# What changed in builder-util

> 17 changes in builder-util 24 to 26 from its official release notes, upgrade guides and advisories: 4 breaking, 2 security, 3 new APIs and options. Each one cited. Sources checked 2026-11-13. HTML: https://unstale.sh/npm/builder-util/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## builder-util 26

### Breaking changes

- HTTP mirrors are rejected by default unless they are localhost; set this environment variable to opt in to other HTTP mirrors. (26.15.3) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#26153)
- Wine 11 is available by setting toolsets.wine to "1.0.1"; macOS downloads Wine automatically and uses the legacy 4.0.1 bundle by default. (26.15.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#26150)
- On Linux, system wine is used when the legacy configuration is present and USE_SYSTEM_WINE=true. (26.15.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#26150)
- Removes the unused notice log level. (26.8.1) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#2681)

### Security

- Holistic field detection for sha256 hash redaction is fixed. (26.15.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#26150)
- Improves log redactor filtering and adds support for filtering out potentially sensitive environment variables. (26.11.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#26110)

### New APIs and options

- Adds a timeout to spawnAndWriteWithOutput, so callers can limit how long it runs. (26.14.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#26140)
- Adds the snapcraft configuration property, supporting core24 snapcraft while maintaining backward compatibility. (26.12.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#26120)
- Adds support for per-target squashfs algorithm overrides. (26.11.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#26110)

### Behavior and default changes

- Migrates electronDownload to the official electron/get package, providing much better support for mirrors. (26.10.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#26100)
- Package detection supports link: parsing, mirroring its existing file: parsing. (26.8.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#2680)

### Tooling

- Adds toolset configuration for makensis. (26.12.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#26120)

### Fixes and other changes

- Its internal got downloader now respects HTTP(S) proxies. (26.11.1) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#26111)
- Fixes the compression mapping for AppImage targets. (26.11.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#26110)
- The msiWrapped target throws a more helpful error. (26.8.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#2680)
- Properly collects ESM node_modules when running on Node.js 16 or newer. (26.3.1) — [release notes](https://github.com/electron-userland/electron-builder/blob/04262af98f0fbd4ded2b85f0df6ed1a5abdf044f/packages/builder-util/CHANGELOG.md#2631)

## builder-util 24

### Fixes and other changes

- Reports the correct status when doSign exits early from macPackager or winPackager; its return type is now Promise<boolean> for accurate IntelliSense. (24.0.0) — [release notes](https://github.com/electron-userland/electron-builder/blob/HEAD/packages/builder-util/CHANGELOG.md)