2.6.5 / 2026.01.15
- feat(ext/canvas): support gif, webp for
createImageBitmap(#31402) - feat(ext/web): add performance.clearResourceTimings() and
setResourceTimingBufferSize() (#31603) - feat(node/fs): implement FileHandle.readableWebStream() (#31745)
- fix(audit): respect --level flag for exit code (#31721)
- fix(ci): rename
trusted-signing-actiontoartifact-signing-action(#31849) - fix(cli/test): close Node HTTP connections before sanitizer check (#31782)
- fix(ext/fetch): read file urls via vfs (#31814)
- fix(ext/fetch): support ipv6 destination host with http and socks proxy
(#31683) - fix(ext/node):
DatabaseSyncgarbage collection invalidating associated
resources (#31737) - fix(ext/node): add tls.setDefaultCACertificates support (#31522)
- fix(ext/node): emit deprecation warning for SlowBuffer (#31772)
- fix(ext/node): fix use-after-free in StatementSync JS iterator (#31770)
- fix(ext/node): use correct block sizes for HMAC algorithms (#31775)
- fix(ext/web): handle empty TextDecoder input when stream is true (#31691)
- fix(io): ignore
BrokenPipeerror inop_print(#31844) - fix(node/child_process): ChildProcess constructor without args (#31838)
- fix(node/child_process): improve arg type validation for execFile and fork
(#31829) - fix(node/child_process): reject null bytes in arguments (#31828)
- fix(node/child_process): use correct syscall name in spawn error (#31836)
- fix(npm): deduplication pass for initially partially resolved graphs (#31787)
- fix(runtime): handle
optionsparameter inDeno.errors.*constructors
(#31510) - fix(task): preserve signal-based exit codes for child processes (#31789)
- fix(tsgo): nil deref for exported symbols (#31786)
- fix(webgpu): correctly expose
GPUCompilationInfo&GPUCompilationMessage
(#31780) - fix: add more details when panicking getting dir path from deno.json (#31805)
- fix: allow multiple --allow-all args (#31833)
- fix: queue dynamic imports for modules with pending TLA (#31670)
- fix: update config schema for read permission to include ignore property
(#31785)