@bymax-one/nest-logger 1.0.0 → 1.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +29 -1
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -11,6 +11,33 @@ heading here.
|
|
|
11
11
|
|
|
12
12
|
## [Unreleased]
|
|
13
13
|
|
|
14
|
+
## [1.0.1] - 2026-07-29
|
|
15
|
+
|
|
16
|
+
Supply-chain and tooling hardening only. `src/` is unchanged since 1.0.0, so the
|
|
17
|
+
published `dist/` is identical — no runtime behaviour changes for consumers.
|
|
18
|
+
|
|
19
|
+
### Security
|
|
20
|
+
|
|
21
|
+
- Force patched `brace-expansion` on every major line still present in the dev
|
|
22
|
+
tree (`1.1.17`, `2.1.3`, `5.0.8`, via `pnpm.overrides`) to clear GHSA-mh99-v99m-4gvg
|
|
23
|
+
(unbounded expansion length → out-of-memory crash). The 1.x and 2.x lines are
|
|
24
|
+
kept on their maintenance releases because `minimatch` 3 and 9 consume
|
|
25
|
+
`brace-expansion` as a default export, which the 5.x line no longer provides.
|
|
26
|
+
Dev-only: the published package has zero runtime dependencies.
|
|
27
|
+
- Force `qs` to `^6.15.3` (via `pnpm.overrides`) to clear GHSA-q8mj-m7cp-5q26
|
|
28
|
+
(`qs.stringify` DoS). `typed-rest-client`, pulled in by Stryker, pins `qs` at
|
|
29
|
+
the affected `6.15.1` exactly, so no dependency refresh could resolve it
|
|
30
|
+
- Pin every third-party and GitHub-owned action to a full commit SHA, with the
|
|
31
|
+
release tag kept as a trailing comment so Dependabot can still bump them. The
|
|
32
|
+
org's own `bymaxone/.github` reusable workflows and composite action stay on
|
|
33
|
+
the `@v1` moving tag by design, so shared-pipeline fixes keep propagating
|
|
34
|
+
|
|
35
|
+
### Changed
|
|
36
|
+
|
|
37
|
+
- Refresh dev dependencies (NestJS 11.1.28, typescript-eslint 8.65, prettier 3.9.6,
|
|
38
|
+
lint-staged 17.2, tsx 4.23.1, ts-jest 29.4.12, tinybench 6.1.2, globals 17.8, and
|
|
39
|
+
their transitive closure)
|
|
40
|
+
|
|
14
41
|
## [1.0.0] - 2026-06-18
|
|
15
42
|
|
|
16
43
|
### Security
|
|
@@ -69,6 +96,7 @@ heading here.
|
|
|
69
96
|
- Professional CI suite: `ci.yml`, `bench.yml`, `codeql.yml`, `scorecard.yml`,
|
|
70
97
|
`release.yml`, Dependabot, and issue templates
|
|
71
98
|
|
|
72
|
-
[Unreleased]: https://github.com/bymaxone/nest-logger/compare/v1.0.
|
|
99
|
+
[Unreleased]: https://github.com/bymaxone/nest-logger/compare/v1.0.1...HEAD
|
|
100
|
+
[1.0.1]: https://github.com/bymaxone/nest-logger/compare/v1.0.0...v1.0.1
|
|
73
101
|
[1.0.0]: https://github.com/bymaxone/nest-logger/compare/v0.1.0...v1.0.0
|
|
74
102
|
[0.1.0]: https://github.com/bymaxone/nest-logger/releases/tag/v0.1.0
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@bymax-one/nest-logger",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.1",
|
|
4
4
|
"description": "Structured JSON logging for NestJS based on Pino 10, with optional OpenTelemetry correlation.",
|
|
5
5
|
"author": "Bymax One <support@bymax.one>",
|
|
6
6
|
"license": "MIT",
|
|
@@ -73,7 +73,7 @@
|
|
|
73
73
|
"@stryker-mutator/typescript-checker": "^9",
|
|
74
74
|
"@types/express": "^5.0.6",
|
|
75
75
|
"@types/jest": "^30.0.0",
|
|
76
|
-
"@types/node": "^
|
|
76
|
+
"@types/node": "^26",
|
|
77
77
|
"@types/supertest": "^7.2.0",
|
|
78
78
|
"@typescript-eslint/eslint-plugin": "^8.59.3",
|
|
79
79
|
"@typescript-eslint/parser": "^8.59.3",
|