@bymax-one/nest-cache 1.2.1 → 1.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +50 -0
  2. package/package.json +5 -5
package/CHANGELOG.md CHANGED
@@ -4,6 +4,55 @@ All notable changes to this project are documented in this file. The format is
4
4
  based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this
5
5
  project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
6
6
 
7
+ ## [1.2.2] - 2026-09-04
8
+
9
+ ### Changed
10
+
11
+ - **Nothing you execute changes.** `dist/` built from this tag is byte-for-byte
12
+ identical to 1.2.1 — verified by unpacking the published 1.2.1 tarball and
13
+ diffing it against a fresh build, not asserted. `src/` has not been touched
14
+ since 1.2.1.
15
+
16
+ Two files in an installed copy do differ, and neither is code: the `version`
17
+ field in `package.json`, and this changelog. Upgrading from 1.2.1 changes no
18
+ behaviour; staying on 1.2.1 costs you nothing.
19
+
20
+ The version exists because the repository moved underneath the artifact, and a
21
+ released tag is where that movement is recorded.
22
+
23
+ ### Security
24
+
25
+ - **Three advisory fixes, all in development dependencies.** `browserslist` to
26
+ 4.28.8 (GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx), `fast-uri` to 3.1.6 (four
27
+ advisories at CVSS 7.5) and `qs` to 6.16.0 (GHSA-4mjr-xmp4-gh2g,
28
+ GHSA-x5fp-wj9c-mxmx). All three are reached through `@stryker-mutator/*`, which
29
+ is a devDependency, and this package publishes with `"dependencies": {}`.
30
+
31
+ **No consumer was exposed and none is protected by this release.** The fixes
32
+ protect the build environment. They are listed because "Security" in a changelog
33
+ is read as "upgrade for this", and here that reading would be wrong.
34
+
35
+ Two of the three were already pinned in `overrides` at floors that already
36
+ admitted the fixed versions, and protected nothing: a caret there is a floor
37
+ applied when resolution happens, not a standing instruction to re-resolve. The
38
+ check that works is the resolved version in the lockfile, never the presence of
39
+ an entry.
40
+
41
+ ### Internal
42
+
43
+ - ESLint 9 to 10, with `eslint-plugin-import` replaced by the maintained fork
44
+ `eslint-plugin-import-x`. The 9 line is end-of-life: 9.39.5 is the last release
45
+ and is itself deprecated, and the `maintenance` dist-tag points at it.
46
+ - `import-x/parsers` is now configured, which fixes a rule that had never worked.
47
+ `no-cycle` was declared `error` and reported as active by `--print-config` while
48
+ a real two-file cycle passed with exit 0, because the dependency parser skips in
49
+ silence every extension it cannot map. No cycles exist in `src/`; the gate was
50
+ simply open.
51
+ - `@parcel/watcher`'s build script is recorded as denied, so `pnpm install` stops
52
+ failing on it under pnpm 11.
53
+ - The shared Bymax code-review rules are adopted in `AGENTS.md`, kept in step by
54
+ the `agents-sync` workflow.
55
+
7
56
  ## [1.2.1] - 2026-08-21
8
57
 
9
58
  ### Changed
@@ -301,6 +350,7 @@ type or export moved.
301
350
  - Published with npm OIDC provenance — no long-lived tokens
302
351
  - Zero direct runtime dependencies (`dependencies: {}`) — `ioredis` and NestJS via peer deps
303
352
 
353
+ [1.2.2]: https://github.com/bymaxone/nest-cache/compare/v1.2.1...v1.2.2
304
354
  [1.2.1]: https://github.com/bymaxone/nest-cache/compare/v1.2.0...v1.2.1
305
355
  [1.2.0]: https://github.com/bymaxone/nest-cache/compare/v1.1.0...v1.2.0
306
356
  [1.1.0]: https://github.com/bymaxone/nest-cache/compare/v1.0.6...v1.1.0
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@bymax-one/nest-cache",
3
- "version": "1.2.1",
3
+ "version": "1.2.2",
4
4
  "description": "Typed Redis cache for NestJS based on ioredis 6, with namespace strategy, Pub/Sub and Lua script management.",
5
5
  "author": "Bymax One <support@bymax.one>",
6
6
  "license": "MIT",
@@ -111,7 +111,7 @@
111
111
  "@arethetypeswrong/cli": "^0.18.5",
112
112
  "@commitlint/cli": "^21.2.1",
113
113
  "@commitlint/config-conventional": "^21.2.0",
114
- "@eslint/js": "^9.39.4",
114
+ "@eslint/js": "^10.0.1",
115
115
  "@nestjs/common": "^11.1.20",
116
116
  "@nestjs/core": "^11.1.20",
117
117
  "@nestjs/testing": "^11.1.20",
@@ -122,10 +122,10 @@
122
122
  "@types/node": "^24",
123
123
  "@typescript-eslint/eslint-plugin": "^8.59.3",
124
124
  "@typescript-eslint/parser": "^8.59.3",
125
- "eslint": "^9.39.4",
125
+ "eslint": "^10.9.1",
126
126
  "eslint-config-prettier": "^10.1.8",
127
- "eslint-import-resolver-typescript": "^4.4.4",
128
- "eslint-plugin-import": "^2.32.0",
127
+ "eslint-import-resolver-typescript": "^4.4.5",
128
+ "eslint-plugin-import-x": "^4.17.1",
129
129
  "eslint-plugin-prettier": "^5.5.5",
130
130
  "eslint-plugin-security": "^4.0.0",
131
131
  "globals": "^17.6.0",