msw
- 3.0.3 is the latest, published 10 October 2026.
- No known security advisory.
- 3.x: 4 releases since 28 September 2026, 4 in the last 90 days.
Releases in the last 90 days
Feed of releases and advisoriesEvery stable release, newest first. Notes are quoted as the maintainers published them.
3.0.3
10 October 2026HandlersController: dispose of reset handlers (#2810) (3818a81c455a638eda1558558d8ae3cd17a34e55) @kettanaito
Bug Fixes
HandlersController: dispose of reset handlers (#2810) (3818a81c455a638eda1558558d8ae3cd17a34e55) @kettanaito
expose network context on
enablein network sources (#2809) (d1fe8e6e6e7eefce43746ee44802bc553731e951) @kettanaito
3.0.2
3 October 2026vite: support virtual:msw imports in vitest (#2802) (e73c381e3adc0848fcf9a7ef291b614b06a0d92b) @kettanaito
Bug Fixes
vite: support
virtual:mswimports in vitest (#2802) (e73c381e3adc0848fcf9a7ef291b614b06a0d92b) @kettanaito
3.0.1
30 September 2026Treat CONNECT requests as the transport mechanism (#2796) (7cad86a03b0ddb2efdec96ce8a49b0ed07d9f4dc) @kettanaito
Bug Fixes
treat
CONNECTrequests as the transport mechanism (#2796) (7cad86a03b0ddb2efdec96ce8a49b0ed07d9f4dc) @kettanaito
3.0.0
28 September 2026V3.0.0 (#2692) (2bb43428b79ac06f94bb8ea8aeacd6102fe31f56) @kettanaito @Andarist
v3.0.0 (#2692) (2bb43428b79ac06f94bb8ea8aeacd6102fe31f56) @kettanaito @Andarist
Breaking changes
- breaking
MSW is now ESM-only (#2765).
- breaking
Deprecate support for Node.js v18 and v20 (#2729). The minimal supported Node.js version is v22.
- breaking
msw/nativeis removed in favor of@msw/react-native. - breaking
Require TypeScript 5.9 as the minimal version.
- breaking
Deprecate support for TypeScript 5.1 and 5.2
- breaking
worker.stop()returns a Promise (#2724). Awaiting it is relevant only for in-flight critical scenarios. - breaking
graphqlis now exported asmsw/graphql(#2691). GraphQL is now handled as a proper optional peer dependency. - breaking
Removes the
handleRequest()utility. Please use thedefineNetwork()API instead. - breaking
GraphQLLinkHandlerstype has been renamed toGraphQLLink. - breaking
The
file://requests now throw in Node.js as they normally do (not supported byfetch). - breaking
The
Content-Lengthrequest header is now removed bybypass(). - breaking
HTTP-to-WebSocket upgrade requests performed via
fetch()now throw in Node.js as they normally do (not supported byfetch). - breaking
Cookies are no longer managed in Node.js for better compatibility. Instead, whatever is the default behavior of your environment that's the cookie behavior you get. This has no effect on the browser.
- breaking
WebSocket
connectionlife cycle event has been renamed towebsocket:connection(#2783). - breaking
onUnhandledRequestoption has been renamed toonUnhandledFrame. - breaking
The library no longer patches
setTimeoutto circumvent fake timers in test runners. You should advance the fake timers normally for delayed mocked responses to resolve. - breaking
The library no longer returns a mocked cookie string on
request.headers.get('cookie')in the handlers. It returnsnullin all environments. Please use thecookiesresolver argument to have cookie-based logic.
Features
Supports Node.js v24 and v26.
Supports TypeScript v6.0 and v7.0.
You can import individual utilities, like
delayorpassthrough, from the newmsw/utilsentrypoint for smaller footprint on your bundle.Support GraphQL v17.0.
Support intercepting page navigations and form submissions (#2721).
Support GraphQL subscriptions (#285, #2763).
Migrate from
path-to-regexpto@msw/url(#2678).Remove the following dependencies:
graphqlpath-to-regexppicocolorsstatusesstrict-event-emitter
Adds a Vite plugin for MSW (#2781).
Adds a
websocket:errorlife cycle event to listen to WebSocket connection errors (#2784).
Major versions
- 3.xsince 28 September 2026 · latest 3.0.3 · 4 releases
- 2.xsince 23 October 2023 · latest 2.15.0 · 131 releases
- 1.xsince 25 January 2023 · latest 1.3.5 · 16 releases
- 0.xsince 15 March 2024 · latest 0.49.3 · 151 releases
Quality and security signals
What npm and deps.dev say about the latest release. Signals, not a verdict.
Reading npm and deps.dev…
Registry facts last checked 20 October 2026. Releases and advisories last read 20 October 2026.
Know when your own dependencies move
Inlinr tracks your coding time automatically. Switch dependency tracking on for a project and it reads that repository's manifest to show what is behind and what has been deprecated — off by default, one project at a time.