Potential breaking changes
- A minor release before 1.0 may contain incompatible changes.
0.32.0 → 0.33.0
v0.33.0 — June 13, 2026
This release hardens request config handling and form serialisation, adds Node.js 26 coverage for v0.x, and updates the v0.x release workflow.
🔒 Security Fixes
- Request Config Hardening: Uses own-property reads for nested request options affecting auth, params, proxy, and data handling; adds bounded form serialisation depth checks; normalises nullish Basic Auth credentials; and treats
0.0.0.0as local for proxy bypass. (#11001)
🚀 New Features
- Node.js 26: Adds Node.js 26 to the v0.x CI and release/publish matrices. (#10937)