@unotest/viewer 0.21.0 → 0.23.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/CHANGELOG.md +31 -0
  2. package/dist/server/main.js +1 -1
  3. package/dist/server/session.js +1 -1
  4. package/dist/web/assets/{DslEditor-CHVVCTus.js → DslEditor-CqnYEn5Q.js} +2 -2
  5. package/dist/web/assets/index-DRRQZF1l.js +55 -0
  6. package/dist/web/index.html +1 -1
  7. package/package.json +12 -12
  8. package/dist/web/assets/index-DTfhEfNw.js +0 -55
package/CHANGELOG.md CHANGED
@@ -1,5 +1,36 @@
1
1
  # Changelog
2
2
 
3
+ ## [0.23.0] - 2026-08-26
4
+
5
+ ### Patch Changes
6
+
7
+ - Updated dependencies
8
+ - @unotest/protocol@0.23.0
9
+ - @unotest/dsl@0.23.0
10
+
11
+ ## [0.22.0] - 2026-08-26
12
+
13
+ ### Patch Changes
14
+
15
+ - 80619a9: Run on NestJS 11 and Fastify 5.
16
+
17
+ The viewer's server was pinned to `@nestjs/* ^10.4.0`, which held the whole
18
+ prod tree on an EOL Fastify 4 line: `@fastify/static` 7 (path traversal past
19
+ a route guard — reachable, the viewer serves its SPA through it),
20
+ `@fastify/middie` 8 (unreachable here, but flagged forever by scanners),
21
+ `@nestjs/platform-fastify` 10 (middleware-bypass series) and `ws` 8.18
22
+ (memory-exhaustion DoS on the viewer's live channel).
23
+
24
+ Nest 11 + Fastify 5 retires all of it: `@fastify/middie` leaves the tree
25
+ entirely, `@fastify/static` moves to 10, `ws` to 8.21. `npm audit
26
+ --omit=dev` on a freshly packed tarball reports zero vulnerabilities.
27
+
28
+ No public API change — same server, same endpoints, same `@unotest/viewer`
29
+ surface.
30
+
31
+ - @unotest/dsl@0.22.0
32
+ - @unotest/protocol@0.22.0
33
+
3
34
  ## [0.21.0] - 2026-08-25
4
35
 
5
36
  ### Minor Changes