lint-staged

17.6.0 · 26 Sep 2026MIT26.8M / weekRepository Homepage npm Atom feed

Same major only

20 releases in betweenevery note read

Other targets from 16.1.0Latest17.6.0

Before you upgrade

Tick each one off as you go

Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.
breaking16.3.0
Remove debug as a dependency due to recent malware issue; read more at #1005. Because of this, the DEBUG environment variable is no longer supported — use the --debug to enable debugging
breaking16.2.0

Return the caret semver range (^) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates to lint-staged. This was changed in 16.2.0 after the vulnerability issues with chalk and debug, which were also removed in the same version.
16.2.1

16.4.0
14 Mar 20261 new
- new
  Replace micromatch with picomatch to reduce dependencies.
16.3.4 nothing new or fixed in the note
16.3.3
10 Mar 20261 fix
- fixed
  Make sure Git's warning about CRLF line-endings doesn't interfere with creating initial backup stash.
16.3.2
3 Mar 20261 fix
- fixed
  Hide the extra cmd window on Windows by spawning tasks without the detached option.
16.3.1
1 Mar 20261 fix
- fixed
  Remove nano-spawn as a dependency from package.json as it was replaced with tinyexec and is no longer used.
16.3.0
28 Feb 20261 new · 1 fix
- new
  Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.
- fixed
  Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.
16.2.7
19 Nov 20251 fix
- fixed
  Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.
16.2.6
22 Oct 20251 fix
- fixed
  Fix problems with --continue-on-error option, where tasks might have still been killed (SIGINT) when one of them failed.

2 internal lines (docs, tests, tooling) left out.

npm install lint-staged@16.4.0

Reading 16.4.0's manifest…

Check against your package.json

Which of your other dependencies stand in the way of 16.4.0. Read once, not stored.