• close HTTP requests with invalid content type (fc11285)
• handle invalid packets when upgrading to WebTransport (1fa1f46)
• prevent WebTransport connections when a middleware is registered (d1f5aa9)

• ws@~8.18.3 (no change)

Release 2026-04-27 07:58

• router-core: wildcard nodes respect DFS priority like other nodes in route matching (#7273) (493148bc53) by @Sheraff

• @tanstack/react-router@1.168.25
• @tanstack/react-start@1.167.50
• @tanstack/react-start-client@1.166.43
• @tanstack/react-start-rsc@0.0.29
• @tanstack/react-start-server@1.166.44
• @tanstack/router-cli@1.166.37
• @tanstack/router-core@1.168.17
• @tanstack/router-generator@1.166.36
• @tanstack/router-plugin@1.167.28
• @tanstack/router-vite-plugin@1.166.43
• @tanstack/solid-router@1.168.25
• @tanstack/solid-start@1.167.48
• @tanstack/solid-start-client@1.166.42
• @tanstack/solid-start-server@1.166.43
• @tanstack/start-client-core@1.167.20
• @tanstack/start-plugin-core@1.169.6
• @tanstack/start-server-core@1.167.22
• @tanstack/start-static-server-functions@1.166.36
• @tanstack/start-storage-context@1.166.31
• @tanstack/vue-router@1.168.21
• @tanstack/vue-start@1.167.44
• @tanstack/vue-start-client@1.166.38
• @tanstack/vue-start-server@1.166.39

• Input
  • 🐞 Fix Input.OTP masked value being visible when selected on Windows. #57689 @QDyanbing
  • ⌨️ Improve Input accessibility for the clear button. #57432 @cyphercodes
• 🐞 Fix Card rendering an empty body wrapper when no content was provided. #57735 @QDyanbing
• 🐞 Fix InputNumber selection highlight radius. #57705 @QDyanbing
• 🐞 Fix Tooltip semantic configs such as className, styles, etc. leaking into Popover and Popconfirm from ConfigProvider. #57731 @pikanohup
• 🐞 Fix Typography.Link cannot trigger action buttons such as copy, edit, etc. when disabled. #57762 @aviu16
• 🐞 Fix ConfigProvider language packs export from ESM/CJS dist files. #57318 @ug-hero
• 💄 Fix Alert focus styles for the close button. #57695 @KittyGiraudel

• Input
  • 🐞 修复 Input.OTP 在 Windows 下选中文本时可能显示真实值的问题。#57689 @QDyanbing
  • ⌨️ 优化 Input 清除按钮的可访问性。#57432 @cyphercodes
• 🐞 修复 Card 在未传入内容时仍渲染空 body 容器的问题。#57735 @QDyanbing
• 🐞 修复 InputNumber 选中文本时的高亮圆角问题。#57705 @QDyanbing
• 🐞 修复 Tooltip 的 ConfigProvider 语义化配置比如 className、styles 等泄漏到 Popover 和 Popconfirm 的问题。#57731 @pikanohup
• 🐞 修复 Typography.Link 在 disabled 状态下无法触发复制、编辑等操作按钮的问题。#57762 @aviu16
• 🐞 修复 ESM/CJS 默认导出 ConfigProvider 语言包失效的问题。#57318 @ug-hero
• 💄 修复 Alert 的关闭按钮没有焦点样式的问题。#57695 @KittyGiraudel

• Zmage.browsing() 在 React 18+ 下返回 undefined(历史遗留 bug)。imperative 入口同步读 RENDER.REF.current?.outBrowsing,但 R18+ 的 createRoot.render 是异步 commit,callee 返回时 ref 还是 null。改为返回稳定 destructor 闭包,惰性解引用。
• <Zmage.Wrapper> 点击 img 时模态空白,浏览器报 "empty src" 警告。Wrapper 把 defaultProps.src='' 通过 restProps 灌进 callee,覆盖了被点击 img 的真实 src。改为显式从被点击 DOM 的 src / alt 读取。
• R18+ ESM 消费方(Vite / Next.js client)调用 imperative API 抛 "no compatible mount API"。callee 用 require('react-dom/client') 做运行时探测,但浏览器 ESM 没有 require 全局,被 try/catch 静默吞掉,落到 R19 已删除的 ReactDOM.render。改为静态 import,tsup external 保留 by build 格式分发。
• 使用 Tailwind preflight / normalize.css / Bootstrap 等全局 img reset 的项目中,放大模式起始尺寸异常。模态 <img> 在 lib 的 transform: scale() 之前就被全局 img { max-width: 100% } 截断到父容器宽度,再叠加缩放,呈现"从更小尺寸开始放大"。.imageLayer 显式松绑尺寸约束抵御宿主侧 reset。

• 类型兼容 @types/react@19(全局 JSX namespace 移除、legacy ReactDOM.render 类型移除)。
• 测试环境对齐 React 19(@testing-library/react 升至 16,vitest resolve.alias 防御性锁定 react/react-dom 路径)。

• `Zmage.browsing()` returned undefined under React 18+ (latent bug). The imperative entry read `RENDER.REF.current?.outBrowsing` synchronously, but R18+'s `createRoot.render` commits asynchronously — by the time `callee()` returned, the ref was still `null`. Now returns a stable destructor closure that resolves the ref lazily.
• `<Zmage.Wrapper>` opened a blank modal on img click and logged an "empty src" warning. The wrapper spread `defaultProps.src=''` via `restProps` into the `callee` call, overriding the clicked image's actual src. Now reads `src` / `alt` from the clicked DOM node explicitly.
• Imperative API threw "no compatible mount API" in R18+ ESM consumers (Vite / Next.js client). `callee` used `require('react-dom/client')` for runtime detection, but browser ESM has no `require` global; the `try/catch` swallowed it and fell through to R19's removed `ReactDOM.render`. Switched to a static import — tsup keeps it external, ESM dist emits a real `import`, CJS dist emits `require`.
• Modal image started smaller than the cover when the host site applied a global img reset (Tailwind preflight, normalize.css, Bootstrap, etc.). The modal `` was clamped by `img { max-width: 100% }` before the lib's `transform: scale()` ran, producing a "double-shrink" effect. `.imageLayer` now explicitly unsets `max-width` / `max-height` / `width` / `height` constraints to defend against host-side resets.

• Type compatibility with `@types/react@19` (global `JSX` namespace removal, legacy `ReactDOM.render` type removal).
• Test env aligned to React 19 (`@testing-library/react` bumped to 16, vitest `resolve.alias` defensively locks react / react-dom paths).

• Angular +19 with proper lazy init (#1158)

• 控制条图标全面替换为 Lucide 风格描边图标(shadcn/ui 配套的图标族),更锐利、更贴合现代 UI
• 涵盖 7 个图标:旋转(左/右)、下载、放大、关闭、翻页(左/右)
• API 完全兼容,升级无需修改任何代码;沿用 controller 配置自定义颜色 / 替换图标

• 控制条容器改用 padding 替代 :first-of-type / :last-of-type 边距,布局责任更清晰
• 4 个图标统一尺寸基准(.pinButton > svg 一处声明),修复以往 close 与其他图标视觉权重不一致
• viewBox 微调到 0 0 23 23 配合 strokeWidth=2 的 anti-aliasing,消除部分 DPR 下感知到的居中偏移
• 演示页 dev banner 不再覆盖 zmage 模态层

• All control bar icons rewritten in Lucide stroke style (the icon family bundled with shadcn/ui) — sharper and more aligned with modern UI conventions
• Covers 7 icons: rotate (L/R), download, zoom, close, flip (L/R)
• API fully backwards-compatible — no code changes required; existing controller configs for color / custom icons keep working

• Control bar container now uses padding instead of :first-of-type / :last-of-type margins — cleaner separation of layout responsibility
• Unified icon sizing baseline declared once in .pinButton > svg, fixing the visual-weight inconsistency between close and other icons
• viewBox tuned to 0 0 23 23 to compensate for stroke anti-aliasing offset perceptible on certain DPRs
• Demo site dev banner no longer covers the zmage modal

• Accessibility pass: corrected dialog semantics, improved focus management, added missing icon labels, and set the html lang attribute correctly.
• Chat: clicking the chat icon works again, disabled toggles render properly, and the username layout no longer overflows.
• /export/etherpad now honors the :rev URL segment, so revision-specific exports return the requested revision instead of the latest.
• Undo / redo now scrolls the viewport to follow the caret, so reverted edits stay in view.
• Page Down / Page Up now scrolls by viewport height instead of a fixed line count, matching standard editor behavior on tall and short windows alike.
• Editbar: caret is restored to the pad after changing a toolbar select, so typing continues in the document instead of falling through to the toolbar.
• Admin: i18n is restored on /admin so the admin UI is translated again.