v3.7.1

Rich-Harris/degitv3.7.1Sep 4, 2026by YogliB

AI Summary

Prevents accidental deletion of the root directory by `degit.json` actions and fixes crashes related to Node version compatibility and cache corruption.

Key Highlights

  • Rejects `remove` and `keep` directives at destination root
  • Fixes `--help` crash on Node 20.10
  • Fixes interactive cache prompt crash on corrupt `access.json`

New Features

  • Security validation for `remove` and `keep` directives
  • Node 20.10 compatibility fix
  • Cache corruption error handling

Full Release Notes

- Reject `remove` and `keep` directives that resolve to the destination root, preventing a `degit.json` action from deleting the whole clone.
- Fix `--help` crash on Node 20.10 caused by `import.meta.dirname` being undefined before Node 20.11.
- Fix interactive cache prompt crash on corrupt `access.json`.