@contrast/agent-bundle 5.45.1 → 5.47.0

package/node_modules/@contrast/config/lib/options.js

@@ -692,6 +692,20 @@ Example - \`label1, label2, label3\``,
     fn: parseNum,
     desc: 'Set the maximum number of untrusted data flow propagations to observe per request.',
   },
+  {
+    name: 'assess.rules.disabled_rules',
+    arg: '<list,of,rules>',
+    default: '',
+    fn: split,
+    desc: 'Define a list of Protect rules to disable in the agent. The rules must be formatted as a comma-delimited list.',
+  },
+  {
+    name: 'assess.report_middleware_routes',
+    arg: '[false]',
+    default: false,
+    fn: castBoolean,
+    desc: 'Set to `true` to report both discovered and observed routes for middleware to the Contrast backend.',
+  },
   {
     name: 'assess.safe_positives.enable',
     arg: '[false]',

package/node_modules/@contrast/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/config",
-  "version": "1.52.1",
+  "version": "1.54.0",
   "description": "An API for discovering Contrast agent configuration data",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -20,8 +20,8 @@
     "test": "bash ../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.37.0",
-    "@contrast/core": "1.57.1",
+    "@contrast/common": "1.38.0",
+    "@contrast/core": "1.59.0",
     "deepmerge": "^4.3.1",
     "yaml": "^2.2.2"
   }

package/node_modules/@contrast/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/core",
-  "version": "1.57.1",
+  "version": "1.59.0",
   "description": "Preconfigured Contrast agent core services and models",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -19,12 +19,12 @@
     "test": "bash ../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.37.0",
-    "@contrast/config": "1.52.1",
+    "@contrast/common": "1.38.0",
+    "@contrast/config": "1.54.0",
     "@contrast/find-package-json": "^1.1.0",
     "@contrast/fn-inspect": "^5.0.2",
-    "@contrast/logger": "1.30.1",
-    "@contrast/patcher": "1.29.1",
+    "@contrast/logger": "1.32.0",
+    "@contrast/patcher": "1.31.0",
     "@contrast/perf": "1.4.0",
     "@tsxper/crc32": "^2.1.3",
     "axios": "^1.12.2",

package/node_modules/@contrast/deadzones/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/deadzones",
-  "version": "1.29.1",
+  "version": "1.31.0",
   "description": "Configures Contrast agent services and instrumentation within an application",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -20,9 +20,9 @@
     "test": "bash ../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.37.0",
-    "@contrast/dep-hooks": "1.26.1",
-    "@contrast/patcher": "1.29.1",
-    "@contrast/scopes": "1.27.1"
+    "@contrast/common": "1.38.0",
+    "@contrast/dep-hooks": "1.28.0",
+    "@contrast/patcher": "1.31.0",
+    "@contrast/scopes": "1.29.0"
   }
 }

package/node_modules/@contrast/dep-hooks/lib/package-finder.d.ts

@@ -36,9 +36,9 @@ export type Metadata = {
 /**
  * Resolves the metadata of a package given it's resolved name.
  * @param {string=} file Absolute path to the module file
- * @param {string=} file Absolute path to the node_modules directory
+ * @param {string=} nodeModulesDir Absolute path to the node_modules directory
  * @param {import('pino').Logger=} logger
  * @returns {Metadata?}
  */
-export function resolveMetadata(file?: string | undefined, nodeModulesDir: any, logger?: import("pino").Logger | undefined): Metadata | null;
+export function resolveMetadata(file?: string | undefined, nodeModulesDir?: string | undefined, logger?: import("pino").Logger | undefined): Metadata | null;
 //# sourceMappingURL=package-finder.d.ts.map

package/node_modules/@contrast/dep-hooks/lib/package-finder.js

@@ -16,6 +16,7 @@
 const path = require('node:path');
 const Module = require('node:module');
 const { findPackageJsonSync } = require('@contrast/find-package-json');
+const semver = require('semver');
 const { getShortname } = require('./helpers');
 const { primordials: { StringPrototypeReplace, StringPrototypeSubstring, JSONParse, FsReadFileSync } } = require('@contrast/common');
 /**
@@ -30,7 +31,7 @@ const { primordials: { StringPrototypeReplace, StringPrototypeSubstring, JSONPar
 /**
  * Resolves the metadata of a package given it's resolved name.
  * @param {string=} file Absolute path to the module file
- * @param {string=} file Absolute path to the node_modules directory
+ * @param {string=} nodeModulesDir Absolute path to the node_modules directory
  * @param {import('pino').Logger=} logger
  * @returns {Metadata?}
  */
@@ -61,7 +62,7 @@ function resolveMetadata(file, nodeModulesDir, logger) {
         const packageDir = path.dirname(pdj);
         return {
             name,
-            version,
+            version: semver.clean(version, { loose: true }),
             packageDir,
             file,
             shortname: getShortname({ name, packageDir, file, main }),

package/node_modules/@contrast/dep-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/dep-hooks",
-  "version": "1.26.1",
+  "version": "1.28.0",
   "description": "Post hooks for Module.prototype.require",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -21,10 +21,10 @@
     "test": "bash ../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.37.0",
-    "@contrast/core": "1.57.1",
+    "@contrast/common": "1.38.0",
+    "@contrast/core": "1.59.0",
     "@contrast/find-package-json": "^1.1.0",
-    "@contrast/logger": "1.30.1",
+    "@contrast/logger": "1.32.0",
     "semver": "^7.6.3"
   }
 }

package/node_modules/@contrast/esm-hooks/README.md

@@ -36,7 +36,7 @@ node -r @contrast/agent app-main.js [app arguments]
 node --loader @contrast/agent app-main.mjs [app arguments]
 ```
 
-#### ESM Support for Node version >= 18.19.0 and < 20.0.0 || >= 20.6.0
+#### ESM Support for Node version >= 18.19.0 and < 20.0.0 || >= 20.9.0
 
 ```bash
 # use --import to start the application
@@ -44,7 +44,7 @@ node --import @contrast/agent app-main.mjs [app arguments]
 ```
 
 > [!NOTE]
-> Contrast does not support Node versions >= 20.0.0 and < 20.6.0.
+> Contrast does not support Node versions >= 20.0.0 and < 20.9.0.
 
 
 

package/node_modules/@contrast/esm-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/esm-hooks",
-  "version": "2.32.0",
+  "version": "2.34.0",
   "type": "module",
   "description": "Support for loading and instrumenting ECMAScript modules",
   "license": "SEE LICENSE IN LICENSE",
@@ -22,11 +22,11 @@
     "test": "bash ../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.37.0",
-    "@contrast/config": "1.52.1",
-    "@contrast/core": "1.57.1",
+    "@contrast/common": "1.38.0",
+    "@contrast/config": "1.54.0",
+    "@contrast/core": "1.59.0",
     "@contrast/find-package-json": "^1.1.0",
-    "@contrast/logger": "1.30.1",
-    "@contrast/rewriter": "1.34.0"
+    "@contrast/logger": "1.32.0",
+    "@contrast/rewriter": "1.36.0"
   }
 }

package/node_modules/@contrast/instrumentation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/instrumentation",
-  "version": "1.36.1",
+  "version": "1.38.0",
   "description": "Shared hooks and patches between Protect and Assess components",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -20,9 +20,9 @@
     "test": "bash ../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.37.0",
-    "@contrast/dep-hooks": "1.26.1",
-    "@contrast/logger": "1.30.1",
-    "@contrast/patcher": "1.29.1"
+    "@contrast/common": "1.38.0",
+    "@contrast/dep-hooks": "1.28.0",
+    "@contrast/logger": "1.32.0",
+    "@contrast/patcher": "1.31.0"
   }
 }