@crossdelta/platform-sdk 0.8.36 → 0.9.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -113,14 +113,14 @@ pf event add <event.type> --service services/my-service
113
113
 
114
114
  ## Dependencies Block
115
115
 
116
- Only include packages not in the scaffold:
116
+ Only include packages **not already in the workspace root**:
117
117
 
118
118
  ```dependencies
119
119
  zod
120
120
  @pusher/push-notifications-server
121
121
  ```
122
122
 
123
- **Note:** `{{scope}}/contracts` is already in the template's package.json.
123
+ **Note:** `{{scope}}/contracts`, `@crossdelta/cloudevents`, and `@crossdelta/telemetry` are already available via workspace root – do NOT add them here.
124
124
 
125
125
  ---
126
126
 
@@ -256,3 +256,4 @@ describe('Process Order', () => {
256
256
  - Create contracts in `packages/contracts/src/events/`
257
257
  - Export schema separately from contract
258
258
  - Keep code minimal and clean
259
+ - Run `pf audit` after adding new dependencies to check for vulnerabilities
@@ -133,6 +133,10 @@ jobs:
133
133
  working-directory: ${{ matrix.package.dir }}
134
134
  run: bun run --if-present test
135
135
 
136
+ - name: Security audit
137
+ run: bun audit || true
138
+ continue-on-error: true
139
+
136
140
  - name: Publish
137
141
  working-directory: ${{ matrix.package.dir }}
138
142
  env:
@@ -16,6 +16,9 @@
16
16
  "commands": {
17
17
  "pulumi": {
18
18
  "cwd": "infra"
19
+ },
20
+ "audit": {
21
+ "command": "bun audit"
19
22
  }
20
23
  },
21
24
  "paths": {
@@ -36,10 +39,14 @@
36
39
  }
37
40
  }
38
41
  },
42
+ "dependencies": {
43
+ "@crossdelta/cloudevents": "latest",
44
+ "@crossdelta/telemetry": "latest",
45
+ "bun": "^1.2.7"
46
+ },
39
47
  "devDependencies": {
40
48
  "@biomejs/biome": "2.3.7",
41
49
  "@crossdelta/platform-sdk": "latest",
42
- "bun": "^1.2.7",
43
50
  "dotenv-cli": "^8.0.0",
44
51
  "turbo": "^2.5.6"
45
52
  },
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@crossdelta/platform-sdk",
3
- "version": "0.8.36",
3
+ "version": "0.9.1",
4
4
  "description": "Platform toolkit for event-driven microservices — keeping code and infrastructure in lockstep.",
5
5
  "keywords": [
6
6
  "cli",
@@ -140,7 +140,6 @@
140
140
  "@eslint/js": "^9.22.0",
141
141
  "@nestjs/schematics": "^11.0.9",
142
142
  "@types/fs-extra": "^11.0.4",
143
- "biome": "^0.3.3",
144
143
  "bun-types": "^1.3.4",
145
144
  "comment-json": "^4.4.1",
146
145
  "esbuild": "^0.25.3",