3 hours ago
engine

v2.20.3

Fixes

  • Fix MSDF anti-aliasing derived from UV magnification, not field gradient by @willeastcott in #8990
  • Add public app getter to ResourceHandler, mark _app protected by @mvaligursky in #8991
  • Document IndexBuffer storage can be ArrayBuffer or typed array by @mvaligursky in #8988
  • Exclude @ignore typedefs from generated API docs by @mvaligursky in #8989

Full Changelog: https://github.com/playcanvas/engine/compare/v2.20.2...v2.20.3

5 hours ago
astro

@astrojs/rss@4.0.19

Patch Changes

  • #17209 fbcfa03 Thanks @matthewp! - Hardens RSS feed generation by escaping the source and enclosure item fields. These fields are now serialized as structured XML values, ensuring that special characters in values like source.title and enclosure.type are always treated as text rather than markup, consistent with how other feed fields are handled.
5 hours ago
astro

create-astro@5.2.1

Patch Changes

5 hours ago
astro

astro@7.0.4

Patch Changes

  • #17212 7ba0bb1 Thanks @matthewp! - Ensures transition directive values are HTML-escaped when rendered on hydrated islands

  • #17224 dc5e52f Thanks @astrobot-houston! - Fixes trailing slash handling for dynamic file endpoints in dev mode. Dynamic file endpoints (e.g., src/pages/api/[name].json.ts) with trailingSlash: "always" incorrectly required a trailing slash in dev mode, returning 404 for /api/bar.json and 200 for /api/bar.json/.

  • #17067 23f9446 Thanks @fkatsuhiro! - Fixed a bug where the development toolbar did not output a warning even though the implicit ARIA role and the manually specified role were duplicated.

  • #17234 d5fbee8 Thanks @ocavue! - Adds support for sharp v0.35. pnpm users no longer need to approve sharp's build script (see allowBuilds) when on v0.35.

  • #17223 5970ef4 Thanks @astrobot-houston! - Fixes getCollection() returning empty in dev mode for large content collections (500k+ entries)

  • #17184 799e5cd Thanks @Princesseuh! - Upgrades the Rust compiler to the latest, which fixes some bugs. Refer to its changelog for more information.

  • #17208 da8b573 Thanks @matthewp! - Hardens forwarded header handling so the internal request helper validates X-Forwarded-Host against security.allowedDomains before trusting X-Forwarded-For for clientAddress. Previously it only checked that the header was present, which was inconsistent with the public createRequest helper. This aligns both code paths; behavior is unchanged for correctly configured proxies.

5 hours ago
astro

@astrojs/cloudflare@14.0.2

Patch Changes

  • #17049 ffceaa2 Thanks @astrobot-houston! - Fixes prerender errors being silently swallowed when pages throw during rendering in workerd, causing astro build to exit 0 and emit truncated HTML. The response body is now fully buffered inside workerd before being sent back to the build process, so streaming errors are caught and surfaced as build failures with clear error messages.

  • Updated dependencies []:

    • @astrojs/underscore-redirects@1.0.3
5 hours ago
plate

v53.3.0

@platejs/ai

Minor Changes

Full changelog: v53.2.4...v53.3.0

5 hours ago
sharp

v0.35.3-rc.2

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

  • Improve code bundler support by resolving path to libvips binary.

  • Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

  • Emit warning about binaries provided by Electron for use on Linux.

  • Add hasAlpha property to output info. #4500

  • TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @Andarist

  • Bound clahe width and height to avoid signed overflow. #4551 @metsw24-max

  • Bound trim margin to avoid signed overflow. #4552 @metsw24-max

  • Reject infinite values when validating numbers. #4553 @metsw24-max

  • Bound extract region to libvips coordinate limit. #4555 @metsw24-max

  • Verify background colour values are numbers. #4556 @metsw24-max

  • Bound create and raw input dimensions to coordinate limit. #4558 @metsw24-max

  • Tighten recomb and affine matrix verification. #4560 @chatman-media

  • Verify cache memory limit to avoid overflow. #4561 @metsw24-max

6 hours ago
leafer-ui
7 hours ago
vite

create-vite@9.1.1

Please refer to CHANGELOG.md for details.