@nocobase/plugin-workflow-javascript 2.0.60 → 2.0.61

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/dist/externalVersion.js +4 -4
  2. package/dist/node_modules/isolated-vm/package.json +1 -1
  3. package/dist/node_modules/winston-transport/package.json +1 -1
  4. package/dist/server/ScriptInstruction.d.ts +1 -1
  5. package/dist/server/ScriptInstruction.js +1 -1
  6. package/package.json +2 -2
package/dist/externalVersion.js CHANGED
@@ -13,11 +13,11 @@ module.exports = {
13
13
  "antd-style": "3.7.1",
14
14
  "@formily/antd-v5": "1.2.3",
15
15
  "@ant-design/icons": "5.6.1",
16
- "@nocobase/client": "2.0.60",
17
- "@nocobase/plugin-workflow": "2.0.60",
16
+ "@nocobase/client": "2.0.61",
17
+ "@nocobase/plugin-workflow": "2.0.61",
18
18
  "antd": "5.24.2",
19
- "@nocobase/flow-engine": "2.0.60",
19
+ "@nocobase/flow-engine": "2.0.61",
20
20
  "react-i18next": "11.18.6",
21
21
  "winston": "3.13.0",
22
- "@nocobase/server": "2.0.60"
22
+ "@nocobase/server": "2.0.61"
23
23
  };
package/dist/node_modules/isolated-vm/package.json CHANGED
@@ -1 +1 @@
1
- {"name":"isolated-vm","version":"6.1.2","description":"Access to multiple isolates","main":"isolated-vm.js","types":"isolated-vm.d.ts","engines":{"node":">=22.0.0"},"scripts":{"install":"node-gyp-build || node-gyp rebuild --release -j max","prebuild":"node scripts/run-prebuild.js","rebuild":"node-gyp rebuild --release -j max","lint":"find src -name '*.cc' | xargs -n1 clang-tidy","test":"node test.js"},"dependencies":{"node-gyp-build":"^4.8.4"},"devDependencies":{"isolated-vm":".","prebuildify":"^6.0.1"},"repository":{"type":"git","url":"git+https://github.com/laverdet/isolated-vm.git"},"author":"https://github.com/laverdet/","license":"ISC","gypfile":true,"bugs":{"url":"https://github.com/laverdet/isolated-vm/issues"},"homepage":"https://github.com/laverdet/isolated-vm#readme","_lastModified":"2026-05-29T10:19:03.720Z"}
1
+ {"name":"isolated-vm","version":"6.1.2","description":"Access to multiple isolates","main":"isolated-vm.js","types":"isolated-vm.d.ts","engines":{"node":">=22.0.0"},"scripts":{"install":"node-gyp-build || node-gyp rebuild --release -j max","prebuild":"node scripts/run-prebuild.js","rebuild":"node-gyp rebuild --release -j max","lint":"find src -name '*.cc' | xargs -n1 clang-tidy","test":"node test.js"},"dependencies":{"node-gyp-build":"^4.8.4"},"devDependencies":{"isolated-vm":".","prebuildify":"^6.0.1"},"repository":{"type":"git","url":"git+https://github.com/laverdet/isolated-vm.git"},"author":"https://github.com/laverdet/","license":"ISC","gypfile":true,"bugs":{"url":"https://github.com/laverdet/isolated-vm/issues"},"homepage":"https://github.com/laverdet/isolated-vm#readme","_lastModified":"2026-06-03T12:40:09.529Z"}
package/dist/node_modules/winston-transport/package.json CHANGED
@@ -1 +1 @@
1
- {"name":"winston-transport","description":"Base stream implementations for winston@3 and up.","version":"4.7.0","main":"index.js","browser":"dist/index.js","scripts":{"lint":"eslint test/*.js index.js --resolve-plugins-relative-to ./node_modules/@dabh/eslint-config-populist","pretest":"npm run lint && npm run build","test":"nyc mocha test/*.test.js","report":"nyc report --reporter=lcov","build":"rimraf dist && babel *.js -d ./dist","prepublishOnly":"npm run build"},"repository":{"type":"git","url":"git@github.com:winstonjs/winston-transport.git"},"keywords":["winston","transport","winston3"],"author":"Charlie Robbins <charlie.robbins@gmail.com>","license":"MIT","bugs":{"url":"https://github.com/winstonjs/winston-transport/issues"},"homepage":"https://github.com/winstonjs/winston-transport#readme","dependencies":{"logform":"^2.3.2","readable-stream":"^3.6.0","triple-beam":"^1.3.0"},"devDependencies":{"@types/node":"^20.8.6","abstract-winston-transport":">=0.5.1","assume":"^2.3.0","babel-cli":"^6.26.0","babel-preset-env":"^1.7.0","deep-equal":"^2.0.5","eslint":"^8.8.0","@dabh/eslint-config-populist":"^5.0.0","mocha":"^10.0.0","nyc":"^15.1.0","rimraf":"^5.0.5","winston-compat":"^0.1.5"},"engines":{"node":">= 12.0.0"},"_lastModified":"2026-05-29T10:19:04.152Z"}
1
+ {"name":"winston-transport","description":"Base stream implementations for winston@3 and up.","version":"4.7.0","main":"index.js","browser":"dist/index.js","scripts":{"lint":"eslint test/*.js index.js --resolve-plugins-relative-to ./node_modules/@dabh/eslint-config-populist","pretest":"npm run lint && npm run build","test":"nyc mocha test/*.test.js","report":"nyc report --reporter=lcov","build":"rimraf dist && babel *.js -d ./dist","prepublishOnly":"npm run build"},"repository":{"type":"git","url":"git@github.com:winstonjs/winston-transport.git"},"keywords":["winston","transport","winston3"],"author":"Charlie Robbins <charlie.robbins@gmail.com>","license":"MIT","bugs":{"url":"https://github.com/winstonjs/winston-transport/issues"},"homepage":"https://github.com/winstonjs/winston-transport#readme","dependencies":{"logform":"^2.3.2","readable-stream":"^3.6.0","triple-beam":"^1.3.0"},"devDependencies":{"@types/node":"^20.8.6","abstract-winston-transport":">=0.5.1","assume":"^2.3.0","babel-cli":"^6.26.0","babel-preset-env":"^1.7.0","deep-equal":"^2.0.5","eslint":"^8.8.0","@dabh/eslint-config-populist":"^5.0.0","mocha":"^10.0.0","nyc":"^15.1.0","rimraf":"^5.0.5","winston-compat":"^0.1.5"},"engines":{"node":">= 12.0.0"},"_lastModified":"2026-06-03T12:40:09.936Z"}
package/dist/server/ScriptInstruction.d.ts CHANGED
@@ -19,7 +19,7 @@ type ScriptConfig = {
19
19
  export default class ScriptInstruction extends Instruction {
20
20
  /**
21
21
  * Returns the worker script path based on whether WORKFLOW_SCRIPT_MODULES is configured.
22
- * - WORKFLOW_SCRIPT_MODULES set: uses Node.js vm with require support (module whitelist)
22
+ * - WORKFLOW_SCRIPT_MODULES set: uses Node.js vm with require support (unsafe; not a security boundary)
23
23
  * - WORKFLOW_SCRIPT_MODULES unset: uses isolated-vm for maximum security (no require, no Node.js APIs)
24
24
  */
25
25
  static get workerScript(): string;
package/dist/server/ScriptInstruction.js CHANGED
@@ -48,7 +48,7 @@ var import_cache_logger = require("./cache-logger");
48
48
  class ScriptInstruction extends import_plugin_workflow.Instruction {
49
49
  /**
50
50
  * Returns the worker script path based on whether WORKFLOW_SCRIPT_MODULES is configured.
51
- * - WORKFLOW_SCRIPT_MODULES set: uses Node.js vm with require support (module whitelist)
51
+ * - WORKFLOW_SCRIPT_MODULES set: uses Node.js vm with require support (unsafe; not a security boundary)
52
52
  * - WORKFLOW_SCRIPT_MODULES unset: uses isolated-vm for maximum security (no require, no Node.js APIs)
53
53
  */
54
54
  static get workerScript() {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@nocobase/plugin-workflow-javascript",
3
- "version": "2.0.60",
3
+ "version": "2.0.61",
4
4
  "displayName": "Workflow: JavaScript",
5
5
  "displayName.zh-CN": "工作流：JavaScript 节点",
6
6
  "description": "Execute a piece of JavaScript in an isolated Node.js environment.",
@@ -37,5 +37,5 @@
37
37
  "Workflow"
38
38
  ],
39
39
  "license": "Apache-2.0",
40
- "gitHead": "c9bdc985d79d20e88c93cb2eee9bbf24a382ee08"
40
+ "gitHead": "974b351c96c0a7a8ce9fd8cdc70a732a332bd7cf"
41
41
  }