What's new Advisory: GHSA-8v2r-hrw2-w54f: harden generated multipart request handling GHSA-wfrv-2qh2-qjg3: harden generated route compilation GHSA-952m-m7x7-mg46: harden generated schema compilation GHSA-g7gw-g6xr-hc3w: harden generated validation GHSA-7jpf-w5v7-43vw: harden generated request processing GHSA-49jc-gq6m-2p59: harden generated schema processing GHSA-8m2q-mx4w-gx5x: harden generated f…
8.6.122 (2026-11-05) Bug Fixes Object write with a dot notation key can change a field that a beforeSave trigger reverts or keeps constant (GHSA-wq62-rjpm-q29h) (#10867) (1b09647)
9.11.1-alpha.2 (2026-11-05) Bug Fixes Object write with a dot notation key can change a field that a beforeSave trigger reverts or keeps constant (GHSA-wq62-rjpm-q29h) (#10866) (f402fdd)
What's Changed Update Netty to 4.2.20.Final (#14253) Other Changes 💡 Keep lookups from failing while the environment starts by @radovanradic in #14195 Full Changelog: v4.10.35...v4.10.36
Core Changes feat(next/image): add internal image redirects (to match existing external image redirects): #98271 Turbopack: show the source-mapped file in issue headers: #101161 Add Request Insights filters and pause controls: #96924 Avoid instrumenting Next.js telemetry requests: #97182 Classify framework request activity: #96914 Move optional lockfile parameters into options object: #101132 Reco…
1.862.0 (2026-11-04) Features keep the insert row panel open when the insert fails (#12221) (37db9ac) Bug Fixes keep folders left open on home from flickering on reload (#12222) (f6c4b26) make in-app navigation targets real links for new-tab clicks (#12202) (070dc48) parse trigger targets once with RunnableRef (#12216) (0e9245c)
Patch Changes Bumped @remix-run/* dependencies: component@1.2.0
Patch Changes Bumped @remix-run/* dependencies: response@1.0.2
Patch Changes Bumped @remix-run/* dependencies: component@1.2.0 render-middleware@1.1.0
Minor Changes render() reads the nonce established by csp() and applies it to generated import maps, module preloads, and CSS mixin styles. Authored tags use getCspNonce(context). (#12098) Internal frame requests, including redirects, inherit the document nonce before child handlers run, even on routes without their own CSP middleware. Independent requests receive fresh nonces when they run csp().…
Patch Changes Bumped @remix-run/* dependencies: session@1.0.1
Patch Changes Bumped @remix-run/* dependencies: session@1.0.1
Patch Changes Bumped @remix-run/* dependencies: cookie@1.0.2 session@1.0.1
Patch Changes Bumped @remix-run/* dependencies: headers@1.1.0
Minor Changes Add new APIs to the mock function context for both mock and t.mock: (#12097) mockImplementation(implementation) changes the default implementation. mockImplementationOnce(implementation, onCall?) replaces one call at a zero-based index, defaulting to the next call. resetCalls() clears the call history. callCount() returns the number of recorded invocations, including calls still exec…
Patch Changes Fix createFsSessionStorage corrupting a session file when overlapping requests save the same session. A corrupted file made every later request for that session throw. Saves now write a temporary file and rename it over the session file, so reads always see a complete session. Replaced session files keep their existing permissions. (#12148) On Windows, where replacing a file can fail…
8.6.121 (2026-11-04) Bug Fixes Object update with a dot notation key can terminate the server process when the class has a beforeSave trigger (GHSA-2rxj-6v32-2v6j) (#10865) (7b02d0e)
9.11.1-alpha.1 (2026-11-04) Bug Fixes Object update with a dot notation key can terminate the server process when the class has a beforeSave trigger (GHSA-2rxj-6v32-2v6j) (#10864) (c06821e)
1.861.0 (2026-11-04) Features add unit, scale and height controls to the runs chart (#12191) (77fb2ed) filter the audit log by run (#12190) (f9448bf) flow-level wall-clock timeout (#12205) (6a1a0a3) instance groups driven by the IdP groups claim without SCIM (#12186) (f2facc7) list recently entered workspaces first in the workspace pickers (#12133) (d8773f4) open shared artifacts full screen and s…
✨ New Features & Improvements @directus/app Added an "Allowed Link Protocols" option to the WYSIWYG interface so text and image links with custom URL schemes (e.g. myapp://) are kept, and made the link drawer show an error for a scheme that is not allowed instead of saving an empty link (#28447 by @alvarosabu) @directus/utils Fixed searching a many-to-many list so it matches the related fields sho…
Patch Changes #12499 46d0477 - Let inline devtools panels fill their container height while keeping a 500px default height when the container has no set height. Updated dependencies [46d0477, f69b28a, 1176d37, 254350f, e712412, 3ccb007]: @tanstack/query-devtools@5.106.0 @tanstack/vue-query@5.106.0
Patch Changes Updated dependencies []: @tanstack/query-persist-client-core@5.106.0 @tanstack/svelte-query@6.3.10
Patch Changes Updated dependencies [46d0477, f69b28a, 1176d37, 254350f]: @tanstack/query-devtools@5.106.0 @tanstack/svelte-query@6.3.10
Patch Changes Updated dependencies []: @tanstack/query-persist-client-core@5.106.0 @tanstack/solid-query@5.106.0
Patch Changes #12499 46d0477 - Let inline devtools panels fill their container height while keeping a 500px default height when the container has no set height. Updated dependencies [46d0477, f69b28a, 1176d37, 254350f]: @tanstack/query-devtools@5.106.0 @tanstack/solid-query@5.106.0
Patch Changes Updated dependencies []: @tanstack/query-persist-client-core@5.106.0 @tanstack/react-query@5.106.0
Patch Changes Updated dependencies []: @tanstack/react-query@5.106.0
Patch Changes #12525 e712412 - Accept reactive query options in Vue QueryClient execution methods. #12226 3ccb007 - fix(vue-query/queryClient): preserve union narrowing in 'setQueryData' updaters for tagged query keys Updated dependencies []: @tanstack/query-core@5.106.0
Patch Changes Updated dependencies []: @tanstack/query-core@5.106.0
Patch Changes Updated dependencies []: @tanstack/query-core@5.106.0