@fedify/vocab-runtime 2.3.0-dev.1050 → 2.3.0-dev.1079

package/dist/tests/docloader.test.cjs

@@ -1,7 +1,7 @@
-const require_chunk = require("./chunk-Do9eywBl.cjs");
-const require_docloader = require("./docloader-C4doXlGq.cjs");
-const require_request = require("./request-CmmSAhWN.cjs");
-const require_url = require("./url-pFuSds44.cjs");
+const require_chunk = require("./chunk-C2EiDwsr.cjs");
+const require_docloader = require("./docloader-CFo7CET9.cjs");
+const require_request = require("./request-D1_CJkbx.cjs");
+const require_url = require("./url-CEmGms8t.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 //#region ../../node_modules/.pnpm/glob-to-regexp@0.4.1/node_modules/glob-to-regexp/index.js

package/dist/tests/docloader.test.mjs

@@ -1,6 +1,6 @@
-import { n as preloadedContexts, t as getDocumentLoader } from "./docloader-DRW-Ip4j.mjs";
-import { t as FetchError } from "./request-BpgWmk-q.mjs";
-import { t as UrlError } from "./url-BQ_kgmCk.mjs";
+import { n as preloadedContexts, t as getDocumentLoader } from "./docloader-Cx0cPVYk.mjs";
+import { t as FetchError } from "./request-C9WvvfOf.mjs";
+import { t as UrlError } from "./url-BzGwIxB4.mjs";
 import { deepStrictEqual, ok, rejects } from "node:assert";
 import { test } from "node:test";
 //#region \0rolldown/runtime.js
@@ -10,7 +10,7 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJSMin = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
 var __copyProps = (to, from, except, desc) => {
 	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
 		key = keys[i];

package/dist/tests/internal/multicodec.test.cjs

@@ -1,4 +1,4 @@
-require("../chunk-Do9eywBl.cjs");
+require("../chunk-C2EiDwsr.cjs");
 const require_multicodec = require("../multicodec-CxGVGa91.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");

package/dist/tests/{key-BeTHFQJK.mjs → key-CrrK9mYh.mjs}

@@ -1,5 +1,5 @@
 import { n as getMulticodecPrefix, r as removeMulticodecPrefix, t as addMulticodecPrefix } from "./multicodec-CyFp54fI.mjs";
-import { n as encodeMultibase, t as decodeMultibase } from "./multibase-BgU9XRf7.mjs";
+import { n as encodeMultibase, t as decodeMultibase } from "./multibase-B4bvakyA.mjs";
 import { Integer, Sequence } from "asn1js";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
 import { decodeBase64Url } from "byte-encodings/base64url";

package/dist/tests/{key-DTTIntwb.cjs → key-pMmqUKuo.cjs}

@@ -1,6 +1,6 @@
-require("./chunk-Do9eywBl.cjs");
+require("./chunk-C2EiDwsr.cjs");
 const require_multicodec = require("./multicodec-CxGVGa91.cjs");
-const require_multibase = require("./multibase-F7LtMMsK.cjs");
+const require_multibase = require("./multibase-Bz_UUDtL.cjs");
 let asn1js = require("asn1js");
 let byte_encodings_base64 = require("byte-encodings/base64");
 let byte_encodings_base64url = require("byte-encodings/base64url");

package/dist/tests/key.test.cjs

@@ -1,6 +1,6 @@
-require("./chunk-Do9eywBl.cjs");
-const require_key = require("./key-DTTIntwb.cjs");
-const require_multibase = require("./multibase-F7LtMMsK.cjs");
+require("./chunk-C2EiDwsr.cjs");
+const require_key = require("./key-pMmqUKuo.cjs");
+const require_multibase = require("./multibase-Bz_UUDtL.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 //#region src/key.test.ts

package/dist/tests/key.test.mjs

@@ -1,5 +1,5 @@
-import { a as importPkcs1, c as importJwk, i as importPem, n as exportSpki, o as importSpki, r as importMultibaseKey, s as exportJwk, t as exportMultibaseKey } from "./key-BeTHFQJK.mjs";
-import { n as encodeMultibase } from "./multibase-BgU9XRf7.mjs";
+import { a as importPkcs1, c as importJwk, i as importPem, n as exportSpki, o as importSpki, r as importMultibaseKey, s as exportJwk, t as exportMultibaseKey } from "./key-CrrK9mYh.mjs";
+import { n as encodeMultibase } from "./multibase-B4bvakyA.mjs";
 import { deepStrictEqual, rejects } from "node:assert";
 import { test } from "node:test";
 //#region src/key.test.ts

package/dist/tests/langstr.test.cjs

@@ -1,9 +1,9 @@
-const require_chunk = require("./chunk-Do9eywBl.cjs");
+const require_chunk = require("./chunk-C2EiDwsr.cjs");
 const require_langstr = require("./langstr-CbAxaeEZ.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 let node_util = require("node:util");
-node_util = require_chunk.__toESM(node_util);
+node_util = require_chunk.__toESM(node_util, 1);
 //#region src/langstr.test.ts
 (0, node_test.test)("new LanguageString()", () => {
 	const langStr = new require_langstr.LanguageString("Hello", "en");

package/dist/tests/link.test.cjs

@@ -1,4 +1,4 @@
-require("./chunk-Do9eywBl.cjs");
+require("./chunk-C2EiDwsr.cjs");
 const require_link = require("./link-FguCydMA.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");

package/dist/tests/multibase/multibase.test.cjs

@@ -1,5 +1,5 @@
-require("../chunk-Do9eywBl.cjs");
-const require_multibase = require("../multibase-F7LtMMsK.cjs");
+require("../chunk-C2EiDwsr.cjs");
+const require_multibase = require("../multibase-Bz_UUDtL.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 //#region src/multibase/multibase.test.ts

package/dist/tests/multibase/multibase.test.mjs

@@ -1,4 +1,4 @@
-import { a as decodeText, i as names, n as encodeMultibase, o as encodeText, r as codes, t as decodeMultibase } from "../multibase-BgU9XRf7.mjs";
+import { a as decodeText, i as names, n as encodeMultibase, o as encodeText, r as codes, t as decodeMultibase } from "../multibase-B4bvakyA.mjs";
 import { deepStrictEqual } from "node:assert";
 import { test } from "node:test";
 //#region src/multibase/multibase.test.ts

package/dist/tests/{multibase-BgU9XRf7.mjs → multibase-B4bvakyA.mjs}

@@ -19,6 +19,9 @@ function concat(arrs, length) {
 * Class to encode/decode in the supported Bases
 */
 var Base = class {
+	name;
+	code;
+	alphabet;
 	codeBuf;
 	codec;
 	constructor(name, code, factory, alphabet) {

package/dist/tests/{multibase-F7LtMMsK.cjs → multibase-Bz_UUDtL.cjs}

@@ -1,6 +1,6 @@
-const require_chunk = require("./chunk-Do9eywBl.cjs");
+const require_chunk = require("./chunk-C2EiDwsr.cjs");
 let _multiformats_base_x = require("@multiformats/base-x");
-_multiformats_base_x = require_chunk.__toESM(_multiformats_base_x);
+_multiformats_base_x = require_chunk.__toESM(_multiformats_base_x, 1);
 //#region src/multibase/util.ts
 const textDecoder = new TextDecoder();
 const decodeText = (bytes) => textDecoder.decode(bytes);
@@ -21,6 +21,9 @@ function concat(arrs, length) {
 * Class to encode/decode in the supported Bases
 */
 var Base = class {
+	name;
+	code;
+	alphabet;
 	codeBuf;
 	codec;
 	constructor(name, code, factory, alphabet) {

package/dist/tests/{request-BpgWmk-q.mjs → request-C9WvvfOf.mjs}

@@ -1,7 +1,7 @@
 import process from "node:process";
 //#region deno.json
 var name = "@fedify/vocab-runtime";
-var version = "2.3.0-dev.1050+74157106";
+var version = "2.3.0-dev.1079+36ac23d1";
 //#endregion
 //#region src/request.ts
 /**

package/dist/tests/{request-CmmSAhWN.cjs → request-D1_CJkbx.cjs}

@@ -1,9 +1,9 @@
-const require_chunk = require("./chunk-Do9eywBl.cjs");
+const require_chunk = require("./chunk-C2EiDwsr.cjs");
 let node_process = require("node:process");
-node_process = require_chunk.__toESM(node_process);
+node_process = require_chunk.__toESM(node_process, 1);
 //#region deno.json
 var name = "@fedify/vocab-runtime";
-var version = "2.3.0-dev.1050+74157106";
+var version = "2.3.0-dev.1079+36ac23d1";
 //#endregion
 //#region src/request.ts
 /**

package/dist/tests/request.test.cjs

@@ -1,9 +1,9 @@
-const require_chunk = require("./chunk-Do9eywBl.cjs");
-const require_request = require("./request-CmmSAhWN.cjs");
+const require_chunk = require("./chunk-C2EiDwsr.cjs");
+const require_request = require("./request-D1_CJkbx.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 let node_process = require("node:process");
-node_process = require_chunk.__toESM(node_process);
+node_process = require_chunk.__toESM(node_process, 1);
 //#region src/request.test.ts
 (0, node_test.test)("getUserAgent()", () => {
 	if ("Deno" in globalThis) {

package/dist/tests/request.test.mjs

@@ -1,4 +1,4 @@
-import { o as version, r as getUserAgent } from "./request-BpgWmk-q.mjs";
+import { o as version, r as getUserAgent } from "./request-C9WvvfOf.mjs";
 import { deepStrictEqual } from "node:assert";
 import { test } from "node:test";
 import process from "node:process";

package/dist/tests/{url-BQ_kgmCk.mjs → url-BzGwIxB4.mjs}

@@ -14,8 +14,13 @@ async function validatePublicUrl(url) {
 	const parsed = new URL(url);
 	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw new UrlError(`Unsupported protocol: ${parsed.protocol}`);
 	let hostname = parsed.hostname;
-	if (hostname.startsWith("[") && hostname.endsWith("]")) hostname = hostname.substring(1, hostname.length - 2);
+	if (hostname.startsWith("[") && hostname.endsWith("]")) hostname = hostname.slice(1, -1);
 	if (hostname === "localhost") throw new UrlError("Localhost is not allowed");
+	const hostnameFamily = isIP(hostname);
+	if (hostnameFamily !== 0) {
+		validatePublicIpAddress(hostname, hostnameFamily);
+		return;
+	}
 	if ("Deno" in globalThis && !isIP(hostname)) {
 		if ((await Deno.permissions.query({ name: "net" })).state !== "granted") return;
 	}
@@ -29,7 +34,11 @@ async function validatePublicUrl(url) {
 	} catch {
 		addresses = [];
 	}
-	for (const { address, family } of addresses) if (family === 4 && !isValidPublicIPv4Address(address) || family === 6 && !isValidPublicIPv6Address(address) || family < 4 || family === 5 || family > 6) throw new UrlError(`Invalid or private address: ${address}`);
+	for (const { address, family } of addresses) validatePublicIpAddress(address, family);
+}
+function validatePublicIpAddress(address, family) {
+	if (family === 4 && isValidPublicIPv4Address(address) || family === 6 && isValidPublicIPv6Address(address)) return;
+	throw new UrlError(`Invalid or private address: ${address}`);
 }
 function isValidPublicIPv4Address(address) {
 	const parts = address.split(".");

package/dist/tests/{url-pFuSds44.cjs → url-CEmGms8t.cjs}

@@ -1,4 +1,4 @@
-require("./chunk-Do9eywBl.cjs");
+require("./chunk-C2EiDwsr.cjs");
 let node_dns_promises = require("node:dns/promises");
 let node_net = require("node:net");
 //#region src/url.ts
@@ -15,8 +15,13 @@ async function validatePublicUrl(url) {
 	const parsed = new URL(url);
 	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw new UrlError(`Unsupported protocol: ${parsed.protocol}`);
 	let hostname = parsed.hostname;
-	if (hostname.startsWith("[") && hostname.endsWith("]")) hostname = hostname.substring(1, hostname.length - 2);
+	if (hostname.startsWith("[") && hostname.endsWith("]")) hostname = hostname.slice(1, -1);
 	if (hostname === "localhost") throw new UrlError("Localhost is not allowed");
+	const hostnameFamily = (0, node_net.isIP)(hostname);
+	if (hostnameFamily !== 0) {
+		validatePublicIpAddress(hostname, hostnameFamily);
+		return;
+	}
 	if ("Deno" in globalThis && !(0, node_net.isIP)(hostname)) {
 		if ((await Deno.permissions.query({ name: "net" })).state !== "granted") return;
 	}
@@ -30,7 +35,11 @@ async function validatePublicUrl(url) {
 	} catch {
 		addresses = [];
 	}
-	for (const { address, family } of addresses) if (family === 4 && !isValidPublicIPv4Address(address) || family === 6 && !isValidPublicIPv6Address(address) || family < 4 || family === 5 || family > 6) throw new UrlError(`Invalid or private address: ${address}`);
+	for (const { address, family } of addresses) validatePublicIpAddress(address, family);
+}
+function validatePublicIpAddress(address, family) {
+	if (family === 4 && isValidPublicIPv4Address(address) || family === 6 && isValidPublicIPv6Address(address)) return;
+	throw new UrlError(`Invalid or private address: ${address}`);
 }
 function isValidPublicIPv4Address(address) {
 	const parts = address.split(".");

package/dist/tests/url.test.cjs

@@ -1,5 +1,5 @@
-require("./chunk-Do9eywBl.cjs");
-const require_url = require("./url-pFuSds44.cjs");
+require("./chunk-C2EiDwsr.cjs");
+const require_url = require("./url-CEmGms8t.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 //#region src/url.test.ts
@@ -9,6 +9,8 @@ let node_test = require("node:test");
 	await (0, node_assert.rejects)(() => require_url.validatePublicUrl("https://localhost"), require_url.UrlError);
 	await (0, node_assert.rejects)(() => require_url.validatePublicUrl("https://127.0.0.1"), require_url.UrlError);
 	await (0, node_assert.rejects)(() => require_url.validatePublicUrl("https://[::1]"), require_url.UrlError);
+	await (0, node_assert.rejects)(() => require_url.validatePublicUrl("http://[::ffff:7f00:1]/"), require_url.UrlError);
+	await require_url.validatePublicUrl("https://[2001:db8::1]");
 });
 (0, node_test.test)("isValidPublicIPv4Address()", () => {
 	(0, node_assert.ok)(require_url.isValidPublicIPv4Address("8.8.8.8"));
@@ -25,6 +27,7 @@ let node_test = require("node:test");
 	(0, node_assert.ok)(!require_url.isValidPublicIPv6Address("fe80::1"));
 	(0, node_assert.ok)(!require_url.isValidPublicIPv6Address("ff00::1"));
 	(0, node_assert.ok)(!require_url.isValidPublicIPv6Address("::"));
+	(0, node_assert.ok)(!require_url.isValidPublicIPv6Address("::ffff:7f00:1"));
 });
 (0, node_test.test)("expandIPv6Address()", () => {
 	(0, node_assert.deepStrictEqual)(require_url.expandIPv6Address("::"), "0000:0000:0000:0000:0000:0000:0000:0000");

package/dist/tests/url.test.mjs

@@ -1,4 +1,4 @@
-import { a as validatePublicUrl, i as isValidPublicIPv6Address, n as expandIPv6Address, r as isValidPublicIPv4Address, t as UrlError } from "./url-BQ_kgmCk.mjs";
+import { a as validatePublicUrl, i as isValidPublicIPv6Address, n as expandIPv6Address, r as isValidPublicIPv4Address, t as UrlError } from "./url-BzGwIxB4.mjs";
 import { deepStrictEqual, ok, rejects } from "node:assert";
 import { test } from "node:test";
 //#region src/url.test.ts
@@ -8,6 +8,8 @@ test("validatePublicUrl()", async () => {
 	await rejects(() => validatePublicUrl("https://localhost"), UrlError);
 	await rejects(() => validatePublicUrl("https://127.0.0.1"), UrlError);
 	await rejects(() => validatePublicUrl("https://[::1]"), UrlError);
+	await rejects(() => validatePublicUrl("http://[::ffff:7f00:1]/"), UrlError);
+	await validatePublicUrl("https://[2001:db8::1]");
 });
 test("isValidPublicIPv4Address()", () => {
 	ok(isValidPublicIPv4Address("8.8.8.8"));
@@ -24,6 +26,7 @@ test("isValidPublicIPv6Address()", () => {
 	ok(!isValidPublicIPv6Address("fe80::1"));
 	ok(!isValidPublicIPv6Address("ff00::1"));
 	ok(!isValidPublicIPv6Address("::"));
+	ok(!isValidPublicIPv6Address("::ffff:7f00:1"));
 });
 test("expandIPv6Address()", () => {
 	deepStrictEqual(expandIPv6Address("::"), "0000:0000:0000:0000:0000:0000:0000:0000");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fedify/vocab-runtime",
-  "version": "2.3.0-dev.1050+74157106",
+  "version": "2.3.0-dev.1079+36ac23d1",
   "homepage": "https://fedify.dev/",
   "repository": {
     "type": "git",
@@ -61,14 +61,14 @@
   "devDependencies": {
     "@types/node": "^24.2.1",
     "fetch-mock": "^12.5.4",
-    "tsdown": "^0.21.6",
+    "tsdown": "^0.22.0",
     "typescript": "^5.9.2"
   },
   "dependencies": {
-    "@logtape/logtape": "^2.0.5",
+    "@logtape/logtape": "^2.0.7",
     "@multiformats/base-x": "^4.0.1",
-    "@opentelemetry/api": "^1.9.0",
-    "asn1js": "^3.0.6",
+    "@opentelemetry/api": "^1.9.1",
+    "asn1js": "^3.0.10",
     "byte-encodings": "^1.0.11",
     "jsonld": "^9.0.0",
     "pkijs": "^3.3.3"

package/src/url.test.ts

@@ -19,6 +19,11 @@ test("validatePublicUrl()", async () => {
   await rejects(() => validatePublicUrl("https://localhost"), UrlError);
   await rejects(() => validatePublicUrl("https://127.0.0.1"), UrlError);
   await rejects(() => validatePublicUrl("https://[::1]"), UrlError);
+  await rejects(
+    () => validatePublicUrl("http://[::ffff:7f00:1]/"),
+    UrlError,
+  );
+  await validatePublicUrl("https://[2001:db8::1]");
 });
 
 test("isValidPublicIPv4Address()", () => {
@@ -37,6 +42,7 @@ test("isValidPublicIPv6Address()", () => {
   ok(!isValidPublicIPv6Address("fe80::1")); // link-local
   ok(!isValidPublicIPv6Address("ff00::1")); // multicast
   ok(!isValidPublicIPv6Address("::")); // unspecified
+  ok(!isValidPublicIPv6Address("::ffff:7f00:1")); // IPv4-mapped
 });
 
 test("expandIPv6Address()", () => {

package/src/url.ts

@@ -19,11 +19,16 @@ export async function validatePublicUrl(url: string): Promise<void> {
   }
   let hostname = parsed.hostname;
   if (hostname.startsWith("[") && hostname.endsWith("]")) {
-    hostname = hostname.substring(1, hostname.length - 2);
+    hostname = hostname.slice(1, -1);
   }
   if (hostname === "localhost") {
     throw new UrlError("Localhost is not allowed");
   }
+  const hostnameFamily = isIP(hostname);
+  if (hostnameFamily !== 0) {
+    validatePublicIpAddress(hostname, hostnameFamily);
+    return;
+  }
   if ("Deno" in globalThis && !isIP(hostname)) {
     // If the `net` permission is not granted, we can't resolve the hostname.
     // However, we can safely assume that it cannot gain access to private
@@ -50,14 +55,18 @@ export async function validatePublicUrl(url: string): Promise<void> {
     addresses = [];
   }
   for (const { address, family } of addresses) {
-    if (
-      family === 4 && !isValidPublicIPv4Address(address) ||
-      family === 6 && !isValidPublicIPv6Address(address) ||
-      family < 4 || family === 5 || family > 6
-    ) {
-      throw new UrlError(`Invalid or private address: ${address}`);
-    }
+    validatePublicIpAddress(address, family);
+  }
+}
+
+function validatePublicIpAddress(address: string, family: number): void {
+  if (
+    family === 4 && isValidPublicIPv4Address(address) ||
+    family === 6 && isValidPublicIPv6Address(address)
+  ) {
+    return;
   }
+  throw new UrlError(`Invalid or private address: ${address}`);
 }
 
 export function isValidPublicIPv4Address(address: string): boolean {

package/tsdown.config.ts

@@ -8,7 +8,7 @@ export default [
     dts: { compilerOptions: { isolatedDeclarations: true, declaration: true } },
     format: ["esm", "cjs"],
     platform: "neutral",
-    external: [/^node:/],
+    deps: { neverBundle: [/^node:/] },
   }),
   defineConfig({
     outDir: "dist/tests",
@@ -16,6 +16,6 @@ export default [
       .map((f) => f.replace(sep, "/")),
     format: ["esm", "cjs"],
     platform: "node",
-    external: [/^node:/, "@fedify/fixture"],
+    deps: { neverBundle: [/^node:/, "@fedify/fixture"] },
   }),
 ];