# moment changelog

> moment release notes.

- Vendor: moment
- Category: Frameworks & Libraries
- License: MIT
- Language: JavaScript
- Official site: https://momentjs.com/
- Tracked by: What's New (https://whatsnew.fyi/product/moment)
- Harvested from: GitHub (moment/moment)
- Entries below: 2 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

## Releases

### 2.31.0

- Date: 2026-09-15
- Version: 2.31.0
- Original notes: https://github.com/moment/moment/releases/tag/2.31.0
- Permalink: https://whatsnew.fyi/product/moment/releases/2.31.0

- **security** — Fix CVE-2026-17495
- **fixed** — Prevent object prototype properties from being used as format tokens
- **fixed** — Normalize lazy-loaded locale names
- **fixed** — Fix parsing issue with eHHmm format
- **fixed** — Ignore non-Moment arguments in min and max
- **fixed** — Fix inherited lowercase long date formats
- **fixed** — Reset locale parsing caches after updates
- **fixed** — Fix weekday mismatch when the format only has part of a date
- **fixed** — Fix locale('__proto__') corrupting the global locale
- **fixed** — Avoid Object.assign in duration.humanize
- **fixed** — Validate range when parsing a time zone offset
- **fixed** — Include metadata in all-locales bundle
- **fixed** — Apply postformat to locale relative time methods
- **added** — Add stack traces to conditional deprecation warnings
- **added** — Add internal date-default hook for Moment Timezone
- **added** — Add Pashto ('ps') locale
- **added** — Add Amharic (Ethiopia) ('am-et') locale

_Released Sep 14, 2026_

###### Security fixes

- Fix [CVE-2026-17495](https://www.cve.org/CVERecord?id=CVE-2026-17495) ([GHSA-4p3w-j4w9-5jqw](https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw))

###### Bug fixes

- [#6376](https://github.com/moment/moment/pull/6376) Prevent object prototype properties from being used as format tokens
- [#6386](https://github.com/moment/moment/pull/6386) Normalize lazy-loaded locale names
- [#6404](https://github.com/moment/moment/pull/6404) Fix parsing issue with `eHHmm` format
- [#6433](https://github.com/moment/moment/pull/6433) Ignore non-Moment arguments in min and max
- [#6434](https://github.com/moment/moment/pull/6434) Fix inherited lowercase long date formats
- [#6436](https://github.com/moment/moment/pull/6436) Reset locale parsing caches after updates
- [#6437](https://github.com/moment/moment/pull/6437) Fix weekday mismatch when the format only has part of a date
- [#6442](https://github.com/moment/moment/pull/6442) Fix `locale('__proto__')` corrupting the global locale
- [#6443](https://github.com/moment/moment/pull/6443) Avoid `Object.assign` in `duration.humanize`
- [#6446](https://github.com/moment/moment/pull/6446) Validate range when parsing a time zone offset
- [#6447](https://github.com/moment/moment/pull/6447) Include metadata in all-locales bundle
- [#6448](https://github.com/moment/moment/pull/6448) Apply postformat to locale relative time methods
- [#6450](https://github.com/moment/moment/pull/6450) Add stack traces to conditional deprecation warnings

###### New features

- [#6451](https://github.com/moment/moment/pull/6451) Add internal date-default hook for Moment Timezone

###### New locales

- [#6000](https://github.com/moment/moment/pull/6000): Pashto ('ps')
- [#6278](https://github.com/moment/moment/pull/6278), [#6379](https://github.com/moment/moment/pull/6379): Amharic (Ethiopia) ('am-et')

###### Updates to existing locales

- [#5404](https://github.com/moment/moment/pull/5404) Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time
- [#6197](https://github.com/moment/moment/pull/6197) Indonesian ('id'): Correct the abbreviation for August
- [#6217](https://github.com/moment/moment/pull/6217) Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct `L` date formats
- [#6289](https://github.com/moment/moment/pull/6289) Swedish ('sv'): Correct the abbreviation for Thursday
- [#6306](https://github.com/moment/moment/pull/6306) Catalan ('ca'): Use typographic apostrophes in relative time
- [#6347](https://github.com/moment/moment/pull/6347) Swahili ('sw'): Correct the spelling of hour in calendar output
- [#6360](https://github.com/moment/moment/pull/6360) Ukrainian ('uk'): Use ISO week numbering
- [#6370](https://github.com/moment/moment/pull/6370) Ukrainian ('uk'): Use U+02BC apostrophes in Friday names
- [#6371](https://github.com/moment/moment/pull/6371) Hungarian ('hu'): Preserve numeric values in relative seconds
- [#6391](https://github.com/moment/moment/pull/6391) Swahili ('sw'): Fix weekday and relative-time grammar
- [#6396](https://github.com/moment/moment/pull/6396) German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots
- [#6409](https://github.com/moment/moment/pull/6409) Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting
- [#6410](https://github.com/moment/moment/pull/6410) Polish ('pl'): Use genitive month names in dotted day formats

### 2.30.1

- Date: 2026-07-26
- Version: 2.30.1
- Original notes: https://github.com/moment/moment/releases/tag/2.30.1
- Permalink: https://whatsnew.fyi/product/moment/releases/2.30.1

Note - this was not a new release, but rather just updating GitHub's `latest` release to indicate the existing version `2.30.1` from Dec 27, 2023.

Original changelog is here: https://github.com/moment/moment/blob/2.30.1/CHANGELOG.md