@directus/api 17.0.0 → 17.1.0

package/dist/services/roles.js

@@ -1,4 +1,5 @@
-import { ForbiddenError, UnprocessableContentError } from '@directus/errors';
+import { ForbiddenError, InvalidPayloadError, UnprocessableContentError } from '@directus/errors';
+import { getMatch } from 'ip-matching';
 import { ItemsService } from './items.js';
 import { PermissionsService } from './permissions.js';
 import { PresetsService } from './presets.js';
@@ -74,7 +75,7 @@ export class RolesService extends ItemsService {
                     .count('*', { as: 'count' })
                     .from('directus_users')
                     .leftJoin('directus_roles', 'directus_users.role', 'directus_roles.id')
-                    .whereNotIn('directus_users.id', usersAdded)
+                    .whereNotIn('directus_users.id', usersAdded.map((user) => user.id))
                     .andWhere({ 'directus_roles.admin_access': true, status: 'active' })
                     .first();
                 const otherAdminUsersCount = Number(otherAdminUsers?.count ?? 0);
@@ -121,7 +122,46 @@ export class RolesService extends ItemsService {
         }
         return;
     }
+    isIpAccessValid(value) {
+        if (value === undefined)
+            return false;
+        if (value === null)
+            return true;
+        if (Array.isArray(value) && value.length === 0)
+            return true;
+        for (const ip of value) {
+            if (typeof ip !== 'string' || ip.includes('*'))
+                return false;
+            try {
+                const match = getMatch(ip);
+                if (match.type == 'IPMask')
+                    return false;
+            }
+            catch {
+                return false;
+            }
+        }
+        return true;
+    }
+    assertValidIpAccess(partialItem) {
+        if ('ip_access' in partialItem && !this.isIpAccessValid(partialItem['ip_access'])) {
+            throw new InvalidPayloadError({
+                reason: 'IP Access contains an incorrect value. Valid values are: IP addresses, IP ranges and CIDR blocks',
+            });
+        }
+    }
+    async createOne(data, opts) {
+        this.assertValidIpAccess(data);
+        return super.createOne(data, opts);
+    }
+    async createMany(data, opts) {
+        for (const partialItem of data) {
+            this.assertValidIpAccess(partialItem);
+        }
+        return super.createMany(data, opts);
+    }
     async updateOne(key, data, opts) {
+        this.assertValidIpAccess(data);
         try {
             if ('users' in data) {
                 await this.checkForOtherAdminUsers(key, data['users']);
@@ -133,6 +173,9 @@ export class RolesService extends ItemsService {
         return super.updateOne(key, data, opts);
     }
     async updateBatch(data, opts) {
+        for (const partialItem of data) {
+            this.assertValidIpAccess(partialItem);
+        }
         const primaryKeyField = this.schema.collections[this.collection].primary;
         const keys = data.map((item) => item[primaryKeyField]);
         const setsToNoAdmin = data.some((item) => item['admin_access'] === false);
@@ -147,6 +190,7 @@ export class RolesService extends ItemsService {
         return super.updateBatch(data, opts);
     }
     async updateMany(keys, data, opts) {
+        this.assertValidIpAccess(data);
         try {
             if ('admin_access' in data && data['admin_access'] === false) {
                 await this.checkForOtherAdminRoles(keys);
@@ -157,6 +201,10 @@ export class RolesService extends ItemsService {
         }
         return super.updateMany(keys, data, opts);
     }
+    async updateByQuery(query, data, opts) {
+        this.assertValidIpAccess(data);
+        return super.updateByQuery(query, data, opts);
+    }
     async deleteOne(key) {
         await this.deleteMany([key]);
         return key;

package/dist/services/specifications.js

@@ -8,6 +8,7 @@ import getDatabase from '../database/index.js';
 import { getRelationType } from '../utils/get-relation-type.js';
 import { reduceSchema } from '../utils/reduce-schema.js';
 import { GraphQLService } from './graphql/index.js';
+import { isSystemCollection } from '@directus/system-data';
 const env = useEnv();
 export class SpecificationService {
     accountability;
@@ -77,7 +78,7 @@ class OASSpecsService {
             }
         }
         for (const collection of collections) {
-            const isSystem = collection.collection.startsWith('directus_');
+            const isSystem = isSystemCollection(collection.collection);
             // If the collection is one of the system collections, pull the tag from the static spec
             if (isSystem) {
                 for (const tag of spec.tags) {
@@ -106,7 +107,7 @@ class OASSpecsService {
         if (!tags)
             return paths;
         for (const tag of tags) {
-            const isSystem = 'x-collection' in tag === false || tag['x-collection'].startsWith('directus_');
+            const isSystem = 'x-collection' in tag === false || isSystemCollection(tag['x-collection']);
             if (isSystem) {
                 for (const [path, pathItem] of Object.entries(spec.paths)) {
                     for (const [method, operation] of Object.entries(pathItem)) {
@@ -268,7 +269,7 @@ class OASSpecsService {
             const tag = tags.find((tag) => tag['x-collection'] === collection.collection);
             if (!tag)
                 continue;
-            const isSystem = collection.collection.startsWith('directus_');
+            const isSystem = isSystemCollection(collection.collection);
             const fieldsInCollection = Object.values(collection.fields);
             if (isSystem) {
                 const schemaComponent = cloneDeep(spec.components.schemas[tag.name]);

package/dist/services/utils.js

@@ -1,6 +1,6 @@
 import { flushCaches, getCache } from '../cache.js';
 import getDatabase from '../database/index.js';
-import { systemCollectionRows } from '../database/system-data/collections/index.js';
+import { systemCollectionRows } from '@directus/system-data';
 import emitter from '../emitter.js';
 import { ForbiddenError, InvalidPayloadError } from '@directus/errors';
 import { shouldClearCache } from '../utils/should-clear-cache.js';

package/dist/telemetry/utils/get-user-item-count.js

@@ -1,6 +1,7 @@
 import {} from 'knex';
 import { getSchema } from '../../utils/get-schema.js';
 import { getItemCount } from './get-item-count.js';
+import { isSystemCollection } from '@directus/system-data';
 /**
  * Sum all passed values together. Meant to be used with .reduce()
  */
@@ -10,7 +11,7 @@ export const sum = (acc, val) => (acc += val);
  */
 export const getUserItemCount = async (db) => {
     const schema = await getSchema({ database: db });
-    const userCollections = Object.keys(schema.collections).filter((collection) => collection.startsWith('directus_') === false);
+    const userCollections = Object.keys(schema.collections).filter((collection) => isSystemCollection(collection) === false);
     const counts = await getItemCount(db, userCollections);
     const collections = userCollections.length;
     const items = Object.values(counts).reduce(sum, 0);

package/dist/types/collection.d.ts

@@ -1,20 +1,9 @@
 import type { Field } from '@directus/types';
 import type { Table } from '@directus/schema';
-export type CollectionMeta = {
-    collection: string;
-    note: string | null;
-    hidden: boolean;
-    singleton: boolean;
-    icon: string | null;
-    translations: Record<string, string>;
-    versioning: boolean;
-    item_duplication_fields: string[] | null;
-    accountability: 'all' | 'accountability' | null;
-    group: string | null;
-};
+import type { BaseCollectionMeta } from '@directus/system-data';
 export type Collection = {
     collection: string;
     fields?: Field[];
-    meta: CollectionMeta | null;
+    meta: BaseCollectionMeta | null;
     schema: Table | null;
 };

package/dist/utils/get-field-system-rows.d.ts

@@ -0,0 +1,2 @@
+import type { FieldMeta } from '@directus/types';
+export declare function getSystemFieldRowsWithAuthProviders(): FieldMeta[];

package/dist/utils/get-field-system-rows.js

@@ -0,0 +1,17 @@
+import { systemFieldRows } from '@directus/system-data';
+import formatTitle from '@directus/format-title';
+import { getAuthProviders } from './get-auth-providers.js';
+// Dynamically populate auth providers field
+export function getSystemFieldRowsWithAuthProviders() {
+    return systemFieldRows.map((systemField) => {
+        if (systemField.collection === 'directus_users' && systemField.field === 'provider') {
+            if (!systemField.options)
+                systemField.options = {};
+            systemField.options['choices'] = getAuthProviders().map(({ name }) => ({
+                text: formatTitle(name),
+                value: name,
+            }));
+        }
+        return systemField;
+    });
+}

package/dist/utils/get-permissions.js

@@ -4,7 +4,7 @@ import { cloneDeep } from 'lodash-es';
 import hash from 'object-hash';
 import { getCache, getCacheValue, getSystemCache, setCacheValue, setSystemCache } from '../cache.js';
 import getDatabase from '../database/index.js';
-import { appAccessMinimalPermissions } from '../database/system-data/app-access-permissions/index.js';
+import { appAccessMinimalPermissions } from '@directus/system-data';
 import { useLogger } from '../logger.js';
 import { RolesService } from '../services/roles.js';
 import { UsersService } from '../services/users.js';

package/dist/utils/get-schema.js

@@ -5,12 +5,12 @@ import { mapValues } from 'lodash-es';
 import { getSchemaCache, setSchemaCache } from '../cache.js';
 import { ALIAS_TYPES } from '../constants.js';
 import getDatabase from '../database/index.js';
-import { systemCollectionRows } from '../database/system-data/collections/index.js';
-import { systemFieldRows } from '../database/system-data/fields/index.js';
 import { useLogger } from '../logger.js';
 import { RelationsService } from '../services/relations.js';
 import getDefaultValue from './get-default-value.js';
 import getLocalType from './get-local-type.js';
+import { systemCollectionRows } from '@directus/system-data';
+import { getSystemFieldRowsWithAuthProviders } from './get-field-system-rows.js';
 const logger = useLogger();
 export async function getSchema(options) {
     const env = useEnv();
@@ -49,6 +49,7 @@ async function getDatabaseSchema(database, schemaInspector) {
         collections: {},
         relations: [],
     };
+    const systemFieldRows = getSystemFieldRowsWithAuthProviders();
     const schemaOverview = await schemaInspector.overview();
     const collections = [
         ...(await database

package/dist/utils/merge-permissions-for-share.js

@@ -1,5 +1,5 @@
 import { assign, set, uniq } from 'lodash-es';
-import { schemaPermissions } from '../database/system-data/app-access-permissions/index.js';
+import { schemaPermissions } from '@directus/system-data';
 import { mergePermissions } from './merge-permissions.js';
 import { reduceSchema } from './reduce-schema.js';
 export function mergePermissionsForShare(currentPermissions, accountability, schema) {

package/dist/utils/should-skip-cache.js

@@ -1,7 +1,7 @@
 import { useEnv } from '@directus/env';
-import { getEndpoint } from '@directus/utils';
 import url from 'url';
 import { Url } from './url.js';
+import { getEndpoint } from '@directus/utils';
 /**
  * Whether to skip caching for the current request
  *

package/dist/websocket/controllers/hooks.js

@@ -130,7 +130,7 @@ function registerSortHooks() {
  */
 function registerAction(event, transform) {
     const messenger = useBus();
-    emitter.onAction(event, async (data) => {
+    emitter.onAction(event, (data) => {
         // push the event through the Redis pub/sub
         messenger.publish('websocket.event', transform(data));
     });

package/dist/websocket/handlers/items.js

@@ -1,6 +1,7 @@
 import emitter from '../../emitter.js';
 import { ItemsService, MetaService } from '../../services/index.js';
 import { getSchema } from '../../utils/get-schema.js';
+import { isSystemCollection } from '@directus/system-data';
 import { sanitizeQuery } from '../../utils/sanitize-query.js';
 import { WebSocketError, handleWebSocketError } from '../errors.js';
 import { WebSocketItemsMessage } from '../messages.js';
@@ -26,7 +27,7 @@ export class ItemsHandler {
         const uid = message.uid;
         const accountability = client.accountability;
         const schema = await getSchema();
-        if (!schema.collections[message.collection] || message.collection.startsWith('directus_')) {
+        if (!schema.collections[message.collection] || isSystemCollection(message.collection)) {
             throw new WebSocketError('items', 'INVALID_COLLECTION', 'The provided collection does not exists or is not accessible.', uid);
         }
         const isSingleton = !!schema.collections[message.collection]?.singleton;

package/dist/websocket/messages.d.ts

@@ -163,53 +163,53 @@ export declare const WebSocketSubscribeMessage: z.ZodDiscriminatedUnion<"type",
 }, z.ZodTypeAny, "passthrough">>]>;
 export type WebSocketSubscribeMessage = z.infer<typeof WebSocketSubscribeMessage>;
 export declare const WebSocketItemsMessage: z.ZodUnion<[z.ZodObject<{
-    type: z.ZodLiteral<"items">;
     collection: z.ZodString;
+    type: z.ZodLiteral<"items">;
     uid: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber]>>;
     action: z.ZodLiteral<"create">;
     data: z.ZodUnion<[z.ZodArray<z.ZodType<Partial<Item>, z.ZodTypeDef, Partial<Item>>, "many">, z.ZodType<Partial<Item>, z.ZodTypeDef, Partial<Item>>]>;
     query: z.ZodOptional<z.ZodType<Query, z.ZodTypeDef, Query>>;
 }, "strip", z.ZodTypeAny, {
+    collection: string;
     type: "items";
     action: "create";
     data: (Partial<Item> | Partial<Item>[]) & (Partial<Item> | Partial<Item>[] | undefined);
-    collection: string;
     uid?: string | number | undefined;
     query?: Query | undefined;
 }, {
+    collection: string;
     type: "items";
     action: "create";
     data: (Partial<Item> | Partial<Item>[]) & (Partial<Item> | Partial<Item>[] | undefined);
-    collection: string;
     uid?: string | number | undefined;
     query?: Query | undefined;
 }>, z.ZodObject<{
-    type: z.ZodLiteral<"items">;
     collection: z.ZodString;
+    type: z.ZodLiteral<"items">;
     uid: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber]>>;
     action: z.ZodLiteral<"read">;
     ids: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber]>, "many">>;
     id: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber]>>;
     query: z.ZodOptional<z.ZodType<Query, z.ZodTypeDef, Query>>;
 }, "strip", z.ZodTypeAny, {
+    collection: string;
     type: "items";
     action: "read";
-    collection: string;
     uid?: string | number | undefined;
     ids?: (string | number)[] | undefined;
     id?: string | number | undefined;
     query?: Query | undefined;
 }, {
+    collection: string;
     type: "items";
     action: "read";
-    collection: string;
     uid?: string | number | undefined;
     ids?: (string | number)[] | undefined;
     id?: string | number | undefined;
     query?: Query | undefined;
 }>, z.ZodObject<{
-    type: z.ZodLiteral<"items">;
     collection: z.ZodString;
+    type: z.ZodLiteral<"items">;
     uid: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber]>>;
     action: z.ZodLiteral<"update">;
     data: z.ZodType<Partial<Item>, z.ZodTypeDef, Partial<Item>>;
@@ -217,43 +217,43 @@ export declare const WebSocketItemsMessage: z.ZodUnion<[z.ZodObject<{
     id: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber]>>;
     query: z.ZodOptional<z.ZodType<Query, z.ZodTypeDef, Query>>;
 }, "strip", z.ZodTypeAny, {
+    collection: string;
     type: "items";
     action: "update";
     data: Partial<Item>;
-    collection: string;
     uid?: string | number | undefined;
     ids?: (string | number)[] | undefined;
     id?: string | number | undefined;
     query?: Query | undefined;
 }, {
+    collection: string;
     type: "items";
     action: "update";
     data: Partial<Item>;
-    collection: string;
     uid?: string | number | undefined;
     ids?: (string | number)[] | undefined;
     id?: string | number | undefined;
     query?: Query | undefined;
 }>, z.ZodObject<{
-    type: z.ZodLiteral<"items">;
     collection: z.ZodString;
+    type: z.ZodLiteral<"items">;
     uid: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber]>>;
     action: z.ZodLiteral<"delete">;
     ids: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber]>, "many">>;
     id: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber]>>;
     query: z.ZodOptional<z.ZodType<Query, z.ZodTypeDef, Query>>;
 }, "strip", z.ZodTypeAny, {
+    collection: string;
     type: "items";
     action: "delete";
-    collection: string;
     uid?: string | number | undefined;
     ids?: (string | number)[] | undefined;
     id?: string | number | undefined;
     query?: Query | undefined;
 }, {
+    collection: string;
     type: "items";
     action: "delete";
-    collection: string;
     uid?: string | number | undefined;
     ids?: (string | number)[] | undefined;
     id?: string | number | undefined;
@@ -266,14 +266,14 @@ export declare const WebSocketEvent: z.ZodDiscriminatedUnion<"action", [z.ZodObj
     payload: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     key: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
 }, "strip", z.ZodTypeAny, {
+    collection: string;
     key: string | number;
     action: "create";
-    collection: string;
     payload?: Record<string, any> | undefined;
 }, {
+    collection: string;
     key: string | number;
     action: "create";
-    collection: string;
     payload?: Record<string, any> | undefined;
 }>, z.ZodObject<{
     action: z.ZodLiteral<"update">;
@@ -281,14 +281,14 @@ export declare const WebSocketEvent: z.ZodDiscriminatedUnion<"action", [z.ZodObj
     payload: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     keys: z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber]>, "many">;
 }, "strip", z.ZodTypeAny, {
+    collection: string;
     action: "update";
     keys: (string | number)[];
-    collection: string;
     payload?: Record<string, any> | undefined;
 }, {
+    collection: string;
     action: "update";
     keys: (string | number)[];
-    collection: string;
     payload?: Record<string, any> | undefined;
 }>, z.ZodObject<{
     action: z.ZodLiteral<"delete">;
@@ -296,14 +296,14 @@ export declare const WebSocketEvent: z.ZodDiscriminatedUnion<"action", [z.ZodObj
     payload: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     keys: z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber]>, "many">;
 }, "strip", z.ZodTypeAny, {
+    collection: string;
     action: "delete";
     keys: (string | number)[];
-    collection: string;
     payload?: Record<string, any> | undefined;
 }, {
+    collection: string;
     action: "delete";
     keys: (string | number)[];
-    collection: string;
     payload?: Record<string, any> | undefined;
 }>]>;
 export type WebSocketEvent = z.infer<typeof WebSocketEvent>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@directus/api",
-  "version": "17.0.0",
+  "version": "17.1.0",
   "description": "Directus is a real-time API and App dashboard for managing SQL database content",
   "keywords": [
     "directus",
@@ -59,7 +59,7 @@
   ],
   "dependencies": {
     "@authenio/samlify-node-xmllint": "2.0.0",
-    "@aws-sdk/client-ses": "3.511.0",
+    "@aws-sdk/client-ses": "3.513.0",
     "@directus/format-title": "10.1.0",
     "@godaddy/terminus": "4.12.1",
     "@rollup/plugin-alias": "5.1.0",
@@ -72,8 +72,8 @@
     "bytes": "3.1.2",
     "camelcase": "8.0.0",
     "chalk": "5.3.0",
-    "chokidar": "3.5.3",
-    "commander": "11.1.0",
+    "chokidar": "3.6.0",
+    "commander": "12.0.0",
     "content-disposition": "0.5.4",
     "cookie-parser": "1.4.6",
     "cors": "2.8.5",
@@ -81,7 +81,7 @@
     "date-fns": "3.3.1",
     "deep-diff": "1.0.2",
     "destroy": "1.2.0",
-    "dotenv": "16.4.1",
+    "dotenv": "16.4.4",
     "encodeurl": "1.0.2",
     "eventemitter2": "6.4.9",
     "execa": "8.0.1",
@@ -92,14 +92,14 @@
     "glob-to-regexp": "0.4.1",
     "graphql": "16.8.1",
     "graphql-compose": "9.0.10",
-    "graphql-ws": "5.14.3",
+    "graphql-ws": "5.15.0",
     "helmet": "7.1.0",
     "icc": "3.0.0",
-    "inquirer": "9.2.14",
+    "inquirer": "9.2.15",
     "ioredis": "5.3.2",
     "ip-matching": "2.1.2",
     "isolated-vm": "4.7.2",
-    "joi": "17.12.0",
+    "joi": "17.12.1",
     "js-yaml": "4.1.0",
     "js2xmlparser": "5.0.0",
     "json2csv": "5.0.7",
@@ -107,14 +107,14 @@
     "keyv": "4.5.4",
     "knex": "3.1.0",
     "ldapjs": "2.3.3",
-    "liquidjs": "10.10.0",
+    "liquidjs": "10.10.1",
     "lodash-es": "4.17.21",
-    "marked": "11.2.0",
+    "marked": "12.0.0",
     "micromustache": "8.0.3",
     "mime-types": "2.1.35",
     "minimatch": "9.0.3",
     "ms": "2.1.3",
-    "nanoid": "5.0.5",
+    "nanoid": "5.0.6",
     "node-machine-id": "1.1.12",
     "node-schedule": "2.1.1",
     "nodemailer": "6.9.9",
@@ -126,48 +126,49 @@
     "p-limit": "5.0.0",
     "p-queue": "8.0.1",
     "papaparse": "5.4.1",
-    "pino": "8.18.0",
+    "pino": "8.19.0",
     "pino-http": "9.0.0",
     "pino-http-print": "3.1.0",
     "pino-pretty": "10.3.1",
     "qs": "6.11.2",
     "rate-limiter-flexible": "4.0.1",
-    "rollup": "4.9.6",
+    "rollup": "4.10.0",
     "samlify": "2.8.10",
-    "sanitize-html": "2.11.0",
+    "sanitize-html": "2.12.0",
     "sharp": "0.33.2",
     "snappy": "7.2.2",
     "stream-json": "1.8.0",
-    "tsx": "4.7.0",
+    "tsx": "4.7.1",
     "uuid": "9.0.1",
     "uuid-validate": "0.0.3",
     "wellknown": "0.5.0",
     "ws": "8.16.0",
     "zod": "3.22.4",
-    "zod-validation-error": "3.0.0",
-    "@directus/app": "10.15.0",
-    "@directus/env": "1.0.1",
-    "@directus/extensions": "0.3.1",
-    "@directus/errors": "0.2.2",
+    "zod-validation-error": "3.0.2",
+    "@directus/app": "10.15.2",
     "@directus/constants": "11.0.3",
-    "@directus/extensions-sdk": "10.3.2",
-    "@directus/memory": "1.0.1",
-    "@directus/pressure": "1.0.15",
+    "@directus/errors": "0.2.3",
+    "@directus/env": "1.0.2",
+    "@directus/extensions": "0.3.3",
+    "@directus/extensions-sdk": "10.3.4",
+    "@directus/memory": "1.0.3",
     "@directus/schema": "11.0.1",
     "@directus/specs": "10.2.6",
-    "@directus/storage": "10.0.9",
-    "@directus/storage-driver-azure": "10.0.16",
-    "@directus/storage-driver-cloudinary": "10.0.16",
-    "@directus/storage-driver-gcs": "10.0.16",
-    "@directus/storage-driver-local": "10.0.16",
-    "@directus/storage-driver-supabase": "1.0.8",
-    "@directus/storage-driver-s3": "10.0.16",
-    "@directus/validation": "0.0.11",
-    "@directus/utils": "11.0.4",
-    "directus": "10.9.1"
+    "@directus/pressure": "1.0.16",
+    "@directus/storage-driver-azure": "10.0.17",
+    "@directus/storage": "10.0.10",
+    "@directus/storage-driver-cloudinary": "10.0.17",
+    "@directus/storage-driver-gcs": "10.0.17",
+    "@directus/storage-driver-s3": "10.0.18",
+    "@directus/storage-driver-local": "10.0.17",
+    "@directus/storage-driver-supabase": "1.0.9",
+    "@directus/system-data": "1.0.0",
+    "@directus/utils": "11.0.5",
+    "directus": "10.9.3",
+    "@directus/validation": "0.0.12"
   },
   "devDependencies": {
-    "@ngneat/falso": "7.1.1",
+    "@ngneat/falso": "7.2.0",
     "@types/async": "3.2.24",
     "@types/busboy": "1.5.3",
     "@types/bytes": "3.1.4",
@@ -189,7 +190,7 @@
     "@types/lodash-es": "4.17.12",
     "@types/mime-types": "2.1.4",
     "@types/ms": "0.7.34",
-    "@types/node": "18.19.14",
+    "@types/node": "18.19.17",
     "@types/node-schedule": "2.1.6",
     "@types/nodemailer": "6.4.14",
     "@types/object-hash": "3.0.6",
@@ -201,15 +202,15 @@
     "@types/uuid-validate": "0.0.3",
     "@types/wellknown": "0.5.8",
     "@types/ws": "8.5.10",
-    "@vitest/coverage-v8": "1.2.2",
+    "@vitest/coverage-v8": "1.3.1",
     "copyfiles": "2.4.1",
     "form-data": "4.0.0",
     "knex-mock-client": "2.0.1",
     "typescript": "5.3.3",
-    "vitest": "1.2.2",
-    "@directus/random": "0.2.5",
+    "vitest": "1.3.0",
     "@directus/tsconfig": "1.0.1",
-    "@directus/types": "11.0.5"
+    "@directus/random": "0.2.6",
+    "@directus/types": "11.0.6"
   },
   "optionalDependencies": {
     "@keyv/redis": "2.8.4",
@@ -219,10 +220,10 @@
     "oracledb": "6.3.0",
     "pg": "8.11.3",
     "sqlite3": "5.1.7",
-    "tedious": "16.6.1"
+    "tedious": "16.7.1"
   },
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=18.17.0"
   },
   "scripts": {
     "build": "tsc --project tsconfig.prod.json && copyfiles \"src/**/*.{yaml,liquid}\" -u 1 dist",