Packages

debug

4.4.3 · 13 Sep 2025MIT930.4M / weekRepositoryHomepagenpmAtom feed

Upgrading debug From 2.3.2 to 4.4.3

48 releases in betweennotes for 26

Other targets from 2.3.2Newest 2.x, Clears its 2 advisories2.6.9
  1. 2.3.2yours
  2. 20 releases
  3. 3.0.0major
  4. 1 release
  5. 3.1.0security
  6. 3.2.0breaking
  7. 1 release
  8. 3.2.2breaking
  9. 3.2.3breaking
  10. 4 releases
  11. 4.0.0major
  12. 5 releases
  13. 4.3.1security
  14. 9 releases
  15. 4.4.3target
17+
changes to make
2
advisories fixed
22+
new
32+
fixes

Counted from 26 of 48 release notes. Advisories are counted from the advisory database, in full.

Start here

Before you upgrade

Tick each one off as you go
  • breaking4.0.0
  • breaking4.0.0
  • breaking4.0.0
  • breaking3.2.3
  • breaking3.2.2
  • breaking3.2.0
  • breaking3.1.0
  • breaking3.1.0
  • breaking3.0.0
  • breaking3.0.0

Security

Fixes 2 advisories affecting 2.3.2

  • Fixes a ReDOS regression (#458) - see #797 for details.

    4.3.1

  • Remove ReDoS regexp in %o formatter

    3.1.0

Release by release

  1. 4.4.2 – 4.4.32 releases, nothing new or fixed; 1 without a note

  2. 4.4.1

    13 May 20252 fixes
    • fixed

      Issue-996: Replace whitespaces in namespaces string with commas globally

    • fixed

      Fixes #987 fallback to localStorage.DEBUG if debug is not defined

  3. 4.3.7 – 4.4.02 releases, nothing new or fixed in the notes

  4. 4.3.6

    27 Jul 20241 fix
    • fixed

      Avoid using deprecated RegExp.$1

  5. 4.3.5

    31 May 20241 fix
    • fixed

      Fix/debug depth

  6. 4.3.4

    17 Mar 20221 new
    • new

      Add section about configuring JS console to show debug messages

  7. 4.3.3

    27 Nov 20211 new · 4 fixes
    • new

      Adds README section regarding usage in child procs

    • fixed

      Migrates repository from github.com/visionmedia/debug to github.com/debug-js/debug. Please see notes below as to why this change was made.

    • fixed

      Updates repository maintainership information

    • fixed

      Updates the copyright (no license terms change has been made)

    • fixed

      Removes accidental epizeuxis

  8. 4.3.2

    9 Dec 20201 fix
    • fixed

      Caches enabled statuses on a per-logger basis to speed up .enabled checks

17 other lines we could not sort, mostly version bumps

  • Upgrade ms to version 2.1.3

    4.3.7

  • Replace deprecated String.prototype.substr()

    4.3.4

  • The old organization was defunct and abandoned.

    4.3.3

  • I was not an owner of the old organization and thus could not ban the non-trivial amount of spam users or the few truly abusive users from the org. This hindered my ability to properly maintain this package.

    4.3.3

  • The debug ecosystem intends to grow beyond a single package, and since new packages could not be created in the old org (nor did it make sense for them to live there), a new org made the most sense - especially from a security point of view.

    4.3.3

  • The old org has way, way too many approved members with push access, for which there was nothing I could do. This presented a pretty sizable security risk given that many packages in recent years have fallen victim to backdoors and the like due to lax security access.

    4.3.3

  • Deprecated debugInstance.destroy(). Future major versions will not have this method; please remove it from your codebases as it currently does nothing.

    4.3.0

  • Replaced phantomJS with chrome backend for browser tests

    4.2.0

  • Deprecated and later removed Changelog.md in lieu of releases page

    4.2.0

  • Removed bower.json

    4.2.0

6 internal lines (docs, tests, tooling) left out.