# core changelog > core release notes. - Vendor: core - Category: Frameworks & Libraries - License: MIT - Language: JavaScript - Official site: https://module-federation.io/ - Tracked by: What's New (https://whatsnew.fyi/product/core) - Harvested from: GitHub (module-federation/core) - Entries below: 14 (newest first) What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: release facts (products, versions, dates, links, CVE ids and flags) are open data under CC BY 4.0, from the API at https://whatsnew.fyi/api/v1 or the nightly dataset at https://github.com/whatsnew-fyi/dataset. The summaries, labels and curation are © What's New: quote freely with attribution and a link back; wholesale republication of them is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. ## Releases ### v2.9.2 — Release v2.9.2 - Date: 2026-09-26 - Version: v2.9.2 - Original notes: https://github.com/module-federation/core/releases/tag/v2.9.2 - Permalink: https://whatsnew.fyi/product/core/releases/v2.9.2 - **fixed** — Deduplicate lazy component loading in bridge-react - **fixed** — Import ResourceLoadContext in the remote handler in runtime-core - **fixed** — Report a missing expose as a build error instead of exiting in enhanced - **fixed** — Wait for addEntry in SharedContainerPlugin make in enhanced - **fixed** — Restore missing expose diagnostics in enhanced - **fixed** — Resolve paths from absWorkingDir instead of process.cwd() in esbuild - **changed** — Upgrade undici to 7.29.1 ##### What's Changed ###### Bug Fixes 🐞 * fix(bridge-react): deduplicate lazy component loading by @2heal1 in https://github.com/module-federation/core/pull/5092 * fix(runtime-core): import ResourceLoadContext in the remote handler by @ScriptedAlchemy in https://github.com/module-federation/core/pull/5114 * fix(enhanced): report a missing expose as a build error instead of exiting by @ScriptedAlchemy in https://github.com/module-federation/core/pull/5117 * fix(enhanced): wait for addEntry in SharedContainerPlugin make by @ScriptedAlchemy in https://github.com/module-federation/core/pull/5122 * fix(enhanced): restore missing expose diagnostics by @ScriptedAlchemy in https://github.com/module-federation/core/pull/5146 * fix(esbuild): resolve paths from absWorkingDir instead of process.cwd() by @ScriptedAlchemy in https://github.com/module-federation/core/pull/5148 * fix(deps): upgrade undici to 7.29.1 by @ScriptedAlchemy in https://github.com/module-federation/core/pull/5150 ###### Document 📖 * docs(skills): add sokra-mode skill for webpack plugin architecture by @ScriptedAlchemy in https://github.com/module-federation/core/pull/5113 ###### Other Changes * chore: release v2.9.1 by @2heal1 in https://github.com/module-federation/core/pull/5108 * chore(deps): upgrades `adm-zip` to `0.6.1` by @deiga in https://github.com/module-federation/core/pull/5103 * chore(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/5017 * chore(deps-dev): bump eslint-plugin-prettier from 5.2.1 to 5.5.6 by @dependabot[bot] in https://github.com/module-federation/core/pull/5020 * chore(deps): bump react-router-dom from 6.30.3 to 6.30.6 in /apps/router-demo/router-remote4-2004 by @dependabot[bot] in https://github.com/module-federation/core/pull/5041 * chore(deps): bump hono from 4.13.1 to 4.13.5 by @dependabot[bot] in https://github.com/module-federation/core/pull/5043 * chore(deps): bump sharp from 0.35.0 to 0.35.4 by @dependabot[bot] in https://github.com/module-federation/core/pull/5057 * chore(deps-dev): bump vitest from 3.2.6 to 4.1.11 by @dependabot[bot] in https://github.com/module-federation/core/pull/5056 * chore(deps): move the repo to @rspack/core 2 by @ScriptedAlchemy in https://github.com/module-federation/core/pull/5126 ##### New Contributors * @deiga made their first contribution in https://github.com/module-federation/core/pull/5103 **Full Changelog**: https://github.com/module-federation/core/compare/v2.9.1...v2.9.2 ##### Browser extension [Download Browser extension](https://github.com/module-federation/core/releases/download/v2.9.2/module-federation-devtools-browser.zip) For extension-capable embedded browsers. Extract the ZIP, load the directory containing `manifest.json`, and refresh the page. [Installation and WebMCP guide](https://module-federation.io/guide/debug/chrome-devtool.html) Extension version: `2.9.2`. Source commit: `b78935690208c1a75ecb23969a514597543c20c1`. SHA-256: `436e021c800533808c5dd57b3587b3eacf6b67454fbb6ad9d96f9633b98d1bcc` ### v2.9.1 — Release v2.9.1 - Date: 2026-09-21 - Version: v2.9.1 - Original notes: https://github.com/module-federation/core/releases/tag/v2.9.1 - Permalink: https://whatsnew.fyi/product/core/releases/v2.9.1 - **added** — Add WebMCP, browser builds and release downloads to devtools - **changed** — Reduce first-screen JavaScript on website - **fixed** — Harden Zephyr deployments - **fixed** — Await async factories and return wrapper factory in server onLoad for nextjs-mf - **fixed** — Update ws to 8.21.3 in dts-plugin - **fixed** — Clear rejected remote-entry promises from globalLoading in runtime-core ##### What's Changed ###### New Features 🎉 * feat(devtools): add WebMCP, browser builds and release downloads by @2heal1 in https://github.com/module-federation/core/pull/5106 ###### Performance 🚀 * perf(website): reduce first-screen JavaScript by @2heal1 in https://github.com/module-federation/core/pull/5064 ###### Bug Fixes 🐞 * fix(website): harden Zephyr deployments by @Nsttt in https://github.com/module-federation/core/pull/5004 * fix(nextjs-mf): await async factories and return wrapper factory in server onLoad by @shashank-u03 in https://github.com/module-federation/core/pull/4974 * fix(dts-plugin): update ws to 8.21.3 by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4994 * fix(runtime-core): clear rejected remote-entry promises from globalLoading by @tonoizer in https://github.com/module-federation/core/pull/5006 ###### Document 📖 * docs: obs doc add props by @2heal1 in https://github.com/module-federation/core/pull/5008 * docs: recover asset prefix by @2heal1 in https://github.com/module-federation/core/pull/5009 * docs: fix publicpath by @2heal1 in https://github.com/module-federation/core/pull/5010 * docs: add divebell part by @2heal1 in https://github.com/module-federation/core/pull/5012 * docs(website): Fix typo in rspress documentation by @xinconan in https://github.com/module-federation/core/pull/4996 ###### Other Changes * Release v2.9.0 by @2heal1 in https://github.com/module-federation/core/pull/5003 * chore(deps-dev): bump js-yaml from 4.3.1 to 4.3.2 by @dependabot[bot] in https://github.com/module-federation/core/pull/5069 ##### New Contributors * @xinconan made their first contribution in https://github.com/module-federation/core/pull/4996 **Full Changelog**: https://github.com/module-federation/core/compare/v2.9.0...v2.9.1 ##### Browser extension [Download Browser extension](https://github.com/module-federation/core/releases/download/v2.9.1/module-federation-devtools-browser.zip) For extension-capable embedded browsers. Extract the ZIP, load the directory, and refresh the page. [Installation and WebMCP guide](https://module-federation.io/guide/debug/chrome-devtool.html) Extension version: `2.9.1`. Source commit: `586ed7f9a1a42f55389b471af1bd05b810688761`. SHA-256: `67019c371c5397be7a0ab9be5fccf727ea5ed82ab2067a12c158f7c4ee5b3443` ### v2.9.0 — Release v2.9.0 - Date: 2026-08-24 - Version: v2.9.0 - Original notes: https://github.com/module-federation/core/releases/tag/v2.9.0 - Permalink: https://whatsnew.fyi/product/core/releases/v2.9.0 - **added** — Add federation integration plugin for rstest - **added** — Deduplicate preloaded asset URLs in runtime - **added** — Add instance-aware runtime diagnostics to observability - **fixed** — Coordinate Node configuration ownership in rstest - **fixed** — Support proxy core interop exports in devtools - **fixed** — Correct stream SSR splitChunks warning and refresh stale docs - **fixed** — Render the shared packages badge count once in devtools - **fixed** — Cache synchronous shared factories in runtime-core ##### What's Changed ###### New Features 🎉 * feat(rstest): add federation integration plugin by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4920 * feat(runtime): deduplicate preloaded asset URLs by @2heal1 in https://github.com/module-federation/core/pull/4997 * feat(observability): add instance-aware runtime diagnostics by @2heal1 in https://github.com/module-federation/core/pull/4813 ###### Bug Fixes 🐞 * fix(rstest): coordinate Node configuration ownership by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4980 * fix(devtools): support proxy core interop exports by @2heal1 in https://github.com/module-federation/core/pull/4992 * fix: correct stream SSR splitChunks warning and refresh stale docs by @tonoizer in https://github.com/module-federation/core/pull/4986 * fix(devtools): render the shared packages badge count once by @dmchoi77 in https://github.com/module-federation/core/pull/4970 * fix(runtime-core): cache synchronous shared factories by @2heal1 in https://github.com/module-federation/core/pull/4998 ###### Other Changes * chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 by @dependabot[bot] in https://github.com/module-federation/core/pull/4979 * chore(deps): bump nanoid from 5.1.6 to 5.1.16 by @dependabot[bot] in https://github.com/module-federation/core/pull/4977 * chore(deps): bump hono from 4.12.26 to 4.12.34 by @dependabot[bot] in https://github.com/module-federation/core/pull/4957 * chore(deps-dev): bump postcss from 8.5.10 to 8.5.23 by @dependabot[bot] in https://github.com/module-federation/core/pull/4964 * chore(deps): bump nanoid from 5.1.6 to 5.1.16 in /packages/enhanced/test/configCases/tree-shaking-share/multi-version-fallback by @dependabot[bot] in https://github.com/module-federation/core/pull/4976 * chore(deps): bump @remix-run/router from 1.23.2 to 1.23.3 in /packages/bridge/bridge-react-webpack-plugin/__tests__/mockRouterDir/router-v6/react-router-dom by @dependabot[bot] in https://github.com/module-federation/core/pull/4965 * chore(deps): bump json from 2.19.4 to 2.19.9 in /apps/metro-example-host by @dependabot[bot] in https://github.com/module-federation/core/pull/4937 * chore(deps): bump react-router from 7.16.0 to 7.18.2 by @dependabot[bot] in https://github.com/module-federation/core/pull/4936 * chore(deps): bump sharp from 0.34.5 to 0.35.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4932 * chore(deps-dev): bump postcss from 8.5.23 to 8.5.24 in /apps/next-app-router/next-app-router-4000 by @dependabot[bot] in https://github.com/module-federation/core/pull/4955 * chore(deps-dev): bump postcss from 8.5.23 to 8.5.24 in /apps/next-app-router/next-app-router-4001 by @dependabot[bot] in https://github.com/module-federation/core/pull/4933 * chore(deps-dev): bump postcss from 8.5.23 to 8.5.24 in /packages/treeshake-frontend by @dependabot[bot] in https://github.com/module-federation/core/pull/4966 * chore(deps): reconcile Hono dependency updates by @dependabot[bot] in https://github.com/module-federation/core/pull/4928 * chore(deps-dev): bump hono from 4.13.0 to 4.13.1 in /packages/bridge/bridge-react by @dependabot[bot] in https://github.com/module-federation/core/pull/4975 * chore(deps): bump @hono/node-server from 2.0.10 to 2.0.11 in /packages/treeshake-server by @dependabot[bot] in https://github.com/module-federation/core/pull/4927 * chore(deps): bump hono from 4.13.0 to 4.13.1 in /packages/treeshake-server by @dependabot[bot] in https://github.com/module-federation/core/pull/4960 * chore(website-new): bump zephyr-rspress-plugin to 1.2.2 by @ryok90 in https://github.com/module-federation/core/pull/4989 * ci(release): add next release summary to workflow page by @ryok90 in https://github.com/module-federation/core/pull/4919 * refactor: reuse normalizeSharedOptions and shared createBundlerLogger by @tonoizer in htt _[Truncated at 4000 characters — full notes: https://github.com/module-federation/core/releases/tag/v2.9.0]_ ### v2.8.2 — Release v2.8.2 - Date: 2026-08-06 - Version: v2.8.2 - Original notes: https://github.com/module-federation/core/releases/tag/v2.8.2 - Permalink: https://whatsnew.fyi/product/core/releases/v2.8.2 - **fixed** — Fix ESM remote entry retry in retry-plugin - **fixed** — Dedupe SSR stylesheet assets in bridge-react ##### What's Changed ###### Bug Fixes 🐞 * fix(retry-plugin): fix ESM remote entry retry by @gioboa in https://github.com/module-federation/core/pull/4877 * fix(bridge-react): dedupe SSR stylesheet assets by @BleedingDev in https://github.com/module-federation/core/pull/4852 ###### Document 📖 * docs: add ESM retry cache-busting defaults by @gioboa in https://github.com/module-federation/core/pull/4951 ###### Other Changes * chore(deps): bump undici from 7.28.0 to 7.29.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4958 **Full Changelog**: https://github.com/module-federation/core/compare/v2.8.1...v2.8.2 ### v2.8.1 — Release v2.8.1 - Date: 2026-07-28 - Version: v2.8.1 - Original notes: https://github.com/module-federation/core/releases/tag/v2.8.1 - Permalink: https://whatsnew.fyi/product/core/releases/v2.8.1 - **added** — Add skipFederatedStats option to nextjs-mf - **changed** — Derive federated stats from manifest in nextjs-mf for improved performance - **fixed** — Avoid executing ESM remote chunks before init in runtime-core - **fixed** — Resolve Windows hoisted split bundles in metro ##### What's Changed ###### New Features 🎉 * feat(nextjs-mf): add skipFederatedStats option by @shashank-u03 in https://github.com/module-federation/core/pull/4732 ###### Performance 🚀 * perf(nextjs-mf): derive federated stats from manifest by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4909 ###### Bug Fixes 🐞 * fix(runtime-core): avoid executing ESM remote chunks before init by @dmchoi77 in https://github.com/module-federation/core/pull/4886 * fix(metro): resolve Windows hoisted split bundles by @jbroma in https://github.com/module-federation/core/pull/4912 ###### Other Changes * ci(e2e): gate affected workflows before runner setup by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4864 * chore(deps): bump axios from 1.16.1 to 1.18.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4915 * chore(deps): bump axios from 1.16.1 to 1.18.0 in /packages/typescript by @dependabot[bot] in https://github.com/module-federation/core/pull/4914 * chore(deps): bump adm-zip from 0.5.10 to 0.6.0 in /packages/dts-plugin by @dependabot[bot] in https://github.com/module-federation/core/pull/4910 * chore(deps): bump adm-zip from 0.5.10 to 0.6.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4911 * chore(deps-dev): bump vitest from 1.2.2 to 3.2.6 by @dependabot[bot] in https://github.com/module-federation/core/pull/4803 * chore(deps-dev): bump js-yaml from 4.2.0 to 4.3.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4917 **Full Changelog**: https://github.com/module-federation/core/compare/v2.8.0...v2.8.1 ### v2.8.0 — Release v2.8.0 - Date: 2026-07-15 - Version: v2.8.0 - Original notes: https://github.com/module-federation/core/releases/tag/v2.8.0 - Permalink: https://whatsnew.fyi/product/core/releases/v2.8.0 - **added** — Add TypeScript 7 support to dts-plugin - **added** — Allow disabling unused capabilities in runtime - **changed** — Slim dependencies - **fixed** — Force library.type to commonjs-module in rsbuild-plugin patchNodeConfig - **fixed** — Normalize Windows paths in metro - **fixed** — Support current Rslib bundle API in CI - **fixed** — Preserve ESM remote entry type in manifest - **fixed** — Support Rspack module identifiers - **fixed** — Set optimization.usedExports to global to prevent tree shaking - **fixed** — Set optimization target from ssr config in modern-js - **changed** — Bump Rock to 0.14.1 in metro - **changed** — Support TypeScript 7 in metro ##### What's Changed ###### New Features 🎉 * feat(dts-plugin): add TypeScript 7 support by @2heal1 in https://github.com/module-federation/core/pull/4878 * feat(runtime): allow disabling unused capabilities by @2heal1 in https://github.com/module-federation/core/pull/4901 ###### Performance 🚀 * perf: slim deps by @2heal1 in https://github.com/module-federation/core/pull/4897 ###### Bug Fixes 🐞 * fix(rsbuild-plugin): force library.type to commonjs-module in patchNodeConfig by @elecmonkey in https://github.com/module-federation/core/pull/4873 * fix(metro): normalize Windows paths by @jbroma in https://github.com/module-federation/core/pull/4882 * fix(ci): support current Rslib bundle API by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4885 * fix(manifest): preserve ESM remote entry type by @zackarychapple in https://github.com/module-federation/core/pull/4894 * fix: support Rspack module identifiers by @LingyuCoder in https://github.com/module-federation/core/pull/4892 * fix: set optimization.usedExports to global to prevent tree shaking i… by @2heal1 in https://github.com/module-federation/core/pull/4896 * fix(modern-js): set optimization target from ssr config by @2heal1 in https://github.com/module-federation/core/pull/4900 ###### Other Changes * chore(metro): bump Rock to 0.14.1 by @jbroma in https://github.com/module-federation/core/pull/4881 * chore: bump Node.js to 24 LTS by @Nsttt in https://github.com/module-federation/core/pull/4884 * ci(node): verify published packages on Node 20 by @2heal1 in https://github.com/module-federation/core/pull/4888 * chore(metro): support TypeScript 7 by @2heal1 in https://github.com/module-federation/core/pull/4898 * ci(release): show release type in approval by @ryok90 in https://github.com/module-federation/core/pull/4904 ##### New Contributors * @LingyuCoder made their first contribution in https://github.com/module-federation/core/pull/4892 **Full Changelog**: https://github.com/module-federation/core/compare/v2.7.0...v2.8.0 ### v2.7.0 — Release v2.7.0 - Date: 2026-07-08 - Version: v2.7.0 - Original notes: https://github.com/module-federation/core/releases/tag/v2.7.0 - Permalink: https://whatsnew.fyi/product/core/releases/v2.7.0 - **added** — Add docs playground - **added** — Add Brazilian Portuguese localization and documentation - **added** — Deploy Rspress docs with Zephyr - **fixed** — Disable lazy compilation for producers in modern-js-v3 - **fixed** — Show manifest-only remotes in dependency graph in devtools - **fixed** — Add social icon meta to website - **fixed** — Externalize runtime types from DTS bundle in retry-plugin - **security** — Bump undici to 7.28.0 for CVE-2026-12151 in treeshake-server - **fixed** — Handle node builtins in ESM remote loader in SDK - **fixed** — Guard invalid module info payloads in devtools - **removed** — Drop lodash.get dependency - **removed** — Replace find-pkg dependency in managers, manifest, and third-party-dts-extractor - **removed** — Drop ansi-colors dependency in dts-plugin - **removed** — Replace resolve with exsolve in third-party-dts-extractor - **removed** — Drop node-fetch fallback and optional peer dependency in SDK - **changed** — Upgrade TypeScript to 6.0.3 - **changed** — Upgrade Rslib, Rsbuild and Rsbuild plugins to latest ##### What's Changed ###### New Features 🎉 * feat(playground): add docs playground by @2heal1 in https://github.com/module-federation/core/pull/4846 * feat(i18n): add Brazilian Portuguese localization and documentation by @DevJoaoLopes in https://github.com/module-federation/core/pull/4850 * feat(website): deploy Rspress docs with Zephyr by @Nsttt in https://github.com/module-federation/core/pull/4855 ###### Bug Fixes 🐞 * fix(modern-js-v3): disable lazy compilation for producers by @2heal1 in https://github.com/module-federation/core/pull/4845 * fix(devtools): show manifest-only remotes in dependency graph by @2heal1 in https://github.com/module-federation/core/pull/4848 * fix(website): add social icon meta by @2heal1 in https://github.com/module-federation/core/pull/4847 * fix(retry-plugin): externalize runtime types from DTS bundle by @shashank-u03 in https://github.com/module-federation/core/pull/4853 * fix(treeshake-server): bump undici to 7.28.0 for CVE-2026-12151 by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4863 * fix(sdk): handle node builtins in ESM remote loader by @dmchoi77 in https://github.com/module-federation/core/pull/4816 * fix(devtools): guard invalid module info payloads by @dmchoi77 in https://github.com/module-federation/core/pull/4787 ###### Document 📖 * docs: restructure architecture docs by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4859 * docs: correct factual inaccuracies in architecture docs by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4861 * docs(website-new): add GA4 tracking by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4874 ###### Other Changes * chore(deps): bump js-yaml from 3.14.2 to 5.2.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4860 * chore(deps): bump react-router from 6.30.3 to 6.30.4 in /packages/bridge/bridge-react-webpack-plugin/__tests__/mockRouterDir/router-v6/react-router-dom by @dependabot[bot] in https://github.com/module-federation/core/pull/4795 * chore(typescript): drop `lodash.get` dependency by @gu-stav in https://github.com/module-federation/core/pull/4705 * chore(managers,manifest,third-party-dts-extractor): replace `find-pkg` by @gu-stav in https://github.com/module-federation/core/pull/4707 * chore(dts-plugin): drop `ansi-colors` dependency by @gu-stav in https://github.com/module-federation/core/pull/4704 * chore(deps): bump echarts from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4858 * chore(deps): bump @hono/node-server from 1.19.10 to 1.19.13 by @dependabot[bot] in https://github.com/module-federation/core/pull/4635 * chore(deps): bump handlebars from 4.7.7 to 4.7.9 by @dependabot[bot] in https://github.com/module-federation/core/pull/4597 * chore(third-party-dts-extractor): replace `resolve` with `exsolve` by @gu-stav in https://github.com/module-federation/core/pull/4775 * chore(deps): apply small dependabot bumps across packages and example apps by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4865 * test(cypress): drop redundant uncaught:exception suppression in memory-router spec by @voidmatcha in https://github.com/module-federation/core/pull/4826 * test: migrate to Rstest by @chenjiahan in https://github.com/module-federation/core/pull/4871 * chore(sdk): drop node-fetch fallback and optional peer dependency by @gu-stav in https://github.com/module-federation/core/pull/4866 * chore: upgrade typescript to 6.0.3 by @eduard-jacko in https://github.com/module-federation/core/pull/4737 * chore(deps): upgrade Rslib, Rsbuild and Rsbuild plugins to latest by @elecmonkey in https://github.com/module-federation/core/pull/4872 * chore: remove unused jest config by @2heal1 in https://github.com/module-federation/core/pull/4875 ##### New Contributors * @vo _[Truncated at 4000 characters — full notes: https://github.com/module-federation/core/releases/tag/v2.7.0]_ ### v2.6.0 — Release v2.6.0 - Date: 2026-06-23 - Version: v2.6.0 - Original notes: https://github.com/module-federation/core/releases/tag/v2.6.0 - Permalink: https://whatsnew.fyi/product/core/releases/v2.6.0 - **added** — Support function-based retryDelay for exponential backoff in retry-plugin - **fixed** — Modern.js SSR static asset public path - **fixed** — Infer extensions for multi-dot exposes in dts-plugin - **fixed** — Keep host fallback outside remote root in bridge-react - **fixed** — Handle RemoteApp keepalive lifecycle in bridge-vue3 - **fixed** — Avoid direct antd package imports in examples - **fixed** — Use matchRemoteWithNameAndExpose for beforeRequest cache-busting in nextjs-mf - **fixed** — Remove whitespace from chunk global in rsbuild-plugin - **fixed** — Prevent sibling package path prefix false positive in getDependentFiles in dts-plugin - **fixed** — Refetch manifest after forced remote registration in runtime-core - **fixed** — Stabilize consume-shared runtime output in enhanced - **fixed** — Load config in esm build in modern-js-v3 ##### What's Changed ###### New Features 🎉 * feat(retry-plugin): support function-based retryDelay for exponential backoff by @shashank-u03 in https://github.com/module-federation/core/pull/4828 ###### Bug Fixes 🐞 * fix: modern.js ssr static asset public path by @2heal1 in https://github.com/module-federation/core/pull/4800 * fix(dts-plugin): infer extensions for multi-dot exposes by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4790 * fix(bridge-react): keep host fallback outside remote root by @2heal1 in https://github.com/module-federation/core/pull/4780 * fix(bridge-vue3): handle RemoteApp keepalive lifecycle by @2heal1 in https://github.com/module-federation/core/pull/4779 * fix(examples): avoid direct antd package imports by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4808 * fix(nextjs-mf): use matchRemoteWithNameAndExpose for beforeRequest cache-busting by @nag-clearstreet in https://github.com/module-federation/core/pull/4661 * fix(rsbuild-plugin): remove whitespace from chunk global by @2heal1 in https://github.com/module-federation/core/pull/4818 * fix(dts-plugin): prevent sibling package path prefix false positive in getDependentFiles by @hpello in https://github.com/module-federation/core/pull/4804 * fix(runtime-core): refetch manifest after forced remote registration by @2heal1 in https://github.com/module-federation/core/pull/4841 * fix(enhanced): stabilize consume-shared runtime output by @2heal1 in https://github.com/module-federation/core/pull/4842 * fix(modern-js-v3): load config in esm build by @2heal1 in https://github.com/module-federation/core/pull/4840 ###### Document 📖 * docs(website-new): align Vite MF config with Rspack pattern by @tonoizer in https://github.com/module-federation/core/pull/4752 * docs: shared config subpath/prefix matching + bridge-react warnings by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4792 * docs: refresh docs and unify internal links by @zllkjc in https://github.com/module-federation/core/pull/4817 * docs(website-new): relocate doc mdx out of src/components by @zllkjc in https://github.com/module-federation/core/pull/4822 * docs(website-new): normalize links in _components mdx by @zllkjc in https://github.com/module-federation/core/pull/4823 * docs: sync zh documentation updates to en by @zllkjc in https://github.com/module-federation/core/pull/4825 ###### Other Changes * Translate comments from Chinese to English by @xmhealth in https://github.com/module-federation/core/pull/4757 * chore(deps): bump undici from 7.24.7 to 7.28.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4835 * chore(deps): combine dependency security updates by @2heal1 in https://github.com/module-federation/core/pull/4839 ##### New Contributors * @tonoizer made their first contribution in https://github.com/module-federation/core/pull/4752 * @xmhealth made their first contribution in https://github.com/module-federation/core/pull/4757 * @nag-clearstreet made their first contribution in https://github.com/module-federation/core/pull/4661 * @hpello made their first contribution in https://github.com/module-federation/core/pull/4804 * @shashank-u03 made their first contribution in https://github.com/module-federation/core/pull/4828 **Full Changelog**: https://github.com/module-federation/core/compare/v2.5.1...v2.6.0 ### v2.5.1 — Release v2.5.1 - Date: 2026-06-04 - Version: v2.5.1 - Original notes: https://github.com/module-federation/core/releases/tag/v2.5.1 - Permalink: https://whatsnew.fyi/product/core/releases/v2.5.1 - **added** — Rebuild llms output from html in rspress-plugin - **security** — Update ws for CVE-2026-45736 - **fixed** — Align prefetch snapshot args in bridge-react - **security** — Update axios security release - **security** — Override flatted security release - **security** — Update react-router security releases - **fixed** — Fail build on dts diagnostics in bridge-react - **changed** — Expand peer dependency to support Storybook v10 in storybook-addon - **fixed** — Pass through Rsbuild federation options in storybook-addon - **fixed** — Normalize manifest type URLs on Windows in dts-plugin - **fixed** — Define __dirname from import.meta.url for ESM consumers in dts-plugin - **fixed** — Avoid configuring chunkLoading in rsbuild-plugin - **fixed** — Preserve shared fallback versions in enhanced ##### What's Changed ###### New Features 🎉 * feat(rspress-plugin): rebuild llms output from html by @zllkjc in https://github.com/module-federation/core/pull/4766 ###### Bug Fixes 🐞 * fix(dts-plugin): update ws for CVE-2026-45736 by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4760 * fix(bridge-react): align prefetch snapshot args by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4764 * fix(deps): update axios security release by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4761 * fix(deps): override flatted security release by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4762 * fix(deps): update react-router security releases by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4763 * fix(bridge-react): fail build on dts diagnostics by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4765 * fix(storybook-addon): expand peer dep to support Storybook v10 by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4782 * fix(storybook-addon): pass through Rsbuild federation options by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4768 * fix(dts-plugin): normalize manifest type URLs on Windows by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4774 * fix(dts-plugin): define __dirname from import.meta.url for ESM consumers by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4784 * fix(rsbuild-plugin): avoid configuring chunkLoading by @2heal1 in https://github.com/module-federation/core/pull/4785 * fix(enhanced): preserve shared fallback versions by @2heal1 in https://github.com/module-federation/core/pull/4778 ###### Document 📖 * docs: update loading trace section and correct command syntax by @2heal1 in https://github.com/module-federation/core/pull/4754 * docs: fix vite quick start remote definition in config by @smeng9 in https://github.com/module-federation/core/pull/4716 * docs(bridge-react): fix loading option example by @2heal1 in https://github.com/module-federation/core/pull/4777 ###### Other Changes * chore(deps): bump ws from 8.20.1 to 8.21.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4740 * chore(deps-dev): bump postcss from 8.4.38 to 8.5.10 in /apps/next-app-router/next-app-router-4000 by @dependabot[bot] in https://github.com/module-federation/core/pull/4694 * test(dts-plugin): add regression test for Windows path quoting (#4133) by @ScriptedAlchemy in https://github.com/module-federation/core/pull/4791 ##### New Contributors * @smeng9 made their first contribution in https://github.com/module-federation/core/pull/4716 **Full Changelog**: https://github.com/module-federation/core/compare/v2.5.0...v2.5.1 ### v2.5.0 — Release v2.5.0 - Date: 2026-05-21 - Version: v2.5.0 - Original notes: https://github.com/module-federation/core/releases/tag/v2.5.0 - Permalink: https://whatsnew.fyi/product/core/releases/v2.5.0 - **added** — Add observability plugin for full module loading lifecycle tracing - **added** — Support observability integration in MF DevTools - **added** — Add metro-plugin-rock and migrate examples to Rock - **added** — Support getInstance finder callback in runtime - **added** — Support manifest hashes for native caching in metro - **fixed** — Add missing changeset and format follow-up for metro - **fixed** — Correct dts url in dts-plugin - **changed** — Add manifest SHA-256 hashes and optional bundle cache layer integration to metro-core ##### What's Changed ###### New Features 🎉 feat(observability): add observability plugin for full module loading lifecycle tracing by @hanric.zhang in https://github.com/module-federation/core/pull/4721 feat(devtools): support observability integration in MF DevTools by @hanric.zhang in https://github.com/module-federation/core/pull/4745 * feat(metro): add metro-plugin-rock and migrate examples to Rock by @jbroma in https://github.com/module-federation/core/pull/4652 * feat(runtime): support getInstance finder callback by @2heal1 in https://github.com/module-federation/core/pull/4703 * feat(metro): support manifest hashes for native caching by @jbroma in https://github.com/module-federation/core/pull/4700 ###### Bug Fixes 🐞 * fix(metro): add missing changeset and format follow-up for #4576 by @ryok90 in https://github.com/module-federation/core/pull/4701 * fix(dts-plugin): correct dts url by @2heal1 in https://github.com/module-federation/core/pull/4730 ###### Other Changes * chore: bump ruby to 3.4.9 for metro example apps by @jbroma in https://github.com/module-federation/core/pull/4643 * (metro-core): add manifest SHA-256 hashes and optional bundle cache layer integration by @zhongwuzw in https://github.com/module-federation/core/pull/4576 * chore(devtools): consolidate proxy logic by @2heal1 in https://github.com/module-federation/core/pull/4728 * chore(actions): remove issues-helper usage by @2heal1 in https://github.com/module-federation/core/pull/4738 * chore(actions): pin workflow actions to commits by @2heal1 in https://github.com/module-federation/core/pull/4741 ##### New Contributors * @zhongwuzw made their first contribution in https://github.com/module-federation/core/pull/4576 **Full Changelog**: https://github.com/module-federation/core/compare/v2.4.0...v2.5.0 ### v2.4.0 — Release v2.4.0 - Date: 2026-04-29 - Version: v2.4.0 - Original notes: https://github.com/module-federation/core/releases/tag/v2.4.0 - Permalink: https://whatsnew.fyi/product/core/releases/v2.4.0 - **added** — Support runtime-registered react proxies across multiple scopes in devtools - **added** — Support proxying runtime-registered shared react - **fixed** — Widen node-fetch peerOptional range to accept v2 and v3 in sdk - **fixed** — Exclude __tests__ from published bridge package - **fixed** — Update remote identifier in chrome-devtools - **fixed** — Add esm export for runtime entry to fix vite resolution in enhanced - **fixed** — Ensure instance creation includes id and options in runtime - **removed** — Remove legacy data prefetch ##### What's Changed ###### New Features 🎉 * feat(devtools): support runtime-registered react proxies across multiple scopes by @2heal1 in https://github.com/module-federation/core/pull/4685 * feat: support proxying runtime-registered shared react by @2heal1 in https://github.com/module-federation/core/pull/4693 ###### Bug Fixes 🐞 * fix(sdk): widen node-fetch peerOptional range to accept v2 and v3 by @tuffz in https://github.com/module-federation/core/pull/4625 * fix(bridge): exclude __tests__ from published package by @2heal1 in https://github.com/module-federation/core/pull/4674 * fix(chrome-devtools): update remote identifier by @2heal1 in https://github.com/module-federation/core/pull/4675 * fix(enhanced): add esm export for runtime entry to fix vite resolution by @2heal1 in https://github.com/module-federation/core/pull/4682 * fix(runtime): ensure instance creation includes id and options by @2heal1 in https://github.com/module-federation/core/pull/4699 ###### Other Changes * chore: remove legacy data prefetch by @2heal1 in https://github.com/module-federation/core/pull/4695 * chore: update changeset by @2heal1 in https://github.com/module-federation/core/pull/4696 ##### New Contributors * @tuffz made their first contribution in https://github.com/module-federation/core/pull/4625 **Full Changelog**: https://github.com/module-federation/core/compare/v2.3.3...v2.4.0 ### v2.3.3 — Release v2.3.3 - Date: 2026-04-16 - Version: v2.3.3 - Original notes: https://github.com/module-federation/core/releases/tag/v2.3.3 - Permalink: https://whatsnew.fyi/product/core/releases/v2.3.3 - **added** — Enhance error handling and metadata for chunk execution in runtimePlugin - **added** — Expose remote info in loader hooks - **fixed** — Fix route processing for relative paths in bridge-vue3 - **fixed** — Fix dts plugin declaration dir ##### What's Changed ###### New Features 🎉 * feat(node): enhance error handling and metadata for chunk execution in runtimePlugin by @2heal1 in https://github.com/module-federation/core/pull/4663 * feat(runtime-core): expose remote info in loader hooks by @2heal1 in https://github.com/module-federation/core/pull/4665 ###### Bug Fixes 🐞 * fix(bridge-vue3): fix route processing for relative paths and default… by @LuisDev2001 in https://github.com/module-federation/core/pull/4662 * fix: dts plugin declaration dir by @2heal1 in https://github.com/module-federation/core/pull/4666 ###### Document 📖 * docs: add runtime api and runtime hooks part by @2heal1 in https://github.com/module-federation/core/pull/4658 **Full Changelog**: https://github.com/module-federation/core/compare/v2.3.2...v2.3.3 ### v2.3.2 — Release v2.3.2 - Date: 2026-04-13 - Version: v2.3.2 - Original notes: https://github.com/module-federation/core/releases/tag/v2.3.2 - Permalink: https://whatsnew.fyi/product/core/releases/v2.3.2 - **fixed** — Apply retryDelay on first retry attempt in retry-plugin - **fixed** — Resolve workspace deps in dist package.json - **fixed** — Remove unused create-schema-validation in enhanced - **fixed** — Fix runtime-core import in inject-external-runtime-core-plugin - **fixed** — Rewrite path navigations with basename in hash history mode in bridge-vue3 - **changed** — Replace chalk with node:util styleText in cli and manifest - **changed** — Replace fs-extra with node fs in packages - **changed** — Replace axios with native node fetch ##### What's Changed ###### Bug Fixes 🐞 * fix(retry-plugin): apply retryDelay on first retry attempt by @kyriiherman in https://github.com/module-federation/core/pull/4610 * fix: resolve workspace deps in dist package.json by @2heal1 in https://github.com/module-federation/core/pull/4614 * fix(enhanced): remove unused create-schema-validation by @2heal1 in https://github.com/module-federation/core/pull/4647 * fix(inject-external-runtime-core-plugin): fix runtime-core import by @2heal1 in https://github.com/module-federation/core/pull/4634 ###### Document 📖 * docs(runtime): add runtime plugins guide by @Nsttt in https://github.com/module-federation/core/pull/4645 * docs(runtime): document missing low-level runtime APIs by @Nsttt in https://github.com/module-federation/core/pull/4650 ###### Other Changes * chore(cli,manifest): replace chalk with node:util styleText by @gu-stav in https://github.com/module-federation/core/pull/4607 * fix(bridge-vue3): rewrite path navigations with basename in hash history mode by @LuisDev2001 in https://github.com/module-federation/core/pull/4579 * chore: lock dep version by @2heal1 in https://github.com/module-federation/core/pull/4615 * chore(deps): replace fs-extra with node fs in packages by @2heal1 in https://github.com/module-federation/core/pull/4642 * chore(deps): bump axios from 1.13.5 to 1.15.0 by @dependabot[bot] in https://github.com/module-federation/core/pull/4649 * chore: replace axios with native node fetch by @2heal1 in https://github.com/module-federation/core/pull/4644 ##### New Contributors * @kyriiherman made their first contribution in https://github.com/module-federation/core/pull/4610 **Full Changelog**: https://github.com/module-federation/core/compare/v2.3.1...v2.3.2 ### v2.3.1 — Release v2.3.1 - Date: 2026-03-31 - Version: v2.3.1 - Original notes: https://github.com/module-federation/core/releases/tag/v2.3.1 - Permalink: https://whatsnew.fyi/product/core/releases/v2.3.1 - **fixed** — Implement sanitizePostMessagePayload in chrome-devtool to handle unsafe values in post messages - **fixed** — Remove rambda dependency from dts-plugin - **security** — Lock axios version to 1.13.5 to prevent supply chain attack - **changed** — Replace chalk with native styleText in dts-plugin - **changed** — Remove btoa dependency from node, rspack, and enhanced packages - **changed** — Replace lodash cloneDeepWith in dts-plugin ##### What's Changed ###### Bug Fixes 🐞 * fix(chrome-devtool): implement sanitizePostMessagePayload to handle unsafe values in post messages by @2heal1 in https://github.com/module-federation/core/pull/4600 * fix(dts-plugin): remove rambda dependency by @gu-stav in https://github.com/module-federation/core/pull/4602 * fix(security): lock axios version to 1.13.5 to prevent supply chain attack by @2heal1 in https://github.com/module-federation/core/pull/4605 ###### Document 📖 * docs: clarify resolveShare behavior and documentation by @2heal1 in https://github.com/module-federation/core/pull/4595 ###### Other Changes * chore(dts-plugin): replace chalk with native styleText by @gu-stav in https://github.com/module-federation/core/pull/4594 * chore(node,rspack,enhanced): remove btoa dependency by @gu-stav in https://github.com/module-federation/core/pull/4606 * chore(dts-plugin): replace lodash cloneDeepWith by @gu-stav in https://github.com/module-federation/core/pull/4601 ##### New Contributors * @gu-stav made their first contribution in https://github.com/module-federation/core/pull/4594 **Full Changelog**: https://github.com/module-federation/core/compare/v2.3.0...v2.3.1