From 891179e5e9efcdd7337cc4e7371230f8311b69cf Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 14 Apr 2026 16:09:29 +0200 Subject: [PATCH 1/3] Bump liquidjs from 10.25.0 to 10.25.5 in /scripts (#3769) Bumps [liquidjs](https://github.com/harttle/liquidjs) from 10.25.0 to 10.25.5. - [Release notes](https://github.com/harttle/liquidjs/releases) - [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md) - [Commits](https://github.com/harttle/liquidjs/compare/v10.25.0...v10.25.5) --- updated-dependencies: - dependency-name: liquidjs dependency-version: 10.25.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- scripts/package-lock.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/scripts/package-lock.json b/scripts/package-lock.json index 834f3c3cc0..e9a58fdcc1 100644 --- a/scripts/package-lock.json +++ b/scripts/package-lock.json @@ -1714,9 +1714,9 @@ } }, "node_modules/liquidjs": { - "version": "10.25.0", - "resolved": "https://registry.npmjs.org/liquidjs/-/liquidjs-10.25.0.tgz", - "integrity": "sha512-XpO7AiGULTG4xcTlwkcTI5JreFG7b6esLCLp+aUSh7YuQErJZEoUXre9u9rbdb0057pfWG4l0VursvLd5Q/eAw==", + "version": "10.25.5", + "resolved": "https://registry.npmjs.org/liquidjs/-/liquidjs-10.25.5.tgz", + "integrity": "sha512-GKiKeZjJDdVoQAu+S9rzkYsYnYhcep5W3WwZXgb5f+yq484P/k9JqamBbGYu+LBEixcUAXZr2jogdAIjB3ki1w==", "dependencies": { "commander": "^10.0.0" }, @@ -3935,9 +3935,9 @@ } }, "liquidjs": { - "version": "10.25.0", - "resolved": "https://registry.npmjs.org/liquidjs/-/liquidjs-10.25.0.tgz", - "integrity": "sha512-XpO7AiGULTG4xcTlwkcTI5JreFG7b6esLCLp+aUSh7YuQErJZEoUXre9u9rbdb0057pfWG4l0VursvLd5Q/eAw==", + "version": "10.25.5", + "resolved": "https://registry.npmjs.org/liquidjs/-/liquidjs-10.25.5.tgz", + "integrity": "sha512-GKiKeZjJDdVoQAu+S9rzkYsYnYhcep5W3WwZXgb5f+yq484P/k9JqamBbGYu+LBEixcUAXZr2jogdAIjB3ki1w==", "requires": { "commander": "^10.0.0" } From ec751d7791aab5b3fdd6a47c57c46fa993d9a8e2 Mon Sep 17 00:00:00 2001 From: Patrick Brosset Date: Wed, 15 Apr 2026 15:49:52 +0200 Subject: [PATCH 2/3] XSLT deprecation in "Site compatibility-impacting changes" (#3775) * XSLT deprecation * Fix typo in deprecation notice for XSLT in site-impacting changes document --- microsoft-edge/web-platform/site-impacting-changes.md | 1 + 1 file changed, 1 insertion(+) diff --git a/microsoft-edge/web-platform/site-impacting-changes.md b/microsoft-edge/web-platform/site-impacting-changes.md index a04d8d5343..0d34df6f87 100644 --- a/microsoft-edge/web-platform/site-impacting-changes.md +++ b/microsoft-edge/web-platform/site-impacting-changes.md @@ -36,6 +36,7 @@ This table lists high-impact changes which the Microsoft Edge team is tracking c | --- | --- | --- | | Insecure downloads over HTTP | Future release (TBD) | When a user tries to download potentially dangerous content from an HTTP site, the user will receive a UI warning, such as "Insecure download blocked." The user will still have an option to proceed and download the item. Admins can use the `InsecureContentAllowedForUrls` policy to specify HTTP sites for which the warning will be suppressed. Admins can use the `InsecureDownloadWarnings` feature flag to test the impact of this upcoming feature. | | Deprecate unload event | Future release (TBD) | Introduces a new Permission-Policy to allow creating unload event listeners. The default policy is `allow`, but the default policy will gradually be migrated to `deny`, such that unload handlers stop firing on pages, unless a page explicitly opts in to re-enable them. This change is happening in the Chromium project, on which Microsoft Edge is based. For more information, see [Intent to Deprecate: Deprecate unload event](https://groups.google.com/a/chromium.org/g/blink-dev/c/dvusqw9-IhI/m/SBkm_u1RAQAJ). | +| Deprecation of XSLT | Future release (TBD) | XSLT support represents a disproportionate attack surface, and the Chromium project which Microsoft Edge is based on has announced plans to disable and ultimately remove XSLT in a future release. See [Removing XSLT for a more secure browser](https://developer.chrome.com/docs/web-platform/deprecating-xslt). As a result, you should treat reliance on client‑side XSLT as technical debt and plan migration accordingly. Microsoft Edge version 147 introduces the XSLTEnabled feature policy to support testing and transition scenarios while the Chromium project works toward deprecating and removing XSLT support. We encourage organizations to proactively test setting `XSLTEnabled = Disabled` to identify application dependencies and remediation requirements ahead of any future default changes or removal of the feature. | | Remove inline XSLT for production of SVG | v147 | Support for using XSLT stylesheets to transform XML data into SVG files has been removed. See [Remove inline XSLT for production of SVG](./release-notes/147.md#remove-inline-xslt-for-production-of-svg) in _Microsoft Edge 147 web platform release notes (Apr. 2026)_. | | JPEG or PNG embedded in BMP | v145 | Support for embedding JPEG or PNG image data in a Bitmap image format is nonstandard, and has been removed. See [Remove support for Bitmap extension to embed JPEG or PNG](./release-notes/145.md#remove-support-for-bitmap-extension-to-embed-jpeg-or-png) in _Microsoft Edge 145 web platform release notes (Feb. 2026)_. | | Externally loaded entities in XML parsing | v144 | Synchronous fetching of external XML entities/DTDs, which are then used when parsing under specific circumstances, has been removed. See [Externally loaded entities in XML parsing](./release-notes/144.md#externally-loaded-entities-in-xml-parsing), in _Microsoft Edge 144 web platform release notes (Jan. 2025)_. | From 22c81f0a61adce3722e5f80b4f45c79cb25947b0 Mon Sep 17 00:00:00 2001 From: Patrick Brosset Date: Wed, 15 Apr 2026 16:18:23 +0200 Subject: [PATCH 3/3] Microsoft Edge 148 web platform release notes (May 2026) (#3772) * New web platform release notes for 148 * Edit pass * toc * Removing sections shipping in 149, and adding a missing section * fix links * writer/editor pass * Apply suggestion from @captainbrosset * Addressed todo comments * toco * polish --------- Co-authored-by: captainbrosset Co-authored-by: Michael Hoffman <45407486+mikehoffms@users.noreply.github.com> --- microsoft-edge/toc.yml | 12 +- .../web-platform/release-notes/146.md | 18 - .../web-platform/release-notes/147.md | 101 +-- .../web-platform/release-notes/148.md | 770 ++++++++++++++++++ 4 files changed, 779 insertions(+), 122 deletions(-) create mode 100644 microsoft-edge/web-platform/release-notes/148.md diff --git a/microsoft-edge/toc.yml b/microsoft-edge/toc.yml index 4ffae82a67..bb9b5e4651 100644 --- a/microsoft-edge/toc.yml +++ b/microsoft-edge/toc.yml @@ -30,6 +30,10 @@ href: ./web-platform/release-notes/index.md displayName: what's new, announcements + - name: Microsoft Edge 148 + href: ./web-platform/release-notes/148.md + displayName: Microsoft Edge 148 web platform release notes (May 2026) # page title + - name: Microsoft Edge 147 href: ./web-platform/release-notes/147.md displayName: Microsoft Edge 147 web platform release notes (Apr. 2026) # page title @@ -66,13 +70,13 @@ href: ./web-platform/release-notes/139.md displayName: Microsoft Edge 139 web platform release notes (Aug. 2025) # page title - - name: Microsoft Edge 138 - href: ./web-platform/release-notes/138.md - displayName: Microsoft Edge 138 web platform release notes (Jun. 2025) # page title - # keep 10 items above - name: Archive items: + - name: Microsoft Edge 138 + href: ./web-platform/release-notes/138.md + displayName: Microsoft Edge 138 web platform release notes (Jun. 2025) # page title + - name: Microsoft Edge 137 href: ./web-platform/release-notes/137.md displayName: Microsoft Edge 137 web platform release notes (May 2025) # page title diff --git a/microsoft-edge/web-platform/release-notes/146.md b/microsoft-edge/web-platform/release-notes/146.md index e4305e5613..996ca17589 100644 --- a/microsoft-edge/web-platform/release-notes/146.md +++ b/microsoft-edge/web-platform/release-notes/146.md @@ -37,7 +37,6 @@ To stay up-to-date and get the latest web platform features, download a preview * [WebGPU Compatibility mode](#webgpu-compatibility-mode) * [WebGPU: Texture and Sampler `let` binding](#webgpu-texture-and-sampler-let-binding) * [WebGPU: Transient attachments](#webgpu-transient-attachments) - * [Always negotiate data channels in WebRTC](#always-negotiate-data-channels-in-webrtc) * [Populate `targetURL` during file handling](#populate-targeturl-during-file-handling) * [Stop re-queueing `LaunchParams` on reload](#stop-re-queueing-launchparams-on-reload) * [Origin trials](#origin-trials) @@ -285,23 +284,6 @@ Since the texture contents are discarded after the render pass, the driver might See also: * [WebGPU API](https://developer.mozilla.org/docs/Web/API/WebGPU_API) at MDN. - -#### Always negotiate data channels in WebRTC - -The new `alwaysNegotiateDataChannels` option for `RTCPeerConnection` allows you to negotiate data channels in the SDP offer before creating a data channel. The data channel m-line is placed before any audio or video m-lines. - -Use this option when creating a peer connection, to ensure that data channels are always negotiated: - -```javascript -const pc = new RTCPeerConnection({ - alwaysNegotiateDataChannels: true -}); -const offer = await pc.createOffer(); -``` - -See also: -* [RTCPeerConnection](https://developer.mozilla.org/docs/Web/API/RTCPeerConnection) at MDN. - #### Populate `targetURL` during file handling diff --git a/microsoft-edge/web-platform/release-notes/147.md b/microsoft-edge/web-platform/release-notes/147.md index c4f3bfa527..85317427b7 100644 --- a/microsoft-edge/web-platform/release-notes/147.md +++ b/microsoft-edge/web-platform/release-notes/147.md @@ -26,7 +26,6 @@ To stay up-to-date and get the latest web platform features, download a preview * [`contrast-color()`](#contrast-color) * [CSS `*-width` properties are now independent of `*-style` properties](#css--width-properties-are-now-independent-of--style-properties) * [Animation timelines support a `"scroll"` range](#animation-timelines-support-a-scroll-range) - * [`accent-color: auto` now only applies to installed web apps](#accent-color-auto-now-only-applies-to-installed-web-apps) * [SVG features](#svg-features) * [`path` attribute on SVG `` element](#path-attribute-on-svg-textpath-element) * [Web APIs](#web-apis) @@ -38,23 +37,17 @@ To stay up-to-date and get the latest web platform features, download a preview * [Connection allowlists](#connection-allowlists) * [Autofill event](#autofill-event) * [CSSPseudoElement interface](#csspseudoelement-interface) - * [`dropEffect` handling in drag-and-drop events](#dropeffect-handling-in-drag-and-drop-events) * [Element-scoped view transitions](#element-scoped-view-transitions) - * [Detect Secure Payment Confirmation capabilities](#detect-secure-payment-confirmation-capabilities) - * [IDNA ContextJ rules](#idna-contextj-rules) * [`` supports JSON and CSS modules](#link-relmodulepreload-supports-json-and-css-modules) * [Local Network Access restrictions on Service Worker `WindowClient.navigate()`](#local-network-access-restrictions-on-service-worker-windowclientnavigate) * [Local network access restrictions for WebSockets](#local-network-access-restrictions-for-websockets) * [Local network access restrictions for WebTransport](#local-network-access-restrictions-for-webtransport) * [Manifest localization](#manifest-localization) * [`Math.sumPrecise`](#mathsumprecise) - * [Pointer event suppression on drag start](#pointer-event-suppression-on-drag-start) * [`pseudoTarget` property on events](#pseudotarget-property-on-events) * [`Request.isReloadNavigation` attribute](#requestisreloadnavigation-attribute) - * [Respect `autocorrect="off"` for Windows touch keyboard](#respect-autocorrectoff-for-windows-touch-keyboard) * [Device Memory API limits](#device-memory-api-limits) * [Web Serial API on Android](#web-serial-api-on-android) - * [Always negotiate data channels in WebRTC](#always-negotiate-data-channels-in-webrtc) * [WebXR Layers](#webxr-layers) * [WebXR Plane Detection](#webxr-plane-detection) * [XML parsing in Rust for non-XSLT scenarios](#xml-parsing-in-rust-for-non-xslt-scenarios) @@ -156,19 +149,6 @@ See also: * [animation-range](https://developer.mozilla.org/docs/Web/CSS/Reference/Properties/animation-range) at MDN. - -#### `accent-color: auto` now only applies to installed web apps - -The `accent-color: auto` CSS property, also known as system accent color, is now scoped to only work within installed Progressive Web Apps (PWAs), not within webpages displayed in the browser. This aligns with the existing `AccentColor` and `AccentColorText` CSS system color keywords. - -Previously, when `accent-color` was set to `auto`, form controls would adopt the system accent color in all webpages, whether they're displayed in the browser or in an installed PWA. - -This change provides a more consistent developer experience and user experience, while adhering to fingerprinting restrictions. - -See also: -* [accent-color](https://developer.mozilla.org/docs/Web/CSS/Reference/Properties/accent-color) at MDN. - - ## SVG features @@ -287,18 +267,6 @@ See also: * [Pseudo-elements](https://developer.mozilla.org/docs/Web/CSS/Pseudo-elements) at MDN. - -#### `dropEffect` handling in drag-and-drop events - -When using the Drag and Drop API, the `dropEffect` attribute now has the correct predetermined values during `dragenter`, `dragover`, and `dragleave` events, as specified by the HTML standard. - -The `dropEffect` is now based on the current `effectAllowed` for `dragenter` and `dragover` events. For `dragleave` events, `dropEffect` is always `"none"`. - -See also: -* [HTML Drag and Drop API](https://developer.mozilla.org/docs/Web/API/HTML_Drag_and_Drop_API) at MDN. -* [DataTransfer: dropEffect property](https://developer.mozilla.org/docs/Web/API/DataTransfer/dropEffect) at MDN. - - #### Element-scoped view transitions @@ -310,34 +278,6 @@ See also: * [View Transitions API](https://developer.mozilla.org/docs/Web/API/View_Transitions_API) at MDN. - -#### Detect Secure Payment Confirmation capabilities - -Use the `PaymentRequest.getSecurePaymentConfirmationCapabilities()` static method to determine which Secure Payment Confirmation features are supported in the browser. - -This async method returns an object that describes the browser's Secure Payment Confirmation capabilities. Use the returned object to decide whether to use Secure Payment Confirmation features for your payment flow. - -See also: -* [Using Secure Payment Confirmation](https://developer.mozilla.org/docs/Web/API/Payment_Request_API/Using_secure_payment_confirmation) at MDN. - - - -#### IDNA ContextJ rules - -Microsoft Edge now implements the IDNA ContextJ rules, by disallowing the following characters in most places within URLs: - -* ZWNJ (U+200C ZERO WIDTH NON-JOINER) - -* ZWJ (U+200D ZERO WIDTH JOINER) - -This improves interoperability with other browsers. - -IDNA is the mechanism by which non-ASCII characters can occur in domain names. For example, the URL `http://네이버.한국/` is encoded as `http://xn--950bt9s8xi.xn--3e0b707e/`. - -See also: -* [Better Unicode support](./143.md#better-unicode-support) in _Microsoft Edge 143 web platform release notes (Dec. 2025)_. - - #### `` supports JSON and CSS modules @@ -410,20 +350,6 @@ See also: * [Math](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Math) at MDN. - -#### Pointer event suppression on drag start - -When a drag operation starts, the browser now sends `pointercancel`, `pointerout`, and `pointerleave` events to the drag source, to indicate that the pointer event stream has ended. - -This behavior ensures that the drag source doesn't expect any more events from this pointer during the drag operation. - -This behavior is now fully implemented across all platforms. - -See also: -* [HTML Drag and Drop API](https://developer.mozilla.org/docs/Web/API/HTML_Drag_and_Drop_API) at MDN. -* [Pointer events](https://developer.mozilla.org/docs/Web/API/Pointer_events) at MDN. - - #### `pseudoTarget` property on events @@ -452,17 +378,6 @@ See also: * [Request](https://developer.mozilla.org/docs/Web/API/Request) at MDN. - -#### Respect `autocorrect="off"` for Windows touch keyboard - -The Windows touch keyboard now respects the `autocorrect="off"` attribute on editable elements, including ``, `