@adobe/helix-html-pipeline 6.29.10 → 6.29.12

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [6.29.12](https://github.com/adobe/helix-html-pipeline/compare/v6.29.11...v6.29.12) (2026-08-12)
+
+
+### Bug Fixes
+
+* return raw body for non-object json root in raw mode for code bus ([#1123](https://github.com/adobe/helix-html-pipeline/issues/1123)) ([7fffba9](https://github.com/adobe/helix-html-pipeline/commit/7fffba9d4384d895915d7d5a0bd344e4ae638880))
+
+## [6.29.11](https://github.com/adobe/helix-html-pipeline/compare/v6.29.10...v6.29.11) (2026-08-11)
+
+
+### Bug Fixes
+
+* reject non-object json root (incl. null) in json-filter ([#1122](https://github.com/adobe/helix-html-pipeline/issues/1122)) ([241e960](https://github.com/adobe/helix-html-pipeline/commit/241e960544f15f06e258847a97666e64259d51fc)), closes [#1121](https://github.com/adobe/helix-html-pipeline/issues/1121)
+
 ## [6.29.10](https://github.com/adobe/helix-html-pipeline/compare/v6.29.9...v6.29.10) (2026-08-11)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobe/helix-html-pipeline",
-  "version": "6.29.10",
+  "version": "6.29.12",
   "description": "Helix HTML Pipeline",
   "main": "src/index.js",
   "types": "src/index.d.ts",

package/src/utils/json-filter.js

@@ -64,6 +64,14 @@ export default function jsonFilter(state, res, query) {
     return;
   }
 
+  if (json === null || typeof json !== 'object' || Array.isArray(json)) {
+    if (raw && sourceBus === 'code') {
+      res.body = data;
+      return;
+    }
+    throw new PipelineStatusError(sourceBus === 'code' ? 400 : 502, 'json sheet is not an object.');
+  }
+
   // when raw request, only handle multisheets.
   if (raw && !(NAMES_KEY in json)) {
     res.body = data;