Packages

@microsoft/api-extractor

7.60.0 · 27 Oct 2026MIT4.1M / weekRepositoryHomepagenpmAtom feed

Upgrading @microsoft/api-extractor from 2.3.1 to 7.60.0

515 releases in betweennotes for 448

Other targets from 2.3.1Newest 2.x2.3.8
8+
changes to make
0
advisories fixed
106+
new
136+
fixes

Counted from 448 of 515 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking7.0.0
  • breaking6.0.0
  • breaking5.5.0
  • breaking5.0.0
  • breaking4.0.0
  • breaking3.0.0
  • deprecated4.3.0
  • deprecated3.2.4

Security

  • Bump lodash 4.18.1 to address CVEs GHSA-r5fr-rjxr-66jc, GHSA-f23m-r3pf-42rh

    7.58.1

  • Bump minimatch version from 10.2.1 to 10.2.3 to address CVE-2026-27903.

    7.57.7

  • Bump @microsoft/tsdoc-config to ~0.18.1 to mitigate CVE-2025-69873.

    7.57.6

  • Upgrades the minimatch dependency from ~3.0.3 to 10.0.3 across the entire Rush monorepo to address a Regular Expression Denial of Service (ReDoS) vulnerability in the underlying brace-expansion dependency.

    7.52.10

Release by release

  1. 7.60.0

    27 Oct 20261 new
    • new

      Upgrade the bundled compiler engine to TypeScript 6.0.3

  2. 7.59.3 – 7.59.42 releases, nothing new or fixed in the notes

  3. 7.59.2

    22 Sep 20261 fix

  4. 7.59.1nothing new or fixed in the note

  5. 7.59.0

    21 Aug 20261 new
    • new

      Report a new ae-unresolved-import-path message when an inline import() type with a relative path cannot be resolved, instead of silently emitting the unusable path into the .d.ts rollup.

  6. 7.58.13nothing new or fixed in the note

  7. 7.58.12

    21 Jul 20261 fix
    • fixed

      Improve the performance of the internal excerpt token condensing algorithm from O(n^2) to O(n) by eliminating repeated array splicing and per-merge bookkeeping.

  8. 7.58.9 – 7.58.113 releases, nothing new or fixed in the notes

2 internal lines (docs, tests, tooling) left out.