[PR #8830] [MERGED] chore(deps-dev): bump happy-dom from 20.7.0 to 20.8.9 #25141

Closed
opened 2026-04-15 22:44:19 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/better-auth/better-auth/pull/8830
Author: @dependabot[bot]
Created: 3/29/2026
Status: Merged
Merged: 4/2/2026
Merged by: @bytaesu

Base: mainHead: dependabot/npm_and_yarn/happy-dom-20.8.9


📝 Commits (2)

  • 5093384 chore(deps-dev): bump happy-dom from 20.7.0 to 20.8.9
  • 98286c8 Merge branch 'main' into dependabot/npm_and_yarn/happy-dom-20.8.9

📊 Changes

2 files changed (+340 additions, -254 deletions)

View changed files

📝 packages/better-auth/package.json (+1 -1)
📝 pnpm-lock.yaml (+339 -253)

📄 Description

Bumps happy-dom from 20.7.0 to 20.8.9.

Release notes

Sourced from happy-dom's releases.

v20.8.9

👷‍♂️ Patch fixes

  • Fixes issue where cookies from the current origin was being forwarded to the target origin in fetch requests - By @​capricorn86 in task #2117

v20.8.8

👷‍♂️ Patch fixes

  • Fixes issue where export names can be interpolated as executable code in ESM - By @​capricorn86 in task #2113
    • A security advisory (GHSA-6q6h-j7hj-3r64) has been reported that shows a security vulnerability where it may be possible to escape the VM context and get access to process level functionality in unsafe environments using CommonJS. Big thanks to @​tndud042713 for reporting this!

v20.8.7

👷‍♂️ Patch fixes

  • Replace implementing Node.js Console with common IConsole interface to support latest version of Bun - By @​YevheniiKotyrlo in task #1845

v20.8.6

👷‍♂️ Patch fixes

v20.8.5

👷‍♂️ Patch fixes

  • Fixes error thrown when modifying DOM structure in connectedCallback() - By @​capricorn86 in task #2110

v20.8.4

👷‍♂️ Patch fixes

v20.8.3

👷‍♂️ Patch fixes

  • Throw error if event is not of type Event in EventTarget.dispatchEvent() - By @​capricorn86 in task #2054

v20.8.2

👷‍♂️ Patch fixes

  • Resets Event.cancelBubble and Event.defaultPrevented when calling Event.initEvent() - By @​capricorn86 in task #2090

v20.8.1

👷‍♂️ Patch fixes

v20.8.0

🎨 Features

  • Adds support for setPointerCapture, hasPointerCapture, and releasePointerCapture to Element - By @​coffeeandwork in task #1733

v20.7.2

👷‍♂️ Patch fixes

  • Properly decode CSS escape sequences in attribute selector values - By @​silverwind

v20.7.1

👷‍♂️ Patch fixes

  • Fixes issue related to parsing direct descendants (>) and universal (*) query selectors - By @​Cherry in task #2078
Commits
  • 68324c2 fix: #2117 Fixes issue related to cookies from the current origin being for...
  • 5437fdf fix: #2113 Fixes issue where export names can be interpolated as executable...
  • 7e97acb fix: #1845 Replace implementing Node js Console with common IConsole interf...
  • 3373929 fix: #2106 Request.formData() should honor Content-Type header (#2107)
  • 55c17ba fix: #2110 Fixes error thrown when modifying DOM structure in connectedCall...
  • 82a0888 fix: #1845 Replace ConsoleConstructor import with indexed access type (#2095)
  • 5998eea fix: #2054 Throw error if event is not of type Event in dispatchEvent (#2092)
  • 7a11238 fix: #2090 Resets cancelBubble and defaultPrevented when calling initEvent ...
  • 7d27984 fix: #1422 Make inert attribute block focus interactions (#2083)
  • 53e4ec9 feat: #1733 Adds support for setPointerCapture, hasPointerCapture, and rele...
  • Additional commits viewable in compare view


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/better-auth/better-auth/pull/8830 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/29/2026 **Status:** ✅ Merged **Merged:** 4/2/2026 **Merged by:** [@bytaesu](https://github.com/bytaesu) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/happy-dom-20.8.9` --- ### 📝 Commits (2) - [`5093384`](https://github.com/better-auth/better-auth/commit/5093384ce8b1c450c8520160bf562586299763fa) chore(deps-dev): bump happy-dom from 20.7.0 to 20.8.9 - [`98286c8`](https://github.com/better-auth/better-auth/commit/98286c8a4a8edc616034c4102ad226944d64cef4) Merge branch 'main' into dependabot/npm_and_yarn/happy-dom-20.8.9 ### 📊 Changes **2 files changed** (+340 additions, -254 deletions) <details> <summary>View changed files</summary> 📝 `packages/better-auth/package.json` (+1 -1) 📝 `pnpm-lock.yaml` (+339 -253) </details> ### 📄 Description Bumps [happy-dom](https://github.com/capricorn86/happy-dom) from 20.7.0 to 20.8.9. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/capricorn86/happy-dom/releases">happy-dom's releases</a>.</em></p> <blockquote> <h2>v20.8.9</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li>Fixes issue where cookies from the current origin was being forwarded to the target origin in fetch requests - By <strong><a href="https://github.com/capricorn86"><code>@​capricorn86</code></a></strong> in task <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2117">#2117</a> <ul> <li>A security advisory (<a href="https://github.com/capricorn86/happy-dom/security/advisories/GHSA-w4gp-fjgq-3q4g">GHSA-w4gp-fjgq-3q4g</a>) was reported for this security vulnerability. Big thanks to <a href="https://github.com/r74tech"><code>@​r74tech</code></a> for reporting this!</li> </ul> </li> </ul> <h2>v20.8.8</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li>Fixes issue where export names can be interpolated as executable code in ESM - By <strong><a href="https://github.com/capricorn86"><code>@​capricorn86</code></a></strong> in task <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2113">#2113</a> <ul> <li>A security advisory (<a href="https://github.com/capricorn86/happy-dom/security/advisories/GHSA-6q6h-j7hj-3r64">GHSA-6q6h-j7hj-3r64</a>) has been reported that shows a security vulnerability where it may be possible to escape the VM context and get access to process level functionality in unsafe environments using CommonJS. Big thanks to <a href="https://github.com/tndud042713"><code>@​tndud042713</code></a> for reporting this!</li> </ul> </li> </ul> <h2>v20.8.7</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li>Replace implementing Node.js <code>Console</code> with common <code>IConsole</code> interface to support latest version of Bun - By <strong><a href="https://github.com/YevheniiKotyrlo"><code>@​YevheniiKotyrlo</code></a></strong> in task <a href="https://redirect.github.com/capricorn86/happy-dom/issues/1845">#1845</a></li> </ul> <h2>v20.8.6</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li><code>Request.formData()</code> should honor &quot;Content-Type&quot; header - By <strong><a href="https://github.com/brianhelba"><code>@​brianhelba</code></a></strong> in task <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2106">#2106</a></li> </ul> <h2>v20.8.5</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li>Fixes error thrown when modifying DOM structure in <code>connectedCallback()</code> - By <strong><a href="https://github.com/capricorn86"><code>@​capricorn86</code></a></strong> in task <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2110">#2110</a></li> </ul> <h2>v20.8.4</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li>Replace ConsoleConstructor import with indexed access type - By <strong><a href="https://github.com/YevheniiKotyrlo"><code>@​YevheniiKotyrlo</code></a></strong> in task <a href="https://redirect.github.com/capricorn86/happy-dom/issues/1845">#1845</a></li> </ul> <h2>v20.8.3</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li>Throw error if event is not of type <code>Event</code> in <code>EventTarget.dispatchEvent()</code> - By <strong><a href="https://github.com/capricorn86"><code>@​capricorn86</code></a></strong> in task <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2054">#2054</a></li> </ul> <h2>v20.8.2</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li>Resets <code>Event.cancelBubble</code> and <code>Event.defaultPrevented</code> when calling <code>Event.initEvent()</code> - By <strong><a href="https://github.com/capricorn86"><code>@​capricorn86</code></a></strong> in task <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2090">#2090</a></li> </ul> <h2>v20.8.1</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li>Make &quot;inert&quot; attribute block focus interactions - By <strong><a href="https://github.com/coffeeandwork"><code>@​coffeeandwork</code></a></strong> in task <a href="https://redirect.github.com/capricorn86/happy-dom/issues/1422">#1422</a></li> </ul> <h2>v20.8.0</h2> <h3>:art: Features</h3> <ul> <li>Adds support for setPointerCapture, hasPointerCapture, and releasePointerCapture to Element - By <strong><a href="https://github.com/coffeeandwork"><code>@​coffeeandwork</code></a></strong> in task <a href="https://redirect.github.com/capricorn86/happy-dom/issues/1733">#1733</a></li> </ul> <h2>v20.7.2</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li>Properly decode CSS escape sequences in attribute selector values - By <strong><a href="https://github.com/silverwind"><code>@​silverwind</code></a></strong></li> </ul> <h2>v20.7.1</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li>Fixes issue related to parsing direct descendants (<code>&gt;</code>) and universal (<code>*</code>) query selectors - By <strong><a href="https://github.com/Cherry"><code>@​Cherry</code></a></strong> in task <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2078">#2078</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/capricorn86/happy-dom/commit/68324c21d7b98f53f7bb5a7b3e185bda7106e751"><code>68324c2</code></a> fix: <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2117">#2117</a> Fixes issue related to cookies from the current origin being for...</li> <li><a href="https://github.com/capricorn86/happy-dom/commit/5437fdf8f13adb9590f9f52616d9f69c3ee8db3c"><code>5437fdf</code></a> fix: <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2113">#2113</a> Fixes issue where export names can be interpolated as executable...</li> <li><a href="https://github.com/capricorn86/happy-dom/commit/7e97acbc0de9e9e8515b828bb1bb60f6c65eae44"><code>7e97acb</code></a> fix: <a href="https://redirect.github.com/capricorn86/happy-dom/issues/1845">#1845</a> Replace implementing Node js Console with common IConsole interf...</li> <li><a href="https://github.com/capricorn86/happy-dom/commit/3373929819a55988218a32c06816c5754828f59d"><code>3373929</code></a> fix: <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2106">#2106</a> <code>Request.formData()</code> should honor <code>Content-Type</code> header (<a href="https://redirect.github.com/capricorn86/happy-dom/issues/2107">#2107</a>)</li> <li><a href="https://github.com/capricorn86/happy-dom/commit/55c17ba6d2883ce54010b041be165db8f6c5c974"><code>55c17ba</code></a> fix: <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2110">#2110</a> Fixes error thrown when modifying DOM structure in connectedCall...</li> <li><a href="https://github.com/capricorn86/happy-dom/commit/82a0888cb2c87a6123e05424b528f8e8c9b3e426"><code>82a0888</code></a> fix: <a href="https://redirect.github.com/capricorn86/happy-dom/issues/1845">#1845</a> Replace ConsoleConstructor import with indexed access type (<a href="https://redirect.github.com/capricorn86/happy-dom/issues/2095">#2095</a>)</li> <li><a href="https://github.com/capricorn86/happy-dom/commit/5998eeaea5455cda9556675c6b92bea7ec85642b"><code>5998eea</code></a> fix: <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2054">#2054</a> Throw error if event is not of type Event in dispatchEvent (<a href="https://redirect.github.com/capricorn86/happy-dom/issues/2092">#2092</a>)</li> <li><a href="https://github.com/capricorn86/happy-dom/commit/7a11238eace2fab69eb6bff13c2eeb0b7f7caa40"><code>7a11238</code></a> fix: <a href="https://redirect.github.com/capricorn86/happy-dom/issues/2090">#2090</a> Resets cancelBubble and defaultPrevented when calling initEvent ...</li> <li><a href="https://github.com/capricorn86/happy-dom/commit/7d27984affe0dcfc2827d1568fa6b950905a8482"><code>7d27984</code></a> fix: <a href="https://redirect.github.com/capricorn86/happy-dom/issues/1422">#1422</a> Make inert attribute block focus interactions (<a href="https://redirect.github.com/capricorn86/happy-dom/issues/2083">#2083</a>)</li> <li><a href="https://github.com/capricorn86/happy-dom/commit/53e4ec974a8c8f66db7cd55c9553e7e8281185bf"><code>53e4ec9</code></a> feat: <a href="https://redirect.github.com/capricorn86/happy-dom/issues/1733">#1733</a> Adds support for setPointerCapture, hasPointerCapture, and rele...</li> <li>Additional commits viewable in <a href="https://github.com/capricorn86/happy-dom/compare/v20.7.0...v20.8.9">compare view</a></li> </ul> </details> <br /> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-15 22:44:19 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#25141