@mikro-orm/core 7.0.10-dev.7 → 7.0.10-dev.9

package/entity/EntityHelper.js

@@ -7,7 +7,12 @@ import { ReferenceKind } from '../enums.js';
 import { helper } from './wrap.js';
 import { inspect } from '../logging/inspect.js';
 import { getEnv } from '../utils/env-vars.js';
-const entitySymbol = Symbol('Entity');
+// Globally registered so the marker survives the CJS/ESM dual-package hazard
+// (#7515) — `tsx` registers both an ESM and a CJS hook for the CLI and ends up
+// loading `@mikro-orm/core` twice. JSON payloads still cannot forge the marker
+// because Symbol-keyed properties have no JSON representation, which is the
+// threat model the symbol-vs-string switch in f7e59a5ce was guarding against.
+const entitySymbol = Symbol.for('@mikro-orm/core/EntityHelper.entity');
 /**
  * @internal
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mikro-orm/core",
-  "version": "7.0.10-dev.7",
+  "version": "7.0.10-dev.9",
   "description": "TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Supports MongoDB, MySQL, PostgreSQL and SQLite databases as well as usage with vanilla JavaScript.",
   "keywords": [
     "data-mapper",

package/utils/Utils.js

@@ -132,7 +132,7 @@ export function parseJsonSafe(value) {
 /** Collection of general-purpose utility methods used throughout the ORM. */
 export class Utils {
     static PK_SEPARATOR = '~~~';
-    static #ORM_VERSION = '7.0.10-dev.7';
+    static #ORM_VERSION = '7.0.10-dev.9';
     /**
      * Checks if the argument is instance of `Object`. Returns false for arrays.
      */