## denoland/deno — v2.9.6…v2.9.7

_46 commits._

### Fixes
- **fix(cli): preserve double dash before the entrypoint (#36835)** (6c924f8)
- **fix(ext/http): extract traceparent from Deno.serve regardless of header name case (#36840)** (6f7bce4)
- **fix(tests): update check_node_builtin_modules output for new @types/node (#36848)** (deae589)
- **fix(cli): generate valid bash completions (#36736)** (a7a44a5)
- **perf(core): make extension op tables const in static memory (#36696)** (b2a965f)
- **fix(permissions): parse unix: net rules as POSIX paths (#36785)** (20b04ab)
- **perf(core): split OpCtx into shared OpCommonCtx + borrowed op declarations (#36693)** (0ce372e)
- **fix(permissions): fold unix socket paths for case-insensitive filesystems (#36553)** (3d7db25)
- **fix(ext/node): check resolved IP against net deny list in tcp_wrap bind (#36482)** (22417bc)
- **fix(sqlite): refuse symlink database paths (#36357)** (93c6e70)
- **fix(npm): validate lockfile tarball origins (#36430)** (43ebecc)
- **fix(audit): honor configured CA stores (#36728)** (e6cc83a)
- **fix(cli): accept all valid sys permission descriptors (#36753)** (50be67c)
- **perf(core): drop dead module-graph retention (#36683)** (f5a1671)
- **fix(cache): make HTTP authority paths unambiguous (#36356)** (c4466bf)
- **fix(ext/node): don't panic on prime sizes below 2 bits (#36400)** (c362c19)
- **fix(ext/node): normalize resourceUsage maxRSS on macOS (#36784)** (a85f9b6)
- **fix: add missing property desktop.app.identifier (#36774)** (abdb26d)
- **fix(npm): correct the pnpm lockfile import against real-world lockfiles (#36727)** (08acfcf)
- **fix: toplevel fetch/cron leak its spans (#36757)** (8b02973)
- **fix: point JSON schema $id values at the maintained GitHub raw endpoint (#36747)** (2c121ea)
- **fix(ext/node): allow repeated child process signals (#36644)** (9fdaf6b)
- **fix(node): preserve AsyncLocalStorage exit context (#36464)** (ebc5748)
- **fix(node): align IncomingMessage header map prototypes (#36438)** (7e1473b)
- **fix(process): clear supplementary groups before changing identity (#36433)** (a35e1da)
- **fix(install): validate lockfile tarball registry paths (#36473)** (20006d2)
- **fix(net): check permissions for multicast membership (#36529)** (04b20d7)
- **fix(web): avoid flushing compression streams on every write (#36744)** (8818d65)
- **fix: hash source contents for V8 code cache (#36743)** (defbac1)
- **perf(ext/node): Buffer hex paths via native Uint8Array toHex/setFromHex (#36531)** (d0b037b)
- **fix(ext/node): improve node:dns error codes and lookupService/setLocalAddress compat (#36552)** (e4a0108)
- **fix: validate --ignore-scripts package selectors (#36742)** (ca9f0f6)
- **fix(completions): keep the dash on short flags in zsh completions (#36720)** (15ff91b)
- **fix(lsp): resolve the newest prerelease of jsr packages that have no stable release (#36655)** (fd437ba)
- **fix(cli): don't duplicate passthrough args for deno deploy/sandbox (#36722)** (833f96a)
- **fix(transpile): don't report diagnostics from bundled assets in declaration emit (#36716)** (d7f7940)
- **fix(cli): restore optional-value semantics for deno bundle --sourcemap (#36723)** (65f4678)
- **fix(desktop): complete deferred window close and fix NAPI symbol export on Linux (#36718)** (ada5ba1)
- **fix(tests): update check_node_builtin_modules output for @types/node 26.4.0 (#36711)** (59b32e7)

### Backend
- **2.9.7 (#36857)** (0c07124)

### Tests
- **test: preserve package registry origin in CA store spec (#36797)** (b55df4f)
- **test: longer timeout for pummel/test-blob-slice-with-large-size.js (#36745)** (4bf4166)

### Docs
- **docs: drop the removed typescript_go_client crate (#36685)** (4a544ef)

### Chore
- **ci: bump libuv-sys-lite to 1.48.4, pin rolldown minifier to 1.2.7 (#36845)** (2027015)
- **ci: drop the gcloud auth steps left over from the dl.deno.land move (#36765)** (bf09f47)
- **ci: read CLOUDFLARE_ZONE_ID from secrets in post_publish (#36708)** (b24c664)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/denoland/deno?utm_source=github-action)._