September 14th, 2026 · 1 commits
Updated core Rust dependencies and lockfiles to clear all open Dependabot security alerts, including several API-version bumps.
Read the issue →
September 4th, 2026 · 1 commits
Frontend avoids hitting the docs API for non-latest versioned doc URLs and tells crawlers not to index them.
Read the issue →
September 3rd, 2026 · 4 commits
Staff can now open user-addressed tickets, scope admins can delete fresh low-use versions, and symbol search loads only when used.
Read the issue →
August 29th, 2026 · 1 commits
A single fix cuts R2 re-downloads for docs/source and prevents oversized all-symbols docs responses from hammering render time.
Read the issue →
August 28th, 2026 · 2 commits
JSR speeds up dependency graph builds from published metadata and fixes a CI bundle regression caused by Deno’s sourcemap parsing change.
Read the issue →
August 27th, 2026 · 4 commits
A cache invalidation bug blocked fresh manifests, version pages no longer 302 away, and CI Docker builds get a shared registry cache.
Read the issue →
August 26th, 2026 · 2 commits
Staff can now recompute stale version score metadata, and npm tarball generation now correctly rewrites remapped declaration specifiers.
Read the issue →
August 25th, 2026 · 17 commits
Added markdown previews, linked specifiers, create-command support, and several support-ticket fixes; also patched docs rendering and sanitization.
Read the issue →
August 24th, 2026 · 5 commits
JSR fixes inbound ticket email delivery, tightens docs scoring, and patches a publishing deadlock plus oversized docs handling.
Read the issue →
August 22nd, 2026 · 4 commits
JSR now exposes GitHub repo links in metadata, counts npm-mapped dependents correctly, and fixes a user timestamp field bug.
Read the issue →
August 21st, 2026 · 10 commits
+3
Adds fallback registries and a publish fix, while tightening CSP, telemetry, and frontend privacy/perf.
Read the issue →
August 20th, 2026 · 4 commits
Added richer package search filters and tightened docs scoring, while fixing trusted publishing for GitHub Enterprise Cloud issuers.
Read the issue →
August 19th, 2026 · 1 commits
Mobile navigation, package docs links, overflow fixes, and download charts/widgets were improved across the site.
Read the issue →
August 15th, 2026 · 2 commits
License-list metadata was refreshed from upstream, while a frontend scraping-protection rollout was backed out after CF access issues.
Read the issue →
August 7th, 2026 · 1 commits
JSR shifted expensive frontend rate limiting out of the worker and into the WAF, saving invocations on blocked scrapers.
Read the issue →
August 4th, 2026 · 2 commits
Provenance verification now checks the published manifest digest, while production Cloud SQL is downsized to a zonal instance.
Read the issue →
July 9th, 2026 · 1 commits
Login now requires a POST with Cloudflare Turnstile verification, blocking direct GETs and tightening the OAuth start flow.
Read the issue →
July 6th, 2026 · 2 commits
The repo now serves docs only for the newest package version and disables the diff UI, while also turning off Algolia symbol indexing.
Read the issue →
July 3rd, 2026 · 1 commits
jsr hardened provenance checks by storing publish-time tarball hashes and verifying attestations against the exact bytes released.
Read the issue →
June 18th, 2026 · 1 commits
Download tracking now captures client user agents for both JSR and npm package fetches, improving analytics detail.
Read the issue →
June 17th, 2026 · 2 commits
JSR switches search infrastructure to Algolia, with a follow-up fix to scope filtering and ranking.
Read the issue →
June 15th, 2026 · 5 commits
JSR tightened provenance verification and auth state handling, added 5% OTLP sampling, and hardened frontend responses.
Read the issue →
June 11th, 2026 · 1 commits
Stops caching live publish-status and routes package caching by public URL so metadata invalidates correctly after publish.
Read the issue →
June 10th, 2026 · 1 commits
Adds a reaper for stale publishing tasks so stranded publishes can regenerate package metadata and unblock versions.
Read the issue →
June 9th, 2026 · 5 commits
Major cache and crawl-control work reduced origin load on docs/diff pages, while API tracing was upgraded to report errors more accurately and export logs.
Read the issue →
June 8th, 2026 · 3 commits
A DB-first Worker cutover landed, caching was widened, then the cutover was reverted the same day while keeping the DB auth pre-step.
Read the issue →
June 7th, 2026 · 3 commits
JSR moved read-only stats/metrics into workers-rs, added Hyperdrive Postgres connectivity, and began proxying all other paths to compute.
Read the issue →
June 5th, 2026 · 16 commits
Big infrastructure refactor plus telemetry changes, with several frontend accessibility and usability fixes and a few important backend corrections.
Read the issue →
May 29th, 2026 · 3 commits
The API now adds CDN caching for user, sitemap, package manifest, and publish flows, cutting load on frequently hit unauthenticated endpoints.
Read the issue →
May 28th, 2026 · 1 commits
JSR migrates its Fresh frontend from Cloud Run to a standalone Cloudflare Worker, with routing and deployment updated for the cutover.
Read the issue →