@nocobase/plugin-workflow-javascript 2.0.27 → 2.0.28

package/dist/externalVersion.js

@@ -13,11 +13,11 @@ module.exports = {
   "antd-style": "3.7.1",
   "@formily/antd-v5": "1.2.3",
   "@ant-design/icons": "5.6.1",
-  "@nocobase/client": "2.0.27",
-  "@nocobase/plugin-workflow": "2.0.27",
+  "@nocobase/client": "2.0.28",
+  "@nocobase/plugin-workflow": "2.0.28",
   "antd": "5.24.2",
-  "@nocobase/flow-engine": "2.0.27",
+  "@nocobase/flow-engine": "2.0.28",
   "react-i18next": "11.18.6",
   "winston": "3.13.0",
-  "@nocobase/server": "2.0.27"
+  "@nocobase/server": "2.0.28"
 };

package/dist/node_modules/winston-transport/package.json

@@ -1 +1 @@
-{"name":"winston-transport","description":"Base stream implementations for winston@3 and up.","version":"4.7.0","main":"index.js","browser":"dist/index.js","scripts":{"lint":"eslint test/*.js index.js --resolve-plugins-relative-to ./node_modules/@dabh/eslint-config-populist","pretest":"npm run lint && npm run build","test":"nyc mocha test/*.test.js","report":"nyc report --reporter=lcov","build":"rimraf dist && babel *.js -d ./dist","prepublishOnly":"npm run build"},"repository":{"type":"git","url":"git@github.com:winstonjs/winston-transport.git"},"keywords":["winston","transport","winston3"],"author":"Charlie Robbins <charlie.robbins@gmail.com>","license":"MIT","bugs":{"url":"https://github.com/winstonjs/winston-transport/issues"},"homepage":"https://github.com/winstonjs/winston-transport#readme","dependencies":{"logform":"^2.3.2","readable-stream":"^3.6.0","triple-beam":"^1.3.0"},"devDependencies":{"@types/node":"^20.8.6","abstract-winston-transport":">=0.5.1","assume":"^2.3.0","babel-cli":"^6.26.0","babel-preset-env":"^1.7.0","deep-equal":"^2.0.5","eslint":"^8.8.0","@dabh/eslint-config-populist":"^5.0.0","mocha":"^10.0.0","nyc":"^15.1.0","rimraf":"^5.0.5","winston-compat":"^0.1.5"},"engines":{"node":">= 12.0.0"},"_lastModified":"2026-03-26T11:01:52.079Z"}
+{"name":"winston-transport","description":"Base stream implementations for winston@3 and up.","version":"4.7.0","main":"index.js","browser":"dist/index.js","scripts":{"lint":"eslint test/*.js index.js --resolve-plugins-relative-to ./node_modules/@dabh/eslint-config-populist","pretest":"npm run lint && npm run build","test":"nyc mocha test/*.test.js","report":"nyc report --reporter=lcov","build":"rimraf dist && babel *.js -d ./dist","prepublishOnly":"npm run build"},"repository":{"type":"git","url":"git@github.com:winstonjs/winston-transport.git"},"keywords":["winston","transport","winston3"],"author":"Charlie Robbins <charlie.robbins@gmail.com>","license":"MIT","bugs":{"url":"https://github.com/winstonjs/winston-transport/issues"},"homepage":"https://github.com/winstonjs/winston-transport#readme","dependencies":{"logform":"^2.3.2","readable-stream":"^3.6.0","triple-beam":"^1.3.0"},"devDependencies":{"@types/node":"^20.8.6","abstract-winston-transport":">=0.5.1","assume":"^2.3.0","babel-cli":"^6.26.0","babel-preset-env":"^1.7.0","deep-equal":"^2.0.5","eslint":"^8.8.0","@dabh/eslint-config-populist":"^5.0.0","mocha":"^10.0.0","nyc":"^15.1.0","rimraf":"^5.0.5","winston-compat":"^0.1.5"},"engines":{"node":">= 12.0.0"},"_lastModified":"2026-03-27T15:56:59.648Z"}

package/dist/server/Vm.js

@@ -28,43 +28,58 @@ function customRequire(m) {
   }
   throw new Error(`module "${m}" not supported`);
 }
-customRequire.constructor = null;
-function createSafeConsole(originalConsole) {
-  const safe = /* @__PURE__ */ Object.create(null);
-  Object.defineProperty(safe, "constructor", {
+function hardenFunction(fn) {
+  Object.setPrototypeOf(fn, null);
+  Object.defineProperty(fn, "constructor", {
     value: null,
     writable: false,
     enumerable: false,
     configurable: false
   });
-  const allKeys = Reflect.ownKeys(originalConsole);
-  for (const key of allKeys) {
-    const descriptor = Object.getOwnPropertyDescriptor(originalConsole, key);
-    if (!descriptor) {
-      continue;
-    }
-    const wrap = (fn) => {
-      const bound = fn.bind(originalConsole);
-      Object.defineProperty(bound, "constructor", {
-        value: null,
+  return fn;
+}
+hardenFunction(customRequire);
+function createSafeConsole(originalConsole) {
+  const safe = /* @__PURE__ */ Object.create(null);
+  const allowedMethods = [
+    "log",
+    "info",
+    "warn",
+    "error",
+    "debug",
+    "trace",
+    "dir",
+    "dirxml",
+    "table",
+    "time",
+    "timeEnd",
+    "timeLog",
+    "count",
+    "countReset",
+    "group",
+    "groupCollapsed",
+    "groupEnd",
+    "clear",
+    "assert"
+  ];
+  for (const key of allowedMethods) {
+    if (typeof originalConsole[key] === "function") {
+      const bound = originalConsole[key].bind(originalConsole);
+      hardenFunction(bound);
+      Object.defineProperty(safe, key, {
+        value: bound,
         writable: false,
-        enumerable: false,
+        enumerable: true,
         configurable: false
       });
-      return bound;
-    };
-    if (typeof descriptor.value === "function") {
-      descriptor.value = wrap(descriptor.value);
-    }
-    if (typeof descriptor.get === "function") {
-      descriptor.get = wrap(descriptor.get);
     }
-    if (typeof descriptor.set === "function") {
-      descriptor.set = wrap(descriptor.set);
-    }
-    descriptor.configurable = false;
-    Object.defineProperty(safe, key, descriptor);
   }
+  Object.defineProperty(safe, "constructor", {
+    value: null,
+    writable: false,
+    enumerable: false,
+    configurable: false
+  });
   return Object.freeze(safe);
 }
 async function main() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nocobase/plugin-workflow-javascript",
-  "version": "2.0.27",
+  "version": "2.0.28",
   "displayName": "Workflow: JavaScript",
   "displayName.zh-CN": "工作流：JavaScript 节点",
   "description": "Execute a piece of JavaScript in an isolated Node.js environment.",
@@ -36,5 +36,5 @@
     "Workflow"
   ],
   "license": "Apache-2.0",
-  "gitHead": "0317737a319acb75fdcd0c69eab3fa8dd9095c86"
+  "gitHead": "7a3e96a74b05f2beaa5a87d8ef28ccf269ea90f4"
 }