2 hours ago
milkdown

v7.22.0

Please refer to CHANGELOG.md for details.

4 hours ago
mind-elixir-core

v5.15.0

5.15.0 - 2026-08-03

Breaking Changes

  • refresh(data) no longer applies data.theme. Theme handling is fully decoupled from refresh; call changeTheme(theme) explicitly when you need to switch themes (e.g. mind.changeTheme(data.theme) before/after mind.refresh(data)).
  • moveUpNode and moveDownNode no longer emit moveUpNode and moveDownNode operation events. They now reuse the existing moveNode flow and fire moveNodeBefore, moveNodeAfter, or moveNodeIn instead. Update any listeners accordingly.

Features

  • Add down layout support via direction: 3
  • Add genMembers build script for generating class member declarations from TypeScript compiler output

Bug Fixes

  • Prevent undo/redo when the map is not editable
  • Fix ctrl+k chord accidentally triggering refresh
  • Return move success status to control wheel event propagation
  • Clamp node movement within container center boundaries
  • Preserve line breaks when removing div on blur
  • Ensure correct sorting of range indices in summaries
  • Avoid mutating summaries during render
  • Set direction for new parent node in insertParent
  • Remove residual DOM after moveNodeIn
  • Handle root topic positioning without me-main ancestor in arrow rendering
  • Correct alignment centering for downward layout
  • Align padding and adjust subline drawing for first-level nodes
  • Fix DOWN direction addChild on root
  • Suppress context menu after right button panning
  • Prevent errors when node has no children in keypress handler
  • Make arrow control point drag work with operation history
  • Fire events before selecting nodes to support undo operations
  • Include reshapeArrow in arrow operation types for undo/redo
  • Sync selection state on unselectNodes to avoid stale history

Refactors

  • Refactor MindElixir to use class-based implementation
  • Replace codegen with direct TypeScript compiler API usage for generating type declarations
  • Optimize unionTopics filtering logic
  • Unify moveUpNode and moveDownNode logic with getMoveTarget helper
  • Improve calculation of anchor point on node border
  • Remove stroke-linecap style support from arrow component

Chores

  • Replace ESLint and Prettier with Biome for linting and formatting
  • Replace less with lightningcss and update config
  • Bump TypeScript to 7.x

Full Changelog: https://github.com/SSShooter/mind-elixir-core/compare/v5.14.0...v5.15.0

4 hours ago
video.js

v8.24.0

8.24.0 (2026-08-03)

Features

  • poster: add support for marking player as maincontent (#9173) (bf013ba)

Bug Fixes

  • focus the play toggle instead of the tech element on Edge to avoid a black frame with hardware-accelerated protected playback (#9217) (f337747)
  • lang: add missing Japanese (ja) translation for "Playing in Picture-in-Picture" (#9209) (adc132a)
  • lang: Update nn (Norwegian Nynorsk) translations (#9208) (60accc0)

Documentation

  • point Quick Start zencdn links at hosted 8.23.6 (#9215) (16fdbab)
  • types: document Player.error(null) for clearing MediaError (#9174) (1ce2b21)

netlify preview for this version

12 hours ago
hono

v4.12.34

Security fixes

This release includes fixes for the following security issues:

memo() retains SSR output across requests, leading to cross-user data disclosure

Affects: hono/jsx (server-side rendering). Fixes memo() reusing a retained render result across requests when props compare equal, where a component reading request-scoped values from ambient context — useContext(), useRequestContext(), or getContext() — could serve HTML rendered for another user's request, disclosing account data or request-scoped secrets such as CSRF tokens. GHSA-f23p-vx2j-j53r

ReDoS in CORS middleware via Access-Control-Request-Headers

Affects: hono/cors. Fixes a whitespace-tolerant regular expression with quadratic backtracking used to parse the Access-Control-Request-Headers preflight header when allowHeaders is not configured (the default), where a single preflight request carrying a long whitespace run could consume seconds of CPU and stall request processing. GHSA-8j4g-w8fx-2239

Algorithmic complexity DoS in Language Middleware

Affects: hono/language. Fixes quadratic string processing in language-tag normalization, where a crafted language tag with a large number of hyphen-separated subtags — supplied via a query parameter, cookie, or Accept-Language header — could cause excessive CPU consumption and block the event loop. GHSA-54fx-42gc-7vw4

Proxy Helper does not remove response headers listed in the Connection header

Affects: hono/proxy. Fixes proxy() forwarding response headers that the origin's Connection header designates as connection-scoped, where headers intended only for the immediate peer — per RFC 9110 Section 7.6.1 — could be exposed to clients, disclosing connection-scoped or internal metadata. GHSA-79qm-7rj5-m7r9


Users who use hono/jsx for server-side rendering, hono/cors, hono/language, or hono/proxy are strongly encouraged to upgrade to this version.

13 hours ago
slidev

v52.19.0

   🐞 Bug Fixes

14 hours ago
next.js

v16.3.0-canary.107

Misc Changes

  • Enable Turbopack build filesystem cache by default: #96493

Credits

Huge thanks to @timneutkens for helping!

15 hours ago
leafer-ui
16 hours ago
formatjs

@formatjs/cli-native-win32-x64: 1.1.11

1.1.11 (2026-08-02)

What's Changed

Full Changelog: https://github.com/formatjs/formatjs/compare/@formatjs/cli-native-win32-x64@1.1.10...@formatjs/cli-native-win32-x64@1.1.11

16 hours ago
formatjs

@formatjs/cli: 6.16.16

6.16.16 (2026-08-02)

What's Changed

Full Changelog: https://github.com/formatjs/formatjs/compare/@formatjs/cli@6.16.15...@formatjs/cli@6.16.16

Dependencies

  • The following workspace dependencies were updated
    • optionalDependencies
      • @formatjs/cli-native-darwin-arm64 bumped to 1.1.10
      • @formatjs/cli-native-linux-arm64 bumped to 1.2.10
      • @formatjs/cli-native-linux-arm64-musl bumped to 1.0.8
      • @formatjs/cli-native-linux-x64 bumped to 1.1.10
      • @formatjs/cli-native-linux-x64-musl bumped to 1.0.8
      • @formatjs/cli-native-win32-x64 bumped to 1.1.11