Change8

v2.1.14

Breaking Changes
📦 denoView on GitHub →
1 breaking🐛 3 fixes🔧 4 symbols

Summary

This release focuses on security and stability improvements, specifically restricting batch file execution on Windows and hardening the node:fs close implementation.

⚠️ Breaking Changes

  • Direct execution of .bat and .cmd files on Windows is now rejected for security reasons. Users should invoke these via 'cmd /c' or a shell-aware process runner.

Migration Steps

  1. Update Windows scripts that execute batch files directly to use 'cmd /c' or ensure the execution environment handles shell scripts explicitly.

🐛 Bug Fixes

  • Set a default callback for node:fs close method to prevent errors when no callback is provided.
  • Added validation to ensure the callback provided to node:fs close is a function.
  • Restricted the direct execution of .bat and .cmd files on Windows to mitigate command injection risks.

🔧 Affected Symbols

node:fsfs.closeChildProcessCommand