v2.9.5

🐛 Bug Fixes

• Avoid esbuild protocol deadlock.
• Respect runtime file permissions.
• Use loader sources for recursive analysis.
• Escape control characters in external metadata.
• Do not resolve internal module imports with the user's import map.
• Add "raw-secret" to `KeyFormat` type.
• Handle colored HMR URLs and page loads.
• Retain update signature verification op.
• Allow deriveBits with length 0.
• Polyfill `uv_handle_size` and `uv_strerror`.
• Release completed QUIC stream resources.
• Require --allow-sys for node:dns.getServers().
• Node compat for web streams.
• Apply backpressure in Readable.toWeb().
• Defer TLS write completion callback to avoid reentrancy panic.
• Do not fire http2 settings callback after session destroy.
• Gate constrained memory cgroup reads.
• Handle pre-quoted shell arguments.
• Implement node:test tags.
• Implement util.diff.
• Implement v8.promiseHooks API.
• Sort fs.readdir entries to match Node.js.
• Stop http2 file reads after stream close.
• Store blocklist ranges compactly.
• Support the fs `flush` option for writes.
• Use signatureAlgorithm digest for X509 ECDSA verify.
• Use named group exponent sizes.
• Attach Node error codes to WHATWG API validation errors.
• Disable HTTP/2 server push on wss upgrade path.
• Scope redirect-sensitive headers by origin.
• Reject resizable buffers in nonblocking calls.
• Accept xml and svg extensions for stdin.
• Update lax-markup to 0.3.2, lax-css and lax-sql to 0.3.0.
• Preserve stripped headers across redirects.
• Validate request host headers.
• Cancel pending writes on stream close.
• Clean up concurrently dropped load-balanced listeners.
• Handle malformed DNS record text.
• Clean up Web Stream finished listeners.
• Retain consumed HTTP stream wrapper.
• Ignore invalid package bin targets.
• Tolerate malformed `scripts` field in packuments.
• Match auth configs by authority and path.
• Do not report JSR pre-release versions as latest.
• Report when the registry rejects a provenance attestation.
• Do not treat `deno eval` modules as npm package files.
• Map notify's Windows missing-path error to NotFound.
• Add reason to too_many_arguments allows (lint).
• Handle reentrant attribute conversion.
• Own mapped range backing stores.
• Preserve Storage constructor name.
• Capitalize IP in help text.
• Upgrade deno_task_shell to 0.33.3.
• Wire `no-legacy-abort` unstable flag from deno.json config.