npm / builder-util
builder-util
What changed in builder-util 24 to 26, from its official release notes, upgrade guides and advisories. Sources checked 2026-11-13.
4 breaking2 security3 new APIs and options2 behavior and defaults1 tooling5 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initbuilder-util 2616 changes
Breaking changes 4
HTTP mirrors are rejected by default unless they are localhost; set this environment variable to opt in to other HTTP mirrors.
Wine 11 is available by setting toolsets.wine to "1.0.1"; macOS downloads Wine automatically and uses the legacy 4.0.1 bundle by default.
On Linux, system wine is used when the legacy configuration is present and USE_SYSTEM_WINE=true.
Removes the unused notice log level.
Security 2
Holistic field detection for sha256 hash redaction is fixed.
Improves log redactor filtering and adds support for filtering out potentially sensitive environment variables.
New APIs and options 3
Adds a timeout to spawnAndWriteWithOutput, so callers can limit how long it runs.
Adds the snapcraft configuration property, supporting core24 snapcraft while maintaining backward compatibility.
Adds support for per-target squashfs algorithm overrides.
Behavior and default changes 2
Migrates electronDownload to the official electron/get package, providing much better support for mirrors.
Package detection supports link: parsing, mirroring its existing file: parsing.
Tooling 1
Adds toolset configuration for makensis.
Fixes and other changes 4
Its internal got downloader now respects HTTP(S) proxies.
Fixes the compression mapping for AppImage targets.
The msiWrapped target throws a more helpful error.
Properly collects ESM node_modules when running on Node.js 16 or newer.
builder-util 241 changes
Fixes and other changes 1
Reports the correct status when doSign exits early from macPackager or winPackager; its return type is now Promise<boolean> for accurate IntelliSense.