@faststore/core 3.40.1 → 3.41.0

package/.turbo/turbo-build.log

@@ -1,23 +1,23 @@
 
-> @faststore/core@3.40.0 prebuild /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.40.2 prebuild /home/runner/work/faststore/faststore/packages/core
 > na run partytown && na run generate
 
 
-> @faststore/core@3.40.0 partytown /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.40.2 partytown /home/runner/work/faststore/faststore/packages/core
 > partytown copylib ./public/~partytown
 
 Partytown lib copied to: /home/runner/work/faststore/faststore/packages/core/public/~partytown
 
-> @faststore/core@3.40.0 generate /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.40.2 generate /home/runner/work/faststore/faststore/packages/core
 > na run generate:schema && na run generate:codegen && na run format:generated
 
 
-> @faststore/core@3.40.0 generate:schema /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.40.2 generate:schema /home/runner/work/faststore/faststore/packages/core
 > tsx src/server/generator/generateGraphQLSchemaFile.ts
 
 Schema GraphQL file generated successfully
 
-> @faststore/core@3.40.0 generate:codegen /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.40.2 generate:codegen /home/runner/work/faststore/faststore/packages/core
 > graphql-codegen
 
 [STARTED] Parse Configuration
@@ -37,11 +37,11 @@ Running lifecycle hook "afterStart" scripts...
 [CLI] Loading Documents
 [CLI] Generating output
 
-> @faststore/core@3.40.0 format:generated /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.40.2 format:generated /home/runner/work/faststore/faststore/packages/core
 > prettier --write "@generated/**/*.{ts,js,tsx,jsx,json}" --loglevel error
 
 
-> @faststore/core@3.40.0 build /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.40.2 build /home/runner/work/faststore/faststore/packages/core
 > next build
 
 ⚠ No build cache found. Please configure build caching for faster rebuilds. Read more: https://nextjs.org/docs/messages/no-cache
@@ -58,10 +58,16 @@ https://nextjs.org/telemetry
  ✓ Compiled successfully
    Collecting page data ...
    Generating static pages (0/6) ...
+RegionPopover not found. Add a new component for this section or remove it from the CMS
 
   Generating static pages (1/6) 
 Warning: Dynamic Content not found for the page: home. Refer to the Dynamic Content documentation at https://developers.vtex.com/docs/guides/faststore/dynamic-content-overview for mapping the page and the corresponding data-fetching function.
+RegionPopover not found. Add a new component for this section or remove it from the CMS
 
   Generating static pages (2/6) 
+RegionPopover not found. Add a new component for this section or remove it from the CMS
+RegionPopover not found. Add a new component for this section or remove it from the CMS
 
   Generating static pages (4/6) 
+RegionPopover not found. Add a new component for this section or remove it from the CMS
+RegionPopover not found. Add a new component for this section or remove it from the CMS
 
 ✓ Generating static pages (6/6) 
    Finalizing page optimization ...
    Collecting build traces ...
@@ -91,7 +97,7 @@ Route (pages)                              Size     First Load JS
   ├ chunks/framework-807b0f81cbc129f0.js   45.4 kB
   ├ chunks/main-5569625b3fdd6741.js        33.1 kB
   ├ chunks/pages/_app-012e51403727ae6a.js  10.4 kB
-  ├ chunks/webpack-d82a33f39ac106fc.js     3.59 kB
+  ├ chunks/webpack-071462ed32bcb285.js     3.59 kB
   └ css/0a57ee6c7a57788c.css               3.49 kB
 
 λ  (Server)  server-side renders at runtime (uses getInitialProps or getServerSideProps)

package/.turbo/turbo-test.log

@@ -1,14 +1,14 @@
 
-> @faststore/core@3.40.0 test /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.40.2 test /home/runner/work/faststore/faststore/packages/core
 > jest
 
-PASS test/server/cms/global.test.ts (23.836 s)
-PASS test/utils/multipleTemplates.test.ts (24.234 s)
+PASS test/server/cms/global.test.ts (23.861 s)
+PASS test/utils/multipleTemplates.test.ts (25.289 s)
 PASS test/server/cms/index.test.ts
-PASS test/server/index.test.ts (28.634 s)
+PASS test/server/index.test.ts (30.588 s)
 
 Test Suites: 4 passed, 4 total
 Tests:       22 passed, 22 total
 Snapshots:   0 total
-Time:        29.992 s
+Time:        31.718 s
 Ran all test suites.

package/CHANGELOG.md

@@ -3,6 +3,16 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [3.41.0](https://github.com/vtex/faststore/compare/v3.40.2...v3.41.0) (2025-04-15)
+
+**Note:** Version bump only for package @faststore/core
+
+## [3.40.2](https://github.com/vtex/faststore/compare/v3.40.1...v3.40.2) (2025-04-15)
+
+### Bug Fixes
+
+- handle invalid requests in `parseRequest` function ([#2790](https://github.com/vtex/faststore/issues/2790)) ([fca3c26](https://github.com/vtex/faststore/commit/fca3c265ecd4d9390775da9d6be014d9b26f40d1))
+
 ## [3.40.1](https://github.com/vtex/faststore/compare/v3.40.0...v3.40.1) (2025-04-14)
 
 ### Bug Fixes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faststore/core",
-  "version": "3.40.1",
+  "version": "3.41.0",
   "license": "MIT",
   "repository": "vtex/faststore",
   "browserslist": "supports es6-module and not dead",
@@ -44,7 +44,7 @@
     "@envelop/graphql-jit": "^8.0.3",
     "@envelop/parser-cache": "^6.0.2",
     "@envelop/validation-cache": "^6.0.2",
-    "@faststore/api": "^3.38.3",
+    "@faststore/api": "^3.41.0",
     "@faststore/components": "^3.38.3",
     "@faststore/graphql-utils": "^3.38.3",
     "@faststore/lighthouse": "^3.38.3",
@@ -105,5 +105,5 @@
     "ts-jest": "29.1.1",
     "typescript": "5.3.2"
   },
-  "gitHead": "e8d383ff014c75240979fa9dd4f03743b9530635"
+  "gitHead": "028265cb2623c0e8de59718e79b6fbd0332abdf9"
 }

package/src/pages/api/graphql.ts

@@ -5,8 +5,8 @@ import {
 } from '@faststore/api'
 import type { NextApiHandler, NextApiRequest } from 'next'
 
-import { execute } from '../../server'
 import discoveryConfig from 'discovery.config'
+import { execute } from '../../server'
 
 const ONE_MINUTE = 60
 
@@ -30,32 +30,38 @@ const replaceSetCookieDomain = (request: NextApiRequest, setCookie: string) => {
 }
 
 const parseRequest = (request: NextApiRequest) => {
-  const { operationName, operationHash, variables, query } =
-    request.method === 'POST'
-      ? request.body
-      : {
-          operationName: request.query.operationName,
-          operationHash: request.query.operationHash,
-          variables: JSON.parse(
-            typeof request.query.variables === 'string'
-              ? request.query.variables
-              : ''
-          ),
-          query: undefined,
-        }
-
-  return {
-    operation: {
-      __meta__: {
-        operationName,
-        operationHash,
+  try {
+    const { operationName, operationHash, variables, query } =
+      request.method === 'POST'
+        ? request.body
+        : {
+            operationName: request.query.operationName,
+            operationHash: request.query.operationHash,
+            variables: JSON.parse(
+              typeof request.query.variables === 'string'
+                ? request.query.variables
+                : ''
+            ),
+            query: undefined,
+          }
+
+    return {
+      operation: {
+        __meta__: {
+          operationName,
+          operationHash,
+        },
       },
-    },
-    variables,
-    // Do not allow queries in production, only for devMode so we can use graphql tools
-    // like introspection etc. In production, we only accept known queries for better
-    // security
-    query: process.env.NODE_ENV !== 'production' ? query : undefined,
+      variables,
+      // Do not allow queries in production, only for devMode so we can use graphql tools
+      // like introspection etc. In production, we only accept known queries for better
+      // security
+      query: process.env.NODE_ENV !== 'production' ? query : undefined,
+    }
+  } catch (error) {
+    throw new BadRequestError(
+      `Invalid request. Please check the request. ${error}`
+    )
   }
 }
 
@@ -66,9 +72,9 @@ const handler: NextApiHandler = async (request, response) => {
     return
   }
 
-  const { operation, variables, query } = parseRequest(request)
-
   try {
+    const { operation, variables, query } = parseRequest(request)
+
     const { data, errors, extensions } = await execute(
       {
         operation,