@fedify/relay 2.0.15 → 2.0.16

package/dist/litepub.test.js

@@ -1,7 +1,7 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as exportSpki, r as getDocumentLoader, t as isRelayFollowerData } from "./types-Ofn1ABv7.js";
+import { n as exportSpki, r as getDocumentLoader, t as isRelayFollowerData } from "./types-Cs1iQQgS.js";
 import { MemoryKvStore, signRequest } from "@fedify/fedify";
 import { createRelay } from "@fedify/relay";
 import { Accept, Announce, Create, Delete, Follow, Move, Note, Person, Undo, Update } from "@fedify/vocab";

package/dist/mastodon.test.js

@@ -1,7 +1,7 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as exportSpki, r as getDocumentLoader, t as isRelayFollowerData } from "./types-Ofn1ABv7.js";
+import { n as exportSpki, r as getDocumentLoader, t as isRelayFollowerData } from "./types-Cs1iQQgS.js";
 import { MemoryKvStore, signRequest } from "@fedify/fedify";
 import { createRelay } from "@fedify/relay";
 import { Create, Delete, Follow, Move, Note, Person, Undo, Update } from "@fedify/vocab";

package/dist/{types-Ofn1ABv7.js → types-Cs1iQQgS.js}

@@ -25514,7 +25514,7 @@ const preloadedContexts = {
 	} }
 };
 var name = "@fedify/vocab-runtime";
-var version = "2.0.15";
+var version = "2.0.16";
 const parametersNeedLowerCase = ["rel", "type"];
 const regexpLinkWhitespace = /[\n\r\s\t]/;
 function validateURI(uri) {
@@ -25769,8 +25769,13 @@ async function validatePublicUrl(url) {
 	const parsed = new URL(url);
 	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw new UrlError(`Unsupported protocol: ${parsed.protocol}`);
 	let hostname = parsed.hostname;
-	if (hostname.startsWith("[") && hostname.endsWith("]")) hostname = hostname.substring(1, hostname.length - 2);
+	if (hostname.startsWith("[") && hostname.endsWith("]")) hostname = hostname.slice(1, -1);
 	if (hostname === "localhost") throw new UrlError("Localhost is not allowed");
+	const hostnameFamily = isIP(hostname);
+	if (hostnameFamily !== 0) {
+		validatePublicIpAddress(hostname, hostnameFamily);
+		return;
+	}
 	if ("Deno" in globalThis && !isIP(hostname)) {
 		if ((await Deno.permissions.query({ name: "net" })).state !== "granted") return;
 	}
@@ -25784,7 +25789,11 @@ async function validatePublicUrl(url) {
 	} catch {
 		addresses = [];
 	}
-	for (const { address, family } of addresses) if (family === 4 && !isValidPublicIPv4Address(address) || family === 6 && !isValidPublicIPv6Address(address) || family < 4 || family === 5 || family > 6) throw new UrlError(`Invalid or private address: ${address}`);
+	for (const { address, family } of addresses) validatePublicIpAddress(address, family);
+}
+function validatePublicIpAddress(address, family) {
+	if (family === 4 && isValidPublicIPv4Address(address) || family === 6 && isValidPublicIPv6Address(address)) return;
+	throw new UrlError(`Invalid or private address: ${address}`);
 }
 function isValidPublicIPv4Address(address) {
 	const parts = address.split(".");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fedify/relay",
-  "version": "2.0.15",
+  "version": "2.0.16",
   "description": "ActivityPub relay support for Fedify",
   "keywords": [
     "Fedify",
@@ -50,14 +50,14 @@
   "dependencies": {
     "@js-temporal/polyfill": "^0.5.1",
     "@logtape/logtape": "^2.0.0",
-    "@fedify/fedify": "^2.0.15",
-    "@fedify/vocab": "2.0.15"
+    "@fedify/vocab": "2.0.16",
+    "@fedify/fedify": "^2.0.16"
   },
   "devDependencies": {
     "tsdown": "^0.21.6",
     "typescript": "^5.9.2",
     "urlpattern-polyfill": "^10.1.0",
-    "@fedify/vocab-runtime": "^2.0.15"
+    "@fedify/vocab-runtime": "^2.0.16"
   },
   "scripts": {
     "build:self": "tsdown",