core

What's Changed

New Features 🎉

• feat(nextjs-mf): add skipFederatedStats option by @shashank-u03 in https://github.com/module-federation/core/pull/4732

Performance 🚀

• perf(nextjs-mf): derive federated stats from manifest by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4909

Bug Fixes 🐞

• fix(runtime-core): avoid executing ESM remote chunks before init by @dmchoi77 in https://github.com/module-federation/core/pull/4886
• fix(metro): resolve Windows hoisted split bundles by @jbroma in https://github.com/module-federation/core/pull/4912

Other Changes

• ci(e2e): gate affected workflows before runner setup by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4864
• chore(deps): bump axios from 1.16.1 to 1.18.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4915
• chore(deps): bump axios from 1.16.1 to 1.18.0 in /packages/typescript by @dependabot[bot] in https://github.com/module-federation/core/pull/4914
• chore(deps): bump adm-zip from 0.5.10 to 0.6.0 in /packages/dts-plugin by @dependabot[bot] in https://github.com/module-federation/core/pull/4910
• chore(deps): bump adm-zip from 0.5.10 to 0.6.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4911
• chore(deps-dev): bump vitest from 1.2.2 to 3.2.6 by @dependabot[bot] in https://github.com/module-federation/core/pull/4803
• chore(deps-dev): bump js-yaml from 4.2.0 to 4.3.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4917

Full Changelog: https://github.com/module-federation/core/compare/v2.8.0...v2.8.1

What's Changed

New Features 🎉

• feat(dts-plugin): add TypeScript 7 support by @2heal1 in https://github.com/module-federation/core/pull/4878
• feat(runtime): allow disabling unused capabilities by @2heal1 in https://github.com/module-federation/core/pull/4901

Performance 🚀

• perf: slim deps by @2heal1 in https://github.com/module-federation/core/pull/4897

Bug Fixes 🐞

• fix(rsbuild-plugin): force library.type to commonjs-module in patchNodeConfig by @elecmonkey in https://github.com/module-federation/core/pull/4873
• fix(metro): normalize Windows paths by @jbroma in https://github.com/module-federation/core/pull/4882
• fix(ci): support current Rslib bundle API by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4885
• fix(manifest): preserve ESM remote entry type by @zackarychapple in https://github.com/module-federation/core/pull/4894
• fix: support Rspack module identifiers by @LingyuCoder in https://github.com/module-federation/core/pull/4892
• fix: set optimization.usedExports to global to prevent tree shaking i… by @2heal1 in https://github.com/module-federation/core/pull/4896
• fix(modern-js): set optimization target from ssr config by @2heal1 in https://github.com/module-federation/core/pull/4900

Other Changes

• chore(metro): bump Rock to 0.14.1 by @jbroma in https://github.com/module-federation/core/pull/4881
• chore: bump Node.js to 24 LTS by @Nsttt in https://github.com/module-federation/core/pull/4884
• ci(node): verify published packages on Node 20 by @2heal1 in https://github.com/module-federation/core/pull/4888
• chore(metro): support TypeScript 7 by @2heal1 in https://github.com/module-federation/core/pull/4898
• ci(release): show release type in approval by @ryok90 in https://github.com/module-federation/core/pull/4904

New Contributors

• @LingyuCoder made their first contribution in https://github.com/module-federation/core/pull/4892

Full Changelog: https://github.com/module-federation/core/compare/v2.7.0...v2.8.0

What's Changed

New Features 🎉

• feat(playground): add docs playground by @2heal1 in https://github.com/module-federation/core/pull/4846
• feat(i18n): add Brazilian Portuguese localization and documentation by @DevJoaoLopes in https://github.com/module-federation/core/pull/4850
• feat(website): deploy Rspress docs with Zephyr by @Nsttt in https://github.com/module-federation/core/pull/4855

Bug Fixes 🐞

• fix(modern-js-v3): disable lazy compilation for producers by @2heal1 in https://github.com/module-federation/core/pull/4845
• fix(devtools): show manifest-only remotes in dependency graph by @2heal1 in https://github.com/module-federation/core/pull/4848
• fix(website): add social icon meta by @2heal1 in https://github.com/module-federation/core/pull/4847
• fix(retry-plugin): externalize runtime types from DTS bundle by @shashank-u03 in https://github.com/module-federation/core/pull/4853
• fix(treeshake-server): bump undici to 7.28.0 for CVE-2026-12151 by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4863
• fix(sdk): handle node builtins in ESM remote loader by @dmchoi77 in https://github.com/module-federation/core/pull/4816
• fix(devtools): guard invalid module info payloads by @dmchoi77 in https://github.com/module-federation/core/pull/4787

Document 📖

• docs: restructure architecture docs by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4859
• docs: correct factual inaccuracies in architecture docs by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4861
• docs(website-new): add GA4 tracking by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4874

Other Changes

• chore(deps): bump js-yaml from 3.14.2 to 5.2.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4860
• chore(deps): bump react-router from 6.30.3 to 6.30.4 in /packages/bridge/bridge-react-webpack-plugin/tests/mockRouterDir/router-v6/react-router-dom by @dependabot[bot] in https://github.com/module-federation/core/pull/4795
• chore(typescript): drop lodash.get dependency by @gu-stav in https://github.com/module-federation/core/pull/4705
• chore(managers,manifest,third-party-dts-extractor): replace find-pkg by @gu-stav in https://github.com/module-federation/core/pull/4707
• chore(dts-plugin): drop ansi-colors dependency by @gu-stav in https://github.com/module-federation/core/pull/4704
• chore(deps): bump echarts from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4858
• chore(deps): bump @hono/node-server from 1.19.10 to 1.19.13 by @dependabot[bot] in https://github.com/module-federation/core/pull/4635
• chore(deps): bump handlebars from 4.7.7 to 4.7.9 by @dependabot[bot] in https://github.com/module-federation/core/pull/4597
• chore(third-party-dts-extractor): replace resolve with exsolve by @gu-stav in https://github.com/module-federation/core/pull/4775
• chore(deps): apply small dependabot bumps across packages and example apps by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4865
• test(cypress): drop redundant uncaught:exception suppression in memory-router spec by @voidmatcha in https://github.com/module-federation/core/pull/4826
• test: migrate to Rstest by @chenjiahan in https://github.com/module-federation/core/pull/4871
• chore(sdk): drop node-fetch fallback and optional peer dependency by @gu-stav in https://github.com/module-federation/core/pull/4866
• chore: upgrade typescript to 6.0.3 by @eduard-jacko in https://github.com/module-federation/core/pull/4737
• chore(deps): upgrade Rslib, Rsbuild and Rsbuild plugins to latest by @elecmonkey in https://github.com/module-federation/core/pull/4872
• chore: remove unused jest config by @2heal1 in https://github.com/module-federation/core/pull/4875

New Contributors

• @voidmatcha made their first contribution in https://github.com/module-federation/core/pull/4826
• @dmchoi77 made their first contribution in https://github.com/module-federation/core/pull/4816
• @DevJoaoLopes made their first contribution in https://github.com/module-federation/core/pull/4850
• @eduard-jacko made their first contribution in https://github.com/module-federation/core/pull/4737
• @elecmonkey made their first contribution in https://github.com/module-federation/core/pull/4872

Full Changelog: https://github.com/module-federation/core/compare/v2.6.0...v2.7.0

What's Changed

New Features 🎉

• feat(retry-plugin): support function-based retryDelay for exponential backoff by @shashank-u03 in https://github.com/module-federation/core/pull/4828

Bug Fixes 🐞

• fix: modern.js ssr static asset public path by @2heal1 in https://github.com/module-federation/core/pull/4800
• fix(dts-plugin): infer extensions for multi-dot exposes by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4790
• fix(bridge-react): keep host fallback outside remote root by @2heal1 in https://github.com/module-federation/core/pull/4780
• fix(bridge-vue3): handle RemoteApp keepalive lifecycle by @2heal1 in https://github.com/module-federation/core/pull/4779
• fix(examples): avoid direct antd package imports by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4808
• fix(nextjs-mf): use matchRemoteWithNameAndExpose for beforeRequest cache-busting by @nag-clearstreet in https://github.com/module-federation/core/pull/4661
• fix(rsbuild-plugin): remove whitespace from chunk global by @2heal1 in https://github.com/module-federation/core/pull/4818
• fix(dts-plugin): prevent sibling package path prefix false positive in getDependentFiles by @hpello in https://github.com/module-federation/core/pull/4804
• fix(runtime-core): refetch manifest after forced remote registration by @2heal1 in https://github.com/module-federation/core/pull/4841
• fix(enhanced): stabilize consume-shared runtime output by @2heal1 in https://github.com/module-federation/core/pull/4842
• fix(modern-js-v3): load config in esm build by @2heal1 in https://github.com/module-federation/core/pull/4840

Document 📖

• docs(website-new): align Vite MF config with Rspack pattern by @tonoizer in https://github.com/module-federation/core/pull/4752
• docs: shared config subpath/prefix matching + bridge-react warnings by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4792
• docs: refresh docs and unify internal links by @zllkjc in https://github.com/module-federation/core/pull/4817
• docs(website-new): relocate doc mdx out of src/components by @zllkjc in https://github.com/module-federation/core/pull/4822
• docs(website-new): normalize links in _components mdx by @zllkjc in https://github.com/module-federation/core/pull/4823
• docs: sync zh documentation updates to en by @zllkjc in https://github.com/module-federation/core/pull/4825

Other Changes

• Translate comments from Chinese to English by @xmhealth in https://github.com/module-federation/core/pull/4757
• chore(deps): bump undici from 7.24.7 to 7.28.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4835
• chore(deps): combine dependency security updates by @2heal1 in https://github.com/module-federation/core/pull/4839

New Contributors

• @tonoizer made their first contribution in https://github.com/module-federation/core/pull/4752
• @xmhealth made their first contribution in https://github.com/module-federation/core/pull/4757
• @nag-clearstreet made their first contribution in https://github.com/module-federation/core/pull/4661
• @hpello made their first contribution in https://github.com/module-federation/core/pull/4804
• @shashank-u03 made their first contribution in https://github.com/module-federation/core/pull/4828

Full Changelog: https://github.com/module-federation/core/compare/v2.5.1...v2.6.0

What's Changed

New Features 🎉

• feat(rspress-plugin): rebuild llms output from html by @zllkjc in https://github.com/module-federation/core/pull/4766

Bug Fixes 🐞

• fix(dts-plugin): update ws for CVE-2026-45736 by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4760
• fix(bridge-react): align prefetch snapshot args by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4764
• fix(deps): update axios security release by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4761
• fix(deps): override flatted security release by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4762
• fix(deps): update react-router security releases by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4763
• fix(bridge-react): fail build on dts diagnostics by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4765
• fix(storybook-addon): expand peer dep to support Storybook v10 by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4782
• fix(storybook-addon): pass through Rsbuild federation options by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4768
• fix(dts-plugin): normalize manifest type URLs on Windows by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4774
• fix(dts-plugin): define __dirname from import.meta.url for ESM consumers by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4784
• fix(rsbuild-plugin): avoid configuring chunkLoading by @2heal1 in https://github.com/module-federation/core/pull/4785
• fix(enhanced): preserve shared fallback versions by @2heal1 in https://github.com/module-federation/core/pull/4778

Document 📖

• docs: update loading trace section and correct command syntax by @2heal1 in https://github.com/module-federation/core/pull/4754
• docs: fix vite quick start remote definition in config by @smeng9 in https://github.com/module-federation/core/pull/4716
• docs(bridge-react): fix loading option example by @2heal1 in https://github.com/module-federation/core/pull/4777

Other Changes

• chore(deps): bump ws from 8.20.1 to 8.21.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4740
• chore(deps-dev): bump postcss from 8.4.38 to 8.5.10 in /apps/next-app-router/next-app-router-4000 by @dependabot[bot] in https://github.com/module-federation/core/pull/4694
• test(dts-plugin): add regression test for Windows path quoting (#4133) by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4791

New Contributors

• @smeng9 made their first contribution in https://github.com/module-federation/core/pull/4716

Full Changelog: https://github.com/module-federation/core/compare/v2.5.0...v2.5.1

What's Changed

New Features 🎉

feat(observability): add observability plugin for full module loading lifecycle tracing by @hanric.zhang in https://github.com/module-federation/core/pull/4721 feat(devtools): support observability integration in MF DevTools by @hanric.zhang in https://github.com/module-federation/core/pull/4745

• feat(metro): add metro-plugin-rock and migrate examples to Rock by @jbroma in https://github.com/module-federation/core/pull/4652
• feat(runtime): support getInstance finder callback by @2heal1 in https://github.com/module-federation/core/pull/4703
• feat(metro): support manifest hashes for native caching by @jbroma in https://github.com/module-federation/core/pull/4700

Bug Fixes 🐞

• fix(metro): add missing changeset and format follow-up for #4576 by @ryok90 in https://github.com/module-federation/core/pull/4701
• fix(dts-plugin): correct dts url by @2heal1 in https://github.com/module-federation/core/pull/4730

Other Changes

• chore: bump ruby to 3.4.9 for metro example apps by @jbroma in https://github.com/module-federation/core/pull/4643
• (metro-core): add manifest SHA-256 hashes and optional bundle cache layer integration by @zhongwuzw in https://github.com/module-federation/core/pull/4576
• chore(devtools): consolidate proxy logic by @2heal1 in https://github.com/module-federation/core/pull/4728
• chore(actions): remove issues-helper usage by @2heal1 in https://github.com/module-federation/core/pull/4738
• chore(actions): pin workflow actions to commits by @2heal1 in https://github.com/module-federation/core/pull/4741

New Contributors

• @zhongwuzw made their first contribution in https://github.com/module-federation/core/pull/4576

Full Changelog: https://github.com/module-federation/core/compare/v2.4.0...v2.5.0

What's Changed

New Features 🎉

• feat(devtools): support runtime-registered react proxies across multiple scopes by @2heal1 in https://github.com/module-federation/core/pull/4685
• feat: support proxying runtime-registered shared react by @2heal1 in https://github.com/module-federation/core/pull/4693

Bug Fixes 🐞

• fix(sdk): widen node-fetch peerOptional range to accept v2 and v3 by @tuffz in https://github.com/module-federation/core/pull/4625
• fix(bridge): exclude tests from published package by @2heal1 in https://github.com/module-federation/core/pull/4674
• fix(chrome-devtools): update remote identifier by @2heal1 in https://github.com/module-federation/core/pull/4675
• fix(enhanced): add esm export for runtime entry to fix vite resolution by @2heal1 in https://github.com/module-federation/core/pull/4682
• fix(runtime): ensure instance creation includes id and options by @2heal1 in https://github.com/module-federation/core/pull/4699

Other Changes

• chore: remove legacy data prefetch by @2heal1 in https://github.com/module-federation/core/pull/4695
• chore: update changeset by @2heal1 in https://github.com/module-federation/core/pull/4696

New Contributors

• @tuffz made their first contribution in https://github.com/module-federation/core/pull/4625

Full Changelog: https://github.com/module-federation/core/compare/v2.3.3...v2.4.0

What's Changed

New Features 🎉

• feat(node): enhance error handling and metadata for chunk execution in runtimePlugin by @2heal1 in https://github.com/module-federation/core/pull/4663
• feat(runtime-core): expose remote info in loader hooks by @2heal1 in https://github.com/module-federation/core/pull/4665

Bug Fixes 🐞

• fix(bridge-vue3): fix route processing for relative paths and default… by @LuisDev2001 in https://github.com/module-federation/core/pull/4662
• fix: dts plugin declaration dir by @2heal1 in https://github.com/module-federation/core/pull/4666

Document 📖

• docs: add runtime api and runtime hooks part by @2heal1 in https://github.com/module-federation/core/pull/4658

Full Changelog: https://github.com/module-federation/core/compare/v2.3.2...v2.3.3

What's Changed

Bug Fixes 🐞

• fix(retry-plugin): apply retryDelay on first retry attempt by @kyriiherman in https://github.com/module-federation/core/pull/4610
• fix: resolve workspace deps in dist package.json by @2heal1 in https://github.com/module-federation/core/pull/4614
• fix(enhanced): remove unused create-schema-validation by @2heal1 in https://github.com/module-federation/core/pull/4647
• fix(inject-external-runtime-core-plugin): fix runtime-core import by @2heal1 in https://github.com/module-federation/core/pull/4634

Document 📖

• docs(runtime): add runtime plugins guide by @Nsttt in https://github.com/module-federation/core/pull/4645
• docs(runtime): document missing low-level runtime APIs by @Nsttt in https://github.com/module-federation/core/pull/4650

Other Changes

• chore(cli,manifest): replace chalk with node:util styleText by @gu-stav in https://github.com/module-federation/core/pull/4607
• fix(bridge-vue3): rewrite path navigations with basename in hash history mode by @LuisDev2001 in https://github.com/module-federation/core/pull/4579
• chore: lock dep version by @2heal1 in https://github.com/module-federation/core/pull/4615
• chore(deps): replace fs-extra with node fs in packages by @2heal1 in https://github.com/module-federation/core/pull/4642
• chore(deps): bump axios from 1.13.5 to 1.15.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4649
• chore: replace axios with native node fetch by @2heal1 in https://github.com/module-federation/core/pull/4644

New Contributors

• @kyriiherman made their first contribution in https://github.com/module-federation/core/pull/4610

Full Changelog: https://github.com/module-federation/core/compare/v2.3.1...v2.3.2

What's Changed

Bug Fixes 🐞

• fix(chrome-devtool): implement sanitizePostMessagePayload to handle unsafe values in post messages by @2heal1 in https://github.com/module-federation/core/pull/4600
• fix(dts-plugin): remove rambda dependency by @gu-stav in https://github.com/module-federation/core/pull/4602
• fix(security): lock axios version to 1.13.5 to prevent supply chain attack by @2heal1 in https://github.com/module-federation/core/pull/4605

Document 📖

• docs: clarify resolveShare behavior and documentation by @2heal1 in https://github.com/module-federation/core/pull/4595

Other Changes

• chore(dts-plugin): replace chalk with native styleText by @gu-stav in https://github.com/module-federation/core/pull/4594
• chore(node,rspack,enhanced): remove btoa dependency by @gu-stav in https://github.com/module-federation/core/pull/4606
• chore(dts-plugin): replace lodash cloneDeepWith by @gu-stav in https://github.com/module-federation/core/pull/4601

New Contributors

• @gu-stav made their first contribution in https://github.com/module-federation/core/pull/4594

Full Changelog: https://github.com/module-federation/core/compare/v2.3.0...v2.3.1