@unavatar/core 3.46.13 → 3.46.16

package/README.md

@@ -100,7 +100,7 @@
 
 ---
 
-Last updated on July 2, 2026
+Last updated on August 18, 2026
 
 ![logo](https://unavatar.io/api/og ":id=banner")
 
@@ -293,7 +293,7 @@ Rate limit status can be verified using these response headers:
 | `x-rate-limit-reset`     | UTC epoch seconds when the current window resets               |
 
 ```bash
-$curl-Ihttps://unavatar.io/github/kikobeats
+curl-Ihttps://unavatar.io/github/kikobeats
 
 x-rate-limit-limit:25
 
@@ -435,7 +435,7 @@ Every request has a cost in tokens (**\$0.010 per token**) based on the proxy ti
 The proxy tier used is returned in the `x-proxy-tier` response header, and the total cost in the `x-unavatar-cost` header.
 
 ```bash
-$curl-I-H"x-api-key: sk_YOUR_SECRET_KEY"https://unavatar.io/instagram/kikobeats
+curl-I-H"x-api-key: sk_YOUR_SECRET_KEY"https://unavatar.io/instagram/kikobeats
 
 x-pricing-tier:pro
 
@@ -471,7 +471,7 @@ To check the cache status in real requests, inspect these response headers:
 | `cache-control`  | Shows cache policy and effective TTL (for example `public, max-age=3600` for `ttl=1h`). |
 
 ```bash
-$curl-I-H"x-api-key: sk_YOUR_SECRET_KEY""https://unavatar.io/github/kikobeats?ttl=1h"
+curl-I-H"x-api-key: sk_YOUR_SECRET_KEY""https://unavatar.io/github/kikobeats?ttl=1h"
 
 cache-control:public,max-age=3600
 
@@ -1172,7 +1172,7 @@ These headers help you understand pricing, limits, and request diagnostics.
 | `retry-after`            | Seconds until rate limit resets (only on 429 responses)   |
 
 ```bash
-$curl-I-H"x-api-key: sk_YOUR_SECRET_KEY"https://unavatar.io/github/kikobeats
+curl-I-H"x-api-key: sk_YOUR_SECRET_KEY"https://unavatar.io/github/kikobeats
 
 x-pricing-tier:pro
 

package/package.json

@@ -2,7 +2,7 @@
   "name": "@unavatar/core",
   "description": "Get unified user avatar from social networks, including Instagram, SoundCloud, Telegram, Twitter, YouTube & more.",
   "homepage": "https://unavatar.io",
-  "version": "3.46.13",
+  "version": "3.46.16",
   "main": "src/index.js",
   "exports": {
     ".": "./src/index.js",
@@ -125,26 +125,26 @@
     "@keyvhq/multi": "~2.2.6",
     "@keyvhq/offline": "~2.2.0",
     "@keyvhq/redis": "~2.2.3",
-    "@metascraper/helpers": "~5.55.0",
+    "@metascraper/helpers": "~5.56.2",
     "@microlink/mql": "~0.18.0",
     "@microlink/ping-url": "~1.5.0",
     "bimi-url": "~1.0.0",
-    "browserless": "~13.7.1",
+    "browserless": "~13.8.0",
     "cacheable-lookup": "~6.1.0",
     "data-uri-regex": "~0.1.4",
     "debug-logfmt": "~1.4.10",
     "got": "~11.8.6",
-    "html-get": "~2.26.0",
+    "html-get": "~2.27.0",
     "https-tls": "~1.0.24",
     "ipaddr.js": "~2.5.0",
     "is-absolute-url": "~3.0.3",
-    "is-antibot": "~2.3.0",
+    "is-antibot": "~2.5.0",
     "is-email-like": "~1.0.0",
     "lodash": "~4.18.1",
     "ms": "~2.1.3",
     "p-any": "~3.0.0",
     "p-timeout": "~4.1.0",
-    "puppeteer": "~25.7.0",
+    "puppeteer": "~25.8.0",
     "re2": "~1.26.0",
     "srcset": "~4.0.0",
     "stable-regex": "~1.0.1",
@@ -162,7 +162,8 @@
     "c8": "latest",
     "cheerio": "latest",
     "ci-publish": "latest",
-    "conventional-changelog-cli": "latest",
+    "conventional-changelog": "latest",
+    "conventional-changelog-conventionalcommits": "latest",
     "finepack": "latest",
     "git-authors-cli": "latest",
     "github-generate-release": "latest",
@@ -186,7 +187,7 @@
     "contributors": "(git-authors-cli && finepack && git add package.json && git commit -m 'build: contributors' --no-verify) || true",
     "postrelease": "pnpm release:tags && pnpm release:github && (ci-publish || pnpm publish --access=public)",
     "release": "pnpm release:version && pnpm release:changelog && pnpm release:commit && pnpm release:tag",
-    "release:changelog": "conventional-changelog -p conventionalcommits -i CHANGELOG.md -s",
+    "release:changelog": "conventional-changelog -p conventionalcommits -i CHANGELOG.md",
     "release:commit": "git add package.json CHANGELOG.md && git commit -m \"chore(release): $(node -p \"require('./package.json').version\")\"",
     "release:github": "github-generate-release",
     "release:tag": "git tag -a v$(node -p \"require('./package.json').version\") -m \"v$(node -p \"require('./package.json').version\")\"",

package/src/providers/printables.js

@@ -1,13 +1,50 @@
 'use strict'
 
-const getAvatarUrl = input =>
-  `https://www.printables.com/${input.startsWith('@') ? input : `@${input}`}`
+const API_URL = 'https://api.printables.com/graphql/'
+const MEDIA_URL = 'https://media.printables.com'
 
-module.exports = ({ createHtmlProvider, getOgImage }) =>
-  createHtmlProvider({
-    name: 'printables',
-    url: getAvatarUrl,
-    getter: getOgImage
-  })
+const SEARCH_QUERY = `query SearchUsers($query: String!) {
+  result: searchUsers2(query: $query, limit: 10) {
+    items { handle avatarFilePath }
+  }
+}`
 
-module.exports.getAvatarUrl = getAvatarUrl
+const normalizeHandle = input =>
+  String(input || '')
+    .trim()
+    .replace(/^@/, '')
+    .trim()
+
+const getAvatar = (body, handle) => {
+  const items = body?.data?.result?.items
+  if (!Array.isArray(items) || !handle) return
+
+  const user = items.find(
+    item => String(item?.handle || '').toLowerCase() === handle.toLowerCase()
+  )
+  const path = user?.avatarFilePath
+  if (!path) return
+
+  return `${MEDIA_URL}/${path.replace(/^\//, '')}`
+}
+
+module.exports = ({ got }) =>
+  async function printables (input) {
+    const handle = normalizeHandle(input)
+    if (!handle) return
+
+    const { body, statusCode } = await got(API_URL, {
+      method: 'POST',
+      responseType: 'json',
+      throwHttpErrors: false,
+      json: { query: SEARCH_QUERY, variables: { query: handle } },
+      headers: { origin: 'https://www.printables.com' }
+    })
+
+    if (statusCode >= 400) return
+
+    return getAvatar(body, handle)
+  }
+
+module.exports.getAvatar = getAvatar
+module.exports.normalizeHandle = normalizeHandle

package/src/util/is-reserved-ip.js

@@ -7,18 +7,20 @@ const unbracket = hostname =>
     ? hostname.slice(1, -1)
     : hostname
 
+const isReservedAddress = address => ip.process(address).range() !== 'unicast'
+
 module.exports = ({ cacheableLookup }) => {
-  const getIpAddress = async hostname => {
-    if (ip.IPv4.isIPv4(hostname)) return hostname
+  const getIpAddresses = async hostname => {
+    if (ip.IPv4.isIPv4(hostname)) return [hostname]
     const literal = unbracket(hostname)
-    if (ip.IPv6.isIPv6(literal)) return literal
-    const { address } = await cacheableLookup.lookupAsync(hostname)
-    return address
+    if (ip.IPv6.isIPv6(literal)) return [literal]
+    const result = await cacheableLookup.lookupAsync(hostname, { all: true })
+    return result.map(entry => entry.address)
   }
 
   return async hostname => {
-    const ipAddress = await getIpAddress(hostname)
-    return ip.process(ipAddress).range() !== 'unicast'
+    const addresses = await getIpAddresses(hostname)
+    return addresses.some(isReservedAddress)
   }
 }