4 hours ago
zip.js

v2.8.30

New features

  • Add the strictness option ("strict" | "balanced" | "tolerant", default "balanced") and maxAppendedDataSize option to ZipReader, controlling how appended data, prepended stubs, and ambiguous end-of-central-directory records are handled. checkAmbiguity: true is now an alias for "strict".
  • Add createOPFSTempStream() and the createTempStream writer option to spill large buffered entries to the OPFS instead of memory, with an optional dispose() hook released on every exit path.
  • Add FS#exportFileSystemHandle() and ZipDirectoryEntry#exportFileSystemHandle() to write an entry tree out to a FileSystemDirectoryHandle.

Security: End-of-central-directory selection

  • Select the last end-anchored record that points to a central directory instead of the first signature scanned from the end; refuse genuine comment-cloak polyglots with ERR_AMBIGUOUS_ARCHIVE.
  • Rank record reachability so empty or saturated bytes at the end of a comment can no longer forge a second record; genuine empty and zip64 archives still open.
  • Prefer the reconciled central-directory offset over a stale one, so an identical-layout append remnant exposes the appended directory rather than the previous one.
  • Apply the reachability check to the fallback scan, so a stray signature in appended data no longer hijacks recovery under tolerant. Security
  • Bound the reachability probes to prevent a comment stuffed with unreachable records from amplifying into thousands of (potentially remote) reads on random-access readers such as HttpRangeReader.

Performance

  • Speed up CRC-32 with a slice-by-8 implementation and by harvesting the CRC from the gzip trailer on the native CompressionStream.
6 hours ago
Babylon.js

9.16.2

Addons

Core

  • Prepare codebase for TypeScript 7 - by RaananW (#18689)
  • Serialization adjustments - by kv-bh (#18690)
  • Update material plugin regex replacement implementation - by kv-bh (#18680)
  • fix(AudioV2): fix seek-after-resume offset and propagate live loop changes - by RaananW (#18678)

Inspector

Loaders

  • fix(loaders): auto-register SceneLoader plugin when importing glTF/2.0 - by RaananW (#18679)

Materials

  • Fix WGSL water shader using undefined toLinearSpace on vec3 - by RaananW (#18682)

Sandbox

  • fix(sandbox): play correct animation when the animation list is filtered - by RaananW (#18687)

Serializers

Viewer

  • Add @babylonjs/lite-based Viewer variant (@babylonjs/viewer/lite) - by ryantrem (#18692)
7 hours ago
drawio
7 hours ago
electron

electron v43.1.1

Release Notes for v43.1.1

Fixes

  • Fixed a browser-process crash (ValidateIntegrityOrDie) and spurious preload ENOENT errors when an app's app.asar is replaced on disk (e.g. by an updater or MDM software) while the app is running. #52293 (Also in 42, 44)

Other Changes

  • Updated Chromium to 150.0.7871.114. #52297
7 hours ago
electron

electron v41.10.2

Release Notes for v41.10.2

Fixes

  • Fixed a renderer crash when calling WebAssembly.compileStreaming() or WebAssembly.instantiateStreaming() with nodeIntegration enabled. #52240 (Also in 42, 43)

Other Changes

  • Backported fixes from upstream Chromium. #52304
7 hours ago
electron

electron v42.6.2

Release Notes for v42.6.2

Fixes

  • Fixed a browser-process crash (ValidateIntegrityOrDie) and spurious preload ENOENT errors when an app's app.asar is replaced on disk (e.g. by an updater or MDM software) while the app is running. #52294 (Also in 43, 44)
  • Fixed an issue on Windows where BrowserWindow with useContentSize: true would clamp the content area smaller than the configured maxWidth / maxHeight when programmatically resizing beyond those constraints via setBounds, setSize, or setContentSize. #51622

Other Changes

  • Backported fixes from upstream Chromium. #52303
9 hours ago
jotai

v2.20.2

This release fixes a regression in some edge case introduced in v2.18.1.

What's Changed

Full Changelog: https://github.com/pmndrs/jotai/compare/v2.20.1...v2.20.2

9 hours ago
rspack

v2.1.4

Highlights

Faster ESM output builds

Building with output.module is now much faster. A lodash-es production build went from 503.8 ms to 161.6 ms (-67.9%).

Fine-grained import.meta parser options

module.parser.javascript.importMeta now accepts an object so each known import.meta property can be configured independently, on top of the existing true / false / 'preserve-unknown' values. Properties set to false are preserved for runtime evaluation, omitted properties keep their default behavior, and unknown properties are preserved. Both webpack-compatible keys (dirname, filename, main, url, webpack, webpackContext) and Rspack-specific keys (rspackHash, rspackPublicPath, glob, ...) are supported.

export default {
  module: {
    parser: {
      javascript: {
        importMeta: {
          // keep `import.meta.url` for runtime evaluation
          url: false,
          // keep the compile-time replacement of `import.meta.webpack`
          webpack: true,
        },
      },
    },
  },
};

Static worker URL output

module.parser.javascript.worker now accepts an object form with alias and url, alongside the existing boolean and string[] forms. With url: 'new-url-relative' and output.module enabled, Rspack emits a static new URL() expression for new Worker(new URL(..., import.meta.url)) instead of runtime code, honoring output.publicPath and output.workerPublicPath.

export default {
  output: {
    module: true,
    chunkFilename: '[name].bundle.js',
  },
  module: {
    parser: {
      javascript: {
        worker: {
          url: 'new-url-relative',
        },
      },
    },
  },
};
new Worker(new URL('./worker.js', import.meta.url));

// would become 👇
new Worker(new URL('./worker.bundle.js', import.meta.url));

What's Changed

New Features 🎉

Performance 🚀

Bug Fixes 🐞

Refactor 🔨

Other Changes

New Contributors

Full Changelog: https://github.com/web-infra-dev/rspack/compare/v2.1.3...v2.1.4

10 hours ago
shaka-player

v5.2.1

5.2.1 (2026-07-14)

Bug Fixes

  • Restore correct playhead position after MediaSource reload (#10335) (97327d5)
  • Transmux: Add device registration to the web worker (#10348) (cc75dbc)
  • Transmux: Fall back to main thread on worker transmux timeout (#10349) (2add6a8)
  • UI: Fix thumbnail preview not scaling with player size (#10333) (d865be8)
  • UI: Prevent playback rate menu from being cut off on narrow screens (#10343) (88d0519)
  • UI: Scope form element font inheritance to the player container (#10353) (9aa04be)
11 hours ago
shaka-player

v5.1.14

5.1.14 (2026-07-14)

Bug Fixes

  • Restore correct playhead position after MediaSource reload (#10335) (827fad6)
  • Retry the stall-breaking action when a stall persists (#10327) (374966b)
  • Support negative playback rate (reverse trick play) correctly (#10323) (f151b1c)
  • TS: Fix timestamps when a segment straddles the 33-bit PTS/DTS rollover (#10324) (c64ee0f)