October 25, 2026

• Fixed events getting stuck semi-transparent after a drag or resize is interrupted by the browser (689)

Special thanks to the following sponsors of EventСalendar:

@ekwi-tech @syncsynchalt @aurawindsurfing

• release: switch to trusted publishing (65a579f)

• release: switch to trusted publishing (5cb7a32)

更新内容请查看CHANGELOG。 Please refer to CHANGELOG for details.

• docs(contributing): ask for issues instead of RPs https://github.com/honojs/hono/pull/5526
• docs(readme): sync the contributing list with CONTRIBUTING.md https://github.com/honojs/hono/pull/5527
• fix(adapters): accept Hono v5 prereleases in the hono peer range https://github.com/honojs/hono/pull/5537
• chore: unified oxfmt and oxlint config https://github.com/honojs/hono/pull/5518
• docs(readme): remove the deepwiki badge https://github.com/honojs/hono/pull/5548
• fix(serve-static): only serve GET and HEAD requests https://github.com/honojs/hono/pull/5514
• fix(build): keep barrel imports in the bundled d.ts https://github.com/honojs/hono/pull/5557
• fix(jsx): preserve self-closing void elements in cloneElement https://github.com/honojs/hono/pull/5314
• fix(css): keep "//" inside an unquoted url() when minifying https://github.com/honojs/hono/pull/5450
• fix(css): keep the descendant combinator before a pseudo-class when minifying https://github.com/honojs/hono/pull/5451
• fix(serve-static): respect q-values in Accept-Encoding for precompressed files https://github.com/honojs/hono/pull/5436
• fix(helper/route): match regex params in basePath() the same way as the router https://github.com/honojs/hono/pull/5498
• fix(trie-router): keep first value for duplicate path params https://github.com/honojs/hono/pull/5423
• fix(hono-base): disallow getPath when strict is false https://github.com/honojs/hono/pull/5563
• fix(css): Fix multiline CSS handling in style replacement https://github.com/honojs/hono/pull/5405
• feat(bearer-auth): allow MessageFunction to return a Response https://github.com/honojs/hono/pull/5269
• fix(utils/url): preserve encoded duplicate query order https://github.com/honojs/hono/pull/5495

Full Changelog: https://github.com/honojs/hono/compare/v4.13.13...v4.13.14

• Build the inline Flight script from React's strings instead of re-encoding them: #100142
• Fix dist dir lockfile on filesystems with no or limited lockfile implementations (e.g. NFS): #100684

• perf(turbopack): look up chunk group indices through a keyed cell: #99050
• Turbopack: track availability by chunk group: #98685
• refactor(turbopack): chunk chunk groups by key: #99750
• Turbopack: consume graph-derived chunk groups: #98734
• turbo-tasks-backend: stripe SnapshotCoordinator's operation count and poll for the drain: #100280
• turbo-tasks-backend: parallelize decoding of large batch lookups: #100453
• turbo-persistence: don't shrink the shard count before the first bottom merge: #100424

Huge thanks to @sokra, @lukesandberg, @gaearon, and @bgw for helping!

A minor release: fixes and features from a batch of 29 issues (#5363 to #5391), plus five contributor PRs.

Behaviour changes to check when upgrading:

• Trellis panels no longer reserve the empty title band above each plot. Other charts keep it; the grid.padding docs in the types say how far it can be pulled in.
• Horizontal bar charts thin overlapping category names instead of drawing them over each other.
• stackType 100% area and line charts now draw percentages, as 100% bars already did.

Also new:

• radialBar targets ship as an add-on: import apexcharts/features/radial-targets (the full bundle includes it).
• The plugin API's dashArray now also carries pattern strings and per-series patterns, so a plugin that assumed a number should handle those.
• Legend and keyboard announcements are translated in every locale. The translations have not had a native-speaker review, so corrections are welcome.

• Full dash patterns everywhere, line caps on annotations (#5383).
• Trellis panels drop the empty title band above each plot.
• Thin overlapping category names on horizontal bar charts (#5371).
• A balanced hide order for overlapping labels (#5378).
• Tooltip.visible false keeps hover without the box (#5382).
• Band gap units, radial geometry for plugins, targets add-on (#5374, #5380, #5381).

• Keep points appended to a hidden series (#3200). Thanks @lbesecker195.
• Ignore chart click when a selection drag ends (#5060). Thanks @itisrmk.
• Don't draw end dots for a null row (#4458). Thanks @b84330808.
• Blend colour scale stops written with a hex alpha. Thanks @Enesuygurs.
• End a derived linear scale exactly on its max. Thanks @Pharex38.
• Fade a faded whole's own stroke when there is no outline. Thanks @lazerg.
• Fire marker hover and selection events. Thanks @lazerg.
• Honour avoidOverlap.maxShift of 0. Thanks @lazerg.
• Apply legend.labels.colors to the shared legend. Thanks @lazerg.
• Hide a stacked column label that is wider than its column. Thanks @lazerg.
• Keep a covered whole's stroke through the pick and clear frames. Thanks @lazerg.
• Clear the zoomed flag when updateSeries resets the axes. Thanks @lazerg.
• UpdateOptions({ trellis: null }) turns the grid back into one chart. Thanks @lazerg.
• Keep the label of a part of 0 on a stacked bar. Thanks @lazerg.
• Clear row and column when trellis is set to null. Thanks @lazerg.
• Keep the grid when two updateOptions calls land in one task. Thanks @lazerg.
• Warn instead of throwing when the chart type has no annotation groups. Thanks @lazerg.
• Measure a vertical stacked column label across the column. Thanks @lazerg.
• Use chart.fontFamily and legend.fontFamily in the HTML chrome. Thanks @lazerg.
• Place a zero part's label at its part edge. Thanks @lazerg.
• Remove the Reset Zoom button when updateSeries clears the zoom. Thanks @lazerg.
• Count exponent-notation decimals in preciseAddition. Thanks @Pharex38.
• Use stepSize when it divides a fixed min..max window. Thanks @Pharex38.
• Translate legend and keyboard announcements, fill locale gaps (#5373, #5376).
• Warn when a needle gauge overrides the indicator (#5385).
• Keep a hidden series' stroke as drawn with an outline on.
• Keep the zoomed view across internal updates and on y for xy (#5389, #5369).
• Keep the edge columns inside the plot while zoomed (#5368).
• Draw stackType 100% area and line charts as percentages (#5384).
• Rotate and thin category labels against the drawn plot (#5370).
• Never rotate radar category names.
• ResetSeries keeps a legend-hidden series after appendData.

The default bundle is 275,373 B gzipped, up 2,798 B (1.0%) from 8.4.1. The full bundle is 400,755 B gzipped, up 5,279 B (1.3%) from 8.4.1.

Upgrading is npm install apexcharts@8.5.0.

Full changelog, with the detail behind each change: https://github.com/apexcharts/apexcharts.js/compare/v8.4.1...v8.5.0

3.3.11 is a security release. It stops clients that connect without an author token from all sharing one author (GHSA-746x-9w89-7xv6).

• Pads — clients without an author token no longer share one author (GHSA-746x-9w89-7xv6). Since the author token moved to an HttpOnly cookie, a pad connection that carried neither the cookie nor a legacy token resolved its token to null, and every such client was mapped to the same token2author:null author. Unrelated users (for example behind cookie blockers or in cross-site embeds) then appeared as one author and kicked each other off, and any of them counted as the creator of a pad another one had created, so they could delete it or change its pad-wide settings. A connection without a token now gets a fresh one for that session, and the access check does the same for HTTP callers such as import. Reported by @MaBeFHDW.

3.3.11 is a security release. It stops clients that connect without an author token from all sharing one author (GHSA-746x-9w89-7xv6).

• Pads — clients without an author token no longer share one author (GHSA-746x-9w89-7xv6). Since the author token moved to an HttpOnly cookie, a pad connection that carried neither the cookie nor a legacy token resolved its token to null, and every such client was mapped to the same token2author:null author. Unrelated users (for example behind cookie blockers or in cross-site embeds) then appeared as one author and kicked each other off, and any of them counted as the creator of a pad another one had created, so they could delete it or change its pad-wide settings. A connection without a token now gets a fresh one for that session, and the access check does the same for HTTP callers such as import. Reported by @MaBeFHDW.

• #1928 9b9a1ff Thanks @Juice10! - Add a top-level annotation event with record.addAnnotation() and replayer.on('annotation', handler). Annotation data uses type: 'caption' or type: 'timelineMarker'. Import annotationData from @rrweb/types to type annotation data. The player can display these annotations as captions and interactive timeline markers.

• #1971 235ae85 Thanks @eoghanmurray! - Fix record-side memory leaks and duplicate mutation emission:

  • Stopping a recording now releases the root document's mutation buffer and observer — previously the document observer was only disconnected, so each start/stop cycle leaked one buffer — and removes the cross-origin iframe message listener.
  • A same-origin iframe is observed once instead of re-observed on every full snapshot (checkoutEveryNth/checkoutEveryNms/manual takeFullSnapshot), so a single iframe mutation is no longer emitted once per checkout; its observers are also released when the iframe is removed or navigates away.
  • The untainted-MutationObserver helper iframe used on WebKit/Safari is reference-counted, so it is torn down only when the last observer stops and will get rebuilt for a later recording.

• #1958 009b2dd Thanks @salzahrani-salla! - fix: disconnect shadow-DOM observers when their host is removed

  Each observed shadow root kept a live MutationObserver plus its mutation buffer for the rest of the recording session even if its host was removed, a memory leak problem for component-heavy pages. Fix: release shadow observers and buffers as soon as we observe them as removed/detached from dom with tests added for the still-attached host-moved case, and to ensure they get re-observed on reinsertion.

• Updated dependencies [9b9a1ff, 235ae85, 009b2dd]:

  • @rrweb/types@2.2.0
  • @rrweb/utils@2.2.0
  • rrweb-snapshot@2.2.0
  • rrdom@2.2.0