npm · #4553 most downloaded on npm

@module-federation/third-party-dts-extractor

2.9.2module-federation/core ↗New releases in your daily digest, changelog included.

Last release 8 days ago
26 Sep 2026
Ships fairly regularly
a new release about every 1 weeks
Some releases are documented
notes for 16 of the last 60 stable releases
753 versions withdrawn
withdrawn after publishing
3 years old
1041 releases · first in 2024

Release timeline

1041 releases since 2024

202420252026

Releases

2.9.226 Sept 2026
fix(bridge-react): deduplicate lazy component loading by @2heal1 in #5092
What's Changed

Bug Fixes 🐞

fix(bridge-react): deduplicate lazy component loading by @2heal1 in #5092

fix(runtime-core): import ResourceLoadContext in the remote handler by @ScriptedAlchemy in #5114

fix(enhanced): report a missing expose as a build error instead of exiting by @ScriptedAlchemy in #5117

fix(enhanced): wait for addEntry in SharedContainerPlugin make by @ScriptedAlchemy in #5122

fix(enhanced): restore missing expose diagnostics by @ScriptedAlchemy in #5146

fix(esbuild): resolve paths from absWorkingDir instead of process.cwd() by @ScriptedAlchemy in #5148

fix(deps): upgrade undici to 7.29.1 by @ScriptedAlchemy in #5150

Document 📖

docs(skills): add sokra-mode skill for webpack plugin architecture by @ScriptedAlchemy in #5113

Other Changes

chore: release v2.9.1 by @2heal1 in #5108

chore(deps): upgrades adm-zip to 0.6.1 by @deiga in #5103

chore(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by @dependabot[bot] in #5017

chore(deps-dev): bump eslint-plugin-prettier from 5.2.1 to 5.5.6 by @dependabot[bot] in #5020

chore(deps): bump react-router-dom from 6.30.3 to 6.30.6 in /apps/router-demo/router-remote4-2004 by @dependabot[bot] in #5041

chore(deps): bump hono from 4.13.1 to 4.13.5 by @dependabot[bot] in #5043

chore(deps): bump sharp from 0.35.0 to 0.35.4 by @dependabot[bot] in #5057

chore(deps-dev): bump vitest from 3.2.6 to 4.1.11 by @dependabot[bot] in #5056

chore(deps): move the repo to @rspack/core 2 by @ScriptedAlchemy in #5126

New Contributors

@deiga made their first contribution in #5103

Full Changelog: v2.9.1...v2.9.2

Browser extension

Download Browser extension

For extension-capable embedded browsers. Extract the ZIP, load the directory containing manifest.json, and refresh the page.

Installation and WebMCP guide

Extension version: 2.9.2. Source commit: b78935690208c1a75ecb23969a514597543c20c1.

SHA-256: 436e021c800533808c5dd57b3587b3eacf6b67454fbb6ad9d96f9633b98d1bcc

From the same repository

module-federation/core

2.9.121 Sept 2026

feat(devtools): add WebMCP, browser builds and release downloads by @2heal1 in #5106

What's Changed

New Features 🎉

feat(devtools): add WebMCP, browser builds and release downloads by @2heal1 in #5106

Performance 🚀

perf(website): reduce first-screen JavaScript by @2heal1 in #5064

Bug Fixes 🐞

fix(website): harden Zephyr deployments by @Nsttt in #5004
fix(nextjs-mf): await async factories and return wrapper factory in server onLoad by @shashank-u03 in #4974
fix(dts-plugin): update ws to 8.21.3 by @ScriptedAlchemy in #4994
fix(runtime-core): clear rejected remote-entry promises from globalLoading by @tonoizer in #5006

Document 📖

docs: obs doc add props by @2heal1 in #5008
docs: recover asset prefix by @2heal1 in #5009
docs: fix publicpath by @2heal1 in #5010
docs: add divebell part by @2heal1 in #5012
docs(website): Fix typo in rspress documentation by @xinconan in #4996

Other Changes

Release v2.9.0 by @2heal1 in #5003
chore(deps-dev): bump js-yaml from 4.3.1 to 4.3.2 by @dependabot[bot] in #5069

New Contributors

@xinconan made their first contribution in #4996

Full Changelog: v2.9.0...v2.9.1

Browser extension

Download Browser extension

For extension-capable embedded browsers. Extract the ZIP, load the directory, and refresh the page.

Installation and WebMCP guide

Extension version: 2.9.1. Source commit: 586ed7f9a1a42f55389b471af1bd05b810688761.

SHA-256: 67019c371c5397be7a0ab9be5fccf727ea5ed82ab2067a12c158f7c4ee5b3443

Open source →

2.9.024 Aug 2026

feat(rstest): add federation integration plugin by @ScriptedAlchemy in #4920

What's Changed

New Features 🎉

feat(rstest): add federation integration plugin by @ScriptedAlchemy in #4920
feat(runtime): deduplicate preloaded asset URLs by @2heal1 in #4997
feat(observability): add instance-aware runtime diagnostics by @2heal1 in #4813

Bug Fixes 🐞

fix(rstest): coordinate Node configuration ownership by @ScriptedAlchemy in #4980
fix(devtools): support proxy core interop exports by @2heal1 in #4992
fix: correct stream SSR splitChunks warning and refresh stale docs by @tonoizer in #4986
fix(devtools): render the shared packages badge count once by @dmchoi77 in #4970
fix(runtime-core): cache synchronous shared factories by @2heal1 in #4998

Other Changes

chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 by @dependabot[bot] in #4979
chore(deps): bump nanoid from 5.1.6 to 5.1.16 by @dependabot[bot] in #4977
chore(deps): bump hono from 4.12.26 to 4.12.34 by @dependabot[bot] in #4957
chore(deps-dev): bump postcss from 8.5.10 to 8.5.23 by @dependabot[bot] in #4964
chore(deps): bump nanoid from 5.1.6 to 5.1.16 in /packages/enhanced/test/configCases/tree-shaking-share/multi-version-fallback by @dependabot[bot] in #4976
chore(deps): bump @remix-run/router from 1.23.2 to 1.23.3 in /packages/bridge/bridge-react-webpack-plugin/tests/mockRouterDir/router-v6/react-router-dom by @dependabot[bot] in #4965
chore(deps): bump json from 2.19.4 to 2.19.9 in /apps/metro-example-host by @dependabot[bot] in #4937
chore(deps): bump react-router from 7.16.0 to 7.18.2 by @dependabot[bot] in #4936
chore(deps): bump sharp from 0.34.5 to 0.35.0 by @dependabot[bot] in #4932
chore(deps-dev): bump postcss from 8.5.23 to 8.5.24 in /apps/next-app-router/next-app-router-4000 by @dependabot[bot] in #4955
chore(deps-dev): bump postcss from 8.5.23 to 8.5.24 in /apps/next-app-router/next-app-router-4001 by @dependabot[bot] in #4933
chore(deps-dev): bump postcss from 8.5.23 to 8.5.24 in /packages/treeshake-frontend by @dependabot[bot] in #4966
chore(deps): reconcile Hono dependency updates by @dependabot[bot] in #4928
chore(deps-dev): bump hono from 4.13.0 to 4.13.1 in /packages/bridge/bridge-react by @dependabot[bot] in #4975
chore(deps): bump @hono/node-server from 2.0.10 to 2.0.11 in /packages/treeshake-server by @dependabot[bot] in #4927
chore(deps): bump hono from 4.13.0 to 4.13.1 in /packages/treeshake-server by @dependabot[bot] in #4960
chore(website-new): bump zephyr-rspress-plugin to 1.2.2 by @ryok90 in #4989
ci(release): add next release summary to workflow page by @ryok90 in #4919
refactor: reuse normalizeSharedOptions and shared createBundlerLogger by @tonoizer in #4987
chore: remove dead code and stale commented blocks by @tonoizer in #4985
ci(metro): pin idb-companion 1.1.8 by @2heal1 in #5000

Full Changelog: v2.8.2...v2.9.0

Open source →

2.8.128 Jul 2026

feat(nextjs-mf): add skipFederatedStats option by @shashank-u03 in #4732

What's Changed

New Features 🎉

feat(nextjs-mf): add skipFederatedStats option by @shashank-u03 in #4732

Performance 🚀

perf(nextjs-mf): derive federated stats from manifest by @ScriptedAlchemy in #4909

Bug Fixes 🐞

fix(runtime-core): avoid executing ESM remote chunks before init by @dmchoi77 in #4886
fix(metro): resolve Windows hoisted split bundles by @jbroma in #4912

Other Changes

ci(e2e): gate affected workflows before runner setup by @ScriptedAlchemy in #4864
chore(deps): bump axios from 1.16.1 to 1.18.0 by @dependabot[bot] in #4915
chore(deps): bump axios from 1.16.1 to 1.18.0 in /packages/typescript by @dependabot[bot] in #4914
chore(deps): bump adm-zip from 0.5.10 to 0.6.0 in /packages/dts-plugin by @dependabot[bot] in #4910
chore(deps): bump adm-zip from 0.5.10 to 0.6.0 by @dependabot[bot] in #4911
chore(deps-dev): bump vitest from 1.2.2 to 3.2.6 by @dependabot[bot] in #4803
chore(deps-dev): bump js-yaml from 4.2.0 to 4.3.0 by @dependabot[bot] in #4917

Full Changelog: v2.8.0...v2.8.1

Open source →

2.8.015 Jul 2026

feat(dts-plugin): add TypeScript 7 support by @2heal1 in #4878

What's Changed

New Features 🎉

feat(dts-plugin): add TypeScript 7 support by @2heal1 in #4878
feat(runtime): allow disabling unused capabilities by @2heal1 in #4901

Performance 🚀

perf: slim deps by @2heal1 in #4897

Bug Fixes 🐞

fix(rsbuild-plugin): force library.type to commonjs-module in patchNodeConfig by @elecmonkey in #4873
fix(metro): normalize Windows paths by @jbroma in #4882
fix(ci): support current Rslib bundle API by @ScriptedAlchemy in #4885
fix(manifest): preserve ESM remote entry type by @zackarychapple in #4894
fix: support Rspack module identifiers by @LingyuCoder in #4892
fix: set optimization.usedExports to global to prevent tree shaking i… by @2heal1 in #4896
fix(modern-js): set optimization target from ssr config by @2heal1 in #4900

Other Changes

chore(metro): bump Rock to 0.14.1 by @jbroma in #4881
chore: bump Node.js to 24 LTS by @Nsttt in #4884
ci(node): verify published packages on Node 20 by @2heal1 in #4888
chore(metro): support TypeScript 7 by @2heal1 in #4898
ci(release): show release type in approval by @ryok90 in #4904

New Contributors

@LingyuCoder made their first contribution in #4892

Full Changelog: v2.7.0...v2.8.0

Open source →

Additional notes2 sources agree

Patch Changes

6ee67dc: Reduce installed and bundled size by replacing general-purpose cache, path, version, package lookup, scheduling, fetch, and error fallback dependencies with focused built-in utilities.

Open source →

2.7.08 Jul 2026Security

fix(treeshake-server): bump undici to 7.28.0 for CVE-2026-12151 by @ScriptedAlchemy in #4863

What's Changed

New Features 🎉

feat(playground): add docs playground by @2heal1 in #4846
feat(i18n): add Brazilian Portuguese localization and documentation by @DevJoaoLopes in #4850
feat(website): deploy Rspress docs with Zephyr by @Nsttt in #4855

Bug Fixes 🐞

fix(modern-js-v3): disable lazy compilation for producers by @2heal1 in #4845
fix(devtools): show manifest-only remotes in dependency graph by @2heal1 in #4848
fix(website): add social icon meta by @2heal1 in #4847
fix(retry-plugin): externalize runtime types from DTS bundle by @shashank-u03 in #4853
fix(treeshake-server): bump undici to 7.28.0 for CVE-2026-12151 by @ScriptedAlchemy in #4863
fix(sdk): handle node builtins in ESM remote loader by @dmchoi77 in #4816
fix(devtools): guard invalid module info payloads by @dmchoi77 in #4787

Document 📖

docs: restructure architecture docs by @ScriptedAlchemy in #4859
docs: correct factual inaccuracies in architecture docs by @ScriptedAlchemy in #4861
docs(website-new): add GA4 tracking by @ScriptedAlchemy in #4874

Other Changes

chore(deps): bump js-yaml from 3.14.2 to 5.2.0 by @dependabot[bot] in #4860
chore(deps): bump react-router from 6.30.3 to 6.30.4 in /packages/bridge/bridge-react-webpack-plugin/tests/mockRouterDir/router-v6/react-router-dom by @dependabot[bot] in #4795
chore(typescript): drop lodash.get dependency by @gu-stav in #4705
chore(managers,manifest,third-party-dts-extractor): replace find-pkg by @gu-stav in #4707
chore(dts-plugin): drop ansi-colors dependency by @gu-stav in #4704
chore(deps): bump echarts from 6.0.0 to 6.1.0 by @dependabot[bot] in #4858
chore(deps): bump @hono/node-server from 1.19.10 to 1.19.13 by @dependabot[bot] in #4635
chore(deps): bump handlebars from 4.7.7 to 4.7.9 by @dependabot[bot] in #4597
chore(third-party-dts-extractor): replace resolve with exsolve by @gu-stav in #4775
chore(deps): apply small dependabot bumps across packages and example apps by @ScriptedAlchemy in #4865
test(cypress): drop redundant uncaught:exception suppression in memory-router spec by @voidmatcha in #4826
test: migrate to Rstest by @chenjiahan in #4871
chore(sdk): drop node-fetch fallback and optional peer dependency by @gu-stav in #4866
chore: upgrade typescript to 6.0.3 by @eduard-jacko in #4737
chore(deps): upgrade Rslib, Rsbuild and Rsbuild plugins to latest by @elecmonkey in #4872
chore: remove unused jest config by @2heal1 in #4875

New Contributors

@voidmatcha made their first contribution in #4826
@dmchoi77 made their first contribution in #4816
@DevJoaoLopes made their first contribution in #4850
@eduard-jacko made their first contribution in #4737
@elecmonkey made their first contribution in #4872

Full Changelog: v2.6.0...v2.7.0

Open source →

Additional notes2 sources agree

Patch Changes

2add9ef: chore(third-party-dts-extractor): replace resolve with exsolve (0 transitive deps, ~100KB smaller) for the single package.json lookup.
a5f123a: chore: replace find-pkg with empathic (per e18e replacements). Removes unused find-pkg dependency from @module-federation/manifest.
8ec950c: Bump runtime dependencies: echarts 6.1.0 (devtools), hono 4.12.26 and @hono/node-server 1.19.13 (treeshake-server), lodash-es 4.18.1 (rspress-plugin), handlebars 4.7.9 (create-module-federation), resolve 1.22.12 (third-party-dts-extractor).

Open source →

2.6.023 Jun 2026

feat(retry-plugin): support function-based retryDelay for exponential backoff by @shashank-u03 in #4828

What's Changed

New Features 🎉

feat(retry-plugin): support function-based retryDelay for exponential backoff by @shashank-u03 in #4828

Bug Fixes 🐞

fix: modern.js ssr static asset public path by @2heal1 in #4800
fix(dts-plugin): infer extensions for multi-dot exposes by @ScriptedAlchemy in #4790
fix(bridge-react): keep host fallback outside remote root by @2heal1 in #4780
fix(bridge-vue3): handle RemoteApp keepalive lifecycle by @2heal1 in #4779
fix(examples): avoid direct antd package imports by @ScriptedAlchemy in #4808
fix(nextjs-mf): use matchRemoteWithNameAndExpose for beforeRequest cache-busting by @nag-clearstreet in #4661
fix(rsbuild-plugin): remove whitespace from chunk global by @2heal1 in #4818
fix(dts-plugin): prevent sibling package path prefix false positive in getDependentFiles by @hpello in #4804
fix(runtime-core): refetch manifest after forced remote registration by @2heal1 in #4841
fix(enhanced): stabilize consume-shared runtime output by @2heal1 in #4842
fix(modern-js-v3): load config in esm build by @2heal1 in #4840

Document 📖

docs(website-new): align Vite MF config with Rspack pattern by @tonoizer in #4752
docs: shared config subpath/prefix matching + bridge-react warnings by @ScriptedAlchemy in #4792
docs: refresh docs and unify internal links by @zllkjc in #4817
docs(website-new): relocate doc mdx out of src/components by @zllkjc in #4822
docs(website-new): normalize links in _components mdx by @zllkjc in #4823
docs: sync zh documentation updates to en by @zllkjc in #4825

Other Changes

Translate comments from Chinese to English by @xmhealth in #4757
chore(deps): bump undici from 7.24.7 to 7.28.0 by @dependabot[bot] in #4835
chore(deps): combine dependency security updates by @2heal1 in #4839

New Contributors

@tonoizer made their first contribution in #4752
@xmhealth made their first contribution in #4757
@nag-clearstreet made their first contribution in #4661
@hpello made their first contribution in #4804
@shashank-u03 made their first contribution in #4828

Full Changelog: v2.5.1...v2.6.0

Open source →

2.5.14 Jun 2026Security

fix(dts-plugin): update ws for CVE-2026-45736 by @ScriptedAlchemy in #4760

What's Changed

New Features 🎉

feat(rspress-plugin): rebuild llms output from html by @zllkjc in #4766

Bug Fixes 🐞

fix(dts-plugin): update ws for CVE-2026-45736 by @ScriptedAlchemy in #4760
fix(bridge-react): align prefetch snapshot args by @ScriptedAlchemy in #4764
fix(deps): update axios security release by @ScriptedAlchemy in #4761
fix(deps): override flatted security release by @ScriptedAlchemy in #4762
fix(deps): update react-router security releases by @ScriptedAlchemy in #4763
fix(bridge-react): fail build on dts diagnostics by @ScriptedAlchemy in #4765
fix(storybook-addon): expand peer dep to support Storybook v10 by @ScriptedAlchemy in #4782
fix(storybook-addon): pass through Rsbuild federation options by @ScriptedAlchemy in #4768
fix(dts-plugin): normalize manifest type URLs on Windows by @ScriptedAlchemy in #4774
fix(dts-plugin): define __dirname from import.meta.url for ESM consumers by @ScriptedAlchemy in #4784
fix(rsbuild-plugin): avoid configuring chunkLoading by @2heal1 in #4785
fix(enhanced): preserve shared fallback versions by @2heal1 in #4778

Document 📖

docs: update loading trace section and correct command syntax by @2heal1 in #4754
docs: fix vite quick start remote definition in config by @smeng9 in #4716
docs(bridge-react): fix loading option example by @2heal1 in #4777

Other Changes

chore(deps): bump ws from 8.20.1 to 8.21.0 by @dependabot[bot] in #4740
chore(deps-dev): bump postcss from 8.4.38 to 8.5.10 in /apps/next-app-router/next-app-router-4000 by @dependabot[bot] in #4694
test(dts-plugin): add regression test for Windows path quoting (#4133) by @ScriptedAlchemy in #4791

New Contributors

@smeng9 made their first contribution in #4716

Full Changelog: v2.5.0...v2.5.1

Open source →

2.5.021 May 2026

feat(observability): add observability plugin for full module loading lifecycle tracing by @hanric.zhang in #4721 feat(devtools): support observabilit

What's Changed

New Features 🎉

feat(observability): add observability plugin for full module loading lifecycle tracing by @hanric.zhang in #4721
feat(devtools): support observability integration in MF DevTools by @hanric.zhang in #4745

feat(metro): add metro-plugin-rock and migrate examples to Rock by @jbroma in #4652
feat(runtime): support getInstance finder callback by @2heal1 in #4703
feat(metro): support manifest hashes for native caching by @jbroma in #4700

Bug Fixes 🐞

fix(metro): add missing changeset and format follow-up for #4576 by @ryok90 in #4701
fix(dts-plugin): correct dts url by @2heal1 in #4730

Other Changes

chore: bump ruby to 3.4.9 for metro example apps by @jbroma in #4643
(metro-core): add manifest SHA-256 hashes and optional bundle cache layer integration by @zhongwuzw in #4576
chore(devtools): consolidate proxy logic by @2heal1 in #4728
chore(actions): remove issues-helper usage by @2heal1 in #4738
chore(actions): pin workflow actions to commits by @2heal1 in #4741

New Contributors

@zhongwuzw made their first contribution in #4576

Full Changelog: v2.4.0...v2.5.0

Open source →

2.4.029 Apr 2026

feat(devtools): support runtime-registered react proxies across multiple scopes by @2heal1 in #4685

What's Changed

New Features 🎉

feat(devtools): support runtime-registered react proxies across multiple scopes by @2heal1 in #4685
feat: support proxying runtime-registered shared react by @2heal1 in #4693

Bug Fixes 🐞

fix(sdk): widen node-fetch peerOptional range to accept v2 and v3 by @tuffz in #4625
fix(bridge): exclude tests from published package by @2heal1 in #4674
fix(chrome-devtools): update remote identifier by @2heal1 in #4675
fix(enhanced): add esm export for runtime entry to fix vite resolution by @2heal1 in #4682
fix(runtime): ensure instance creation includes id and options by @2heal1 in #4699

Other Changes

chore: remove legacy data prefetch by @2heal1 in #4695
chore: update changeset by @2heal1 in #4696

New Contributors

@tuffz made their first contribution in #4625

Full Changelog: v2.3.3...v2.4.0

Open source →

0.17.124 Jul 20252 sources agree

a7cf276: chore: upgrade NX to 21.2.3, Storybook to 9.0.9, and TypeScript to 5.8.3

Patch Changes

a7cf276: chore: upgrade NX to 21.2.3, Storybook to 9.0.9, and TypeScript to 5.8.3
- Upgraded NX from 21.0.3 to 21.2.3 with workspace configuration updates
- Migrated Storybook from 8.3.5 to 9.0.9 with updated configurations and automigrations
- Upgraded TypeScript from 5.7.3 to 5.8.3 with compatibility fixes
- Fixed package exports and type declaration paths across all packages
- Resolved module resolution issues and TypeScript compatibility problems
- Updated build configurations and dependencies to support latest versions
d31a326: refactor: sink React packages from root to individual packages
- Removed React dependencies from root package.json and moved them to packages that actually need them
- Fixed rsbuild-plugin configuration to match workspace patterns
- Updated tests to handle platform-specific files
- This change improves dependency management by ensuring packages only have the dependencies they actually use

Open source →