@directus/api 28.0.3 → 29.0.0

package/dist/controllers/extensions.js

@@ -189,10 +189,10 @@ router.get('/sources/:chunk', asyncHandler(async (req, res) => {
     const extensionManager = getExtensionManager();
     let source;
     if (chunk === 'index.js') {
-        source = extensionManager.getAppExtensionsBundle();
+        source = await extensionManager.getAppExtensionChunk();
     }
     else {
-        source = extensionManager.getAppExtensionChunk(chunk);
+        source = await extensionManager.getAppExtensionChunk(chunk);
     }
     if (source === null) {
         throw new RouteNotFoundError({ path: req.path });
@@ -200,6 +200,6 @@ router.get('/sources/:chunk', asyncHandler(async (req, res) => {
     res.setHeader('Content-Type', 'application/javascript; charset=UTF-8');
     res.setHeader('Cache-Control', getCacheControlHeader(req, getMilliseconds(env['EXTENSIONS_CACHE_TTL']), false, false));
     res.setHeader('Vary', 'Origin, Cache-Control');
-    res.end(source);
+    source.pipe(res);
 }));
 export default router;

package/dist/database/get-ast-from-query/lib/parse-fields.js

@@ -27,10 +27,12 @@ export async function parseFields(options, context) {
         : null;
     const relationalStructure = Object.create(null);
     for (const fieldKey of fields) {
+        let alias = false;
         let name = fieldKey;
         if (options.query.alias) {
             // check for field alias (is one of the key)
             if (name in options.query.alias) {
+                alias = true;
                 name = options.query.alias[fieldKey];
             }
         }
@@ -100,7 +102,7 @@ export async function parseFields(options, context) {
                 }
                 continue;
             }
-            children.push({ type: 'field', name, fieldKey, whenCase: [] });
+            children.push({ type: 'field', name, fieldKey, whenCase: [], alias });
         }
     }
     for (const [fieldKey, nestedFields] of Object.entries(relationalStructure)) {

package/dist/database/migrations/20250718A-add-direction.d.ts

@@ -0,0 +1,3 @@
+import type { Knex } from 'knex';
+export declare function up(knex: Knex): Promise<void>;
+export declare function down(knex: Knex): Promise<void>;

package/dist/database/migrations/20250718A-add-direction.js

@@ -0,0 +1,10 @@
+export async function up(knex) {
+    await knex.schema.alterTable('directus_users', (table) => {
+        table.string('text_direction').defaultTo('auto').notNullable();
+    });
+}
+export async function down(knex) {
+    await knex.schema.alterTable('directus_users', (table) => {
+        table.dropColumn('text_direction');
+    });
+}

package/dist/database/run-ast/utils/apply-parent-filters.js

@@ -20,6 +20,7 @@ export function applyParentFilters(schema, nestedCollectionNodes, parentItem) {
                     name: nestedNode.relation.field,
                     fieldKey: nestedNode.relation.field,
                     whenCase: [],
+                    alias: false,
                 });
             }
             if (nestedNode.relation.meta?.sort_field) {
@@ -28,6 +29,7 @@ export function applyParentFilters(schema, nestedCollectionNodes, parentItem) {
                     name: nestedNode.relation.meta.sort_field,
                     fieldKey: nestedNode.relation.meta.sort_field,
                     whenCase: [],
+                    alias: false,
                 });
             }
             const foreignField = nestedNode.relation.field;

package/dist/database/run-ast/utils/get-field-alias.js

@@ -1,4 +1,6 @@
 import { applyFunctionToColumnName } from './apply-function-to-column-name.js';
 export function getNodeAlias(node) {
+    if ('alias' in node && node.alias === true)
+        return node.fieldKey;
     return applyFunctionToColumnName(node.fieldKey);
 }

package/dist/database/run-ast/utils/remove-temporary-fields.js

@@ -38,9 +38,15 @@ export function removeTemporaryFields(schema, rawItem, ast, primaryKeyField, par
     }
     else {
         const fields = [];
+        const aliasFields = [];
         const nestedCollectionNodes = [];
         for (const child of ast.children) {
-            fields.push(child.fieldKey);
+            if ('alias' in child && child.alias === true) {
+                aliasFields.push(child.fieldKey);
+            }
+            else {
+                fields.push(child.fieldKey);
+            }
             if (child.type !== 'field' && child.type !== 'functionField') {
                 nestedCollectionNodes.push(child);
             }
@@ -65,7 +71,7 @@ export function removeTemporaryFields(schema, rawItem, ast, primaryKeyField, par
                     : schema.collections[nestedNode.relation.collection].primary, item);
             }
             const fieldsWithFunctionsApplied = fields.map((field) => applyFunctionToColumnName(field));
-            item = fields.length > 0 ? pick(rawItem, fieldsWithFunctionsApplied) : rawItem[primaryKeyField];
+            item = fields.length > 0 ? pick(rawItem, fieldsWithFunctionsApplied, aliasFields) : rawItem[primaryKeyField];
             items.push(item);
         }
     }

package/dist/extensions/manager.d.ts

@@ -1,6 +1,7 @@
 import type { Extension } from '@directus/extensions';
 import { Router } from 'express';
 import type { ExtensionManagerOptions } from './types.js';
+import type { ReadStream } from 'node:fs';
 export declare class ExtensionManager {
     private options;
     /**
@@ -14,11 +15,6 @@ export declare class ExtensionManager {
      * Settings for the extensions that are loaded within the current process
      */
     private extensionsSettings;
-    /**
-     * App extensions rolled up into a single bundle. Any chunks from the bundle will be available
-     * under appExtensionChunks
-     */
-    private appExtensionsBundle;
     /**
      * Individual filename chunks from the rollup bundle. Used to improve the performance by allowing
      * extensions to split up their bundle into multiple smaller chunks
@@ -97,13 +93,10 @@ export declare class ExtensionManager {
         forceSync: boolean;
     }): Promise<unknown>;
     /**
-     * Return the previously generated app extensions bundle
-     */
-    getAppExtensionsBundle(): string | null;
-    /**
-     * Return the previously generated app extension bundle chunk by name
+     * Return the previously generated app extension bundle chunk by name.
+     * Providing no name will return the entry bundle.
      */
-    getAppExtensionChunk(name: string): string | null;
+    getAppExtensionChunk(name?: string): Promise<ReadStream | null>;
     /**
      * Return the scoped router for custom endpoints
      */

package/dist/extensions/manager.js

@@ -12,9 +12,10 @@ import ivm from 'isolated-vm';
 import { clone, debounce, isPlainObject } from 'lodash-es';
 import { readFile, readdir } from 'node:fs/promises';
 import os from 'node:os';
-import { dirname } from 'node:path';
+import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import path from 'path';
+import { rolldown } from 'rolldown';
 import { rollup } from 'rollup';
 import { useBus } from '../bus/index.js';
 import getDatabase from '../database/index.js';
@@ -37,6 +38,7 @@ import { generateApiExtensionsSandboxEntrypoint } from './lib/sandbox/generate-a
 import { instantiateSandboxSdk } from './lib/sandbox/sdk/instantiate.js';
 import { syncExtensions } from './lib/sync-extensions.js';
 import { wrapEmbeds } from './lib/wrap-embeds.js';
+import DriverLocal from '@directus/storage-driver-local';
 // Workaround for https://github.com/rollup/plugins/issues/1329
 const virtual = virtualDefault;
 const alias = aliasDefault;
@@ -63,16 +65,11 @@ export class ExtensionManager {
      * Settings for the extensions that are loaded within the current process
      */
     extensionsSettings = [];
-    /**
-     * App extensions rolled up into a single bundle. Any chunks from the bundle will be available
-     * under appExtensionChunks
-     */
-    appExtensionsBundle = null;
     /**
      * Individual filename chunks from the rollup bundle. Used to improve the performance by allowing
      * extensions to split up their bundle into multiple smaller chunks
      */
-    appExtensionChunks = new Map();
+    appExtensionChunks = [];
     /**
      * Callbacks to be able to unregister extensions
      */
@@ -220,7 +217,7 @@ export class ExtensionManager {
         }
         await Promise.all([this.registerInternalOperations(), this.registerApiExtensions()]);
         if (env['SERVE_APP']) {
-            this.appExtensionsBundle = await this.generateExtensionBundle();
+            await this.generateExtensionBundle();
         }
         this.isLoaded = true;
         emitter.emitAction('extensions.load', {
@@ -234,7 +231,6 @@ export class ExtensionManager {
     async unload() {
         await this.unregisterApiExtensions();
         this.localEmitter.offAll();
-        this.appExtensionsBundle = null;
         this.isLoaded = false;
         emitter.emitAction('extensions.unload', {
             extensions: this.extensions,
@@ -289,16 +285,24 @@ export class ExtensionManager {
         return promise;
     }
     /**
-     * Return the previously generated app extensions bundle
-     */
-    getAppExtensionsBundle() {
-        return this.appExtensionsBundle;
-    }
-    /**
-     * Return the previously generated app extension bundle chunk by name
+     * Return the previously generated app extension bundle chunk by name.
+     * Providing no name will return the entry bundle.
      */
-    getAppExtensionChunk(name) {
-        return this.appExtensionChunks.get(name) ?? null;
+    async getAppExtensionChunk(name) {
+        let file;
+        if (!name) {
+            file = this.appExtensionChunks[0];
+        }
+        else if (this.appExtensionChunks.includes(name)) {
+            file = name;
+        }
+        if (!file)
+            return null;
+        const tempDir = join(env['TEMP_PATH'], 'app-extensions');
+        const tmpStorage = new DriverLocal({ root: tempDir });
+        if ((await tmpStorage.exists(file)) === false)
+            return null;
+        return await tmpStorage.read(file);
     }
     /**
      * Return the scoped router for custom endpoints
@@ -369,6 +373,7 @@ export class ExtensionManager {
      */
     async generateExtensionBundle() {
         const logger = useLogger();
+        const env = useEnv();
         const sharedDepsMapping = await getSharedDepsMapping(APP_SHARED_DEPS);
         const internalImports = Object.entries(sharedDepsMapping).map(([name, path]) => ({
             find: name,
@@ -376,26 +381,30 @@ export class ExtensionManager {
         }));
         const entrypoint = generateExtensionsEntrypoint({ module: this.moduleExtensions, registry: this.registryExtensions, local: this.localExtensions }, this.extensionsSettings);
         try {
-            const bundle = await rollup({
+            /** Opt In for now. Should be @deprecated later to always use rolldown! */
+            const rollDirection = env['EXTENSIONS_ROLLDOWN'] ?? false ? rolldown : rollup;
+            const bundle = await rollDirection({
                 input: 'entry',
                 external: Object.values(sharedDepsMapping),
                 makeAbsoluteExternalsRelative: false,
                 plugins: [virtual({ entry: entrypoint }), alias({ entries: internalImports }), nodeResolve({ browser: true })],
             });
-            const { output } = await bundle.generate({ format: 'es', compact: true });
-            for (const out of output) {
-                if (out.type === 'chunk') {
-                    this.appExtensionChunks.set(out.fileName, out.code);
-                }
-            }
+            const tempDir = join(env['TEMP_PATH'], 'app-extensions');
+            const { output } = await bundle.write({
+                format: 'es',
+                dir: tempDir,
+            });
+            this.appExtensionChunks = output.reduce((acc, chunk) => {
+                if (chunk.type === 'chunk')
+                    acc.push(chunk.fileName);
+                return acc;
+            }, []);
             await bundle.close();
-            return output[0].code;
         }
         catch (error) {
             logger.warn(`Couldn't bundle App extensions`);
             logger.warn(error);
         }
-        return null;
     }
     async registerSandboxedApiExtension(extension) {
         const logger = useLogger();
@@ -412,6 +421,7 @@ export class ExtensionManager {
             },
         });
         const context = await isolate.createContext();
+        context.global.setSync('process', { env: { NODE_ENV: process.env['NODE_ENV'] ?? 'production' } }, { copy: true });
         const module = await isolate.compileModule(extensionCode, { filename: `file://${entrypointPath}` });
         const sdkModule = await instantiateSandboxSdk(isolate, extension.sandbox?.requestedScopes ?? {});
         await module.instantiate(context, (specifier) => {

package/dist/permissions/modules/validate-access/lib/validate-item-access.js

@@ -13,7 +13,8 @@ export async function validateItemAccess(options, context) {
         name: options.collection,
         query: { limit: options.primaryKeys.length },
         // Act as if every field was a "normal" field
-        children: options.fields?.map((field) => ({ type: 'field', name: field, fieldKey: field, whenCase: [] })) ?? [],
+        children: options.fields?.map((field) => ({ type: 'field', name: field, fieldKey: field, whenCase: [], alias: false })) ??
+            [],
         cases: [],
     };
     await processAst({ ast, ...options }, context);

package/dist/services/fields.js

@@ -148,7 +148,7 @@ export class FieldsService {
             return data;
         });
         const knownCollections = Object.keys(this.schema.collections);
-        const result = [...columnsWithSystem, ...aliasFieldsAsField].filter((field) => knownCollections.includes(field.collection));
+        let result = [...columnsWithSystem, ...aliasFieldsAsField].filter((field) => knownCollections.includes(field.collection));
         // Filter the result so we only return the fields you have read access to
         if (this.accountability && this.accountability.admin !== true) {
             const policies = await fetchPolicies(this.accountability, { knex: this.knex, schema: this.schema });
@@ -176,7 +176,7 @@ export class FieldsService {
             if (collection && collection in allowedFieldsInCollection === false) {
                 throw new ForbiddenError();
             }
-            return result.filter((field) => {
+            result = result.filter((field) => {
                 if (field.collection in allowedFieldsInCollection === false)
                     return false;
                 const allowedFields = allowedFieldsInCollection[field.collection];
@@ -187,12 +187,6 @@ export class FieldsService {
         }
         // Update specific database type overrides
         for (const field of result) {
-            if (field.meta?.special?.includes('cast-timestamp')) {
-                field.type = 'timestamp';
-            }
-            else if (field.meta?.special?.includes('cast-datetime')) {
-                field.type = 'dateTime';
-            }
             field.type = this.helpers.schema.processFieldType(field);
         }
         return result;

package/dist/services/import-export.js

@@ -25,6 +25,7 @@ import { FilesService } from './files.js';
 import { NotificationsService } from './notifications.js';
 import { UsersService } from './users.js';
 import { parseFields } from '../database/get-ast-from-query/lib/parse-fields.js';
+import { set } from 'lodash-es';
 const env = useEnv();
 const logger = useLogger();
 export class ImportService {
@@ -166,13 +167,14 @@ export class ImportService {
                     fileReadStream
                         .pipe(Papa.parse(Papa.NODE_STREAM_INPUT, PapaOptions))
                         .on('data', (obj) => {
+                        const result = {};
                         // Filter out all undefined fields
                         for (const field in obj) {
-                            if (obj[field] === undefined) {
-                                delete obj[field];
+                            if (obj[field] !== undefined) {
+                                set(result, field, obj[field]);
                             }
                         }
-                        saveQueue.push(obj);
+                        saveQueue.push(result);
                     })
                         .on('error', (error) => {
                         cleanup();

package/dist/types/ast.d.ts

@@ -66,6 +66,8 @@ export type FieldNode = {
     type: 'field';
     name: string;
     fieldKey: string;
+    /** If the field was created through alias query parameters */
+    alias: boolean;
     /**
      * Which permission cases have to be met on the current item for this field to return a value
      */

package/dist/utils/get-snapshot.js

@@ -18,9 +18,9 @@ export async function getSnapshot(options) {
         fieldsService.readAll(),
         relationsService.readAll(),
     ]);
-    const collectionsFiltered = collectionsRaw.filter((item) => excludeSystem(item));
-    const fieldsFiltered = fieldsRaw.filter((item) => excludeSystem(item));
-    const relationsFiltered = relationsRaw.filter((item) => excludeSystem(item));
+    const collectionsFiltered = collectionsRaw.filter((item) => excludeSystem(item) && excludeUntracked(item));
+    const fieldsFiltered = fieldsRaw.filter((item) => excludeSystem(item) && excludeUntracked(item));
+    const relationsFiltered = relationsRaw.filter((item) => excludeSystem(item) && excludeUntracked(item));
     const collectionsSorted = sortBy(mapValues(collectionsFiltered, sortDeep), ['collection']);
     const fieldsSorted = sortBy(mapValues(fieldsFiltered, sortDeep), ['collection', 'meta.id']).map(omitID);
     const relationsSorted = sortBy(mapValues(relationsFiltered, sortDeep), ['collection', 'meta.id']).map(omitID);
@@ -38,6 +38,11 @@ function excludeSystem(item) {
         return false;
     return true;
 }
+function excludeUntracked(item) {
+    if (item?.meta === null)
+        return false;
+    return true;
+}
 function omitID(item) {
     return omit(item, 'meta.id');
 }

package/dist/websocket/authenticate.d.ts

@@ -1,4 +1,5 @@
+import type { Accountability } from '@directus/types';
 import type { BasicAuthMessage } from './messages.js';
 import type { AuthenticationState } from './types.js';
-export declare function authenticateConnection(message: BasicAuthMessage & Record<string, any>): Promise<AuthenticationState>;
+export declare function authenticateConnection(message: BasicAuthMessage & Record<string, any>, accountabilityOverrides?: Partial<Accountability>): Promise<AuthenticationState>;
 export declare function authenticationSuccess(uid?: string | number, refresh_token?: string): string;

package/dist/websocket/authenticate.js

@@ -1,10 +1,14 @@
+import { isEqual } from 'lodash-es';
 import { DEFAULT_AUTH_PROVIDER } from '../constants.js';
+import getDatabase from '../database/index.js';
+import emitter from '../emitter.js';
+import { createDefaultAccountability } from '../permissions/utils/create-default-accountability.js';
 import { AuthenticationService } from '../services/index.js';
 import { getAccountabilityForToken } from '../utils/get-accountability-for-token.js';
 import { getSchema } from '../utils/get-schema.js';
 import { WebSocketError } from './errors.js';
 import { getExpiresAtForToken } from './utils/get-expires-at-for-token.js';
-export async function authenticateConnection(message) {
+export async function authenticateConnection(message, accountabilityOverrides) {
     let access_token, refresh_token;
     try {
         if ('email' in message && 'password' in message) {
@@ -24,9 +28,26 @@ export async function authenticateConnection(message) {
         }
         if (!access_token)
             throw new Error();
-        const accountability = await getAccountabilityForToken(access_token);
-        const expires_at = getExpiresAtForToken(access_token);
-        return { accountability, expires_at, refresh_token };
+        const defaultAccountability = createDefaultAccountability(accountabilityOverrides);
+        const authenticationState = {
+            accountability: defaultAccountability,
+            expires_at: getExpiresAtForToken(access_token),
+            refresh_token,
+        };
+        const customAccountability = await emitter.emitFilter('websocket.authenticate', defaultAccountability, {
+            message,
+        }, {
+            database: getDatabase(),
+            schema: null,
+            accountability: null,
+        });
+        if (customAccountability && isEqual(customAccountability, defaultAccountability) === false) {
+            authenticationState.accountability = customAccountability;
+        }
+        else {
+            authenticationState.accountability = await getAccountabilityForToken(access_token, defaultAccountability);
+        }
+        return authenticationState;
     }
     catch {
         throw new WebSocketError('auth', 'AUTH_FAILED', 'Authentication failed.', message['uid']);

package/dist/websocket/controllers/base.js

@@ -10,12 +10,10 @@ import emitter from '../../emitter.js';
 import { useLogger } from '../../logger/index.js';
 import { createDefaultAccountability } from '../../permissions/utils/create-default-accountability.js';
 import { createRateLimiter } from '../../rate-limiter.js';
-import { getAccountabilityForToken } from '../../utils/get-accountability-for-token.js';
 import { getIPFromReq } from '../../utils/get-ip-from-req.js';
 import { authenticateConnection, authenticationSuccess } from '../authenticate.js';
 import { WebSocketError, handleWebSocketError } from '../errors.js';
 import { AuthMode, WebSocketAuthMessage, WebSocketMessage } from '../messages.js';
-import { getExpiresAtForToken } from '../utils/get-expires-at-for-token.js';
 import { getMessageType } from '../utils/message.js';
 import { waitForAnyMessage, waitForMessageType } from '../utils/wait-for-message.js';
 const TOKEN_CHECK_INTERVAL = 15 * 60 * 1000; // 15 minutes
@@ -139,8 +137,9 @@ export default class SocketController {
         let expires_at = null;
         if (token) {
             try {
-                accountability = await getAccountabilityForToken(token);
-                expires_at = getExpiresAtForToken(token);
+                const state = await authenticateConnection({ access_token: token }, accountabilityOverrides);
+                accountability = state.accountability;
+                expires_at = state.expires_at;
             }
             catch {
                 accountability = null;
@@ -162,7 +161,6 @@ export default class SocketController {
             socket.destroy();
             return;
         }
-        Object.assign(accountability, accountabilityOverrides);
         this.server.handleUpgrade(request, socket, head, async (ws) => {
             this.catchInvalidMessages(ws);
             const state = { accountability, expires_at };
@@ -176,10 +174,7 @@ export default class SocketController {
                 const payload = await waitForAnyMessage(ws, this.authentication.timeout);
                 if (getMessageType(payload) !== 'auth')
                     throw new Error();
-                const state = await authenticateConnection(WebSocketAuthMessage.parse(payload));
-                if (state.accountability) {
-                    Object.assign(state.accountability, accountabilityOverrides);
-                }
+                const state = await authenticateConnection(WebSocketAuthMessage.parse(payload), accountabilityOverrides);
                 this.checkUserRequirements(state.accountability);
                 ws.send(authenticationSuccess(payload['uid'], state.refresh_token));
                 this.server.emit('connection', ws, state);
@@ -268,19 +263,20 @@ export default class SocketController {
     }
     async handleAuthRequest(client, message) {
         try {
-            const { accountability, expires_at, refresh_token } = await authenticateConnection(message);
-            this.checkUserRequirements(accountability);
+            let accountabilityOverrides = {};
             /**
              * Re-use the existing ip, userAgent and origin accountability properties.
              * They are only sent in the original connection request
              */
-            if (accountability && client.accountability) {
-                Object.assign(accountability, {
+            if (client.accountability) {
+                accountabilityOverrides = {
                     ip: client.accountability.ip,
                     userAgent: client.accountability.userAgent,
                     origin: client.accountability.origin,
-                });
+                };
             }
+            const { accountability, expires_at, refresh_token } = await authenticateConnection(message, accountabilityOverrides);
+            this.checkUserRequirements(accountability);
             client.accountability = accountability;
             client.expires_at = expires_at;
             this.setTokenExpireTimer(client);

package/dist/websocket/controllers/graphql.js

@@ -1,16 +1,16 @@
 import { CloseCode, MessageType, makeServer } from 'graphql-ws';
 import { useLogger } from '../../logger/index.js';
+import { createDefaultAccountability } from '../../permissions/utils/create-default-accountability.js';
 import { bindPubSub } from '../../services/graphql/subscription.js';
 import { GraphQLService } from '../../services/index.js';
-import { getSchema } from '../../utils/get-schema.js';
 import { getAddress } from '../../utils/get-address.js';
+import { getSchema } from '../../utils/get-schema.js';
 import { authenticateConnection } from '../authenticate.js';
 import { handleWebSocketError } from '../errors.js';
 import { ConnectionParams, WebSocketMessage } from '../messages.js';
 import { getMessageType } from '../utils/message.js';
 import SocketController from './base.js';
 import { registerWebSocketEvents } from './hooks.js';
-import { createDefaultAccountability } from '../../permissions/utils/create-default-accountability.js';
 const logger = useLogger();
 export class GraphQLSubscriptionController extends SocketController {
     gql;
@@ -51,6 +51,8 @@ export class GraphQLSubscriptionController extends SocketController {
                                 if (typeof params.access_token === 'string') {
                                     const { accountability, expires_at } = await authenticateConnection({
                                         access_token: params.access_token,
+                                    }, {
+                                        ip: client.accountability?.ip ?? null,
                                     });
                                     client.accountability = accountability;
                                     client.expires_at = expires_at;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@directus/api",
-  "version": "28.0.3",
+  "version": "29.0.0",
   "description": "Directus is a real-time API and App dashboard for managing SQL database content",
   "keywords": [
     "directus",
@@ -140,6 +140,7 @@
     "qs": "6.14.0",
     "rate-limiter-flexible": "5.0.5",
     "rollup": "4.34.9",
+    "rolldown": "1.0.0-beta.28",
     "samlify": "2.10.0",
     "sanitize-html": "2.14.0",
     "sharp": "0.33.5",
@@ -152,30 +153,30 @@
     "ws": "8.18.1",
     "zod": "3.24.2",
     "zod-validation-error": "3.4.0",
-    "@directus/app": "13.11.3",
-    "@directus/env": "5.1.0",
-    "@directus/constants": "13.0.1",
+    "@directus/app": "13.12.0",
+    "@directus/env": "5.1.1",
+    "@directus/extensions-registry": "3.0.8",
+    "@directus/extensions": "3.0.8",
     "@directus/errors": "2.0.2",
-    "@directus/extensions": "3.0.7",
-    "@directus/extensions-registry": "3.0.7",
+    "@directus/extensions-sdk": "15.0.0",
     "@directus/format-title": "12.0.1",
-    "@directus/extensions-sdk": "14.0.0",
-    "@directus/memory": "3.0.6",
-    "@directus/pressure": "3.0.6",
+    "@directus/memory": "3.0.7",
     "@directus/schema": "13.0.1",
+    "@directus/pressure": "3.0.7",
     "@directus/schema-builder": "0.0.3",
-    "@directus/specs": "11.1.0",
     "@directus/storage": "12.0.0",
-    "@directus/storage-driver-azure": "12.0.6",
-    "@directus/storage-driver-cloudinary": "12.0.6",
-    "@directus/storage-driver-gcs": "12.0.6",
+    "@directus/specs": "11.1.0",
+    "@directus/storage-driver-azure": "12.0.7",
+    "@directus/storage-driver-gcs": "12.0.7",
+    "@directus/storage-driver-cloudinary": "12.0.7",
+    "@directus/storage-driver-s3": "12.0.7",
     "@directus/storage-driver-local": "12.0.0",
-    "@directus/storage-driver-supabase": "3.0.6",
-    "@directus/system-data": "3.1.1",
-    "@directus/utils": "13.0.7",
-    "@directus/storage-driver-s3": "12.0.6",
-    "directus": "11.9.3",
-    "@directus/validation": "2.0.6"
+    "@directus/storage-driver-supabase": "3.0.7",
+    "@directus/constants": "13.0.1",
+    "@directus/system-data": "3.2.0",
+    "@directus/utils": "13.0.8",
+    "@directus/validation": "2.0.7",
+    "directus": "11.10.0"
   },
   "devDependencies": {
     "@directus/tsconfig": "3.0.0",
@@ -201,7 +202,7 @@
     "@types/lodash-es": "4.17.12",
     "@types/mime-types": "2.1.4",
     "@types/ms": "2.1.0",
-    "@types/node": "22.13.8",
+    "@types/node": "22.13.14",
     "@types/node-schedule": "2.1.7",
     "@types/nodemailer": "6.4.17",
     "@types/object-hash": "3.0.6",
@@ -212,16 +213,16 @@
     "@types/stream-json": "1.7.8",
     "@types/wellknown": "0.5.8",
     "@types/ws": "8.5.14",
-    "@vitest/coverage-v8": "2.1.9",
+    "@vitest/coverage-v8": "3.2.4",
     "copyfiles": "2.4.1",
     "form-data": "4.0.2",
     "get-port": "7.1.0",
     "knex-mock-client": "3.0.2",
-    "typescript": "5.8.2",
-    "vitest": "2.1.9",
-    "@directus/random": "2.0.1",
+    "typescript": "5.8.3",
+    "vitest": "3.2.4",
     "@directus/schema-builder": "0.0.3",
-    "@directus/types": "13.2.0"
+    "@directus/types": "13.2.0",
+    "@directus/random": "2.0.1"
   },
   "optionalDependencies": {
     "@keyv/redis": "3.0.1",
@@ -240,6 +241,7 @@
     "cli": "NODE_ENV=development SERVE_APP=false tsx src/cli/run.ts",
     "dev": "NODE_ENV=development SERVE_APP=true tsx watch --ignore extensions --clear-screen=false src/start.ts",
     "test": "vitest run",
-    "test:watch": "vitest"
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage"
   }
 }