Additional changes to review2 matched termsMatched wording:⚠ warning symbolremovedThese matches may be harmless in context. Expand to see the excerpts.
- A warning symbol appears outside an explicit breaking section.
⚠️ Important Changes
- The changelog contains “removed”; check what was removed.
Housekeeping: Removed stale files, regenerated lockfile, and updated sponsor scripts and blocks. (#10584, , , , , )
This release delivers two critical security patches, adds runtime support for Deno and Bun, and includes significant CI hardening, documentation improvements, and routine dependency updates.
⚠️ Important Changes
- Deprecation:
url.parse()usage has been replaced to address Node.js deprecation warnings. If you are on a recent version of Node.js, this resolves console warnings you may have been seeing. (#10625)
🔒 Security Fixes
- Proxy Handling: Fixed a
no_proxyhostname normalisation bypass that could lead to Server-Side Request Forgery (SSRF). (#10661) - Header Injection: Fixed an unrestricted cloud metadata exfiltration vulnerability via a header injection chain. (#10660)