Impact Score: 5/10
Deno v2.6.5 โ Release Notes & Engineering Impact
Source available โ automated, not human-reviewed
Component: deno ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
Deno v2.6.5. Source highlight: feat(ext/canvas): support gif, webp for `createImageBitmap` (#31402)
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
โจ New Features & Capabilities (3)
- feat(ext/canvas): support gif, webp for `createImageBitmap` (#31402)
- feat(ext/web): add performance.clearResourceTimings() and
- feat(node/fs): implement FileHandle.readableWebStream() (#31745)
๐ง Bug Fixes & Patches (6)
- fix(audit): respect --level flag for exit code (#31721)
- fix(ci): rename `trusted-signing-action` to `artifact-signing-action` (#31849)
- fix(cli/test): close Node HTTP connections before sanitizer check (#31782)
- fix(ext/fetch): read file urls via vfs (#31814)
- fix(ext/fetch): support ipv6 destination host with http and socks proxy
- fix(ext/node): `DatabaseSync` garbage collection invalidating associated
๐ View Raw Release Notes (Original Developer Log)
### 2.6.5 / 2026.01.15
- feat(ext/canvas): support gif, webp for `createImageBitmap` (#31402)
- feat(ext/web): add performance.clearResourceTimings() and
setResourceTimingBufferSize() (#31603)
- feat(node/fs): implement FileHandle.readableWebStream() (#31745)
- fix(audit): respect --level flag for exit code (#31721)
- fix(ci): rename `trusted-signing-action` to `artifact-signing-action` (#31849)
- fix(cli/test): close Node HTTP connections before sanitizer check (#31782)
- fix(ext/fetch): read file urls via vfs (#31814)
- fix(ext/fetch): support ipv6 destination host with http and socks proxy
(#31683)
- fix(ext/node): `DatabaseSync` garbage collection invalidating associated
resources (#31737)
- fix(ext/node): add tls.setDefaultCACertificates support (#31522)
- fix(ext/node): emit deprecation warning for SlowBuffer (#31772)
- fix(ext/node): fix use-after-free in StatementSync JS iterator (#31770)
- fix(ext/node): use correct block sizes for HMAC algorithms (#31775)
- fix(ext/web): handle empty TextDecoder input when stream is true (#31691)
- fix(io): ignore `BrokenPipe` error in `op_print` (#31844)
- fix(node/child_process): ChildProcess constructor without args (#31838)
- fix(node/child_process): improve arg type validation for execFile and fork
(#31829)
- fix(node/child_process): reject null bytes in arguments (#31828)
- fix(node/child_process): use correct syscall name in spawn error (#31836)
- fix(npm): deduplication pass for initially partially resolved graphs (#31787)
- fix(runtime): handle `options` parameter in `Deno.errors.*` constructors
(#31510)
- fix(task): preserve signal-based exit codes for child processes (#31789)
- fix(tsgo): nil deref for exported symbols (#31786)
- fix(webgpu): correctly expose `GPUCompilationInfo` & `GPUCompilationMessage`
(#31780)
- fix: add more details when panicking getting dir path from deno.json (#31805)
- fix: allow multiple --allow-all args (#31833)
- fix: queue dynamic imports for modules with pending TLA (#31670)
- fix: update config schema for read permission to include ignore property
(#31785)