Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps web-streams-polyfill from 3.3.3 to 4.2.0.

Release notes

Sourced from web-streams-polyfill's releases.

v4.2.0

v4.1.0

  • 👓 Align with spec version fa4891a (#156)
    • Commit pull-into descriptors after filling them from the internal queue. This prevents an issue where an incorrect BYOB request would temporarily be visible through a patched Object.prototype.then, which broke some internal invariants.
    • The next() and return() methods of ReadableStream's async iterator are now correctly "chained", such that the promises returned by either of these methods are always resolved in the same order as those methods were called.
  • 💅 Improve type of WritableStreamDefaultController.signal. (#157)

v4.0.0

  • 💥 Rework the list of variants to have more modern defaults. The table below shows how to upgrade your v3 import to their equivalent v4 import. See the migration guide for more information. (#82, #139)
  • 💥 Remove the ES2018 variant, in favor of the ES2015 variant.
  • 💥 Switch to subpath exports for variants.
    • Node 12 or higher is required to import or require() a variant.
    • When using TypeScript, version 4.7 or higher is now required. Additionally, moduleResolution must be set to "node16", "nodenext" or "bundler".
  • 🚀 Support importing as ESM in Node.
  • 💅 Minify all code in the published package, to reduce the download size.
  • 💅 Rework ReadableStream.from() implementation to avoid depending on async function* down-leveling for ES5. (#144)
v3 import v4 import description
web-streams-polyfill web-streams-polyfill/polyfill/es5 ES5+ polyfill
web-streams-polyfill/es6 web-streams-polyfill/polyfill ES2015+ polyfill
web-streams-polyfill/es2018 web-streams-polyfill/polyfill ES2015+ polyfill
web-streams-polyfill/ponyfill web-streams-polyfill/es5 ES5+ ponyfill
web-streams-polyfill/ponyfill/es6 web-streams-polyfill ES2015+ ponyfill
web-streams-polyfill/ponyfill/es2018 web-streams-polyfill ES2015+ ponyfill

v4.0.0-beta.3

v4.0.0-beta.2

  • 🚀 Support calling ReadableStream.pipeTo(writable) and .pipeThrough({ readable, writable }) when writable is a native (i.e. not polyfilled) WritableStream. (#99, #101)
  • 💅 Add fallback for package exports for backwards compatibility with older Node versions. (#107)
  • 🐛 Prevent warnings from Bluebird about a promise being created within a handler but not being returned from a handler. (#91)

v4.0.0-beta.1

  • 💥 Rework the list of variants to have more modern defaults. The table below shows how to upgrade your v3 import to their equivalent v4 import. See the migration guide for more information. (#82, #83)
  • 💥 Remove the ES2018 variant, in favor of the ES2015 variant.
  • 🚀 Support importing as ESM in Node.
  • 💅 Minify all code in the published package, to reduce the download size.
v3 import v4 import description
web-streams-polyfill web-streams-polyfill/polyfill/es5 ES5+ polyfill
web-streams-polyfill/es6 web-streams-polyfill/polyfill ES2015+ polyfill

... (truncated)

Changelog

Sourced from web-streams-polyfill's changelog.

4.2.0 (2025-08-17)

4.1.0 (2025-01-05)

  • 👓 Align with spec version fa4891a (#156)
    • Commit pull-into descriptors after filling them from the internal queue. This prevents an issue where an incorrect BYOB request would temporarily be visible through a patched Object.prototype.then, which broke some internal invariants.
    • The next() and return() methods of ReadableStream's async iterator are now correctly "chained", such that the promises returned by either of these methods are always resolved in the same order as those methods were called.
  • 💅 Improve type of WritableStreamDefaultController.signal. (#157)

4.0.0 (2024-02-28)

  • 💥 Rework the list of variants to have more modern defaults. The table below shows how to upgrade your v3 import to their equivalent v4 import. See the migration guide for more information. (#82, #139)
  • 💥 Remove the ES2018 variant, in favor of the ES2015 variant.
  • 💥 Switch to subpath exports for variants.
    • Node 12 or higher is required to import or require() a variant.
    • When using TypeScript, version 4.7 or higher is now required. Additionally, moduleResolution must be set to "node16", "nodenext" or "bundler".
  • 🚀 Support importing as ESM in Node.
  • 💅 Minify all code in the published package, to reduce the download size.
  • 💅 Rework ReadableStream.from() implementation to avoid depending on async function* down-leveling for ES5. (#144)
v3 import v4 import description
web-streams-polyfill web-streams-polyfill/polyfill/es5 ES5+ polyfill
web-streams-polyfill/es6 web-streams-polyfill/polyfill ES2015+ polyfill
web-streams-polyfill/es2018 web-streams-polyfill/polyfill ES2015+ polyfill
web-streams-polyfill/ponyfill web-streams-polyfill/es5 ES5+ ponyfill
web-streams-polyfill/ponyfill/es6 web-streams-polyfill ES2015+ ponyfill
web-streams-polyfill/ponyfill/es2018 web-streams-polyfill ES2015+ ponyfill
Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2025
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/main/web-streams-polyfill-4.2.0 branch from 757ebf3 to e84f176 Compare October 13, 2025 11:52
Bumps [web-streams-polyfill](https://github.com/MattiasBuelens/web-streams-polyfill) from 3.3.3 to 4.2.0.
- [Release notes](https://github.com/MattiasBuelens/web-streams-polyfill/releases)
- [Changelog](https://github.com/MattiasBuelens/web-streams-polyfill/blob/master/CHANGELOG.md)
- [Commits](MattiasBuelens/web-streams-polyfill@v3.3.3...v4.2.0)

---
updated-dependencies:
- dependency-name: web-streams-polyfill
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/main/web-streams-polyfill-4.2.0 branch from e84f176 to bda1beb Compare October 13, 2025 12:52
@larabr
Copy link
Collaborator

larabr commented Nov 4, 2025

WIll keep aligned with OpenPGP.js version

@larabr larabr closed this Nov 4, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 4, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/main/web-streams-polyfill-4.2.0 branch November 4, 2025 16:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants