@spfn/core 0.3.0-beta.30 → 0.3.0-beta.31

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +4 -3
  2. package/package.json +7 -7
package/README.md CHANGED
@@ -43,11 +43,12 @@ Next.js owns the frontend, Drizzle owns the SQL, and your services own the rules
43
43
 
44
44
  ```bash
45
45
  pnpm add @spfn/core@beta drizzle-orm@1.0.0-rc.4 postgres pg
46
- # optional peer: next ^16.3.8 (only for the Next.js bridge)
46
+ # optional peer: next ^16.4.1 (only for the Next.js bridge)
47
47
  # optional peer: react ^18 || ^19 (only for @spfn/core/state/react)
48
48
  ```
49
49
 
50
- Node `>=20.0.0`. ESM only.
50
+ Node `^22.23.4 || ^24.22.1 || >=26.12.1` — earlier releases lack the fix for
51
+ CVE-2026-111497, and Node 20 reached end of life without one. ESM only.
51
52
 
52
53
  > **Declare Drizzle and the Postgres drivers in your own app, not just in SPFN.**
53
54
  > `@spfn/core` takes `drizzle-orm` as a peer dependency, and Drizzle changes how it
@@ -855,7 +856,7 @@ There is no `.` entry in `exports` — by design. Subpaths keep server-only code
855
856
  client bundles, which a single barrel file cannot do.
856
857
 
857
858
  **Which Node version?**
858
- `>=20.0.0`. The package is ESM only.
859
+ `^22.23.4 || ^24.22.1 || >=26.12.1`. The package is ESM only.
859
860
 
860
861
  **Where do my business rules go?**
861
862
  In services and repositories, not in route handlers. A handler validates, calls, and
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@spfn/core",
3
- "version": "0.3.0-beta.30",
3
+ "version": "0.3.0-beta.31",
4
4
  "description": "Full-stack TypeScript backend for Next.js: file-based typed routes, Drizzle entities and repositories, PostgreSQL transactions and a generated end-to-end client, in one fixed vertical slice per feature",
5
5
  "type": "module",
6
6
  "exports": {
@@ -214,7 +214,7 @@
214
214
  },
215
215
  "homepage": "https://github.com/fxylabs/spfn/tree/main/packages/core#readme",
216
216
  "engines": {
217
- "node": ">=20.0.0"
217
+ "node": "^22.23.4 || ^24.22.1 || >=26.12.1"
218
218
  },
219
219
  "dependencies": {
220
220
  "@hono/node-server": "^2.0.5",
@@ -223,14 +223,14 @@
223
223
  "chokidar": "^4.0.3",
224
224
  "dotenv": "^17.2.3",
225
225
  "drizzle-typebox": "^0.3.3",
226
- "hono": "^4.13.5",
226
+ "hono": "^4.13.11",
227
227
  "jiti": "^2.6.1",
228
228
  "micromatch": "^4.0.8",
229
229
  "pg-boss": "^11.1.2",
230
230
  "postgres": "^3.4.0",
231
231
  "typescript": "^5.3.3",
232
- "undici": "^7.29.1",
233
- "zod": "^4.4.3"
232
+ "undici": "^7.30.1",
233
+ "zod": "^4.6.6"
234
234
  },
235
235
  "optionalDependencies": {
236
236
  "ioredis": "^5.4.1",
@@ -248,7 +248,7 @@
248
248
  "drizzle-orm": "1.0.0-rc.4",
249
249
  "jsdom": "^27.0.0",
250
250
  "madge": "^8.0.0",
251
- "next": "^16.3.8",
251
+ "next": "^16.4.1",
252
252
  "react": "^19.2.1",
253
253
  "react-dom": "^19.2.1",
254
254
  "tsup": "^8.5.0",
@@ -256,7 +256,7 @@
256
256
  },
257
257
  "peerDependencies": {
258
258
  "drizzle-orm": ">=1.0.0-rc.4 <2",
259
- "next": "^16.3.8",
259
+ "next": "^16.4.1",
260
260
  "react": "^18.0.0 || ^19.0.0"
261
261
  },
262
262
  "peerDependenciesMeta": {