@unotest/viewer 0.21.0 → 0.22.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +23 -0
- package/dist/server/main.js +1 -1
- package/dist/server/session.js +1 -1
- package/dist/web/assets/{DslEditor-CHVVCTus.js → DslEditor-DtjQG_hy.js} +2 -2
- package/dist/web/assets/index-BUQFuaYZ.js +55 -0
- package/dist/web/index.html +1 -1
- package/package.json +12 -12
- package/dist/web/assets/index-DTfhEfNw.js +0 -55
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,28 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## [0.22.0] - 2026-08-26
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- 80619a9: Run on NestJS 11 and Fastify 5.
|
|
8
|
+
|
|
9
|
+
The viewer's server was pinned to `@nestjs/* ^10.4.0`, which held the whole
|
|
10
|
+
prod tree on an EOL Fastify 4 line: `@fastify/static` 7 (path traversal past
|
|
11
|
+
a route guard — reachable, the viewer serves its SPA through it),
|
|
12
|
+
`@fastify/middie` 8 (unreachable here, but flagged forever by scanners),
|
|
13
|
+
`@nestjs/platform-fastify` 10 (middleware-bypass series) and `ws` 8.18
|
|
14
|
+
(memory-exhaustion DoS on the viewer's live channel).
|
|
15
|
+
|
|
16
|
+
Nest 11 + Fastify 5 retires all of it: `@fastify/middie` leaves the tree
|
|
17
|
+
entirely, `@fastify/static` moves to 10, `ws` to 8.21. `npm audit
|
|
18
|
+
--omit=dev` on a freshly packed tarball reports zero vulnerabilities.
|
|
19
|
+
|
|
20
|
+
No public API change — same server, same endpoints, same `@unotest/viewer`
|
|
21
|
+
surface.
|
|
22
|
+
|
|
23
|
+
- @unotest/dsl@0.22.0
|
|
24
|
+
- @unotest/protocol@0.22.0
|
|
25
|
+
|
|
3
26
|
## [0.21.0] - 2026-08-25
|
|
4
27
|
|
|
5
28
|
### Minor Changes
|