2026-07-26

• Sanitize illegal characters preserved modules input base (#6439)

• #6421: docs: update x_google_ignoreList link to canonical URL (@DucMinhNe, @lukastaegert)
• #6422: fix(deps): update minor/patch updates (@renovate[bot], @lukastaegert)
• #6423: chore(deps): update actions/checkout action to v7 (@renovate[bot])
• #6424: chore(deps): update dependency eslint-plugin-unicorn to v68 (@renovate[bot], @lukastaegert)
• #6425: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)
• #6426: chore(deps): lock file maintenance (@renovate[bot])
• #6432: fix: make isLegal idempotent by not using a global-flag regex (@spokodev, @lukastaegert)
• #6433: docs: clarify sideEffects and moduleSideEffects (@ishaanlabs-gg, @lukastaegert)
• #6434: chore(deps): update dtolnay/rust-toolchain digest to 4be7066 (@renovate[bot], @lukastaegert)
• #6435: fix(deps): update minor/patch updates (@renovate[bot])
• #6436: chore(deps): update actions/cache action to v6 (@renovate[bot])
• #6438: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)
• #6439: Sanitize input base before computing preserved module chunk names (@MahinAnowar, @lukastaegert)
• #6443: chore(deps): update dependency eslint-plugin-unicorn to v71 (@renovate[bot], @lukastaegert)
• #6444: fix(deps): update rust crate swc_compiler_base to v60 (@renovate[bot])
• #6446: chore(deps): update dtolnay/rust-toolchain digest to 4cda84d (@renovate[bot])
• #6447: fix(deps): update minor/patch updates (@renovate[bot])
• #6448: chore(deps): update actions/setup-node action to v7 (@renovate[bot])
• #6449: chore(deps): update dependency eslint-plugin-unicorn to v72 (@renovate[bot])
• #6450: chore(deps): update dependency pinia to v4 (@renovate[bot], @lukastaegert)
• #6451: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)
• #6455: docs: fix broken commonjs namedExports link in troubleshooting (@Hashim1999164, @lukastaegert)
• #6456: fix(deps): update minor/patch updates (@renovate[bot])
• #6457: chore(deps): update dependency magic-string to v1 (@renovate[bot], @lukastaegert)
• #6458: fix(deps): update swc monorepo (major) (@renovate[bot])
• #6459: chore(deps): lock file maintenance (@renovate[bot])
• #6460: Fix build:docs after rollup update (@lukastaegert)

See CHANGELOG.md for details.

Full Changelog: https://github.com/rari-build/rari/compare/create-rari-app@0.5.18...create-rari-app@0.5.19

See CHANGELOG.md for details.

Full Changelog: https://github.com/rari-build/rari/compare/rari@0.15.5...rari@0.15.6

See CHANGELOG.md for details.

Full Changelog: https://github.com/rari-build/rari/compare/@rari/use-cache@0.15.5...@rari/use-cache@0.15.6

See CHANGELOG.md for details.

Full Changelog: https://github.com/rari-build/rari/compare/v0.15.5...v0.15.6

• fix(sandbox): release one-shot timeout ids after they run: #96161
• Fix dev overlay symbolication for project paths needing percent-encoding: #96221
• [internal] Add a skill for benching changes in a sandbox: #95943
• Run dev validation in process when using Webpack: #96219
• Read chunk source maps from disk in the dev validation worker: #96218
• Retry the source map lookup with a plain path: #96215
• Pass fallback params to the dev validation worker as maps: #96210
• [sourcemaps] Reuse source map payloads and consumers across stack frames: #96198
• fix: release compression stream when client disconnects mid-response: #96173
• Run Cache Components dev validation on a worker thread: #96153
• Add a benchmark for dev Cache Components validation on a worker thread: #96152
• [test] Unflake the enabled-features-trace test suite: #96175
• [refactor] Prepare dev validation for running on a worker thread: #96151
• Add the experimental.devValidationWorker config flag: #96150
• [refactor] Model dev validation render outputs as a discriminated union: #96149
• Forward dev invalid dynamic usage errors from the render, not validation: #96148
• Optimize implicit cache tag derivation: #96120
• Avoid quadratic HMR queue shifts: #96137

Huge thanks to @petehunt, @gaearon, @unstubbable, and @marcoshernanz for helping!

Full Changelog: https://github.com/zumerlab/snapdom/compare/v2.18.0...v2.22.0

• @dylan1951 made their first contribution in https://github.com/zumerlab/snapdom/pull/464
• @hjl12345 made their first contribution in https://github.com/zumerlab/snapdom/pull/471

Features

• Added a filteredCount getter to the tree API, reporting how many nodes match the current searchTerm across the whole tree (regardless of which folders are open), or 0 when there is no active search. Consumers can now render a match count or a "no results" message via isFiltered && filteredCount === 0 instead of inspecting visibleNodes (issues #112 and #256). (#383)

Fixes

• The default searchMatch no longer searches a node's children. It previously stringified every value of the node's data, the children array included, so each ancestor of a match counted as a match itself, and terms like id or name matched every folder by hitting keys nested in the children data. The filtered list is unchanged — parents of a match are still shown to keep the tree's structure — but tree.filteredCount now reports real matches. (#383)

• Backport/docs fixes 16.2 - July round by @icyJoseph in https://github.com/vercel/next.js/pull/96031
• [Backport] Fixes to support TypeScript 7 by @lukesandberg in https://github.com/vercel/next.js/pull/95831

Full Changelog: https://github.com/vercel/next.js/compare/v16.2.11...v16.2.12

• [15.5] Reject TypeScript >= 7.0 with an actionable error by @lukesandberg in https://github.com/vercel/next.js/pull/96110

Full Changelog: https://github.com/vercel/next.js/compare/v15.5.21...v15.5.22