Summary
Deno 2.9.7 makes audit honour configured certificate stores, disambiguates HTTP authority paths and checks resolved IPs against the network deny list. It also validates lockfile tarball registry paths, fixes permission descriptors and removes argument, completion and sourcemap handling errors in deployment and sandbox commands.
Why it matters
These fixes reduce ambiguity in dependency installation and network policy enforcement, areas where small runtime errors can become supply-chain or isolation failures.
Related coverage
- Node.js 26.9 expands Web Workers, crypto and runtime diagnostics
- CERT warns MLflow model loaders can bypass pickle controls
- Claude Code 2.1.274 hardens MCP startup, session recovery and telemetry