v2.7.0

2.7.0 / 2026.02.25

Read more: http://deno.com/blog/v2.7

• feat(audit): add --ignore flag to filter advisories by CVE ID (#32221)
• feat(check): add --check-js flag (#32235)
• feat(cli): add --save-exact/--exact flag to deno add and install (#31977)
• feat(cli): add deno create command (#32225)
• feat(compile): add --self-extracting flag (#32227)
• feat(config): support include and exclude in deploy config (#32254)
• feat(ext/bundle): Add --keep-names flag (#32285)
• feat(ext/web): add brotli support to CompressionStream and DecompressionStream (#32028)
• feat(fmt): add --fail-fast flag to deno fmt --check (#31438)
• feat(fs): add tryLock(exclusive?: boolean): Promise<boolean> to FsFile (#31848)
• feat(install): support --node-modules-dir for -g and use a manual node_modules dir for installing npm: specifiers (#32302)
• feat(task): turn off failglob by default (#32223)
• feat(unstable): add Deno.spawn(), Deno.spawnAndWait{Sync}() (#32238)
• feat(upgrade): cache downloaded binaries (#32187)
• feat: deno create jsr:<package> and deno init --jsr <package> (#32229)
• feat: add navigator.platform (#30795)
• feat: npm overrides (#32073)
• feat: stabilize Temporal API (#31928)
• fix(audit): gracefully handle malformed response (#32234)
• fix(audit): properly handle npm registries in subpaths (#32164)
• fix(bundle): let esbuild handle data urls (#32213)
• fix(ci): use noble apt repo for LLVM 21 packages (#32241)
• fix(ext/node): createServer().listen().address() returns port 0 (#32248)
• fix(ext/node): util.parseEnv and process.loadEnvFile compatibility (#32183)
• fix(ext/node): add host_arch to process.config.variables (#32265)
• fix(ext/node): add openAsBlob export to node:fs (#32261)
• fix(ext/node): add missing process.constrainedMemory() API (#32209)
• fix(ext/node): enable test-stdio-closed tests (#32237)
• fix(ext/node): enable test-zlib-invalid-input-memory and test-zlib-un… (#32284)
• fix(ext/node): handle shell redirections in child_process exec (#32087)
• fix(ext/node): implement timeout and killSignal for spawn() (#32283)
• fix(ext/node): improve process event handling and add missing APIs (#32200)
• fix(ext/node): preserve streaming body on stale keepalive retry (#32215)
• fix(ext/node): remove fs.promises.fstat, not a public Node.js API (#32289)
• fix(ext/node): support URL in child_process.fork modulePath (#32268)
• fix(ext/node): support ipv6 host in node:http (#32258)
• fix(install): support --allow-scripts with deno install -g --compile ... (#32249)
• fix(lsp): implement remaining tsgo resolver callbacks (#32303)
• fix(lsp): qualify diagnostic source and message from tsgo (#32251)
• fix(lsp): typescript-go basic resolution (#32016)
• fix(node): preserve AsyncLocalStorage context in unhandledRejection handlers (#32264)
• fix(node/buffer): fix latin1Slice and hexSlice returning wrong results (#32277)
• fix(permissions): allow /proc/pressure/* files with --allow-read (#30780)
• fix: deno install --force --compile (#32242)
• fix: detect bound require reexports in cjs analysis (#32163)
• fix: format wasm stack traces correctly, preserve context in unhandled rejection, improve cppgc inheritance perf (#32293)
• fix: format wasm stack traces per W3C spec (#32246)