npm / jsii-rosetta
jsii-rosetta
What changed in jsii-rosetta 5 to 6, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-29.
3 breaking2 security3 new APIs and options3 tooling10 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initjsii-rosetta 64 changes
Security 1
A transitive CVE was removed.
Tooling 1
Adds support for TypeScript 6.0.
Fixes and other changes 2
Fixed non-compiling class renderings in the C# and Go visitors.
Corrected Java and Go names for libraries that manage their own tsconfig.json.
jsii-rosetta 517 changes
Breaking changes 3
The minimum required Node.js version was updated.
Upgraded to Node.js 20 for xmlbuilder2 compatibility, so developers running jsii-rosetta need Node.js 20.
jsii-rosetta is built against TypeScript 5.0 and follows its major.minor release line, allowing developers to use newer TypeScript language features.
Security 1
Fixes package releases so they include npm provenance attestations.
New APIs and options 3
Set TIMING=1 to collect snippet extraction times.
A new batched extraction option improves performance by 25x.
Adds support for the class-covariant-overrides feature.
Tooling 2
Debug output for type fingerprints is added.
Use a tilde range for the jsii-rosetta devDependency to control when upgrades introduce future TypeScript language versions.
Fixes and other changes 8
Fixes release failures for tags on maintenance branches.
Suppresses xmldom fatalError stderr noise when processing unclosed HTML-like tags.
Corrects Python snake_case conversion for consecutive uppercase letters.
No longer fails when multiple concrete dependencies have the same version.
Snippet merging is fixed so it no longer prevents effective caching.
TIMING output is now printed as the very last thing.
Python synthetic imports are shown when usage is visible.
Logging for the translation process and worker diagnostics is improved, making those operations easier to diagnose.