Deno
Resolved in v2.8.1: fetch and WebSocket connections now validate resolved IPs against the net deny list before connecting.1
Six new CLI subcommands landed in v2.8: deno transpile (TypeScript/JSX to JS without bundling), deno pack (npm tarballs), deno bump-version (workspace-aware version bumps), deno why (dependency graph inspection), deno ci (CI environment detection), and deno audit fix.2
deno compile and install performance improved: framework detection now infers compile settings for known frameworks, and cold npm installs ran 3.66x faster.3 The catalog: protocol landed for centralizing dependency versions across workspaces.
Chrome DevTools gained network visibility: fetch(), node:http, and WebSocket traffic appear in the Network CDP domain when running with --inspect.4
The node:http layer was rewritten with llhttp and a native TCPWrap binding in v2.7.13, improving Node.js HTTP compatibility.5 deno upgrade added bsdiff delta patches in v2.7.14, reducing download sizes for incremental version jumps.6 TypeScript 6.0.3, V8 14.9, and stable import defer (TC39 stage 3) all shipped in v2.8.
Fresh 2.3 delivered zero-JS pages by default: pages with no islands or partials now ship without any client-side JavaScript.7 View Transitions API, first-class WebSocket support via ctx.upgrade(), CSP nonce injection, and IP filter middleware also landed. The Babel CJS transform was replaced by Vite's native handling; a regression was reverted in 2.3.3.
Claw Patrol, an open-source agent security firewall, was released to intercept and filter agent-initiated network traffic beyond HTTP.8