From 43280b1a790da38d86e211c9b0fa186a7463fec8 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Wed, 25 Feb 2026 16:15:12 +0000 Subject: [PATCH 01/60] chore(release): publish - project: devtools 0.0.2-next.23 - project: webpack5 5.0.32-next.19 - project: core 9.0.17-next.0 - project: vite 1.0.6-next.23 --- packages/core/package.json | 2 +- packages/devtools/package.json | 4 ++-- packages/vite/package.json | 2 +- packages/webpack5/package.json | 2 +- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/packages/core/package.json b/packages/core/package.json index 9eee76345e..8a22a9c24b 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -1,6 +1,6 @@ { "name": "@nativescript/core", - "version": "9.0.16", + "version": "9.0.17-next.0", "description": "A JavaScript library providing an easy to use api for interacting with iOS and Android platform APIs.", "type": "module", "main": "index", diff --git a/packages/devtools/package.json b/packages/devtools/package.json index 42842ab6f5..f1f16c2638 100644 --- a/packages/devtools/package.json +++ b/packages/devtools/package.json @@ -1,6 +1,6 @@ { "name": "@nativescript/devtools", - "version": "0.0.2-next.22", + "version": "0.0.2-next.23", "private": true, "files": [ "./dist/" @@ -10,6 +10,6 @@ "prepack": "tsc || echo ok" }, "devDependencies": { - "@nativescript/core": "9.0.16-next.1" + "@nativescript/core": "9.0.17-next.0" } } diff --git a/packages/vite/package.json b/packages/vite/package.json index b0b768d398..4d2f5b643c 100644 --- a/packages/vite/package.json +++ b/packages/vite/package.json @@ -1,6 +1,6 @@ { "name": "@nativescript/vite", - "version": "1.0.6-next.22", + "version": "1.0.6-next.23", "description": "Vite for NativeScript", "main": "./index.js", "module": "./index.js", diff --git a/packages/webpack5/package.json b/packages/webpack5/package.json index c830430749..7136ca529c 100644 --- a/packages/webpack5/package.json +++ b/packages/webpack5/package.json @@ -1,6 +1,6 @@ { "name": "@nativescript/webpack", - "version": "5.0.32-next.18", + "version": "5.0.32-next.19", "private": false, "main": "dist/index.js", "files": [ From 1c4e68151e1e335d41aaed2ff526ec04c25af68c Mon Sep 17 00:00:00 2001 From: Osei Fortune Date: Thu, 26 Feb 2026 10:54:48 -0400 Subject: [PATCH 02/60] fix(android): inset props on interface (#11103) --- packages/core/ui/core/view/view-interfaces.ts | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/packages/core/ui/core/view/view-interfaces.ts b/packages/core/ui/core/view/view-interfaces.ts index 994ca34105..1148787d31 100644 --- a/packages/core/ui/core/view/view-interfaces.ts +++ b/packages/core/ui/core/view/view-interfaces.ts @@ -68,10 +68,20 @@ export interface Inset { right: number; bottom: number; left: number; + imeBottom: number; + cutoutLeft: number; + cutoutTop: number; + cutoutRight: number; + cutoutBottom: number; topConsumed: boolean; rightConsumed: boolean; bottomConsumed: boolean; leftConsumed: boolean; + imeBottomConsumed: boolean; + cutoutLeftConsumed: boolean; + cutoutTopConsumed: boolean; + cutoutRightConsumed: boolean; + cutoutBottomConsumed: boolean; } /** From e1eacbd47b2df287258b435daf310b40c94f016c Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 26 Feb 2026 14:56:19 +0000 Subject: [PATCH 03/60] chore(release): publish - project: devtools 0.0.2-next.24 - project: webpack5 5.0.32-next.20 - project: core 9.0.17-next.1 - project: vite 1.0.6-next.24 --- packages/core/package.json | 2 +- packages/devtools/package.json | 4 ++-- packages/vite/package.json | 2 +- packages/webpack5/package.json | 2 +- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/packages/core/package.json b/packages/core/package.json index 8a22a9c24b..04fa67f8f1 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -1,6 +1,6 @@ { "name": "@nativescript/core", - "version": "9.0.17-next.0", + "version": "9.0.17-next.1", "description": "A JavaScript library providing an easy to use api for interacting with iOS and Android platform APIs.", "type": "module", "main": "index", diff --git a/packages/devtools/package.json b/packages/devtools/package.json index f1f16c2638..95e21991e8 100644 --- a/packages/devtools/package.json +++ b/packages/devtools/package.json @@ -1,6 +1,6 @@ { "name": "@nativescript/devtools", - "version": "0.0.2-next.23", + "version": "0.0.2-next.24", "private": true, "files": [ "./dist/" @@ -10,6 +10,6 @@ "prepack": "tsc || echo ok" }, "devDependencies": { - "@nativescript/core": "9.0.17-next.0" + "@nativescript/core": "9.0.17-next.1" } } diff --git a/packages/vite/package.json b/packages/vite/package.json index 4d2f5b643c..b88ad307f9 100644 --- a/packages/vite/package.json +++ b/packages/vite/package.json @@ -1,6 +1,6 @@ { "name": "@nativescript/vite", - "version": "1.0.6-next.23", + "version": "1.0.6-next.24", "description": "Vite for NativeScript", "main": "./index.js", "module": "./index.js", diff --git a/packages/webpack5/package.json b/packages/webpack5/package.json index 7136ca529c..41a593fb2b 100644 --- a/packages/webpack5/package.json +++ b/packages/webpack5/package.json @@ -1,6 +1,6 @@ { "name": "@nativescript/webpack", - "version": "5.0.32-next.19", + "version": "5.0.32-next.20", "private": false, "main": "dist/index.js", "files": [ From 1150daaabceeb9d1a8fe4ee11d1352042895ba94 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 3 Mar 2026 15:52:10 -0800 Subject: [PATCH 04/60] chore(deps): bump step-security/harden-runner from 2.14.0 to 2.15.0 (#11104) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.14.0 to 2.15.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/20cf305ff2072d973412fa9b1e3a4f227bda3c76...a90bcbc6539c36a85cdfeb73f7e2f433735f215b) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> [skip ci] --- .github/workflows/npm_release_tns_core.yml | 2 +- .github/workflows/npm_release_types.yml | 2 +- .github/workflows/npm_release_webpack.yml | 2 +- .github/workflows/secure_nx_release.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/npm_release_tns_core.yml b/.github/workflows/npm_release_tns_core.yml index fd9d2a9681..b0c6ab3bbe 100644 --- a/.github/workflows/npm_release_tns_core.yml +++ b/.github/workflows/npm_release_tns_core.yml @@ -19,7 +19,7 @@ jobs: steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 + uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0 with: egress-policy: audit diff --git a/.github/workflows/npm_release_types.yml b/.github/workflows/npm_release_types.yml index 05f325d34d..d99b1ad1cf 100644 --- a/.github/workflows/npm_release_types.yml +++ b/.github/workflows/npm_release_types.yml @@ -19,7 +19,7 @@ jobs: steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 + uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0 with: egress-policy: audit diff --git a/.github/workflows/npm_release_webpack.yml b/.github/workflows/npm_release_webpack.yml index 52fe661082..3df7b98875 100644 --- a/.github/workflows/npm_release_webpack.yml +++ b/.github/workflows/npm_release_webpack.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 + uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0 with: egress-policy: audit diff --git a/.github/workflows/secure_nx_release.yml b/.github/workflows/secure_nx_release.yml index 35b7fe5e8f..643e3ff14b 100644 --- a/.github/workflows/secure_nx_release.yml +++ b/.github/workflows/secure_nx_release.yml @@ -48,7 +48,7 @@ jobs: steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 + uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0 with: egress-policy: audit From 2750fa107f61c1ea6060c0f1d10dbc4cb5f48bb7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 3 Mar 2026 15:52:35 -0800 Subject: [PATCH 05/60] chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#11105) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> [skip ci] --- .github/workflows/ossf-scorecard.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml index f61061b811..a4a2873931 100644 --- a/.github/workflows/ossf-scorecard.yml +++ b/.github/workflows/ossf-scorecard.yml @@ -64,7 +64,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: SARIF file path: results.sarif From 755131d2d4dc6ff912237bca714582eb222c86c5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 3 Mar 2026 15:52:52 -0800 Subject: [PATCH 06/60] chore(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 (#11106) Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.8.2 to 4.8.3. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261...05fe4576374b728f0c523d6a13d64c25081e0803) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-version: 4.8.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> [skip ci] --- .github/workflows/dependency-review.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 6446b8aac4..d69dfb2474 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -19,4 +19,4 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 - name: 'Dependency Review' - uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2 \ No newline at end of file + uses: actions/dependency-review-action@05fe4576374b728f0c523d6a13d64c25081e0803 # v4.8.3 \ No newline at end of file From ae6ca000b188503cbaa8dd731d84523b8a932bc2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 3 Mar 2026 15:53:06 -0800 Subject: [PATCH 07/60] chore(deps): bump actions/setup-java from 5.1.0 to 5.2.0 (#11107) Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.1.0 to 5.2.0. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/f2beeb24e141e01a676f977032f5a29d81c9e27e...be666c2fcd27ec809703dec50e508c2fdc7f6654) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> [skip ci] --- .github/workflows/apps_automated_android.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/apps_automated_android.yml b/.github/workflows/apps_automated_android.yml index abbd1fd8bf..d8483b4448 100644 --- a/.github/workflows/apps_automated_android.yml +++ b/.github/workflows/apps_automated_android.yml @@ -35,7 +35,7 @@ jobs: with: main-branch-name: 'main' - - uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0 + - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: 'temurin' java-version: '21' From 5347c7effe98d3819a6aaf7af9ec0b8167f552a4 Mon Sep 17 00:00:00 2001 From: Nathan Walker Date: Wed, 4 Mar 2026 14:53:37 -0800 Subject: [PATCH 08/60] fix(ios): secureWithoutAutofill on TextField (#11129) --- apps/toolbox/src/pages/forms.xml | 12 ++++-- packages/core/ui/text-field/index.ios.ts | 50 +++++++++++++++++++----- 2 files changed, 49 insertions(+), 13 deletions(-) diff --git a/apps/toolbox/src/pages/forms.xml b/apps/toolbox/src/pages/forms.xml index cca44dafab..99c0e00fa9 100644 --- a/apps/toolbox/src/pages/forms.xml +++ b/apps/toolbox/src/pages/forms.xml @@ -5,23 +5,27 @@ -