• 8398d5185416f80016a6077d36209ae87d20eb07: fix(deps): bump golang.org/x/net to v0.62.0 (#320) (@appleboy)

• b941676fdfc4823156524e23c63ee0395d295808: refactor: adopt modern Go idioms (#319) (@appleboy)

• 822c690d995c826b4eb3703dcb4fa3531e70e11d: ci: standardize lint tooling and testing (#317) (@appleboy)

• c9e4025b620bb69c2cfba2156f845883962bdd80: docs: fix CI workflow badges (#318) (@appleboy)

New: Detached(ctx) returns a channel that closes when the browser detaches the target of the context, after the target handled every message that came before the detach. It opens no target and returns the new error ErrNoTarget when the context has none yet. New: the context option WithListener(fn) adds a func of Listen before the first command, so fn sees the events of the start of a tab, such as the runtime.EventExecutionContextCreated events that answer Runtime.enable. Fix: the browser sometimes routed the detach of a target before a reply or an event that Chrome sent earlier, so a command returned ErrTargetDetached and Listen missed the event. The detach now goes through the same queue as the messages. See docs/API.md, examples 29 and 30, and the three decisions dated 2026-11-05. The changes come from onsi, in pull request #1646 and discussion #1645.

• Fuse bind and first step into one CGO crossing by @mattn in https://github.com/mattn/go-sqlite3/pull/1455
• Fuse step and column fetch into one CGO crossing in Next by @mattn in https://github.com/mattn/go-sqlite3/pull/1460
• fix: release replaced authorizer callbacks by @ryanchou1994 in https://github.com/mattn/go-sqlite3/pull/1458
• Return an error instead of crashing when a connection is used after Close by @mattn in https://github.com/mattn/go-sqlite3/pull/1462
• Report missing arguments when Exec has no arguments by @laodouya in https://github.com/mattn/go-sqlite3/pull/1471
• Upgrade SQLite to version 3540100 by @mattn in https://github.com/mattn/go-sqlite3/pull/1472

• @ryanchou1994 made their first contribution in https://github.com/mattn/go-sqlite3/pull/1458
• @laodouya made their first contribution in https://github.com/mattn/go-sqlite3/pull/1471

Full Changelog: https://github.com/mattn/go-sqlite3/compare/v1.14.52...v1.14.53

Fix: a command that is still pending when the browser detaches its target, for example when the page closes, now returns an error that wraps the new ErrTargetDetached. Before, Chrome sent no reply and the command waited until its context ended. A command that starts on a detached target fails at once. The issue was reported by onsi in discussion #1645.

New: Listen and ListenBrowser call a func for each event of the tab or the browser, in the order in which the events arrive from Chrome. The target calls the func before it reads the next message, so the func sees an event that arrived before the reply to a command before that command returns. Events and BrowserEvents give one iterator for each event type and give neither guarantee, so they stay the recommended API, and Listen is the lower level tool for code that needs the order across event types. The func gets the typed events of cdproto and no replies to commands. It runs in the loop that reads the messages of the tab, so it must return fast, must not run a command, must not call Listen and must not panic. See docs/API.md, example 28, and the decision docs/decisions/2026-11-04-export-the-ordered-event-listener.md. The idea comes from discussion #1645 by onsi.

https://ebitengine.org/en/documents/2.10.html#v2.10.6

Nightly preview of the upcoming v3.2.0.

• [v3] refresh systray menus on Menu.Update in PR by @johnmaguire
• [v3/Windows] Implement SetIcon for windows in PR by @hypherionmc

🤖 This is an automated nightly pre-release generated from the latest changes on master. It is not selected by @latest; install it by its exact tag.

Installation:

go install github.com/wailsapp/wails/v3/cmd/wails3@v3.2.0-nightly.20261103

Tip: always pin an exact version (e.g. @v3.2.0-nightly.20261103) in go.mod and CI rather than @latest.

Nightly preview of the upcoming v3.2.0.

• DisableOverscroll instead of DisableBounce in PR by @lethusang

🤖 This is an automated nightly pre-release generated from the latest changes on master. It is not selected by @latest; install it by its exact tag.

Installation:

go install github.com/wailsapp/wails/v3/cmd/wails3@v3.2.0-nightly.20261102

Tip: always pin an exact version (e.g. @v3.2.0-nightly.20261102) in go.mod and CI rather than @latest.

We are pleased to announce the release of version 2.11.1. Featured are a handful of new areas of functionality and numerous bug fixes.

A summary of changes is available in the Release Notes. A full list of changes is available in the changelog.

The most notable changes in this release are:

• Upgraded requirement: Go language version is Go 1.26.0 or later, due to upgrading dependency package golang.org/x/crypto

• Fixed a panic when getting a cell value with a negative shared string index (CVE-2026-104819), related security advisory GHSA-48hm-4h8j-58fg
• Fixed a GetPivotTables panic on invalid pivot table field indices (CVE-2026-107211), related security advisory GHSA-mx22-3794-2vpv
• Fixed an unbounded row number in the rows iterator (CVE-2026-107212), related security advisory GHSA-jw42-f3rr-4cc3
• Fixed a GetSlicers panic when getting slicers from a worksheet without a drawing part (CVE-2026-107213), related security advisory GHSA-r7x5-4969-99p7
• Fixed a panic when decrypting a malformed workbook (CVE-2026-107214), related security advisory GHSA-2j4c-ffch-9f23
• Fixed unbounded EncryptionInfo and EncryptedPackage stream sizes being allocated when decrypting a workbook (CVE-2026-107215), related security advisory GHSA-x2q3-8cjh-766f
• Fixed a CalcCellValue stack overflow caused by circular ANCHORARRAY formula references (CVE-2026-107216), related security advisory GHSA-wp2g-vpjj-g53r
• Fixed ColumnNameToNumber and JoinCellName accepting invalid column names, which caused integer overflow (CVE-2026-107217), related security advisory GHSA-c85p-xxjj-2r75
• Fixed Unicode handling and count overflow in the LEFT, LEFTB, RIGHT, and RIGHTB formula functions (CVE-2026-107218), related security advisory GHSA-8jjq-8j9w-m2v6
• Fixed an unbounded spin count when deriving the agile decryption key (CVE-2026-107219), related security advisory GHSA-jrfj-fhj2-jjvm
• Fixed a panic on a worksheet with an empty merged cell reference (CVE-2026-107220), related security advisory GHSA-g27h-8qhm-6pff
• Fixed a panic on a row whose cells are not in ascending column order (CVE-2026-107221), related security advisory GHSA-8mcq-6wmr-jrjv
• Fixed a GetConditionalFormats panic on malformed conditional formatting rules (CVE-2026-107222), related security advisory GHSA-rxcj-4pj5-74gr
• Fixed an overflow of the minimum and maximum column numbers (CVE-2026-107223), related security advisory GHSA-fq3v-74gv-27gm
• Fixed a panic by rejecting Zip64 uncompressed sizes that do not fit in a signed int64 (CVE-2026-107224), related security advisory GHSA-fw94-4wwp-w8pw
• Fixed a panic when getting styles with a negative style index (CVE-2026-107225), related security advisory GHSA-5h23-36rv-pm65

• Added new EmbeddedObject data type
• Added 2 new constants, MaxCFBStreamSizeV3 and MaxCFBStreamSizeV4
• Added new function GetShapes to support get shape, related issue #436
• Added new functions GetEmbeddedObjects and SetGetEmbeddedObject to support get and set embedded objects, related issues #158 and #2186
• The CalcCellValue function now supports matrix arguments in the AND formula function
• The SetConditionalFormat function now validates the style index, related issue #2400

• Aligned the numeric precision of values stored by the SetCellValue function with Microsoft Excel™, related issue #1757

• Fixed the GetPictures function not returning the edit positioning in some cases, resolved issue #2217
• Fixed the CalcCellValue function returning incorrect results when error values appear inside parentheses or operators, resolved issues #1164 and #2344
• Fixed the CalcCellValue function not returning the expected error in some cases, resolved issues #2349 and #2432
• Fixed the CalcCellValue function returning incorrect results for 16 formula functions: COUNT, COUNTA, EDATE, HLOOKUP, IF, INDIRECT, ISNUMBER, MDETERM, MINVERSE, OR, SUM, TRIM, VALUE, VLOOKUP, WEEKDAY and XLOOKUP, resolved issues #2411, #2412, #2413, #2414, #2415, #2416, #2417, #2430, #2436, #2439, and #2445
• Fixed a CalcCellValue panic on unbalanced closing parentheses in a formula, resolved issue #2409
• Fixed a CalcCellValue panic when calculating the AVERAGEIFS, COUNTIFS, MAXIFS, MINIFS, PERCENTILE.EXC and SUMIFS formula functions with invalid arguments, resolved issue #2426
• Fixed the AddChart and AddChartSheet functions generating invalid charts that corrupted the workbook in some cases, resolved issues #2355 and #2356
• Fixed stream writer not applying number formatting to duration cell values, resolved issue #2371
• Fixed precision loss when setting cell values with time.Duration, resolved issue #2372
• Fixed the AddSlicer function reusing the pivot table slicer cache for different fields, resolved issue #2383
• Fixed the GetStyle function returning an invalid style for fills without a pattern, resolved issue #2384
• Fixed the GetFormControls and GetTables functions being unable to get form controls and tables when the workbook uses absolute paths, resolved issue #2386
• Fixed the GetPanes function being unable to get split panes in some cases, resolved issue #2387
• Fixed the SetCalcProps function being unable to set calculation properties to false, resolved issue #2404
• Fixed the ExcelDateToTime function returns dates one day early for January and February 1900, resolved issue #2466

• Updated dependencies
• Updated unit tests and godoc
• Updated the documentation website, which is available in 12 languages: Arabic, German, English, Spanish, French, Italian, Japanese, Korean, Portuguese, Russian, Simplified Chinese and Traditional Chinese
• Released an updated excelize-wasm NPM package for WebAssembly / JavaScript support
• Released an updated excelize-py PyPI package for Python
• Released an updated ExcelizeCs NuGet package for C# / .NET

Thanks to all the contributors to Excelize. Below is a list of contributors who made code contributions in this version:

• @Aprax14 (Damiano Scarpellini)
• @xixixi1118
• @zhouxuanyu1204-bot (ZHOU XUANYU)
• @lzoeydzdnn
• @arpitjain099 (Arpit Jain)
• @n0liu (Roland)
• @1436761858 (LP-LDY)
• @yashisrani (Yash Israni)
• @alliasgher (Ali Asghar)
• @ensiouel
• @a3190778733-pixel (shixia)
• @Nayjest (Vitalii Stepanenko)
• @ValeryVerkhoturov (Valery)
• @freeeve (Eve Freeman)
• @saifulferoz (Feroz)
• @lmonstergg
• @pcvelz (Peter van Velzen)
• @askalf (Thomas Sprayberry)
• @zac-scheiwe (Zac Scheiwe)
• @lrweck (Luis)
• @akashchamp
• @PhilflowIO (Philipp Lütje)
• @White0xdi3 (Jnyandeep Koyya)
• @keithadler (Keith Adler)
• @EpicHigh (Prasit Tongpradit)
• @wangyica879112 (ChangAo)
• @yl030628 (YL)
• @prostomarkeloff (prostomarkeloff)
• @Gabik21
• @Alifarid0011 (AliFarid)

Fix a panic, close of closed channel, in the handling of DOM.documentUpdated. When DOM.getDocument failed, for example because the tab was closing, the frame kept its old root node, and the next DOM.documentUpdated event closed the channel of that root again. The frame now clears the root first. Thanks to Dhruv Jain (#1644). The module also requires cdproto v0.159.0 now.