v14.0.90
·
7018 commits
to main
since this release
14.0.90 (2026-09-08)
Bug Fixes
- safe-bash: admit pattern storage and bound brace bookkeeping (0511e60)
- safe-bash: bound and cache execution PATH lookups (90c6696)
- safe-bash: bound text programs and reject private network ranges (b49246a), closes #650 #652 #656
- safe-bash: reject excessive predicate nesting before descent (3e4af4b), closes #668
- safe-js: accept aggregate callback references (f36575b)
- safe-js: admit host arrays across realms (f724780)
- safe-js: allow writable built-in global bindings (c18d71b)
- safe-js: capture array elements before accounting callbacks (3c63e71)
- safe-js: capture arrays before symbol retention callbacks (2d1ce63)
- safe-js: count typed-array symbol properties once (38adc5d)
- safe-js: defer mixed generator replay snapshots (adab431)
- safe-js: keep wrapped host error causes private (97f765c)
- safe-js: preserve foreign native host errors (1d17740)
- safe-js: preserve native error member payloads across realms (a367232)
- safe-js: replay snapshots with active promise reactions (06e36f8)
- safe-js: treat undefined as a shadowable identifier (0d98555)
Features
- safe-bash: expose complete portable agent preset (404d5fa), closes #649
- safe-js: expose disposal well-known symbols (e1ed4a0)
- safe-js: implement DisposableStack resource ownership (35cac7b)
- safe-js: implement Error.isError brand checks (d963722)
- safe-js: implement resumable AsyncDisposableStack cleanup (ffa6b79)
- safe-js: implement SuppressedError (f02a7ee)
- safe-js: snapshot completed constructor environments (e78047a)
- safe-js: snapshot pending promise aggregates (59585fb)
- safe-js: snapshot pending thenable continuations (f7de7bf)
- safe-js: snapshot promise capability executors (6f4ee6d)
- safe-js: support resumable async iterator disposal (0625512)
- safe-js: support resumable resource declarations (c029ad4)
- safe-js: support synchronous iterator disposal (4627c62)