@module-federation/dts-plugin 0.17.1 → 0.18.1

package/dist/CHANGELOG.md

@@ -1,5 +1,36 @@
 # @module-federation/dts-plugin
 
+## 0.18.1
+
+### Patch Changes
+
+- Updated dependencies [0bf3a3a]
+  - @module-federation/sdk@0.18.1
+  - @module-federation/managers@0.18.1
+  - @module-federation/third-party-dts-extractor@0.18.1
+  - @module-federation/error-codes@0.18.1
+
+## 0.18.0
+
+### Minor Changes
+
+- f6381e6: Added `family` option to DTS plugin
+
+### Patch Changes
+
+- 08f089a: fix(dts-plugin): update koa to 2.16.2 to fix CVE-2025-8129
+
+  Security fix for open redirect vulnerability (GHSA-jgmv-j7ww-jx2x) in koa dependency.
+  Updates koa from 2.16.1 to 2.16.2 to prevent attackers from manipulating the Referrer
+  header in koa's back redirect functionality. Version 2.16.2 restricts redirects to
+  same-origin only, preventing malicious external redirects.
+
+- Updated dependencies [f6381e6]
+  - @module-federation/sdk@0.18.0
+  - @module-federation/managers@0.18.0
+  - @module-federation/third-party-dts-extractor@0.18.0
+  - @module-federation/error-codes@0.18.0
+
 ## 0.17.1
 
 ### Patch Changes

package/dist/core.js

@@ -1168,7 +1168,8 @@ var downloadTypesArchive = /* @__PURE__ */ __name((hostOptions) => {
         const url = new URL(fileToDownload).href;
         const response = yield axiosGet(url, {
           responseType: "arraybuffer",
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         }).catch(downloadErrorLogger(destinationFolder, url));
         if (typeof ((_a3 = response.headers) == null ? void 0 : _a3["content-type"]) === "string" && response.headers["content-type"].includes("text/html")) {
           throw new Error(`${url} receives invalid content-type: ${response.headers["content-type"]}`);
@@ -1219,7 +1220,8 @@ var defaultOptions = {
   runtimePkgs: [],
   remoteTypeUrls: {},
   timeout: 6e4,
-  typesOnBuild: false
+  typesOnBuild: false,
+  family: 4
 };
 var buildZipUrl = /* @__PURE__ */ __name((hostOptions, url) => {
   const remoteUrl = new URL(url, "file:");
@@ -1473,7 +1475,8 @@ var DTSManager = (_a = class {
         }
         const url = remoteInfo.url;
         const res = yield axiosGet(url, {
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         });
         const manifestJson = res.data;
         if (!manifestJson.metaData.types.zip) {
@@ -1534,7 +1537,8 @@ var DTSManager = (_a = class {
       try {
         const url = apiTypeUrl;
         const res = yield axiosGet(url, {
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         });
         let apiTypeFile = res.data;
         apiTypeFile = apiTypeFile.replaceAll(REMOTE_ALIAS_IDENTIFIER, remoteInfo.alias);
@@ -1846,11 +1850,12 @@ var getEnvHeaders = /* @__PURE__ */ __name(() => {
 }, "getEnvHeaders");
 function axiosGet(url, config) {
   return __async(this, null, function* () {
+    var _a3, _b;
     const httpAgent = new import_http2.default.Agent({
-      family: 4
+      family: (_a3 = config == null ? void 0 : config.family) != null ? _a3 : 4
     });
     const httpsAgent = new import_https.default.Agent({
-      family: 4
+      family: (_b = config == null ? void 0 : config.family) != null ? _b : 4
     });
     return import_axios.default.get(url, __spreadProps(__spreadValues(__spreadValues({
       httpAgent,

package/dist/esm/{chunk-7TWMRWVP.js → chunk-ES2OUXYD.js}

@@ -4,7 +4,7 @@ import {
   exposeRpc,
   getDTSManagerConstructor,
   isDebugMode
-} from "./chunk-YD3XN4HU.js";
+} from "./chunk-QAYDHZEF.js";
 import {
   __async,
   __export,

package/dist/esm/{chunk-YD3XN4HU.js → chunk-QAYDHZEF.js}

@@ -751,7 +751,8 @@ var defaultOptions2 = {
   runtimePkgs: [],
   remoteTypeUrls: {},
   timeout: 6e4,
-  typesOnBuild: false
+  typesOnBuild: false,
+  family: 4
 };
 var buildZipUrl = /* @__PURE__ */ __name((hostOptions, url) => {
   const remoteUrl = new URL(url, "file:");
@@ -1005,7 +1006,8 @@ var DTSManager = (_a = class {
         }
         const url = remoteInfo.url;
         const res = yield axiosGet(url, {
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         });
         const manifestJson = res.data;
         if (!manifestJson.metaData.types.zip) {
@@ -1066,7 +1068,8 @@ var DTSManager = (_a = class {
       try {
         const url = apiTypeUrl;
         const res = yield axiosGet(url, {
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         });
         let apiTypeFile = res.data;
         apiTypeFile = apiTypeFile.replaceAll(REMOTE_ALIAS_IDENTIFIER, remoteInfo.alias);
@@ -1378,11 +1381,12 @@ var getEnvHeaders = /* @__PURE__ */ __name(() => {
 }, "getEnvHeaders");
 function axiosGet(url, config) {
   return __async(this, null, function* () {
+    var _a2, _b;
     const httpAgent = new http.Agent({
-      family: 4
+      family: (_a2 = config == null ? void 0 : config.family) != null ? _a2 : 4
     });
     const httpsAgent = new https.Agent({
-      family: 4
+      family: (_b = config == null ? void 0 : config.family) != null ? _b : 4
     });
     return axios.get(url, __spreadProps(__spreadValues(__spreadValues({
       httpAgent,
@@ -1422,7 +1426,8 @@ var downloadTypesArchive = /* @__PURE__ */ __name((hostOptions) => {
         const url = new URL(fileToDownload).href;
         const response = yield axiosGet(url, {
           responseType: "arraybuffer",
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         }).catch(downloadErrorLogger(destinationFolder, url));
         if (typeof ((_a2 = response.headers) == null ? void 0 : _a2["content-type"]) === "string" && response.headers["content-type"].includes("text/html")) {
           throw new Error(`${url} receives invalid content-type: ${response.headers["content-type"]}`);

package/dist/esm/core.js

@@ -3,7 +3,7 @@ import {
   consumeTypes,
   generateTypesInChildProcess,
   rpc_exports
-} from "./chunk-7TWMRWVP.js";
+} from "./chunk-ES2OUXYD.js";
 import {
   DTSManager,
   HOST_API_TYPES_FILE_NAME,
@@ -19,7 +19,7 @@ import {
   retrieveTypesAssetsInfo,
   retrieveTypesZipPath,
   validateOptions
-} from "./chunk-YD3XN4HU.js";
+} from "./chunk-QAYDHZEF.js";
 import "./chunk-WWV5RWOP.js";
 import "./chunk-647HGGGS.js";
 export {

package/dist/esm/fork-dev-worker.js

@@ -1,6 +1,6 @@
 import {
   rpc_exports
-} from "./chunk-7TWMRWVP.js";
+} from "./chunk-ES2OUXYD.js";
 import {
   ModuleFederationDevServer,
   createKoaServer,
@@ -9,7 +9,7 @@ import {
   retrieveMfTypesPath,
   retrieveRemoteConfig,
   retrieveTypesZipPath
-} from "./chunk-YD3XN4HU.js";
+} from "./chunk-QAYDHZEF.js";
 import {
   fileLog,
   getIPV4

package/dist/esm/fork-generate-dts.js

@@ -2,7 +2,7 @@ import {
   RpcGMCallTypes,
   exposeRpc,
   generateTypes
-} from "./chunk-YD3XN4HU.js";
+} from "./chunk-QAYDHZEF.js";
 import "./chunk-WWV5RWOP.js";
 import {
   __async,

package/dist/esm/index.js

@@ -2,14 +2,14 @@ import {
   consumeTypes,
   generateTypesInChildProcess,
   rpc_exports
-} from "./chunk-7TWMRWVP.js";
+} from "./chunk-ES2OUXYD.js";
 import {
   cloneDeepOptions,
   generateTypes,
   isTSProject,
   retrieveTypesAssetsInfo,
   validateOptions
-} from "./chunk-YD3XN4HU.js";
+} from "./chunk-QAYDHZEF.js";
 import {
   getIPV4,
   logger

package/dist/fork-dev-worker.js

@@ -1688,7 +1688,8 @@ var downloadTypesArchive = /* @__PURE__ */ __name((hostOptions) => {
         const url = new URL(fileToDownload).href;
         const response = yield axiosGet(url, {
           responseType: "arraybuffer",
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         }).catch(downloadErrorLogger(destinationFolder, url));
         if (typeof ((_a3 = response.headers) == null ? void 0 : _a3["content-type"]) === "string" && response.headers["content-type"].includes("text/html")) {
           throw new Error(`${url} receives invalid content-type: ${response.headers["content-type"]}`);
@@ -1739,7 +1740,8 @@ var defaultOptions = {
   runtimePkgs: [],
   remoteTypeUrls: {},
   timeout: 6e4,
-  typesOnBuild: false
+  typesOnBuild: false,
+  family: 4
 };
 var buildZipUrl = /* @__PURE__ */ __name((hostOptions, url) => {
   const remoteUrl = new URL(url, "file:");
@@ -1993,7 +1995,8 @@ var DTSManager = (_a = class {
         }
         const url = remoteInfo.url;
         const res = yield axiosGet(url, {
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         });
         const manifestJson = res.data;
         if (!manifestJson.metaData.types.zip) {
@@ -2054,7 +2057,8 @@ var DTSManager = (_a = class {
       try {
         const url = apiTypeUrl;
         const res = yield axiosGet(url, {
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         });
         let apiTypeFile = res.data;
         apiTypeFile = apiTypeFile.replaceAll(REMOTE_ALIAS_IDENTIFIER, remoteInfo.alias);
@@ -2300,11 +2304,12 @@ var getEnvHeaders = /* @__PURE__ */ __name(() => {
 }, "getEnvHeaders");
 function axiosGet(url, config) {
   return __async(this, null, function* () {
+    var _a3, _b;
     const httpAgent = new import_http2.default.Agent({
-      family: 4
+      family: (_a3 = config == null ? void 0 : config.family) != null ? _a3 : 4
     });
     const httpsAgent = new import_https.default.Agent({
-      family: 4
+      family: (_b = config == null ? void 0 : config.family) != null ? _b : 4
     });
     return import_axios.default.get(url, __spreadProps(__spreadValues(__spreadValues({
       httpAgent,

package/dist/fork-generate-dts.js

@@ -1350,7 +1350,8 @@ var downloadTypesArchive = /* @__PURE__ */ __name((hostOptions) => {
         const url = new URL(fileToDownload).href;
         const response = yield axiosGet(url, {
           responseType: "arraybuffer",
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         }).catch(downloadErrorLogger(destinationFolder, url));
         if (typeof ((_a2 = response.headers) == null ? void 0 : _a2["content-type"]) === "string" && response.headers["content-type"].includes("text/html")) {
           throw new Error(`${url} receives invalid content-type: ${response.headers["content-type"]}`);
@@ -1401,7 +1402,8 @@ var defaultOptions2 = {
   runtimePkgs: [],
   remoteTypeUrls: {},
   timeout: 6e4,
-  typesOnBuild: false
+  typesOnBuild: false,
+  family: 4
 };
 var buildZipUrl = /* @__PURE__ */ __name((hostOptions, url) => {
   const remoteUrl = new URL(url, "file:");
@@ -1655,7 +1657,8 @@ var DTSManager = (_a = class {
         }
         const url = remoteInfo.url;
         const res = yield axiosGet(url, {
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         });
         const manifestJson = res.data;
         if (!manifestJson.metaData.types.zip) {
@@ -1716,7 +1719,8 @@ var DTSManager = (_a = class {
       try {
         const url = apiTypeUrl;
         const res = yield axiosGet(url, {
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         });
         let apiTypeFile = res.data;
         apiTypeFile = apiTypeFile.replaceAll(REMOTE_ALIAS_IDENTIFIER, remoteInfo.alias);
@@ -1962,11 +1966,12 @@ var getEnvHeaders = /* @__PURE__ */ __name(() => {
 }, "getEnvHeaders");
 function axiosGet(url, config) {
   return __async(this, null, function* () {
+    var _a2, _b;
     const httpAgent = new import_http2.default.Agent({
-      family: 4
+      family: (_a2 = config == null ? void 0 : config.family) != null ? _a2 : 4
     });
     const httpsAgent = new import_https.default.Agent({
-      family: 4
+      family: (_b = config == null ? void 0 : config.family) != null ? _b : 4
     });
     return import_axios.default.get(url, __spreadProps(__spreadValues(__spreadValues({
       httpAgent,

package/dist/index.d.mts

@@ -32,6 +32,7 @@ declare const normalizeConsumeTypesOptions: ({ context, dtsOptions, pluginOption
         runtimePkgs?: string[];
         remoteTypeUrls?: (() => Promise<moduleFederationPlugin.RemoteTypeUrls>) | moduleFederationPlugin.RemoteTypeUrls;
         timeout?: number;
+        family?: 4 | 6;
         typesOnBuild?: boolean;
         implementation: string;
         context: string;

package/dist/index.d.ts

@@ -32,6 +32,7 @@ declare const normalizeConsumeTypesOptions: ({ context, dtsOptions, pluginOption
         runtimePkgs?: string[];
         remoteTypeUrls?: (() => Promise<moduleFederationPlugin.RemoteTypeUrls>) | moduleFederationPlugin.RemoteTypeUrls;
         timeout?: number;
+        family?: 4 | 6;
         typesOnBuild?: boolean;
         implementation: string;
         context: string;

package/dist/index.js

@@ -1197,7 +1197,8 @@ var downloadTypesArchive = /* @__PURE__ */ __name((hostOptions) => {
         const url = new URL(fileToDownload).href;
         const response = yield axiosGet(url, {
           responseType: "arraybuffer",
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         }).catch(downloadErrorLogger(destinationFolder, url));
         if (typeof ((_a3 = response.headers) == null ? void 0 : _a3["content-type"]) === "string" && response.headers["content-type"].includes("text/html")) {
           throw new Error(`${url} receives invalid content-type: ${response.headers["content-type"]}`);
@@ -1248,7 +1249,8 @@ var defaultOptions = {
   runtimePkgs: [],
   remoteTypeUrls: {},
   timeout: 6e4,
-  typesOnBuild: false
+  typesOnBuild: false,
+  family: 4
 };
 var buildZipUrl = /* @__PURE__ */ __name((hostOptions, url) => {
   const remoteUrl = new URL(url, "file:");
@@ -1502,7 +1504,8 @@ var DTSManager = (_a = class {
         }
         const url = remoteInfo.url;
         const res = yield axiosGet(url, {
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         });
         const manifestJson = res.data;
         if (!manifestJson.metaData.types.zip) {
@@ -1563,7 +1566,8 @@ var DTSManager = (_a = class {
       try {
         const url = apiTypeUrl;
         const res = yield axiosGet(url, {
-          timeout: hostOptions.timeout
+          timeout: hostOptions.timeout,
+          family: hostOptions.family
         });
         let apiTypeFile = res.data;
         apiTypeFile = apiTypeFile.replaceAll(REMOTE_ALIAS_IDENTIFIER, remoteInfo.alias);
@@ -1875,11 +1879,12 @@ var getEnvHeaders = /* @__PURE__ */ __name(() => {
 }, "getEnvHeaders");
 function axiosGet(url, config) {
   return __async(this, null, function* () {
+    var _a3, _b;
     const httpAgent = new import_http2.default.Agent({
-      family: 4
+      family: (_a3 = config == null ? void 0 : config.family) != null ? _a3 : 4
     });
     const httpsAgent = new import_https.default.Agent({
-      family: 4
+      family: (_b = config == null ? void 0 : config.family) != null ? _b : 4
     });
     return import_axios.default.get(url, __spreadProps(__spreadValues(__spreadValues({
       httpAgent,

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@module-federation/dts-plugin",
-  "version": "0.17.1",
+  "version": "0.18.1",
   "author": "hanric <hanric.zhang@gmail.com>",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -60,7 +60,7 @@
     "chalk": "3.0.0",
     "fs-extra": "9.1.0",
     "isomorphic-ws": "5.0.0",
-    "koa": "2.16.1",
+    "koa": "3.0.1",
     "log4js": "6.9.1",
     "node-schedule": "2.1.1",
     "ws": "8.18.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@module-federation/dts-plugin",
-  "version": "0.17.1",
+  "version": "0.18.1",
   "author": "hanric <hanric.zhang@gmail.com>",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -56,14 +56,14 @@
     "chalk": "3.0.0",
     "fs-extra": "9.1.0",
     "isomorphic-ws": "5.0.0",
-    "koa": "2.16.1",
+    "koa": "3.0.1",
     "log4js": "6.9.1",
     "node-schedule": "2.1.1",
     "ws": "8.18.0",
-    "@module-federation/sdk": "0.17.1",
-    "@module-federation/managers": "0.17.1",
-    "@module-federation/third-party-dts-extractor": "0.17.1",
-    "@module-federation/error-codes": "0.17.1"
+    "@module-federation/sdk": "0.18.1",
+    "@module-federation/managers": "0.18.1",
+    "@module-federation/third-party-dts-extractor": "0.18.1",
+    "@module-federation/error-codes": "0.18.1"
   },
   "devDependencies": {
     "@types/ws": "8.5.12",
@@ -73,7 +73,7 @@
     "@vue/tsconfig": "^0.7.0",
     "vue-tsc": "^2.2.10",
     "rimraf": "~6.0.1",
-    "@module-federation/runtime": "0.17.1"
+    "@module-federation/runtime": "0.18.1"
   },
   "peerDependencies": {
     "typescript": "^4.9.0 || ^5.0.0",