zlib now exposes rejectGarbageAfterEnd (
2902b2b)
Node documents and validates a new public decompression option that fails when trailing input follows the compressed stream. The change adds coverage across async, sync, and stream APIs for gzip, Brotli, and Zstd-backed decompression.
zlib can reject trailing gzip members in web streams (
7c43441)
The decompression pipeline now threads rejectGarbageAfterEnd down into native zlib and makes both sync and GUNZIP paths honor it. That closes a gap where concatenated gzip members or leftover input could slip through when callers asked for strict end-of-stream behavior.
WebCrypto crypto typings are added (
47d2d62)
This expands the internal crypto typing surface substantially, including a large internalBinding/crypto definition and updates to crypto utility helpers. It improves type coverage for WebCrypto-related internals and reduces gaps in the generated typings.
VFS real provider reads from the already-open fd (
8cb8312)
RealFileHandle now reads file contents from its open descriptor instead of reopening the original path, so handles keep working after the backing file is renamed. It also preserves the current offset for readFile()/readFileSync(), fixing a real VFS correctness bug.

