@checkstack/healthcheck-backend 1.1.1 → 1.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +60 -0
  2. package/package.json +11 -11
package/CHANGELOG.md CHANGED
@@ -1,5 +1,65 @@
1
1
  # @checkstack/healthcheck-backend
2
2
 
3
+ ## 1.1.3
4
+
5
+ ### Patch Changes
6
+
7
+ - Updated dependencies [a06b899]
8
+ - Updated dependencies [a06b899]
9
+ - @checkstack/backend-api@0.16.0
10
+ - @checkstack/notification-common@1.1.1
11
+ - @checkstack/cache-api@0.3.3
12
+ - @checkstack/catalog-backend@1.1.4
13
+ - @checkstack/command-backend@0.1.28
14
+ - @checkstack/gitops-backend@0.3.4
15
+ - @checkstack/integration-backend@0.1.28
16
+ - @checkstack/queue-api@0.3.3
17
+ - @checkstack/satellite-backend@0.3.4
18
+ - @checkstack/catalog-common@2.2.1
19
+ - @checkstack/healthcheck-common@1.1.1
20
+ - @checkstack/incident-common@1.2.1
21
+ - @checkstack/maintenance-common@1.2.1
22
+ - @checkstack/cache-utils@0.2.8
23
+
24
+ ## 1.1.2
25
+
26
+ ### Patch Changes
27
+
28
+ - b33fb4d: Refresh `bun.lock` to clear MEDIUM-severity Trivy advisories on transitive
29
+ runtime dependencies. No public API change — bumping every workspace
30
+ package that lists `@orpc/server` as a direct dep so consumers re-resolve
31
+ the optional `ws` peer to the patched release on their next install.
32
+
33
+ - `ws` `8.20.0` → `8.20.1` (CVE-2026-45736). Pulled into the install tree
34
+ as `@orpc/server`'s optional WebSocket peer; Bun auto-installs it into
35
+ every backend package that depends on `@orpc/server`, so a stale 8.20.0
36
+ ships in the consumer's `node_modules` until the parent package
37
+ re-resolves.
38
+ - `brace-expansion` `5.0.5` → `5.0.6` (CVE-2026-45149). Pulled in only
39
+ through dev tooling (`minimatch@10` via `@typescript-eslint` and
40
+ `storybook`'s `glob@13`), so it does not ship to consumers and no
41
+ workspace `package.json` lists it; the lockfile bump alone clears the
42
+ finding for the Docker image and the local dev tree. No version bump
43
+ is attributed to this advisory.
44
+
45
+ The fix lives entirely in `bun.lock` — no `package.json`, `overrides`, or
46
+ `resolutions` change is needed because both parent ranges (`minimatch@10
47
+ → brace-expansion@^5.0.5`, `@orpc/server / storybook / happy-dom →
48
+ ws@>=8.18.x`) already accept the patched releases, and `bun install`
49
+ keeps the resolved versions sticky after the initial `bun update`.
50
+
51
+ - Updated dependencies [1909a61]
52
+ - Updated dependencies [b33fb4d]
53
+ - @checkstack/backend-api@0.15.3
54
+ - @checkstack/catalog-backend@1.1.3
55
+ - @checkstack/command-backend@0.1.27
56
+ - @checkstack/gitops-backend@0.3.3
57
+ - @checkstack/integration-backend@0.1.27
58
+ - @checkstack/satellite-backend@0.3.3
59
+ - @checkstack/cache-api@0.3.2
60
+ - @checkstack/queue-api@0.3.2
61
+ - @checkstack/cache-utils@0.2.7
62
+
3
63
  ## 1.1.1
4
64
 
5
65
  ### Patch Changes
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@checkstack/healthcheck-backend",
3
- "version": "1.1.1",
3
+ "version": "1.1.3",
4
4
  "license": "Elastic-2.0",
5
5
  "type": "module",
6
6
  "main": "src/index.ts",
@@ -14,22 +14,22 @@
14
14
  "lint:code": "eslint . --max-warnings 0"
15
15
  },
16
16
  "dependencies": {
17
- "@checkstack/backend-api": "0.15.2",
18
- "@checkstack/cache-api": "0.3.1",
19
- "@checkstack/cache-utils": "0.2.6",
20
- "@checkstack/catalog-backend": "1.1.1",
17
+ "@checkstack/backend-api": "0.15.3",
18
+ "@checkstack/cache-api": "0.3.2",
19
+ "@checkstack/cache-utils": "0.2.7",
20
+ "@checkstack/catalog-backend": "1.1.3",
21
21
  "@checkstack/catalog-common": "2.2.0",
22
- "@checkstack/command-backend": "0.1.26",
22
+ "@checkstack/command-backend": "0.1.27",
23
23
  "@checkstack/common": "0.10.0",
24
- "@checkstack/gitops-backend": "0.3.1",
24
+ "@checkstack/gitops-backend": "0.3.3",
25
25
  "@checkstack/gitops-common": "0.4.0",
26
26
  "@checkstack/healthcheck-common": "1.1.0",
27
27
  "@checkstack/incident-common": "1.2.0",
28
- "@checkstack/integration-backend": "0.1.26",
28
+ "@checkstack/integration-backend": "0.1.27",
29
29
  "@checkstack/maintenance-common": "1.2.0",
30
30
  "@checkstack/notification-common": "1.1.0",
31
- "@checkstack/queue-api": "0.3.1",
32
- "@checkstack/satellite-backend": "0.3.1",
31
+ "@checkstack/queue-api": "0.3.2",
32
+ "@checkstack/satellite-backend": "0.3.3",
33
33
  "@checkstack/signal-common": "0.2.3",
34
34
  "@hono/zod-validator": "^0.7.6",
35
35
  "drizzle-orm": "^0.45.0",
@@ -41,7 +41,7 @@
41
41
  "devDependencies": {
42
42
  "@checkstack/drizzle-helper": "0.0.5",
43
43
  "@checkstack/scripts": "0.3.2",
44
- "@checkstack/test-utils-backend": "0.1.26",
44
+ "@checkstack/test-utils-backend": "0.1.27",
45
45
  "@checkstack/tsconfig": "0.0.7",
46
46
  "@types/bun": "^1.0.0",
47
47
  "@types/tdigest": "^0.1.5",