chore(deps): update dependency happy-dom to v20

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
happy-dom	^15.0.0 -> ^20.0.0

---

Release Notes

capricorn86/happy-dom (happy-dom)

v20.0.10

Compare Source

v20.0.9

Compare Source

v20.0.8

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where previousSibling() and nextSibling() didn't work in HTMLSelectElement and HTMLFormElement - By @​capricorn86 in task #​1939
• Fixes issue where parsing an item without a permitted parent (e.g. <tr>) should be valid inside a <template> element - By @​capricorn86 in task #​1939

v20.0.7

Compare Source

👷‍♂️ Patch fixes

• Fix incorrect handling of >= operator in media query parser - By @​lkritsimas in task #​1869

v20.0.6

Compare Source

👷‍♂️ Patch fixes

• Changes implementation for DOMTokenList.forEach(), Headers.forEach() and NodeList.forEach() to be spec compliant - By @​ikeyan in task #​1858

v20.0.5

Compare Source

👷‍♂️ Patch fixes

• The setter TreeWalker.currentNode should validate if the value is a Node - By @​capricorn86 in task #​1935

v20.0.4

Compare Source

👷‍♂️ Patch fixes

• Only adds buttons to FormData if they are the submitter - By @​maxmil and @​
  karpiuMG in task #​1859

v20.0.3

Compare Source

👷‍♂️ Patch fixes

• Moves URL resolution to after checking if module preloading is enabled to prevent URL errors to be thrown when unresolvable - By @​iam-medvedev in task #​1851
• Fixes issue where CSS variables aren't parsed correctly when inside CSS functions - By @​fimion in task #​1837

v20.0.2

Compare Source

👷‍♂️ Patch fixes

• Adds frozen intrinsics flag to workers in @happy-dom/server-renderer - By @​capricorn86 in task #​1934

v20.0.1

Compare Source

👷‍♂️ Patch fixes

• Adds warning for environment with unfrozen intrinsics (builtins) when JavaScript evaluation is enabled- By @​capricorn86 in task #​1932
  • A security advisory has been reported showing that the recommended preventive measure of running Node.js with --disallow-code-generation-from-strings wasn't enough to protect against attackers escaping the VM context and accessing process-level functions. Big thanks to @​cristianstaicu for reporting this!
  • The documentation for how to run Happy DOM with JavaScript evaluation enabled in a safer way has been updated. Read more about it in the Wiki

v20.0.0

Compare Source

I avoid making breaking changes as much as possible in Happy DOM. When I have to make a breaking change, I try to keep it as minimal as possible. This could be a breaking change that impacts many projects, and I am truly sorry if you are negatively affected by this.

💣 Breaking Changes

• Due to security risks, JavaScript evaluation is now disabled by default - By @​capricorn86 in task #​1930
  • A security advisory (GHSA-37j7-fg3j-429f) has been reported that shows a security vulnerability where it's possible to escape the VM context and get access to process level functionality. Big thanks to @​Mas0nShi for reporting this!
  • Due to this security risk, JavaScript evaluation is now disabled by default to prevent that consumers accidentally executes untrusted code without taking precautions
  • JavaScript evaluation can be enabled by setting enableJavaScriptEvaluation to "true". Read more about how to enable this in a safer way in the Wiki

v19.0.2

Compare Source

👷‍♂️ Patch fixes

• Fixes issue related to CSS pseudo selector :scope that didn't work correctly for direct descendants to root - By @​capricorn86 in task #​1620

v19.0.1

Compare Source

👷‍♂️ Patch fixes

• Fixes issue with sending in URLs as string in @happy-dom/server-renderer config using CLI - By @​capricorn86 in task #​1908

v19.0.0

Compare Source

💣 Breaking Changes

• Removes support for CommonJS - By @​capricorn86 in task #​1730
  • Support for CommonJS is no longer needed as Node.js v18 is deprecated and v20 and above supports loading ES modules from CommonJS using require()
• Updates Jest to v30 in the @happy-dom/jest-environment package - By @​capricorn86 in task #​1730
• Makes Jest packages peer dependencies to make it easier to align versions with the project using @happy-dom/jest-environment - By @​capricorn86 in task #​1730

🎨 Features

• Adds a new package called @happy-dom/server-renderer - By @​capricorn86 in task #​1730
  • This package provides a simple way to statically render (SSG) or server-side render (SSR) your client-side application
  • Read more in the Wiki under Server-Renderer
• Adds support for import.meta to the ESM compiler - By @​capricorn86 in task #​1730
• Adds support for the CSS pseudo selector :scope - By @​capricorn86 in task #​1620
• Improves support for MediaList - By @​capricorn86 in task #​1730
• Adds support for CSSKeywordValue, CSSStyleValue, StylePropertyMap, StylePropertyMap, StylePropertyMapReadOnly - By @​capricorn86 in task #​1730
• Improves debug information in the ESM compiler - By @​capricorn86 in task #​1730
• Adds validation of browser settings when creating a new Browser instance - By @​capricorn86 in task #​1730
• Adds support for the browser setting navigation.beforeContentCallback which makes it possible to inject event listeners or logic before content is loaded to the document when navigating a browser frame - By @​capricorn86 in task #​1730
• Adds support for the browser setting fetch.requestHeaders which provides with a declarative and simple way to add request headers - By @​capricorn86 in task #​1730
• Adds support for setting an object to timer.preventTimerLoops which makes it possible to define different settings for setTimeout() and requestAnimationFrame() - By @​capricorn86 in task #​1730
• Adds support for the browser setting viewport which makes it possible to define a default viewport size - By @​capricorn86 in task #​1730
• Adds support for the parameters beforeContentCallback and headers to BrowserFrame.goto(), BrowserFrame.goBack(), BrowserFrame.goForward(), BrowserFrame.goSteps() and BrowserFrame.reload() - By @​capricorn86 in task #​1730
• Adds support for PopStateEvent and trigger the event when navigating the page history using History.pushState() - By @​capricorn86 in task #​1730
• Use local file paths for virtual server files in stack traces - By @​capricorn86 in task #​1730
• Adds support for ResponseCache.fileSystem.load() and ResponseCache.fileSystem.save() for storing and loading cache from the file system - By @​capricorn86 in task #​1730

👷‍♂️ Patch fixes

• Fixes a bug in the ESM compiler that caused it to fail to parse certain code - By @​capricorn86 in task #​1730
• Disables the same origin policy when navigating a browser frame using BrowserFrame.goto() - By @​capricorn86 in task #​1730
• Fixes bug where CSS selectors with the pseudos "+" and ">" failed for selectors without arguments - By @​capricorn86 in task #​1730
• Adds try and catch to listeners for events dispatched from XMLHttpRequest to prevent it from being set to an invalid state if a listener throws an Error - By @​capricorn86 in task #​1730

v18.0.1

Compare Source

👷‍♂️ Patch fixes

• Addresses an issue where an error occurred if the Element ID was set to the same name as a Window property with a null value - By @​capricorn86 in task #​1841

v18.0.0

Compare Source

💣 Breaking Changes

• Makes the types for Happy DOM strict - By @​capricorn86 in task #​1154
  • This makes it possible to use the option skipLibCheck set to "false" in the typescript configuration for projects with a strict configuration
  • This change has resulted in that some types has changed and is therefore considered as a breaking change
• BrowserContext.close() now throws an error when trying to close the default context of a browser - By @​capricorn86 in task #​1154

🎨 Features

• Adds support for Browser.closed, BrowserContext.closed, BrowserPage.closed and BrowserFrame.closed - By @​capricorn86 in task #​1154
• Adds support for VirtualConsolePrinter.close() and VirtualConsolePrinter.closed - By @​capricorn86 in task #​1154
• Adds support for CookieContainer.clearCookies() - By @​capricorn86 in task #​1154

v17.6.3

Compare Source

👷‍♂️ Patch fixes

• Removes global typescript definition that was used for custom elements - By @​capricorn86 in task #​1154

v17.6.2

Compare Source

👷‍♂️ Patch fixes

• Updates Typescript to the latest version - By @​capricorn86 in task #​1154

v17.6.1

Compare Source

🎨 Features

• Adds support for disabling validation of certificates, to allow for self-signed certificates to be used - By @​capricorn86 in task #​1763
  • Read more about the new setting fetch.disableStrictSSL under IBrowserSettings in the Wiki

v17.6.0

Compare Source

v17.5.9

Compare Source

👷‍♂️ Patch fixes

• Adds missing null check in HTMLLinkElement for a browser frame property that becomes null during teardown of a Window - By @​capricorn86 in task #​1800

v17.5.8

Compare Source

👷‍♂️ Patch fixes

• Incorrect cache matching caused Element.classList to return the wrong items - By @​capricorn86 in task #​1812

v17.5.7

Compare Source

👷‍♂️ Patch fixes

• Handle wider range of valid characters in unquoted attribute value parsing - By @​AudunWA in task #​1817

v17.5.6

Compare Source

👷‍♂️ Patch fixes

• Removes the min and max boundary check when setting the value of an input field of type "date" - By @​zgrybus in task #​1815

v17.5.5

Compare Source

v17.5.4

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where the body of a ReadableStream was locked after being cloned - By @​MarcMcIntosh in task #​1493

v17.5.3

Compare Source

👷‍♂️ Patch fixes

• Adds previousSibling and nextSibling to MutationObserver records when a child is removed - By @​uxuip in task #​1803

v17.5.2

Compare Source

👷‍♂️ Patch fixes

• Adds support for the unicode characters « and » in query selectors used by the React 19.1 "useId" hook - By @​terrymun in task #​1785

v17.5.1

Compare Source

👷‍♂️ Patch fixes

• Existing URL query string should be overwritten on form submit when method is "GET" - By @​rslabbert in task #​1786

v17.5.0

Compare Source

🎨 Features

• Adds support for XMLHttpRequest.overrideMimeType() - By @​maxmil in task #​1782

v17.4.9

Compare Source

👷‍♂️ Patch fixes

• A disabled input element should not be parsed in FormData - By @​juandiegombr in task #​1790

v17.4.8

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where CSS variables where not being parsed in color functions - By @​hampustagerud in task #​1822

v17.4.7

Compare Source

👷‍♂️ Patch fixes

• Allow empty URL string in Request - By @​elierotenberg in task #​1779

v17.4.6

Compare Source

👷‍♂️ Patch fixes

• Preserve slashes in the "name" property in File - By @​dyabol in task #​1788

v17.4.5

Compare Source

👷‍♂️ Patch fixes

• Handle bubbling click events in HTMLAnchorElement - By @​maxmil in task #​1775

v17.4.4

Compare Source

👷‍♂️ Patch fixes

• Sets 0 instead of undefined as default in setTimeout() to prevent Bun from logging a "TimeoutNaNWarning" - By @​lekoala in task #​1772

v17.4.3

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where the wrong scope was used when settings.errorCapture is not set to "tryAndCatch" and handleEvent is used for the event listener - By @​capricorn86 in task #​1766

v17.4.2

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where an error was thrown for "xmlns" or unknown prefixes in Element.setAttribute() - By @​capricorn86 in task #​1750

v17.4.1

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where an error was thrown for attributes "xlink" or an unknown prefix during parsing of HTML - By @​capricorn86 in task #​1750

v17.4.0

Compare Source

🎨 Features

• Adds support for the KeyboardEvent.getModifierState() method - By @​karpiuMG in task #​1467

v17.3.2

Compare Source

👷‍♂️ Patch fixes

• Escapes special regex characters in attribute selectors - By @​karpiuMG in task #​1697

v17.3.1

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where an error was thrown for attributes with "xmlns" as prefix during parsing of HTML (e.g. <svg xmlns:link=""></svg>) - By @​capricorn86 in task #​1750

v17.3.0

Compare Source

🎨 Features

• Adds support for form method 'dialog' - By @​karpiuMG in task #​1184

v17.2.4

Compare Source

👷‍♂️ Patch fixes

• SVG elements should be skipped in HTMLElement.innerText - By @​karpiuMG in task #​1151

v17.2.3

Compare Source

👷‍♂️ Patch fixes

• Element.contentEditable should be synced with the "contenteditable" attribute - By @​karpiuMG in task #​1463

v17.2.2

Compare Source

👷‍♂️ Patch fixes

• Handle invalid indices on Node.childNodes - By @​karpiuMG in task #​1698

v17.2.1

Compare Source

👷‍♂️ Patch fixes

• Handle nested square brackets and parentheses inside pseudo-class arguments - By @​karpiuMG in task #​1072

v17.2.0

Compare Source

🎨 Features

• Add support for multiple selectors in ":not" pseudo-class - By @​karpiuMG in task #​990

v17.1.13

Compare Source

👷‍♂️ Patch fixes

• Allow to use secure flag for cookies on "http://localhost" - By @​karpiuMG in task #​1162

v17.1.12

Compare Source

👷‍♂️ Patch fixes

• Adds event phases as static properties on Event class - By @​alan910127 in task #​1747

v17.1.11

Compare Source

👷‍♂️ Patch fixes

• Fixes issue with attribute references when using Element.cloneNode() - By @​Mas0nShi in task #​1745

v17.1.10

Compare Source

👷‍♂️ Patch fixes

• Prevents disabled inputs from being focused or blurred - By @​karpiuMG in task #​1563

v17.1.9

Compare Source

👷‍♂️ Patch fixes

• Event listener properties prefixed with "on" should be the evaluated value of the corresponding attribute - By @​capricorn86 in task #​474

v17.1.8

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where change event wasn't triggered for an input inside of a label - By @​capricorn86 in task #​1614

v17.1.7

Compare Source

👷‍♂️ Patch fixes

• Adds missing end boundary to FormData requests - By @​aberigle and @​capricorn86 in task #​1741

v17.1.6

Compare Source

🎨 Features

• Adds support for sending AbortSignal as option to EventTarget.addEventListener() - By @​karpiuMG in task #​1540

v17.1.5

Compare Source

👷‍♂️ Patch fixes

• HTMLElement.dataset should return undefined for properties not found - By @​karpiuMG in task #​1689

v17.1.4

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where the use of filtering in TreeWalker didn't work according to spec - By @​capricorn86 in task #​1605

v17.1.3

Compare Source

👷‍♂️ Patch fixes

• Fixes incorrect handling of attribute prefixes when iterating NamedNodeMap - By @​capricorn86 in task #​1728
  • This caused attribute names to be incorrectly returned in Element.getAttributeNames() when attributes where using prefixes

v17.1.2

Compare Source

👷‍♂️ Patch fixes

• AbortSignal.reason can have any type - By @​btea in task #​1718
• When aborting a request, AbortSignal.reason should be the object used when the promise is rejected - By @​btea in task #​1718

v17.1.1

Compare Source

🎨 Features

• Adds support for the @media selector "forced-colors" - By @​capricorn86 in task #​1727
  • Read more about how to set the value in the Wiki for IBrowserSettings under "device.forcedColors"

👷‍♂️ Patch fixes

• Fixes issue where it was not possible to nest @media, @supports and @container rules - By @​capricorn86 in task #​1727
• Fixes issue where CSSStyleSheet was instantiated internally without a Window context, causing errors to not be thrown correctly in CSSStyleSheet methods - By @​capricorn86 in task #​1727
• Changes errors thrown in CSSStyleSheet methods, so that they work according to spec - By @​capricorn86 in task #​1727

v17.1.0

Compare Source

🎨 Features

• Add support for CSS media query rule "prefers-reduced-motion" - By @​mwdiaz in task #​1724
  • Read more about how to set this value under IBrowserSettings in the Wiki.

v17.0.4

Compare Source

👷‍♂️ Patch fixes

• The "slotchange" event should be fired after the element has been connected to the DOM - By @​capricorn86 in task #​1722

v17.0.3

Compare Source

👷‍♂️ Patch fixes

• Fixes bug where nested query selectors is not returning the correct result when there are multiple matching selector groups - By **@​christiango ** in task #​1720

v17.0.2

Compare Source

👷‍♂️ Patch fixes

• The property "tabIndex" should return "0" by default in HTMLAnchorElement, HTMLAreaElement, HTMLButtonElement, HTMLIFrameElement, HTMLInputElement, HTMLMediaElement, HTMLObjectElement, HTMLSelectElement and HTMLTextAreaElement - By @​capricorn86 in task #​1714

v17.0.1

Compare Source

👷‍♂️ Patch fixes

• Ensure querySelector() returns the first item that appears in the DOM for grouped selectors - By @​christiango in task #​1710

v17.0.0

Compare Source

💣 Breaking Changes

• Adds support for ECMAScript modules - By @​capricorn86 in task #​320
  • This change allows the use of import and export statements in JavaScript files

🎨 Features

• Adds support for tracing never ending tasks when using waitUntilComplete() - By @​capricorn86 in task #​1567
  • Read more about how to enable this feature under debug.traceWaitUntilComplete in the Wiki for IBrowserSettings
• Adds support for preloading fetch, stylesheet, script and modules in HTMLLinkElement - By @​capricorn86 in task #​320
• Adds support for HTMLLinkElement.relList.supports() - By @​capricorn86 in task #​320
• Adds support for Request.mode - By @​capricorn86 in task #​320
• Output failed requests to the console - By @​capricorn86 in task #​320
• Adds support for HTMLScriptElement.blocking, HTMLScriptElement.crossOrigin, HTMLScriptElement.fetchPriority, HTMLScriptElement.noModule, HTMLScriptElement.integrity, HTMLScriptElement.referrerPolicy - By @​capricorn86 in task #​320
• Use cache in virtual server requests - By @​capricorn86 in task #​320
• Adds support for credentials and referrerPolicy when fetching styles and scripts - By @​capricorn86 in task #​320
• Disallow invalid attributes from being set in Element.setAttribute() - By @​OlaviSau in task #​1706

👷‍♂️ Patch fixes

• Call afterAsyncResponse fetch interceptor in virtual server requests - By @​capricorn86 in task #​320
• Fixes bug where children in a ShadowRoot of a custom element that was upgraded from a HTMLElement wasn't considered connected to the DOM - By @​capricorn86 in task #​320

v16.8.1

Compare Source

👷‍♂️ Patch fixes

• Handle non-string values gracefully when removing an attribute - By @​OlaviSau in task #​1706

v16.8.0

Compare Source

🎨 Features

• Add support for insertRow() and deleteRow() to HTMLTableSectionElement - By @​christiango in task #​1708

v16.7.3

Compare Source

👷‍♂️ Patch fixes

• Removes space from directory name that prevents the repo to be cloned on MS Windows - By @​kleinfreund in task #​1703

v16.7.2

Compare Source

👷‍♂️ Patch fixes

• Ignore invalid cookies in CookieContainer - By @​capricorn86 in task #​1693

v16.7.1

Compare Source

👷‍♂️ Patch fixes

• Adds ICookie, IOptionalCookie, CookieSameSiteEnum and IVirtualServer as exports to the index file - By @​capricorn86 in task #​1693
• Makes non-mandatory cookie properties optional in CookieContainer.addCookies() - By @​capricorn86 in task #​1693

v16.7.0

Compare Source

🎨 Features

• Adds support for simulating local HTTP servers that serves files from the local file system - By @​capricorn86 in task #​1688
  • Read more about virtual servers in the Wiki

v16.6.0

Compare Source

🎨 Features

• Adds support for subsequent sibling combinator to querySelector(), querySelectorAll() and matches() (e.g. ".a ~ .b") - By @​karpiuMG in task #​1683

v16.5.3

Compare Source

👷‍♂️ Patch fixes

• Fixes problem with encoding and decoding attribute values in HTML - By @​capricorn86 in task #​1678
• Fixes issue where it was not possible to query selector by class when the attribute value had line breaks in it - By @​capricorn86 in task #​1678

v16.5.2

Compare Source

👷‍♂️ Patch fixes

• Event.target should be the target element after an event has been dispatched - By @​capricorn86 in task #​1529

v16.5.1

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where Comment, Text and DocumentFragment are not instances of their corresponding property on Window - By @​capricorn86 in task #​1577

v16.5.0

Compare Source

🎨 Features

• Adds property GlobalRegistrator.isRegistered - By @​capricorn86 in task #​1670

v16.4.3

Compare Source

👷‍♂️ Patch fixes

• Adds null check for if browser frame is available in Response during tear down of the Window - By @​capricorn86 in task #​1669

v16.4.2

Compare Source

👷‍♂️ Patch fixes

• Support using URL as an object for URL:s when using the Browser API - By @​capricorn86 in task #​1664

v16.4.1

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where HTML assigned to document.documentElement.innerHTML isnt parsed correctly since v16 - By @​capricorn86 in task #​1663

v16.4.0

Compare Source

🎨 Features

• Allow fetch to be intercepted and modified by sending in an interceptor as a setting - By @​OlaviSau in task #​1502
  • Read more about this in the Wiki at IFetchInterceptor

v16.3.0

Compare Source

🎨 Features

• Adds support for child combinator to ":has()" pseudo selector (e.g. "span:has(> video)") - By @​capricorn86 in task #​1642

v16.2.9

Compare Source

👷‍♂️ Patch fixes

• Fixes the HTMLInputElement.defaultChecked property - By @​capricorn86 in task #​1587
  • This issue caused React not to serialize the "checked" attribute correctly

v16.2.8

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where the wrong event target was used when dispatching events on HTMLFormElement or HTMLSelectElement - By @​capricorn86 in task #​1628

v16.2.7

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where text in <script> and <style> elements should not be decoded or encoded - By @​capricorn86 in task #​1564

v16.2.6

Compare Source

👷‍♂️ Patch fixes

• Fixes problem where snapshots did not result in HTML for <form> and <select> elements - By @​capricorn86 in task #​1608

v16.2.5

Compare Source

👷‍♂️ Patch fixes

• Fixes bug where the reference to a parent HTMLFormElement and HTMLSelectElement was wrong which affected the methods remove(), replaceWith(), before(), after(), append(), prepend(), replaceChildren() and insertAdjacentElement() - By @​capricorn86 in task #​1637

v16.2.4

Compare Source

👷‍♂️ Patch fixes

• Fixes bug where the incorrect location is set after a redirect in BrowserFrame.goto() and DetachedBrowserFrame.goto() - By @​capricorn86 in task #​1627

v16.2.3

Compare Source

👷‍♂️ Patch fixes

• Fixes the implementation for the HTMLTableCellElement.headers property - By @​capricorn86 in task #​1634

[`v16.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
react-news	Ready	Preview	Comment	Nov 21, 2025 9:50am