Skip to content

Conversation

chrisbbreuer
Copy link
Member

@chrisbbreuer chrisbbreuer commented Oct 7, 2025

This PR contains the following updates:

npm

Package Change Age Adoption Passing Confidence
happy-dom (source) 18.0.1 -> 20.0.0 age adoption passing confidence

Release Notes

capricorn86/happy-dom (happy-dom)

18.0.1 -> 20.0.0

v20.0.0

Compare Source

I avoid making breaking changes as much as possible in Happy DOM. When I have to make a breaking change, I try to keep it as minimal as possible. This could be a breaking change that impacts many projects, and I am truly sorry if you are negatively affected by this.

💣 Breaking Changes

  • Due to security risks, JavaScript evaluation is now disabled by default - By capricorn86 in task #1930
    • A security advisory (GHSA-37j7-fg3j-429f) has been reported that shows a security vulnerability where it's possible to escape the VM context and get access to process level functionality. Big thanks to Mas0nShi for reporting this!
    • Due to this security risk, JavaScript evaluation is now disabled by default to prevent that consumers accidentally executes untrusted code without taking precautions
    • JavaScript evaluation can be enabled by setting [enableJavaScriptEvaluation](https://github.com/capricorn86/happy-...

[View full release notes]

Released by github-actions[bot] on 10/9/2025

v19.0.2

Compare Source

👷‍♂️ Patch fixes

  • Fixes issue related to CSS pseudo selector :scope that didn't work correctly for direct descendants to root - By capricorn86 in task #1620

Released by github-actions[bot] on 9/29/2025

v19.0.1

Compare Source

👷‍♂️ Patch fixes

  • Fixes issue with sending in URLs as string in @happy-dom/server-renderer config using CLI - By capricorn86 in task #1908

Released by github-actions[bot] on 9/28/2025


📊 Package Statistics

  • happy-dom: 2,747,599 weekly downloads

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Buddy 🤖

Copy link

netlify bot commented Oct 7, 2025

Deploy Preview for stacks-stx ready!

Name Link
🔨 Latest commit 6397f93
🔍 Latest deploy log https://app.netlify.com/projects/stacks-stx/deploys/68ea141c038a7300081fc198
😎 Deploy Preview https://deploy-preview-47--stacks-stx.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@chrisbbreuer chrisbbreuer changed the title chore(deps): update dependency happy-dom to 19.0.2 chore(deps): update dependency happy-dom to 20.0.0 Oct 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant