@checkstack/slo-backend 0.4.2 → 0.4.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +58 -0
  2. package/package.json +11 -11
package/CHANGELOG.md CHANGED
@@ -1,5 +1,63 @@
1
1
  # @checkstack/slo-backend
2
2
 
3
+ ## 0.4.4
4
+
5
+ ### Patch Changes
6
+
7
+ - Updated dependencies [a06b899]
8
+ - Updated dependencies [a06b899]
9
+ - @checkstack/backend-api@0.16.0
10
+ - @checkstack/cache-api@0.3.3
11
+ - @checkstack/catalog-backend@1.1.4
12
+ - @checkstack/command-backend@0.1.28
13
+ - @checkstack/gitops-backend@0.3.4
14
+ - @checkstack/healthcheck-backend@1.1.3
15
+ - @checkstack/integration-backend@0.1.28
16
+ - @checkstack/queue-api@0.3.3
17
+ - @checkstack/catalog-common@2.2.1
18
+ - @checkstack/dependency-common@1.1.1
19
+ - @checkstack/healthcheck-common@1.1.1
20
+ - @checkstack/cache-utils@0.2.8
21
+
22
+ ## 0.4.3
23
+
24
+ ### Patch Changes
25
+
26
+ - b33fb4d: Refresh `bun.lock` to clear MEDIUM-severity Trivy advisories on transitive
27
+ runtime dependencies. No public API change — bumping every workspace
28
+ package that lists `@orpc/server` as a direct dep so consumers re-resolve
29
+ the optional `ws` peer to the patched release on their next install.
30
+
31
+ - `ws` `8.20.0` → `8.20.1` (CVE-2026-45736). Pulled into the install tree
32
+ as `@orpc/server`'s optional WebSocket peer; Bun auto-installs it into
33
+ every backend package that depends on `@orpc/server`, so a stale 8.20.0
34
+ ships in the consumer's `node_modules` until the parent package
35
+ re-resolves.
36
+ - `brace-expansion` `5.0.5` → `5.0.6` (CVE-2026-45149). Pulled in only
37
+ through dev tooling (`minimatch@10` via `@typescript-eslint` and
38
+ `storybook`'s `glob@13`), so it does not ship to consumers and no
39
+ workspace `package.json` lists it; the lockfile bump alone clears the
40
+ finding for the Docker image and the local dev tree. No version bump
41
+ is attributed to this advisory.
42
+
43
+ The fix lives entirely in `bun.lock` — no `package.json`, `overrides`, or
44
+ `resolutions` change is needed because both parent ranges (`minimatch@10
45
+ → brace-expansion@^5.0.5`, `@orpc/server / storybook / happy-dom →
46
+ ws@>=8.18.x`) already accept the patched releases, and `bun install`
47
+ keeps the resolved versions sticky after the initial `bun update`.
48
+
49
+ - Updated dependencies [1909a61]
50
+ - Updated dependencies [b33fb4d]
51
+ - @checkstack/backend-api@0.15.3
52
+ - @checkstack/catalog-backend@1.1.3
53
+ - @checkstack/command-backend@0.1.27
54
+ - @checkstack/gitops-backend@0.3.3
55
+ - @checkstack/healthcheck-backend@1.1.2
56
+ - @checkstack/integration-backend@0.1.27
57
+ - @checkstack/cache-api@0.3.2
58
+ - @checkstack/queue-api@0.3.2
59
+ - @checkstack/cache-utils@0.2.7
60
+
3
61
  ## 0.4.2
4
62
 
5
63
  ### Patch Changes
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@checkstack/slo-backend",
3
- "version": "0.4.2",
3
+ "version": "0.4.4",
4
4
  "license": "Elastic-2.0",
5
5
  "type": "module",
6
6
  "main": "src/index.ts",
@@ -14,23 +14,23 @@
14
14
  "lint:code": "eslint . --max-warnings 0"
15
15
  },
16
16
  "dependencies": {
17
- "@checkstack/backend-api": "0.15.2",
18
- "@checkstack/cache-api": "0.3.1",
19
- "@checkstack/cache-utils": "0.2.6",
17
+ "@checkstack/backend-api": "0.15.3",
18
+ "@checkstack/cache-api": "0.3.2",
19
+ "@checkstack/cache-utils": "0.2.7",
20
20
  "@checkstack/slo-common": "0.4.0",
21
21
  "@checkstack/healthcheck-common": "1.1.0",
22
- "@checkstack/healthcheck-backend": "1.1.0",
22
+ "@checkstack/healthcheck-backend": "1.1.2",
23
23
  "@checkstack/dependency-common": "1.1.0",
24
24
  "@checkstack/catalog-common": "2.2.0",
25
- "@checkstack/catalog-backend": "1.1.1",
26
- "@checkstack/command-backend": "0.1.26",
25
+ "@checkstack/catalog-backend": "1.1.3",
26
+ "@checkstack/command-backend": "0.1.27",
27
27
  "@checkstack/signal-common": "0.2.3",
28
- "@checkstack/integration-backend": "0.1.26",
28
+ "@checkstack/integration-backend": "0.1.27",
29
29
  "@checkstack/integration-common": "0.4.0",
30
- "@checkstack/gitops-backend": "0.3.1",
30
+ "@checkstack/gitops-backend": "0.3.3",
31
31
  "@checkstack/gitops-common": "0.4.0",
32
32
  "@checkstack/common": "0.10.0",
33
- "@checkstack/queue-api": "0.3.1",
33
+ "@checkstack/queue-api": "0.3.2",
34
34
  "drizzle-orm": "^0.45.0",
35
35
  "zod": "^4.2.1",
36
36
  "@orpc/server": "^1.13.2"
@@ -38,7 +38,7 @@
38
38
  "devDependencies": {
39
39
  "@checkstack/drizzle-helper": "0.0.5",
40
40
  "@checkstack/scripts": "0.3.2",
41
- "@checkstack/test-utils-backend": "0.1.26",
41
+ "@checkstack/test-utils-backend": "0.1.27",
42
42
  "@checkstack/tsconfig": "0.0.7",
43
43
  "@types/bun": "^1.0.0",
44
44
  "drizzle-kit": "^0.31.10",