Add support for with { type: 'text' } imports (#4435)
The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:
import string from './example.txt' with { type: 'text' }
console.log(string)
Add integrity checks to fallback download path (#4343)
Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).
This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.
Update the Go compiler from 1.25.7 to 1.26.1
This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:
Fix lowering of define semantics for TypeScript parameter properties (#4421)
The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:
// Original code
class Foo {
constructor(public x = 1) {}
y = 2
}
Add support for with { type: 'text' } imports (#4435)
The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:
import string from './example.txt' with { type: 'text' }
console.log(string)
Add integrity checks to fallback download path (#4343)
Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).
This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.
Update the Go compiler from 1.25.7 to 1.26.1
This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:
Fix lowering of define semantics for TypeScript parameter properties (#4421)
The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:
// Original code
class Foo {
constructor(public x = 1) {}
y = 2
}
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/pangolin/pull/2794
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 4/6/2026
**Status:** 🔄 Open
**Base:** `main` ← **Head:** `dependabot/npm_and_yarn/dev-minor-updates-f95b439458`
---
### 📝 Commits (1)
- [`fbcf26d`](https://github.com/fosrl/pangolin/commit/fbcf26da85fead56f432c1acb7fc0bf7252555e3) Bump the dev-minor-updates group across 1 directory with 9 updates
### 📊 Changes
**2 files changed** (+291 additions, -264 deletions)
<details>
<summary>View changed files</summary>
📝 `package-lock.json` (+281 -254)
📝 `package.json` (+10 -10)
</details>
### 📄 Description
Bumps the dev-minor-updates group with 9 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@dotenvx/dotenvx](https://github.com/dotenvx/dotenvx) | `1.54.1` | `1.60.0` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.91.3` | `5.96.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.3.5` | `25.5.2` |
| [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.18.0` | `8.20.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.27.4` | `0.28.0` |
| [esbuild-node-externals](https://github.com/pradel/esbuild-node-externals) | `1.20.1` | `1.21.0` |
| [eslint](https://github.com/eslint/eslint) | `10.0.3` | `10.2.0` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.1.7` | `16.2.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.56.1` | `8.58.0` |
Updates `@dotenvx/dotenvx` from 1.54.1 to 1.60.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/dotenvx/dotenvx/releases"><code>@dotenvx/dotenvx</code>'s releases</a>.</em></p>
<blockquote>
<h2>v1.60.0</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
<h2>v1.59.1</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
<h2>v1.59.0</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
<h2>v1.58.0</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
<h2>v1.57.5</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
<h2>v1.57.4</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
<h2>v1.57.3</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
<h2>v1.57.2</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
<h2>v1.57.1</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
<h2>v1.57.0</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
<h2>v1.56.0</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
<h2>v1.55.1</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
<h2>v1.55.0</h2>
<p>see <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md">CHANGELOG</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md"><code>@dotenvx/dotenvx</code>'s changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/dotenvx/dotenvx/compare/v1.59.1...v1.60.0">1.60.0</a> (2026-04-04)</h2>
<h3>Added</h3>
<ul>
<li>Add spinner with loading messages
<ul>
<li><code>injecting</code> (<code>run</code>)</li>
<li><code>encrypting</code> (<code>encrypt</code>, <code>set</code>)</li>
<li><code>decrypting</code> (<code>decrypt</code>, <code>get</code>)</li>
<li><code>rotating</code> (<code>rotate</code>)</li>
<li><code>retrieving</code> (<code>keypair</code>)</li>
</ul>
</li>
</ul>
<h2><a href="https://github.com/dotenvx/dotenvx/compare/v1.59.0...v1.59.1">1.59.1</a> (2026-03-28)</h2>
<h3>Added</h3>
<ul>
<li>add <code>HELLO</code> key to the kit sample to match most of our examples in the README</li>
</ul>
<h2><a href="https://github.com/dotenvx/dotenvx/compare/v1.58.0...v1.59.0">1.59.0</a> (2026-03-28)</h2>
<h3>Changed</h3>
<ul>
<li><code>encrypt</code> and <code>set</code> now create a <code>.env</code> file if one does not exist (<a href="https://redirect.github.com/dotenvx/dotenvx/pull/771">#771</a>)</li>
<li>pass <code>--no-create</code> to prevent file creation</li>
</ul>
<h2><a href="https://github.com/dotenvx/dotenvx/compare/v1.57.5...v1.58.0">1.58.0</a> (2026-03-27)</h2>
<h3>Changed</h3>
<ul>
<li>Changed runtime injection message to format <code>⟐ injecting env (N) from FILE · dotenvx@VERSION</code> (<a href="https://redirect.github.com/dotenvx/dotenvx/pull/770">#770</a>)</li>
</ul>
<h2><a href="https://github.com/dotenvx/dotenvx/compare/v1.57.4...v1.57.5">1.57.5</a> (2026-03-26)</h2>
<h3>Changes</h3>
<ul>
<li>Improve already installed message (<a href="https://redirect.github.com/dotenvx/dotenvx/pull/768">#768</a>)</li>
</ul>
<h2><a href="https://github.com/dotenvx/dotenvx/compare/v1.57.3...v1.57.4">1.57.4</a> (2026-03-26)</h2>
<h3>Changes</h3>
<ul>
<li>Use <code>curl</code> example for install <a href="https://dotenvx.com/ops">dotenvx.com/ops</a> (<a href="https://redirect.github.com/dotenvx/dotenvx/pull/767">#767</a>)</li>
</ul>
<h2><a href="https://github.com/dotenvx/dotenvx/compare/v1.57.2...v1.57.3">1.57.3</a> (2026-03-26)</h2>
<h3>Changes</h3>
<ul>
<li>Simplify installed success message (<a href="https://redirect.github.com/dotenvx/dotenvx/pull/766">#766</a>)</li>
</ul>
<h2><a href="https://github.com/dotenvx/dotenvx/compare/v1.57.1...v1.57.2">1.57.2</a> (2026-03-22)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/dotenvx/dotenvx/commit/35f2b083726617c0c30d24d7a8917a60ae9631f7"><code>35f2b08</code></a> 1.60.0</li>
<li><a href="https://github.com/dotenvx/dotenvx/commit/0bdbcc0353b4e26f1eca14619a7dc833da222e59"><code>0bdbcc0</code></a> update yao pkg</li>
<li><a href="https://github.com/dotenvx/dotenvx/commit/f35fcd07d1d03db61b557491b84da9d9ec08098b"><code>f35fcd0</code></a> Merge pull request <a href="https://redirect.github.com/dotenvx/dotenvx/issues/774">#774</a> from dotenvx/encrypting</li>
<li><a href="https://github.com/dotenvx/dotenvx/commit/b62fbf11f1ff6b9a65fce47b123f96dd5c73c012"><code>b62fbf1</code></a> hide from -h</li>
<li><a href="https://github.com/dotenvx/dotenvx/commit/ef279f85dc4c4a5c93b944ea840df5a3aa391f48"><code>ef279f8</code></a> changelog 🪵</li>
<li><a href="https://github.com/dotenvx/dotenvx/commit/d983a7091a80a3354ae07bd035ef16b2e56e7e22"><code>d983a70</code></a> test coverage</li>
<li><a href="https://github.com/dotenvx/dotenvx/commit/101e35087950df31ea821bb25292d496462c3ebe"><code>101e350</code></a> fix error test</li>
<li><a href="https://github.com/dotenvx/dotenvx/commit/ec1f082e5506718aaeccbaf9c054af91e5ea998d"><code>ec1f082</code></a> set errors test</li>
<li><a href="https://github.com/dotenvx/dotenvx/commit/15646d884cc2efb60f2c32f7f44652b5e3c274a5"><code>15646d8</code></a> fix catching missing env keys file</li>
<li><a href="https://github.com/dotenvx/dotenvx/commit/5a618157ed1f76a602bd6c4a38e760fa91d83f60"><code>5a61815</code></a> switch to node 20</li>
<li>Additional commits viewable in <a href="https://github.com/dotenvx/dotenvx/compare/v1.54.1...v1.60.0">compare view</a></li>
</ul>
</details>
<br />
Updates `@tanstack/react-query-devtools` from 5.91.3 to 5.96.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/TanStack/query/releases"><code>@tanstack/react-query-devtools</code>'s releases</a>.</em></p>
<blockquote>
<h2><code>@tanstack/react-query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.96.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.96.2</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.96.2</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.96.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix(build): exclude config files from production DTS rollup to prevent <code>@types/node</code> type pollution (<a href="https://redirect.github.com/TanStack/query/pull/10358">#10358</a>)</p>
</li>
<li>
<p>Updated dependencies []:</p>
<ul>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.96.1</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.96.1</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.96.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.96.0</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.96.0</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md"><code>@tanstack/react-query-devtools</code>'s changelog</a>.</em></p>
<blockquote>
<h2>5.96.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.96.2</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.96.2</li>
</ul>
</li>
</ul>
<h2>5.96.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix(build): exclude config files from production DTS rollup to prevent <code>@types/node</code> type pollution (<a href="https://redirect.github.com/TanStack/query/pull/10358">#10358</a>)</p>
</li>
<li>
<p>Updated dependencies []:</p>
<ul>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.96.1</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.96.1</li>
</ul>
</li>
</ul>
<h2>5.96.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.96.0</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.96.0</li>
</ul>
</li>
</ul>
<h2>5.95.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.95.2</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.95.2</li>
</ul>
</li>
</ul>
<h2>5.95.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.95.1</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.95.1</li>
</ul>
</li>
</ul>
<h2>5.95.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.95.0</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.95.0</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/TanStack/query/commit/5ca721fb05a7329ca168dd9aca8a906011b0601e"><code>5ca721f</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools/issues/10379">#10379</a>)</li>
<li><a href="https://github.com/TanStack/query/commit/75052a7fd05d5a7f430d323c513387b780a0c06f"><code>75052a7</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools/issues/10370">#10370</a>)</li>
<li><a href="https://github.com/TanStack/query/commit/4a3275c15e1baf4d25d8187f9a537bbc515f58ae"><code>4a3275c</code></a> fix(build): exclude config files from production DTS rollup (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools/issues/10358">#10358</a>)</li>
<li><a href="https://github.com/TanStack/query/commit/73e783bd8677a1011d95d34a896e1bf93cbb11a5"><code>73e783b</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools/issues/10364">#10364</a>)</li>
<li><a href="https://github.com/TanStack/query/commit/1047cdc393fac7c98822c993d70c28f58833c63d"><code>1047cdc</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools/issues/10326">#10326</a>)</li>
<li><a href="https://github.com/TanStack/query/commit/5806444b97e07b1ede194d1f353d4a013ef1036e"><code>5806444</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools/issues/10324">#10324</a>)</li>
<li><a href="https://github.com/TanStack/query/commit/4d7de830eb6e19ba9c20d4c44ed4f49c09ed7be3"><code>4d7de83</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools/issues/10317">#10317</a>)</li>
<li><a href="https://github.com/TanStack/query/commit/8fe71e4fe7bc34e8b7b551d20ac1f70906572529"><code>8fe71e4</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools/issues/10313">#10313</a>)</li>
<li><a href="https://github.com/TanStack/query/commit/c613c225355502306c5011bb28fe59225cb1262c"><code>c613c22</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools/issues/10309">#10309</a>)</li>
<li><a href="https://github.com/TanStack/query/commit/67cf8b60d923ad158fdf89c80f86decea073f472"><code>67cf8b6</code></a> ref: ts cutoff (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools/issues/10253">#10253</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.96.2/packages/react-query-devtools">compare view</a></li>
</ul>
</details>
<br />
Updates `@types/node` from 25.3.5 to 25.5.2
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li>
</ul>
</details>
<br />
Updates `@types/pg` from 8.18.0 to 8.20.0
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg">compare view</a></li>
</ul>
</details>
<br />
Updates `esbuild` from 0.27.4 to 0.28.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/evanw/esbuild/releases">esbuild's releases</a>.</em></p>
<blockquote>
<h2>v0.28.0</h2>
<ul>
<li>
<p>Add support for <code>with { type: 'text' }</code> imports (<a href="https://redirect.github.com/evanw/esbuild/issues/4435">#4435</a>)</p>
<p>The <a href="https://github.com/tc39/proposal-import-text">import text</a> proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by <a href="https://docs.deno.com/examples/importing_text/">Deno</a> and <a href="https://bun.com/docs/guides/runtime/import-html">Bun</a>. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing <a href="https://esbuild.github.io/content-types/#text"><code>text</code> loader</a>. Here's an example:</p>
<pre lang="js"><code>import string from './example.txt' with { type: 'text' }
console.log(string)
</code></pre>
</li>
<li>
<p>Add integrity checks to fallback download path (<a href="https://redirect.github.com/evanw/esbuild/issues/4343">#4343</a>)</p>
<p>Installing esbuild via npm is somewhat complicated with several different edge cases (see <a href="https://esbuild.github.io/getting-started/#additional-npm-flags">esbuild's documentation</a> for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the <code>npm</code> command, and then with a HTTP request to <code>registry.npmjs.org</code> as a last resort).</p>
<p>This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level <code>esbuild</code> package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.</p>
</li>
<li>
<p>Update the Go compiler from 1.25.7 to 1.26.1</p>
<p>This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:</p>
<ul>
<li>It now uses the <a href="https://go.dev/doc/go1.26#new-garbage-collector">new garbage collector</a> that comes with Go 1.26.</li>
<li>The Go compiler is now more aggressive with allocating memory on the stack.</li>
<li>The executable format that the Go linker uses has undergone several changes.</li>
<li>The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.</li>
</ul>
<p>You can read the <a href="https://go.dev/doc/go1.26">Go 1.26 release notes</a> for more information.</p>
</li>
</ul>
<h2>v0.27.7</h2>
<ul>
<li>
<p>Fix lowering of define semantics for TypeScript parameter properties (<a href="https://redirect.github.com/evanw/esbuild/issues/4421">#4421</a>)</p>
<p>The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:</p>
<pre lang="ts"><code>// Original code
class Foo {
constructor(public x = 1) {}
y = 2
}
<p>// Old output (with --loader=ts --target=es2021)<br />
class Foo {<br />
constructor(x = 1) {<br />
this.x = x;<br />
__publicField(this, "y", 2);<br />
}<br />
x;<br />
}</p>
<p>// New output (with --loader=ts --target=es2021)<br />
class Foo {<br />
</code></pre></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/evanw/esbuild/blob/main/CHANGELOG.md">esbuild's changelog</a>.</em></p>
<blockquote>
<h2>0.28.0</h2>
<ul>
<li>
<p>Add support for <code>with { type: 'text' }</code> imports (<a href="https://redirect.github.com/evanw/esbuild/issues/4435">#4435</a>)</p>
<p>The <a href="https://github.com/tc39/proposal-import-text">import text</a> proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by <a href="https://docs.deno.com/examples/importing_text/">Deno</a> and <a href="https://bun.com/docs/guides/runtime/import-html">Bun</a>. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing <a href="https://esbuild.github.io/content-types/#text"><code>text</code> loader</a>. Here's an example:</p>
<pre lang="js"><code>import string from './example.txt' with { type: 'text' }
console.log(string)
</code></pre>
</li>
<li>
<p>Add integrity checks to fallback download path (<a href="https://redirect.github.com/evanw/esbuild/issues/4343">#4343</a>)</p>
<p>Installing esbuild via npm is somewhat complicated with several different edge cases (see <a href="https://esbuild.github.io/getting-started/#additional-npm-flags">esbuild's documentation</a> for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the <code>npm</code> command, and then with a HTTP request to <code>registry.npmjs.org</code> as a last resort).</p>
<p>This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level <code>esbuild</code> package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.</p>
</li>
<li>
<p>Update the Go compiler from 1.25.7 to 1.26.1</p>
<p>This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:</p>
<ul>
<li>It now uses the <a href="https://go.dev/doc/go1.26#new-garbage-collector">new garbage collector</a> that comes with Go 1.26.</li>
<li>The Go compiler is now more aggressive with allocating memory on the stack.</li>
<li>The executable format that the Go linker uses has undergone several changes.</li>
<li>The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.</li>
</ul>
<p>You can read the <a href="https://go.dev/doc/go1.26">Go 1.26 release notes</a> for more information.</p>
</li>
</ul>
<h2>0.27.7</h2>
<ul>
<li>
<p>Fix lowering of define semantics for TypeScript parameter properties (<a href="https://redirect.github.com/evanw/esbuild/issues/4421">#4421</a>)</p>
<p>The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:</p>
<pre lang="ts"><code>// Original code
class Foo {
constructor(public x = 1) {}
y = 2
}
<p>// Old output (with --loader=ts --target=es2021)<br />
class Foo {<br />
constructor(x = 1) {<br />
this.x = x;<br />
__publicField(this, "y", 2);<br />
}<br />
x;<br />
}</p>
<p></code></pre></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/evanw/esbuild/commit/6a794dff68e6a43539f6da671e3080efdf11ca70"><code>6a794df</code></a> publish 0.28.0 to npm</li>
<li><a href="https://github.com/evanw/esbuild/commit/64ee0ea63b2ff303caafc9610c388dc72c882c23"><code>64ee0ea</code></a> fix <a href="https://redirect.github.com/evanw/esbuild/issues/4435">#4435</a>: support <code>with { type: text }</code> imports</li>
<li><a href="https://github.com/evanw/esbuild/commit/ef65aeeaacdb71eade186f888975b1de89574314"><code>ef65aee</code></a> fix sort order in <code>snapshots_packagejson.txt</code></li>
<li><a href="https://github.com/evanw/esbuild/commit/1a26a8ecbc39aaf1379c524a0274a08fbcbed655"><code>1a26a8e</code></a> try to fix <code>test-old-ts</code>, also shuffle CI tasks</li>
<li><a href="https://github.com/evanw/esbuild/commit/556ce6c1fc00d7c0917fbfada01ed8e5251bc510"><code>556ce6c</code></a> use <code>''</code> instead of <code>null</code> to omit build hashes</li>
<li><a href="https://github.com/evanw/esbuild/commit/8e675a81a473ea69a46a69792f1386bb110dd877"><code>8e675a8</code></a> ci: allow missing binary hashes for tests</li>
<li><a href="https://github.com/evanw/esbuild/commit/7067763b904fe8a522fa840a4a48c5fbd4c395e0"><code>7067763</code></a> Reapply "update go 1.25.7 => 1.26.1"</li>
<li><a href="https://github.com/evanw/esbuild/commit/39473a952ab3b450d0578b698a8b8d2a02332e0d"><code>39473a9</code></a> fix <a href="https://redirect.github.com/evanw/esbuild/issues/4343">#4343</a>: integrity check for binary download</li>
<li><a href="https://github.com/evanw/esbuild/commit/2025c9ff6ab15ba6b0f9d074fd732250cc46e4a3"><code>2025c9f</code></a> publish 0.27.7 to npm</li>
<li><a href="https://github.com/evanw/esbuild/commit/c6b586e4904f47e8d5f783a2813660c13e2672e7"><code>c6b586e</code></a> fix typo in <code>Makefile</code> for <code>@esbuild/win32-x64</code></li>
<li>Additional commits viewable in <a href="https://github.com/evanw/esbuild/compare/v0.27.4...v0.28.0">compare view</a></li>
</ul>
</details>
<br />
Updates `esbuild-node-externals` from 1.20.1 to 1.21.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pradel/esbuild-node-externals/releases">esbuild-node-externals's releases</a>.</em></p>
<blockquote>
<h2>esbuild-node-externals: v1.21.0</h2>
<h2><a href="https://github.com/pradel/esbuild-node-externals/compare/esbuild-node-externals-v1.20.1...esbuild-node-externals-v1.21.0">1.21.0</a> (2026-04-03)</h2>
<h3>Features</h3>
<ul>
<li>add esbuild 0.28 to the allowed range (<a href="https://redirect.github.com/pradel/esbuild-node-externals/issues/84">#84</a>) (<a href="https://github.com/pradel/esbuild-node-externals/commit/e66160f843ffe526f0e4dde4dd4e9f6896d0399b">e66160f</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pradel/esbuild-node-externals/commit/1b60aa3b4ec5dc7be3e3bee692ca5d5306a47a88"><code>1b60aa3</code></a> chore(main): release esbuild-node-externals 1.21.0 (<a href="https://redirect.github.com/pradel/esbuild-node-externals/issues/85">#85</a>)</li>
<li><a href="https://github.com/pradel/esbuild-node-externals/commit/e66160f843ffe526f0e4dde4dd4e9f6896d0399b"><code>e66160f</code></a> feat: add esbuild 0.28 to the allowed range (<a href="https://redirect.github.com/pradel/esbuild-node-externals/issues/84">#84</a>)</li>
<li>See full diff in <a href="https://github.com/pradel/esbuild-node-externals/compare/esbuild-node-externals-v1.20.1...esbuild-node-externals-v1.21.0">compare view</a></li>
</ul>
</details>
<br />
Updates `eslint` from 10.0.3 to 10.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/eslint/eslint/releases">eslint's releases</a>.</em></p>
<blockquote>
<h2>v10.2.0</h2>
<h2>Features</h2>
<ul>
<li><a href="https://github.com/eslint/eslint/commit/586ec2f43092779acc957866db4abe999112d1e1"><code>586ec2f</code></a> feat: Add <code>meta.languages</code> support to rules (<a href="https://redirect.github.com/eslint/eslint/issues/20571">#20571</a>) (Copilot)</li>
<li><a href="https://github.com/eslint/eslint/commit/14207dee3939dc87cfa8b2fcfc271fff2cfd6471"><code>14207de</code></a> feat: add <code>Temporal</code> to <code>no-obj-calls</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20675">#20675</a>) (Pixel998)</li>
<li><a href="https://github.com/eslint/eslint/commit/bbb2c93a2b31bd30924f32fe69a9acf41f9dfe35"><code>bbb2c93</code></a> feat: add Temporal to ES2026 globals (<a href="https://redirect.github.com/eslint/eslint/issues/20672">#20672</a>) (Pixel998)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a href="https://github.com/eslint/eslint/commit/542cb3e6442a4e6ee3457c799e2a0ee23bef0c6a"><code>542cb3e</code></a> fix: update first-party dependencies (<a href="https://redirect.github.com/eslint/eslint/issues/20714">#20714</a>) (Francesco Trotta)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a href="https://github.com/eslint/eslint/commit/a2af743ea60f683d0e0de9d98267c1e7e4f5e412"><code>a2af743</code></a> docs: add <code>language</code> to configuration objects (<a href="https://redirect.github.com/eslint/eslint/issues/20712">#20712</a>) (Francesco Trotta)</li>
<li><a href="https://github.com/eslint/eslint/commit/845f23f1370892bf07d819497ac518c9e65090d6"><code>845f23f</code></a> docs: Update README (GitHub Actions Bot)</li>
<li><a href="https://github.com/eslint/eslint/commit/5fbcf5958b897cc4df5d652924d18428db37f7ee"><code>5fbcf59</code></a> docs: remove <code>sourceType</code> from ts playground link (<a href="https://redirect.github.com/eslint/eslint/issues/20477">#20477</a>) (Tanuj Kanti)</li>
<li><a href="https://github.com/eslint/eslint/commit/8702a474659be786b6b1392e5e7c0c56355ae4a4"><code>8702a47</code></a> docs: Update README (GitHub Actions Bot)</li>
<li><a href="https://github.com/eslint/eslint/commit/ddeaded2ab36951383ff67c60fb64ec68d29a46a"><code>ddeaded</code></a> docs: Update README (GitHub Actions Bot)</li>
<li><a href="https://github.com/eslint/eslint/commit/2b4496691266547784a7f7ad1989ce53381bab91"><code>2b44966</code></a> docs: add Major Releases section to Manage Releases (<a href="https://redirect.github.com/eslint/eslint/issues/20269">#20269</a>) (Milos Djermanovic)</li>
<li><a href="https://github.com/eslint/eslint/commit/eab65c700ebb16a6e790910c720450c9908961fd"><code>eab65c7</code></a> docs: update <code>eslint</code> versions in examples (<a href="https://redirect.github.com/eslint/eslint/issues/20664">#20664</a>) (루밀LuMir)</li>
<li><a href="https://github.com/eslint/eslint/commit/3e4a29903bf31f0998e45ad9128a265bce1edc56"><code>3e4a299</code></a> docs: update ESM Dependencies policies with note for own-usage packages (<a href="https://redirect.github.com/eslint/eslint/issues/20660">#20660</a>) (Milos Djermanovic)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a href="https://github.com/eslint/eslint/commit/8120e30f833474f47acc061d24d164e9f022264f"><code>8120e30</code></a> refactor: extract no unmodified loop condition (<a href="https://redirect.github.com/eslint/eslint/issues/20679">#20679</a>) (kuldeep kumar)</li>
<li><a href="https://github.com/eslint/eslint/commit/46e8469786be1b2bbb522100e1d44624d98d3745"><code>46e8469</code></a> chore: update dependency markdownlint-cli2 to ^0.22.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20697">#20697</a>) (renovate[bot])</li>
<li><a href="https://github.com/eslint/eslint/commit/01ed3aa68477f81a7188e1498cf4906e02015b7c"><code>01ed3aa</code></a> test: add unit tests for unicode utilities (<a href="https://redirect.github.com/eslint/eslint/issues/20622">#20622</a>) (Manish chaudhary)</li>
<li><a href="https://github.com/eslint/eslint/commit/811f4930f82ee2b6ac8eae75cade9bed63de0781"><code>811f493</code></a> ci: remove <code>--legacy-peer-deps</code> from types integration tests (<a href="https://redirect.github.com/eslint/eslint/issues/20667">#20667</a>) (Milos Djermanovic)</li>
<li><a href="https://github.com/eslint/eslint/commit/6b86fcfc5c75d6a3b8a2cf7bcdb3ef60635a9a03"><code>6b86fcf</code></a> chore: update dependency npm-run-all2 to v8 (<a href="https://redirect.github.com/eslint/eslint/issues/20663">#20663</a>) (renovate[bot])</li>
<li><a href="https://github.com/eslint/eslint/commit/632c4f83bf32b77981c7d395cacddd1bb172ee25"><code>632c4f8</code></a> chore: add <code>prettier</code> update commit to <code>.git-blame-ignore-revs</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20662">#20662</a>) (루밀LuMir)</li>
<li><a href="https://github.com/eslint/eslint/commit/b0b0f21927e03ba092400e3c70d7058f537765c8"><code>b0b0f21</code></a> chore: update dependency eslint-plugin-regexp to ^3.1.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20659">#20659</a>) (Milos Djermanovic)</li>
<li><a href="https://github.com/eslint/eslint/commit/228a2dd4b272c17f516ee3541f1dd69eca0a8ab0"><code>228a2dd</code></a> chore: update dependency eslint-plugin-eslint-plugin to ^7.3.2 (<a href="https://redirect.github.com/eslint/eslint/issues/20661">#20661</a>) (Milos Djermanovic)</li>
<li><a href="https://github.com/eslint/eslint/commit/3ab4d7e244df244102de9d0d250b2ff12456a785"><code>3ab4d7e</code></a> test: Add tests for eslintrc-style keys (<a href="https://redirect.github.com/eslint/eslint/issues/20645">#20645</a>) (kuldeep kumar)</li>
</ul>
<h2>v10.1.0</h2>
<h2>Features</h2>
<ul>
<li><a href="https://github.com/eslint/eslint/commit/ff4382be349035acdb170627a2dc92828e134562"><code>ff4382b</code></a> feat: apply fix for <code>no-var</code> in <code>TSModuleBlock</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20638">#20638</a>) (Tanuj Kanti)</li>
<li><a href="https://github.com/eslint/eslint/commit/0916995b51528872b15ba4fedb24172cf25fcb3f"><code>0916995</code></a> feat: Implement api support for bulk-suppressions (<a href="https://redirect.github.com/eslint/eslint/issues/20565">#20565</a>) (Blake Sager)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a href="https://github.com/eslint/eslint/commit/2b8824e6be4223980e929a20025602df20d05ea2"><code>2b8824e</code></a> fix: Prevent <code>no-var</code> autofix when a variable is used before declaration (<a href="https://redirect.github.com/eslint/eslint/issues/20464">#20464</a>) (Amaresh S M)</li>
<li><a href="https://github.com/eslint/eslint/commit/e58b4bff167e79afd067d1b0ee9360bec2d3393e"><code>e58b4bf</code></a> fix: update eslint (<a href="https://redirect.github.com/eslint/eslint/issues/20597">#20597</a>) (renovate[bot])</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a href="https://github.com/eslint/eslint/commit/b7b57fe9942c572ff651230f1f96cefed787ca52"><code>b7b57fe</code></a> docs: use correct JSDoc link in require-jsdoc.md (<a href="https://redirect.github.com/eslint/eslint/issues/20641">#20641</a>) (mkemna-clb)</li>
<li><a href="https://github.com/eslint/eslint/commit/58e4cfc7dbf0fe40c73f09bf0ff94ad944d0ba0e"><code>58e4cfc</code></a> docs: add deprecation notice partial (<a href="https://redirect.github.com/eslint/eslint/issues/20639">#20639</a>) (Milos Djermanovic)</li>
<li><a href="https://github.com/eslint/eslint/commit/7143dbf99df27c61edf1552da981794e99a0b2f2"><code>7143dbf</code></a> docs: update v9 migration guide for <code>@eslint/js</code> usage (<a href="https://redirect.github.com/eslint/eslint/issues/20540">#20540</a>) (fnx)</li>
<li><a href="https://github.com/eslint/eslint/commit/035fc4fbe506e3e4524882cf50db37a4e430adf4"><code>035fc4f</code></a> docs: note that <code>globalReturn</code> applies only with <code>sourceType: "script"</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20630">#20630</a>) (Milos Djermanovic)</li>
<li><a href="https://github.com/eslint/eslint/commit/e972c88ab7474a74191ee99ac2558b00d0427a8a"><code>e972c88</code></a> docs: merge ESLint option descriptions into type definitions (<a href="https://redirect.github.com/eslint/eslint/issues/20608">#20608</a>) (Francesco Trotta)</li>
<li><a href="https://github.com/eslint/eslint/commit/7f10d8440137f0cfd75f18f4746ba6a1c621b953"><code>7f10d84</code></a> docs: Update README (GitHub Actions Bot)</li>
<li><a href="https://github.com/eslint/eslint/commit/aeed0078ca2f73d4744cc522102178d45b5be64e"><code>aeed007</code></a> docs: open playground link in new tab (<a href="https://redirect.github.com/eslint/eslint/issues/20602">#20602</a>) (Tanuj Kanti)</li>
<li><a href="https://github.com/eslint/eslint/commit/a0d1a3772679d3d74bb860fc65b5b58678acd452"><code>a0d1a37</code></a> docs: Add AI Usage Policy (<a href="https://redirect.github.com/eslint/eslint/issues/20510">#20510</a>) (Nicholas C. Zakas)</li>
</ul>
<h2>Chores</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/eslint/eslint/commit/000128c29235c5a8c35c7ef817dbccc4e42130ca"><code>000128c</code></a> 10.2.0</li>
<li><a href="https://github.com/eslint/eslint/commit/1988fad70e361fe1c8df7804930a66e6a9bfc698"><code>1988fad</code></a> Build: changelog update for 10.2.0</li>
<li><a href="https://github.com/eslint/eslint/commit/542cb3e6442a4e6ee3457c799e2a0ee23bef0c6a"><code>542cb3e</code></a> fix: update first-party dependencies (<a href="https://redirect.github.com/eslint/eslint/issues/20714">#20714</a>)</li>
<li><a href="https://github.com/eslint/eslint/commit/a2af743ea60f683d0e0de9d98267c1e7e4f5e412"><code>a2af743</code></a> docs: add <code>language</code> to configuration objects (<a href="https://redirect.github.com/eslint/eslint/issues/20712">#20712</a>)</li>
<li><a href="https://github.com/eslint/eslint/commit/845f23f1370892bf07d819497ac518c9e65090d6"><code>845f23f</code></a> docs: Update README</li>
<li><a href="https://github.com/eslint/eslint/commit/5fbcf5958b897cc4df5d652924d18428db37f7ee"><code>5fbcf59</code></a> docs: remove <code>sourceType</code> from ts playground link (<a href="https://redirect.github.com/eslint/eslint/issues/20477">#20477</a>)</li>
<li><a href="https://github.com/eslint/eslint/commit/8702a474659be786b6b1392e5e7c0c56355ae4a4"><code>8702a47</code></a> docs: Update README</li>
<li><a href="https://github.com/eslint/eslint/commit/ddeaded2ab36951383ff67c60fb64ec68d29a46a"><code>ddeaded</code></a> docs: Update README</li>
<li><a href="https://github.com/eslint/eslint/commit/8120e30f833474f47acc061d24d164e9f022264f"><code>8120e30</code></a> refactor: extract no unmodified loop condition (<a href="https://redirect.github.com/eslint/eslint/issues/20679">#20679</a>)</li>
<li><a href="https://github.com/eslint/eslint/commit/46e8469786be1b2bbb522100e1d44624d98d3745"><code>46e8469</code></a> chore: update dependency markdownlint-cli2 to ^0.22.0 (<a href="https://redirect.github.com/eslint/eslint/issues/20697">#20697</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/eslint/eslint/compare/v10.0.3...v10.2.0">compare view</a></li>
</ul>
</details>
<br />
Updates `eslint-config-next` from 16.1.7 to 16.2.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/vercel/next.js/releases">eslint-config-next's releases</a>.</em></p>
<blockquote>
<h2>v16.2.2</h2>
<blockquote>
<p>[!NOTE]
This release is backporting bug fixes. It does <strong>not</strong> include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>backport: Move expanded adapters docs to API reference (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/92115">#92115</a>) (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/92129">#92129</a>)</li>
<li>Backport: TypeScript v6 deprecations for baseUrl and moduleResolution (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/92130">#92130</a>)</li>
<li>[create-next-app] Skip interactive prompts when CLI flags are provided (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/91840">#91840</a>)</li>
<li>next.config.js: Accept an option for serverFastRefresh (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/91968">#91968</a>)</li>
<li>Turbopack: enable server HMR for app route handlers (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/91466">#91466</a>)</li>
<li>Turbopack: exclude metadata routes from server HMR (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/92034">#92034</a>)</li>
<li>Fix CI for glibc linux builds</li>
<li>Backport: disable bmi2 in qfilter <a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/92177">#92177</a></li>
<li>[backport] Fix CSS HMR on Safari (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/92174">#92174</a>)</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a href="https://github.com/nextjs-bot"><code>@nextjs-bot</code></a>, <a href="https://github.com/icyJoseph"><code>@icyJoseph</code></a>, <a href="https://github.com/ijjk"><code>@ijjk</code></a>, <a href="https://github.com/gaojude"><code>@gaojude</code></a>, <a href="https://github.com/wbinnssmith"><code>@wbinnssmith</code></a>, <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a>, and <a href="https://github.com/bgw"><code>@bgw</code></a> for helping!</p>
<h2>v16.2.1</h2>
<blockquote>
<p>[!NOTE]
This release is backporting bug fixes. It does <strong>not</strong> include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>docs: post release amends (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/91715">#91715</a>)</li>
<li>docs: fix broken Activity Patterns demo link in preserving UI state guide (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/91698">#91698</a>)</li>
<li>Fix adapter outputs for dynamic metadata routes (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/91680">#91680</a>)</li>
<li>Turbopack: fix webpack loader runner layer (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/91727">#91727</a>)</li>
<li>Fix server actions in standalone mode with <code>cacheComponents</code> (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/91711">#91711</a>)</li>
<li>turbo-persistence: remove Unmergeable mmap advice (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/91713">#91713</a>)</li>
<li>Fix layout segment optimization: move app-page imports to server-utility transition (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/91701">#91701</a>)</li>
<li>Turbopack: lazy require metadata and handle TLA (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/91705">#91705</a>)</li>
<li>[turbopack] Respect <code>{eval:true}</code> in worker_threads constructors (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/91666">#91666</a>)</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a href="https://github.com/icyJoseph"><code>@icyJoseph</code></a>, <a href="https://github.com/abhishekmardiya"><code>@abhishekmardiya</code></a>, <a href="https://github.com/ijjk"><code>@ijjk</code></a>, <a href="https://github.com/mischnic"><code>@mischnic</code></a>, <a href="https://github.com/unstubbable"><code>@unstubbable</code></a>, <a href="https://github.com/sokra"><code>@sokra</code></a>, and <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> for helping!</p>
<h2>v16.2.1-canary.21</h2>
<h3>Misc Changes</h3>
<ul>
<li>next-core: deduplicate output assets and detect content conflicts on emit: <a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/92292">#92292</a></li>
<li>docs: add deploy tests documentation to contributing guide: <a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/92388">#92388</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a href="https://github.com/sokra"><code>@sokra</code></a> and <a href="https://github.com/ztanner"><code>@ztanner</code></a> for helping!</p>
<h2>v16.2.1-canary.20</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/vercel/next.js/commit/52faae3d94641584e13691238df5be158d0f00fb"><code>52faae3</code></a> v16.2.2</li>
<li><a href="https://github.com/vercel/next.js/commit/ed7d2cef246dcb3e2955c018fd8b2027e0ff8eed"><code>ed7d2ce</code></a> v16.2.1</li>
<li><a href="https://github.com/vercel/next.js/commit/c5c94dffbf084e66b172a9c6ff23d80c24973764"><code>c5c94df</code></a> v16.2.0</li>
<li><a href="https://github.com/vercel/next.js/commit/3683192a6bea9011222e9b236f8000b5266f3fe6"><code>3683192</code></a> v16.2.0-canary.104</li>
<li><a href="https://github.com/vercel/next.js/commit/668981482a3f9de97c4c1371e940e0f84972c080"><code>6689814</code></a> v16.2.0-canary.103</li>
<li><a href="https://github.com/vercel/next.js/commit/ad66dbc89b356867c308110dc5365a696c763991"><code>ad66dbc</code></a> v16.2.0-canary.102</li>
<li><a href="https://github.com/vercel/next.js/commit/b8564984305ff0f4feb9e7f709652a735b89aa0a"><code>b856498</code></a> v16.2.0-canary.101</li>
<li><a href="https://github.com/vercel/next.js/commit/136b77e4d971de868b56066e714c1f187af6cb23"><code>136b77e</code></a> v16.2.0-canary.100</li>
<li><a href="https://github.com/vercel/next.js/commit/0f599731b86e177508c9d28af7414e9d94a01193"><code>0f59973</code></a> v16.2.0-canary.99</li>
<li><a href="https://github.com/vercel/next.js/commit/792522d2b33b6abf9b450e3403d93fe4f7ef913b"><code>792522d</code></a> v16.2.0-canary.98</li>
<li>Additional commits viewable in <a href="https://github.com/vercel/next.js/commits/v16.2.2/packages/eslint-config-next">compare view</a></li>
</ul>
</details>
<br />
Updates `typescript-eslint` from 8.56.1 to 8.58.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's releases</a>.</em></p>
<blockquote>
<h2>v8.58.0</h2>
<h2>8.58.0 (2026-03-30)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> crash in <code>no-unnecessary-type-arguments</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li>
<li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index signatures (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing unknown RegExp flags (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>ej shafran <a href="https://github.com/ej-shafran"><code>@ej-shafran</code></a></li>
<li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li>
<li>GG ZIBLAKING</li>
<li>milkboy2564 <a href="https://github.com/SeolJaeHyeok"><code>@SeolJaeHyeok</code></a></li>
<li>teee32 <a href="https://github.com/teee32"><code>@teee32</code></a></li>
</ul>
<p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p>
<p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p>
<h2>v8.57.2</h2>
<h2>8.57.2 (2026-03-23)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove dangling closing parenthesis (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li>
<li><strong>eslint-plugin:</strong> [array-type] ignore Array and ReadonlyArray without type arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li>
<li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned generics in extends or implements (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types] preserve type alias infomation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li>
<li><strong>typescript-estree:</strong> skip createIsolatedProgram fallback for projectService (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12066">#12066</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12065">#12065</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li>
<li>Konv Suu</li>
<li>mdm317</li>
<li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@NewtonYuan</code></a></li>
<li>RyoheiYamamoto</li>
<li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@SungHyun627</code></a></li>
<li>Tamashoo <a href="https://github.com/Tamashoo"><code>@Tamashoo</code></a></li>
</ul>
<p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's changelog</a>.</em></p>
<blockquote>
<h2>8.58.0 (2026-03-30)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li>
</ul>
<p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p>
<p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p>
<h2>8.57.2 (2026-03-23)</h2>
<p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p>
<p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p>
<p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p>
<h2>8.57.1 (2026-03-16)</h2>
<p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p>
<p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub Releases</a> for more information.</p>
<p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p>
<h2>8.57.0 (2026-03-09)</h2>
<p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p>
<p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p>
<p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/493341709fe7d1d6433332b7bd2724e3332c7cdf"><code>4933417</code></a> chore(release): publish 8.58.0</li>
<li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8cde2d06fb9bc591a4c93452509ddbd600c76a35"><code>8cde2d0</code></a> feat: support TypeScript 6 (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12124">#12124</a>)</li>
<li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/be4d54d26e695cc93605ffcca67dd75848e95c6f"><code>be4d54d</code></a> chore(release): publish 8.57.2</li>
<li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/c7c38aa252d7bf6708a225aebedc57686ac33dcd"><code>c7c38aa</code></a> chore(release): publish 8.57.1</li>
<li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2c6aeeec238dfea860b9f3c146a55f8f49f15cf5"><code>2c6aeee</code></a> chore(release): publish 8.57.0</li>
<li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f696dadfc37078efe4119ad2ab0609cde3e42766"><code>f696dad</code></a> chore: use pnpm catalog (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12047">#12047</a>)</li>
<li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/a09921e2de2e8790e6a803016b825815ca9409d8"><code>a09921e</code></a> chore: update vitest to 4.x (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12071">#12071</a>)</li>
<li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/typescript-eslint">compare view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/pangolin/pull/2794
Author: @dependabot[bot]
Created: 4/6/2026
Status: 🔄 Open
Base:
main← Head:dependabot/npm_and_yarn/dev-minor-updates-f95b439458📝 Commits (1)
fbcf26dBump the dev-minor-updates group across 1 directory with 9 updates📊 Changes
2 files changed (+291 additions, -264 deletions)
View changed files
📝
package-lock.json(+281 -254)📝
package.json(+10 -10)📄 Description
Bumps the dev-minor-updates group with 9 updates in the / directory:
1.54.11.60.05.91.35.96.225.3.525.5.28.18.08.20.00.27.40.28.01.20.11.21.010.0.310.2.016.1.716.2.28.56.18.58.0Updates
@dotenvx/dotenvxfrom 1.54.1 to 1.60.0Release notes
Sourced from
@dotenvx/dotenvx's releases.Changelog
Sourced from
@dotenvx/dotenvx's changelog.... (truncated)
Commits
35f2b081.60.00bdbcc0update yao pkgf35fcd0Merge pull request #774 from dotenvx/encryptingb62fbf1hide from -hef279f8changelog 🪵d983a70test coverage101e350fix error testec1f082set errors test15646d8fix catching missing env keys file5a61815switch to node 20Updates
@tanstack/react-query-devtoolsfrom 5.91.3 to 5.96.2Release notes
Sourced from
@tanstack/react-query-devtools's releases.Changelog
Sourced from
@tanstack/react-query-devtools's changelog.... (truncated)
Commits
5ca721fci: Version Packages (#10379)75052a7ci: Version Packages (#10370)4a3275cfix(build): exclude config files from production DTS rollup (#10358)73e783bci: Version Packages (#10364)1047cdcci: Version Packages (#10326)5806444ci: Version Packages (#10324)4d7de83ci: Version Packages (#10317)8fe71e4ci: Version Packages (#10313)c613c22ci: Version Packages (#10309)67cf8b6ref: ts cutoff (#10253)Updates
@types/nodefrom 25.3.5 to 25.5.2Commits
Updates
@types/pgfrom 8.18.0 to 8.20.0Commits
Updates
esbuildfrom 0.27.4 to 0.28.0Release notes
Sourced from esbuild's releases.
... (truncated)
Changelog
Sourced from esbuild's changelog.
... (truncated)
Commits
6a794dfpublish 0.28.0 to npm64ee0eafix #4435: supportwith { type: text }importsef65aeefix sort order insnapshots_packagejson.txt1a26a8etry to fixtest-old-ts, also shuffle CI tasks556ce6cuse''instead ofnullto omit build hashes8e675a8ci: allow missing binary hashes for tests7067763Reapply "update go 1.25.7 => 1.26.1"39473a9fix #4343: integrity check for binary download2025c9fpublish 0.27.7 to npmc6b586efix typo inMakefilefor@esbuild/win32-x64Updates
esbuild-node-externalsfrom 1.20.1 to 1.21.0Release notes
Sourced from esbuild-node-externals's releases.
Commits
1b60aa3chore(main): release esbuild-node-externals 1.21.0 (#85)e66160ffeat: add esbuild 0.28 to the allowed range (#84)Updates
eslintfrom 10.0.3 to 10.2.0Release notes
Sourced from eslint's releases.
... (truncated)
Commits
000128c10.2.01988fadBuild: changelog update for 10.2.0542cb3efix: update first-party dependencies (#20714)a2af743docs: addlanguageto configuration objects (#20712)845f23fdocs: Update README5fbcf59docs: removesourceTypefrom ts playground link (#20477)8702a47docs: Update READMEddeadeddocs: Update README8120e30refactor: extract no unmodified loop condition (#20679)46e8469chore: update dependency markdownlint-cli2 to ^0.22.0 (#20697)Updates
eslint-config-nextfrom 16.1.7 to 16.2.2Release notes
Sourced from eslint-config-next's releases.
... (truncated)
Commits
52faae3v16.2.2ed7d2cev16.2.1c5c94dfv16.2.03683192v16.2.0-canary.1046689814v16.2.0-canary.103ad66dbcv16.2.0-canary.102b856498v16.2.0-canary.101136b77ev16.2.0-canary.1000f59973v16.2.0-canary.99792522dv16.2.0-canary.98Updates
typescript-eslintfrom 8.56.1 to 8.58.0Release notes
Sourced from typescript-eslint's releases.
... (truncated)
Changelog
Sourced from typescript-eslint's changelog.
Commits
4933417chore(release): publish 8.58.08cde2d0feat: support TypeScript 6 (#12124)be4d54dchore(release): publish 8.57.2c7c38aachore(release): publish 8.57.12c6aeeechore(release): publish 8.57.0f696dadchore: use pnpm catalog (#12047)a09921echore: update vitest to 4.x (#12071)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.