v10.4.9 v0.51.0

high risk

facebook/lexicalSep 16, 2026 → Sep 17, 20261 day between releases

What's New

Adds declarative JSON serialization schemas and ESM-only publishing

Breaking Changes

  • npm packages are now ESM only (no CommonJS require support)
  • exportJSON may serialize instances as-is, requiring manual getLatest() calls
  • Removed deprecated Prism re-exports and @lexical/code-prism dependency

New Features

  • Declarative JSON serialization schemas via $config
  • Compact JSON export option that omits default values
  • New @lexical/fast-check package for property-based testing
  • Subpath exports for @lexical/extension packages

Improvements

  • Faster and safer node serialization
  • Generated serialization code via @lexical/compiler
  • Flow type improvements for extension dependencies

Upgrade Notes

Migrate to ESM-only imports or use Node.js 20.19+ for CommonJS require support. Update `exportJSON` calls to include `getLatest()` to prevent stale references. Replace deprecated `LexicalComposer` with `LexicalExtensionComposer`.

The Two Releases

v10.4.9

Nuclei Templates v10.4.9 - Release Notes

Sep 16, 2026· 1 month ago

Security-focused release adding 123 new templates and 85 CVEs, addressing critical vulnerabilities in enterprise applications and IoT devices. Includes fixes for template filenames, payload variables, and reclassification of template tags.

Full release notes
v0.51.0

v0.51.0

Sep 17, 2026· 1 month ago

This release introduces declarative JSON serialization schemas for nodes via `$config`, enabling faster and safer serialization. It also introduces a compact export option and a new `@lexical/fast-check` package for property-based testing. Additionally, it marks a move towards ESM-only publishing and deprecates `LexicalComposer` in favor of `LexicalExtensionComposer`.

Full release notes