npm / ua-parser-js
ua-parser-js
What changed in ua-parser-js 2, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-18.
1 breaking1 security26 new APIs and options11 behavior and defaults8 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initua-parser-js 247 changes
Breaking changes 1
Removes desktop from enums according to the documentation.
Security 1
Client Hints input length is limited to fix a ReDoS vulnerability.
New APIs and options 26
Adds a UAParser method for extending custom detection rules.
Adds browser detection for Aloha Browser.
Adds the atlassian-bot crawler to the extensions submodule.
Adds browser detection for Avira Secure Browser.
Adds the Cloudflare-AutoRAG crawler to the extensions submodule.
Adds FlipboardProxy as a fetcher in the extensions submodule.
Adds the Google-NotebookLM crawler to the extensions submodule.
Adds browser detection for Lighthouse.
Adds browser detection for Luakit.
Adds browser detection for Norton Private Browser.
Adds the SemrushBot-SWA crawler to the extensions submodule.
Add Dillo engine detection.
Add a helper method that maps Outlook versions to their marketing editions.
Add http.rb, Jetty, and ocaml-cohttp library detection to the extensions submodule.
Add PowerShell CLI detection to the extensions submodule.
The extensions submodule adds the Nova Act fetcher.
Added to the device-detection submodule.
Added to the bot-detection submodule.
Added to the bot-detection submodule.
Added to the device-detection submodule.
Added to the bot-detection submodule.
Added to the browser-detection submodule.
Added to the browser-detection submodule.
Added to the browser-detection submodule.
Added to the browser-detection submodule.
The extensions submodule adds support for Bun, Dart, Deno, hackney, Node.js, rest-client, and undici.
Behavior and default changes 11
Crawler detection adds atlassian-bot, Audisto Crawler, AwarioBot, AwarioRssBot, AwarioSmartBot, BrightEdge Crawler, Headline ev-crawler, HubSpot Crawler, Meta-ExternalAds, Meta-WebIndexer, proximic, and yacybot.
Device detection recognizes Blackview, Coolpad, CUBOT, and T-Mobile as vendors.
Fetcher detection adds Feedly, GoogleDocs, UptimeBot, and virustotal.
WebView user-agents are identified as the inapp browser.
Library detection adds phpcrawl.
Adds detection for Vega OS.
Add detection for HiBrowser and Opera Neon, and improve detection for Brave and TikTok.
Expand email client detection in the extensions submodule with Alpine, Android, AquaMail, Balsa, Barca, Canary, Claws Mail, eM Client, Eudora, FairEmail, Geary, Gnus, Horde::IMP, Lotus-Notes, IncrediMail, K-9 Mail, Mailbird, MailMate, Mailspring, Mutt, Newton, Nine, NylasMail, Outlook-Express, Pegasus Mail, PocoMail, Postbox…
Browser detection adds support for Atlas and Steam.
Device vendor detection adds support for Anbernic, Logitech, and Valve.
withClientHints() and withFeatureCheck() can now be chained.
Fixes and other changes 8
Browser detection is improved for Huawei Browser and UCBrowser.
Fixes the return behavior of the isElectron() helper function.
Improves OS detection for watchOS.
Improve OnePlus device detection.
Resolve a syntax error related to import renaming in the ESM build.
Improve Firefox OS detection.
Device detection for Xiaomi is improved.
OS detection for iOS is improved.