FileHandle.readFile (#​31462)
• fix(ext/node): respects flag option on fs.readfile and fs.readfilesync
  (#​31129)
• fix(ext/node): segfault on calling StatementSync methods after connect

---

Configuration

📅 Schedule: Branch creation - "before 12pm on Sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.