Bootstrap has released version 5.3.9, marking a significant update after a 14-month gap since the last patch. The new version introduces a .modal-xxl size option, sized at 1320px, along with various accessibility enhancements and security improvements in npm publishing. Notably, the release includes a new process requiring 2FA for maintainer approval and OIDC trusted publishing, enhancing security for this widely used framework. This update does not introduce breaking changes and is recommended for users maintaining compliance with standards like SOC 2 or PCI DSS

Bootstrap 5.3.9 Released: New .modal-xxl Size and Hardened npm Publishing

Bootstrap, the CSS framework powering roughly 19% of websites, shipped version 5.3.9 today, ending a 14-month gap since the last patch. The headline feature is a new .modal-xxl size sized to 1320px, alongside accessibility fixes and a tooltip/popover literal-text correction. More importantly for security teams, the release introduced staged npm publishing that requires 2FA-gated maintainer approval and OIDC trusted publishing to eliminate stored tokens. It's a non-breaking patch on the actively supported 5.x line with no known CVEs, landing while the team pivoted to the just-announced Bootstrap 6 alpha.

Bootstrap 5.3.9 Released: New .modal-xxl Size and Hardened npm Publishing @ Linux Compatible