All Versions
114
Latest Version
Avg Release Cycle
32 days
Latest Release
18 days ago

Changelog History
Page 1

  • v7.4.0 Changes

    May 18, 2026

    🔒 Security notice

    🛠 FIxes CVE-2026-44311

    What's Changed

    🆕 New Contributors

    Full Changelog : v731...v740

  • v7.3.1 Changes

    April 19, 2026

    What's Changed

    🛠 Same as 7.3.0 but fixed publishing issues

    • ⚡️ feat(): Update cron schedule for scorecard workflow by @asturur in #10952
    • ci(): tighten workflow permissions for scorecard hardening by @asturur in #10953
    • 📌 ci(): pin workflow dependencies for scorecard hardening by @asturur in #10954
    • 📄 docs(): Revise security vulnerability reporting process by @asturur in #10955
    • ci(): Change permission model and declaration to help with OSSF scorecard. by @asturur in #10959
    • ci(): inline npm publish workflow and add manual dispatch by @asturur in #10960
    • ci(): Publish 7.3.1 by @asturur in #10961
    • ci(): Fix for publishing action by @asturur in #10962

    Full Changelog : v730...v731

  • v7.3.0 Changes

    April 18, 2026

    🚀 In this release we changed from Rollup to Rolldown, this also changed the minifier.
    If you notice some bug with your built app please report it.

    🆕 New Contributors

    What's Changed

    • 👍 feat(extensions): Cropping controls with edge resize and flip support by @mauricekindermann in #10851
    • 🛠 fix(): Fire mouseover/mouseleave for objects that are multi selection targets by @asturur in #10874
    • Gradient controls by @asturur in #10844
    • chore(deps-dev): bump rollup from 4.52.4 to 4.59.0 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #10877
    • ⚡️ chore(): Update typescript-eslint to address a recent vulnerability by @asturur in #10878
    • ⏱ Cleanup animation delay timeout by @jiayihu in #10830
    • 🛠 fix: avoid crash if loadFromJSON load config with not existing images by @multivoltage in #10875
    • 👍 feat(): Support textDecoration color. by @asturur in #10880
    • ⚡️ chore(): update vitest to 4.1.0 by @Smrtnyk in #10888
    • chore(): try rolldown by @Smrtnyk in #10868
    • chore(): migrate from prettier to oxfmt by @Smrtnyk in #10881
    • ✅ chore(deps-dev): bump @playwright/test from 1.58.1 to 1.58.2 by @dependabot[bot] in #10885
    • chore(deps-dev): bump nyc from 17.1.0 to 18.0.0 by @dependabot[bot] in #10883
    • 🚚 chore: simplify issue templates and remove semver devDependency by @asturur in #10892
    • ✅ chore(): try to improve playwright tests speed by @Smrtnyk in #10896
    • ci(): fix the coverage comment action by @asturur in #10898
    • 🛠 fix(): Coverage e2e part2 by @asturur in #10899
    • ✅ chore(): simplify svg creation in unit tests via shared helper by @Smrtnyk in #10895
    • 📄 docs(agents): add repo AGENTS guide and PR skill by @asturur in #10900
    • 🔨 refactor(tests): use createSVGElement helper across spec files by @Smrtnyk in #10902
    • ci(): Try to enable sonarqube cloud for coverage reporting by @asturur in #10903
    • ci(): fix sonarqube lcov path after artifact download by @asturur in #10910
    • 🔨 refactor(tests): remove coverage collection from playwright by @Smrtnyk in #10912
    • chore(deps-dev): bump es-toolkit from 1.40.0 to 1.45.1 by @dependabot[bot] in #10907
    • chore(deps): bump canvas from 3.2.0 to 3.2.1 by @dependabot[bot] in #10906
    • chore(deps-dev): bump inquirer from 12.10.0 to 13.3.2 by @dependabot[bot] in #10909
    • 🚚 chore(): remove leftover babel dep by @Smrtnyk in #10914
    • 🔨 refactor(tests): remove coverage merge step by @Smrtnyk in #10913
    • ci(): fix SonarCloud PR changed-lines coverage by @asturur in #10921
    • ci(): harden privileged workflow_run actions by @asturur in #10922
    • ✅ test(e2e): stabilize drag and drop event snapshots by @asturur in #10918
    • 🔨 refactor(tests): consolidate rectangle creation using makeRect by @Smrtnyk in #10923
    • chore(deps): bump canvas from 3.2.1 to 3.2.2 by @dependabot[bot] in #10926
    • chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #10928
    • ⚡️ chore(deps): update devDependencies to latest versions by @Smrtnyk in #10929
    • ⚡️ chore(): update typescript to 6 by @Smrtnyk in #10935
    • 🔨 refactor(test): fix dead assertions in Shadow.spec.ts by @Smrtnyk in #10932
    • chore(deps-dev): bump serialize-javascript from 7.0.4 to 7.0.5 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #10936
    • chore(deps): bump canvas from 3.2.2 to 3.2.3 by @dependabot[bot] in #10940
    • 🔨 refactor(tests): Migrate to official vitest API for custom snapshot matchers by @Smrtnyk in #10937
    • 🛠 fix(cropping): keep ghost scaling controls anchored on flipped images by @10ef in #10943
    • 🔖 Version 7.3.0 by @asturur in #10951

    Full Changelog : v720...v730

  • v7.2.0 Changes

    February 18, 2026

    What's Changed

    • 👕 chore(): Add pre-commit hook for lint/prettier/tsc by @asturur in #10834
    • feat(): Cropping controls follow ups by @asturur in #10839
    • chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #10853
    • ⚡️ chore(): update vitest by @Smrtnyk in #10858
    • ✅ chore(): fix Canvas-dispose tests on firefox by @Smrtnyk in #10859
    • ⚡️ chore(): update playwright to latest by @Smrtnyk in #10860
    • 🔨 test(): refactor test, put common data in shared function by @Smrtnyk in #10861
    • ⚡️ chore(): update prettier by @Smrtnyk in #10863
    • ✅ chore(): reuse more of the createPointerEvent in unit tests by @Smrtnyk in #10864
    • 🛠 fix(): Fix for svg export stored xss CVE-2026-27013

    Full Changelog : v710...v720

  • v7.1.0 Changes

    December 31, 2025

    What's Changed

    • feat(): Cropping controls extension by @asturur in #10825
    • 💅 chore(): Render circle control tweak for code reusability and style by @asturur in #10829
    • Correctly check for cache key equality in calcOwnMatrix by @jiayihu in #10831
    • chore(deps-dev): bump js-yaml from 3.14.1 to 3.14.2 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #10812
    • 🛠 fix(Text):Double offset when exporting SVG after setting deltaY in Text by @jiao1187875445 in #10805

    🆕 New Contributors

    Full Changelog : v700...v710

  • v7.0.0 Changes

    December 22, 2025

    No code changes compared to 7.0.0 - rc1

  • v6.9.1 Changes

    December 15, 2025

    Full Changelog : v690...v691

    • 🛠 fix(): Fix the situation where undefined + char exists when calculating couple #10816
    • 🛠 fix(): Fix toDataUrl writing on contextTop #10820

  • v6.9.0 Changes

    November 08, 2025

    What's Changed

    • 🛠 fix(): Backport cache prototype pollution fix to 6.x by @asturur in #10800

    Techinically a breaking change of private code.
    That is why the minor bump, otherwise would be a patch.

    🚀 If you are not interacting with the fabric.charWidthsCache object directly, this release is not breaking

    Full Changelog : v680...v690

  • v6.8.0 Changes

    November 08, 2025

    What's Changed

    🛠 fix(): CWE-1333 CWE-400 CWE-730 Simplify some regexes in order to avoid slowness with craft bad string #10746
    🛠 fix(): CWE-1333 CWE-400 CWE-730 in Text.ts regex #10745
    🛠 fix(StaticCanvas): After executing loadFromJSON, it unexpectedly adds an objects property to the canvas. #10741
    🛠 fix(textarea): A form field element has neither an id nor a name attribute. #10172
    🛠 fix(Canvas): The mouse enter and leave events of child elements will be executed twice. #10699
    🚚 chore(): Remove mouse wheel console warning by setting default explicitly. #10712
    🛠 fix(): fix rendering of text when line height is set to 0 #10785

    Full Changelog : v671...v680

    Thanks to @Smrtnyk and @zhe-he

  • v6.7.1 Changes

    July 21, 2025

    What's Changed

    • 🛠 fix(SVGImport): Allow for correct style element parsing by @asturur in #10688

    Full Changelog : v670...v671