Deno 2.9.8

Deno 2.9.8 shipped on October 21, 2026. Thirteen fixes. No new features.

Security

• TLS trust store: compromised eMudhra certificate authorities are now distrusted.
• Compile permissions: deno compile checks read permission for dynamically imported local files.
• npm links: package link names are validated.
• NAPI bounds: napi_create_dataview bounds are checked for overflow.

Runtime

• Op contexts: kept alive until the isolate is disposed.
• Coverage: the V8 code cache is skipped while collecting coverage.
• Fetch: hyper-util 0.1.21 and hyper 1.11.1 cancel the idle interval when the connection pool empties.
• NAPI callbacks: the return value is ignored while an exception is pending.
• rand: the 0.9.x line is bumped to a patched release.

Node Compatibility

• X.509v1: certificate handling is aligned with OpenSSL.
• Mocks: mock.reset() restores mock.method() implementations.
• Assert: message functions and format arguments are supported.

CLI

zsh completions now complete script paths for a bare deno run.

Upgrade

Run deno upgrade, or pin the build with deno upgrade --version 2.9.8.