better-ts-stack 2.1.0 → 2.1.1

package/dist/args.js

@@ -22,6 +22,7 @@ Options left out are asked interactively, unless --yes is given.
   --docker, --no-docker   Add Docker files
   --rate-limit, --no-rate-limit
                           Add rate limiting (Express and NestJS)
+  --ci, --no-ci           Add a GitHub Actions workflow
   --git, --no-git         Initialize a git repository
   --install, --no-install Install dependencies
   -y, --yes               Use defaults for missing options and skip confirmation
@@ -56,6 +57,7 @@ function parseCliArgs(argv) {
                 auth: { type: "boolean" },
                 docker: { type: "boolean" },
                 "rate-limit": { type: "boolean" },
+                ci: { type: "boolean" },
                 git: { type: "boolean" },
                 install: { type: "boolean" },
                 yes: { type: "boolean", short: "y" },
@@ -79,6 +81,7 @@ function parseCliArgs(argv) {
         useAuth: values.auth,
         useDocker: values.docker,
         useRateLimit: values["rate-limit"],
+        useCi: values.ci,
         initGit: values.git,
         installDeps: values.install,
     };

package/dist/builder/configGenerator.js

@@ -136,7 +136,9 @@ async function generateEnvFile(targetDir, envVars) {
         let envContent = "# Environment Variables\n";
         envContent +=
             "# Copy this file to .env and update with your actual values\n\n";
-        let localEnvContent = envContent;
+        let localEnvContent = "# Environment Variables\n";
+        localEnvContent +=
+            "# Local values for this project. Do not commit them\n\n";
         // Add each environment variable
         for (const [key, value] of Object.entries(envVars)) {
             const resolvedValue = exports.GENERATED_SECRETS.includes(key)

package/dist/builder/moduleSelector.js

@@ -10,7 +10,7 @@ function selectModules(config) {
         : `frontend/${framework}`;
     const modules = [];
     // Database, auth, and rate-limit modules have one variant per framework
-    // (prisma/express, auth/nextjs, ...); the Docker module is shared
+    // (prisma/express, auth/nextjs, ...); the Docker and CI modules are shared
     if (config.database !== "none")
         modules.push(`${config.database}/${framework}`);
     if (config.useDocker)
@@ -19,5 +19,7 @@ function selectModules(config) {
         modules.push(`auth/${framework}`);
     if (config.useRateLimit)
         modules.push(`rate-limit/${framework}`);
+    if (config.useCi)
+        modules.push("ci");
     return { base, modules };
 }

package/dist/builder/readmeGenerator.js

@@ -52,8 +52,14 @@ function renderReadme(config, mergedConfig, targetDir) {
             ? "- **Auth:** Better Auth with email and password"
             : "- **Auth:** JWT with `/auth/register`, `/auth/login`, and `/auth/me`");
     }
+    if (config.useRateLimit) {
+        lines.push(`- **Rate limiting:** 100 requests per client IP in 15 minutes${config.useAuth ? ", and 10 sign-up or login attempts" : ""}`);
+    }
     if (config.useDocker)
         lines.push("- **Docker:** Dockerfile and Compose file");
+    if (config.useCi) {
+        lines.push("- **CI:** GitHub Actions builds, type-checks, and lints every push to `main` and every pull request");
+    }
     lines.push(`- **Package manager:** ${config.packageManager}`, "");
     const steps = (0, nextSteps_1.generateNextSteps)(config, targetDir, false, true);
     lines.push("## Getting started", "", ...steps.map((step, index) => {

package/dist/builder/templateContext.js

@@ -31,6 +31,28 @@ const DOCKER_COMMANDS = {
         run: "bun run",
     },
 };
+// Placeholders for the CI build, the same ones the Dockerfile uses: a build
+// needs these to be set, but never connects to a database
+function getCiBuildEnv(config) {
+    const env = [];
+    if (config.database === "prisma" || config.database === "drizzle") {
+        env.push({
+            name: "DATABASE_URL",
+            value: "postgresql://postgres:postgres@localhost:5432/postgres",
+        });
+    }
+    if (config.database === "mongoose") {
+        env.push({ name: "MONGODB_URI", value: "mongodb://localhost:27017/build" });
+    }
+    // next build loads the auth route, which initializes Better Auth
+    if (config.framework === "nextjs" && config.useAuth) {
+        env.push({
+            name: "BETTER_AUTH_SECRET",
+            value: "build-only-placeholder-secret-not-used-at-runtime",
+        });
+    }
+    return env;
+}
 function buildTemplateContext(config) {
     return {
         projectName: config.projectName,
@@ -42,6 +64,7 @@ function buildTemplateContext(config) {
         useAuth: config.useAuth,
         useRateLimit: config.useRateLimit,
         docker: DOCKER_COMMANDS[config.packageManager],
+        ciBuildEnv: getCiBuildEnv(config),
         helpers: {
             eq: (a, b) => a === b,
             runner: () => {

package/dist/output/nextSteps.js

@@ -37,6 +37,10 @@ function generateNextSteps(config, targetDir, depsInstalled, isForReadme = false
     if (hasDockerDatabase) {
         steps.push("docker compose up -d db");
     }
+    if ((config.database === "prisma" || config.database === "drizzle") &&
+        !hasDockerDatabase) {
+        steps.push("Ensure PostgreSQL is running locally or update DATABASE_URL in .env");
+    }
     if (config.database === "prisma") {
         steps.push(`${config.packageManager} run prisma:generate`);
         steps.push(`${config.packageManager} run prisma:migrate`);

package/dist/prompts/index.js

@@ -23,13 +23,15 @@ async function collectProjectPath(preset, isNonInteractive) {
     return (0, stack_1.ask)(preset, () => (0, ui_1.text)({
         message: "Project name",
         placeholder: "my-awesome-project",
-        validate: (value) => (0, validators_1.validateProjectPath)(value ?? ""),
+        // An empty path would resolve to the current directory and pass
+        validate: (value) => value ? (0, validators_1.validateProjectPath)(value) : "Project name is required",
     }));
 }
 // Asks for final confirmation before building; declining ends the session
 async function confirmBuild() {
     const shouldBuild = await (0, stack_1.ask)(undefined, () => (0, ui_1.confirm)({ message: "Create this project?", initialValue: true }));
     if (!shouldBuild) {
+        (0, ui_1.info)("Nothing was created.");
         process.exit(0);
     }
 }

package/dist/prompts/stack.js

@@ -95,6 +95,7 @@ async function collectStackChoices(preset) {
     const useRateLimit = isFullstack
         ? false
         : await ask(preset.useRateLimit, () => (0, ui_1.confirm)({ message: "Add rate limiting?", initialValue: false }));
+    const useCi = await ask(preset.useCi, () => (0, ui_1.confirm)({ message: "Add GitHub Actions CI?", initialValue: false }));
     const initGit = await ask(preset.initGit, () => (0, ui_1.confirm)({ message: "Initialize a git repository?", initialValue: true }));
     const installDeps = await ask(preset.installDeps, () => (0, ui_1.confirm)({ message: "Install dependencies now?", initialValue: false }));
     return {
@@ -104,6 +105,7 @@ async function collectStackChoices(preset) {
         useDocker,
         useAuth,
         useRateLimit,
+        useCi,
         initGit,
         installDeps,
     };

package/dist/types/index.js

@@ -12,6 +12,7 @@ exports.DEFAULT_CHOICES = {
     useDocker: false,
     useAuth: false,
     useRateLimit: false,
+    useCi: false,
     packageManager: "npm",
     initGit: true,
     installDeps: false,

package/dist/ui/messages.js

@@ -75,6 +75,7 @@ function showSummary(config, targetDir) {
         config.useAuth && "auth",
         config.useRateLimit && "rate limit",
         config.useDocker && "docker",
+        config.useCi && "ci",
     ];
     const setup = [
         config.packageManager,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-ts-stack",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "A CLI that scaffolds Express, NestJS, Next.js, and TanStack Start projects with a database, authentication, and Docker already set up.",
   "keywords": [
     "cli",
@@ -51,8 +51,8 @@
   "dependencies": {
     "@clack/core": "^1.4.3",
     "fs-extra": "^11.4.0",
-    "handlebars": "^4.7.9",
-    "zod": "^4.5.4"
+    "handlebars": "^4.7.10",
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@better-ts-stack/eslint-config": "*",

package/templates/backend/express/config.json

@@ -13,13 +13,13 @@
     "type:check": "tsc --noEmit"
   },
   "dependencies": {
-    "express": "^5.2.1",
+    "express": "^5.3.0",
     "dotenv": "^17.4.2",
     "cors": "^2.8.6",
     "cross-env": "^10.1.0",
     "helmet": "^8.3.0",
-    "morgan": "^1.12.0",
-    "zod": "^4.6.5"
+    "morgan": "^1.12.1",
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
@@ -27,13 +27,13 @@
     "@types/cors": "^2.8.19",
     "@types/express": "^5.0.6",
     "@types/morgan": "^1.9.10",
-    "@types/node": "^24.13.3",
-    "eslint": "^10.10.0",
+    "@types/node": "^24.19.2",
+    "eslint": "^10.14.0",
     "eslint-config-prettier": "^10.1.8",
-    "prettier": "^3.9.6",
-    "tsx": "^4.23.13",
+    "prettier": "^3.9.10",
+    "tsx": "^4.23.15",
     "typescript": "^6.0.3",
-    "typescript-eslint": "^8.69.0"
+    "typescript-eslint": "^8.72.1"
   },
   "envVars": {
     "PORT": "3000",

package/templates/backend/express/gitignore

@@ -34,3 +34,6 @@ coverage/
 
 # Misc
 *.tsbuildinfo
+
+# Prisma client, created by prisma generate
+src/generated/

package/templates/backend/nestjs/config.json

@@ -13,28 +13,28 @@
     "type:check": "tsc --noEmit"
   },
   "dependencies": {
-    "@nestjs/common": "^12.1.2",
-    "@nestjs/core": "^12.1.2",
-    "@nestjs/platform-express": "^12.1.2",
+    "@nestjs/common": "^12.3.2",
+    "@nestjs/core": "^12.3.2",
+    "@nestjs/platform-express": "^12.3.2",
     "cross-env": "^10.1.0",
     "dotenv": "^17.4.2",
     "helmet": "^8.3.0",
     "reflect-metadata": "^0.2.2",
     "rxjs": "^7.8.2",
-    "zod": "^4.6.5"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@nestjs/cli": "^12.0.8",
-    "@nestjs/schematics": "^12.0.6",
+    "@nestjs/cli": "^12.0.11",
+    "@nestjs/schematics": "^12.0.12",
     "@trivago/prettier-plugin-sort-imports": "^6.0.2",
     "@types/express": "^5.0.6",
-    "@types/node": "^24.13.3",
-    "eslint": "^10.10.0",
+    "@types/node": "^24.19.2",
+    "eslint": "^10.14.0",
     "eslint-config-prettier": "^10.1.8",
-    "prettier": "^3.9.6",
+    "prettier": "^3.9.10",
     "typescript": "^6.0.3",
-    "typescript-eslint": "^8.69.0"
+    "typescript-eslint": "^8.72.1"
   },
   "envVars": {
     "PORT": "3000",

package/templates/backend/nestjs/gitignore

@@ -34,3 +34,6 @@ coverage/
 
 # Misc
 *.tsbuildinfo
+
+# Prisma client, created by prisma generate
+src/generated/

package/templates/backend/nestjs/src/app.module.ts.hbs

@@ -35,7 +35,7 @@ import { PrismaModule } from "./prisma/prisma.module.js";
     AuthModule,
     {{/if}}
     {{#if useRateLimit}}
-    // Every route: 100 requests per client IP in 15 minutes
+    // Every route except /health: 100 requests per client IP in 15 minutes
     ThrottlerModule.forRoot([{ ttl: 15 * 60 * 1000, limit: 100 }]),
     {{/if}}
   ],

package/templates/backend/nestjs/src/health/{health.controller.ts → health.controller.ts.hbs}

@@ -1,5 +1,13 @@
 import { Controller, Get } from "@nestjs/common";
+{{#if useRateLimit}}
+import { SkipThrottle } from "@nestjs/throttler";
+{{/if}}
 
+{{#if useRateLimit}}
+// Docker and load balancers call the health check on a schedule, so it is not
+// counted
+@SkipThrottle()
+{{/if}}
 @Controller("health")
 export class HealthController {
   @Get()

package/templates/frontend/nextjs/config.json

@@ -13,25 +13,23 @@
   "dependencies": {
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
-    "lucide-react": "^1.41.0",
-    "next": "^16.3.4",
-    "react": "^19.2.8",
-    "react-dom": "^19.2.8",
-    "tailwind-merge": "^3.6.0",
-    "@radix-ui/react-slot": "^1.3.3"
+    "lucide-react": "^1.66.0",
+    "next": "^16.4.3",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
+    "tailwind-merge": "^3.7.0",
+    "@radix-ui/react-slot": "^1.5.0"
   },
   "devDependencies": {
     "@tailwindcss/postcss": "^4.3.3",
-    "@types/node": "^24.13.3",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.7",
-    "eslint": "^10.10.0",
-    "eslint-config-next": "^16.3.4",
+    "@types/node": "^24.19.2",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "eslint": "^10.14.0",
+    "eslint-config-next": "^16.4.3",
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
     "@eslint/compat": "^2.1.1"
   },
-  "envVars": {
-    "PORT": "3000"
-  }
+  "envVars": {}
 }

package/templates/frontend/nextjs/gitignore

@@ -40,3 +40,6 @@ yarn-error.log*
 # typescript
 *.tsbuildinfo
 next-env.d.ts
+
+# Prisma client, created by prisma generate
+/generated/

package/templates/frontend/tanstack/config.json

@@ -12,32 +12,32 @@
     "lint": "eslint src"
   },
   "dependencies": {
-    "@tanstack/react-query": "^5.104.3",
-    "@tanstack/react-query-devtools": "^5.104.3",
-    "@tanstack/react-router": "^1.170.45",
+    "@tanstack/react-query": "^5.105.0",
+    "@tanstack/react-query-devtools": "^5.105.0",
+    "@tanstack/react-router": "^1.170.46",
     "@tanstack/react-router-devtools": "^1.167.2",
     "@tanstack/react-router-ssr-query": "^1.167.3",
-    "@tanstack/react-start": "^1.169.3",
+    "@tanstack/react-start": "^1.169.4",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
-    "lucide-react": "^1.41.0",
-    "react": "^19.2.8",
-    "react-dom": "^19.2.8",
-    "tailwind-merge": "^3.6.0"
+    "lucide-react": "^1.66.0",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
+    "tailwind-merge": "^3.7.0"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
     "@tailwindcss/vite": "^4.3.3",
-    "@types/node": "^24.13.3",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.7",
+    "@types/node": "^24.19.2",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
     "@vitejs/plugin-react": "^6.1.2",
-    "eslint": "^10.10.0",
-    "nitro": "^3.0.260903-beta",
+    "eslint": "^10.14.0",
+    "nitro": "^3.0.261029-rc",
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
-    "typescript-eslint": "^8.69.0",
-    "vite": "^8.3.4"
+    "typescript-eslint": "^8.72.1",
+    "vite": "^8.3.5"
   },
   "envVars": {
     "PORT": "3000"

package/templates/frontend/tanstack/gitignore

@@ -37,3 +37,6 @@ yarn-error.log*
 
 # typescript
 *.tsbuildinfo
+
+# Prisma client, created by prisma generate
+/generated/

package/templates/frontend/tanstack/vite.config.ts

@@ -4,7 +4,7 @@ import viteReact from "@vitejs/plugin-react";
 import { nitro } from "nitro/vite";
 import { defineConfig } from "vite";
 
-export default defineConfig(({ command }) => ({
+export default defineConfig(({ command, isPreview }) => ({
   server: {
     port: 3000,
   },
@@ -15,8 +15,9 @@ export default defineConfig(({ command }) => ({
     tanstackStart({ srcDirectory: "src" }),
     tailwindcss(),
     viteReact(),
-    // Nitro builds the production server in .output/ (run with node). It is
-    // left out of `vite dev`, where TanStack Start's own dev server is steadier
-    command === "build" && nitro(),
+    // Nitro builds the production server in .output/ (run with node) and serves
+    // it for `vite preview`. It is left out of `vite dev`, where TanStack Start's
+    // own dev server is steadier
+    (command === "build" || isPreview) && nitro(),
   ],
 }));

package/templates/modules/auth/express/config.json

@@ -6,7 +6,7 @@
   "dependencies": {
     "bcrypt": "^6.0.0",
     "jsonwebtoken": "^9.0.3",
-    "zod": "^4.6.5"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/bcrypt": "^6.0.0",

package/templates/modules/auth/express/src/middleware/requireAuth.ts.hbs

@@ -19,8 +19,7 @@ export function requireAuth(req: AuthenticatedRequest, res: Response, next: Next
     const payload = verifyToken(token);
     req.user = payload;
     next();
-  } catch (error) {
-    console.error('JWT verification failed:', error);
+  } catch {
     res.status(401).json({ error: 'Invalid or expired token' });
   }
 }

package/templates/modules/auth/nestjs/config.json

@@ -6,7 +6,7 @@
   "dependencies": {
     "bcrypt": "^6.0.0",
     "jsonwebtoken": "^9.0.3",
-    "zod": "^4.6.5"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/bcrypt": "^6.0.0",

package/templates/modules/auth/nextjs/config.json

@@ -4,10 +4,10 @@
   "description": "Better Auth for Next.js with optional Prisma or Drizzle adapter",
   "type": "feature",
   "dependencies": {
-    "@hookform/resolvers": "^5.9.1",
-    "better-auth": "^1.7.3",
-    "react-hook-form": "^7.87.0",
-    "zod": "^4.6.5"
+    "@hookform/resolvers": "^5.9.2",
+    "better-auth": "^1.7.14",
+    "react-hook-form": "^7.91.0",
+    "zod": "^4.6.7"
   },
   "devDependencies": {},
   "scripts": {},

package/templates/{frontend/nextjs/proxy.ts.hbs → modules/auth/nextjs/proxy.ts}

@@ -1,8 +1,6 @@
+import { getSessionCookie } from "better-auth/cookies";
 import { NextResponse } from "next/server";
-
-{{#if useAuth}}
 import type { NextRequest } from "next/server";
-import { getSessionCookie } from "better-auth/cookies";
 
 export function proxy(request: NextRequest) {
   const sessionCookie = getSessionCookie(request);
@@ -17,8 +15,3 @@ export function proxy(request: NextRequest) {
 export const config = {
   matcher: ["/dashboard/:path*"],
 };
-{{else}}
-export function proxy() {
-  return NextResponse.next();
-}
-{{/if}}

package/templates/modules/auth/tanstack/config.json

@@ -4,11 +4,11 @@
   "description": "Better Auth for TanStack Start with optional Prisma, Drizzle, or MongoDB adapter",
   "type": "feature",
   "dependencies": {
-    "@hookform/resolvers": "^5.9.1",
-    "better-auth": "^1.7.3",
+    "@hookform/resolvers": "^5.9.2",
+    "better-auth": "^1.7.14",
     "dotenv": "^17.4.2",
-    "react-hook-form": "^7.87.0",
-    "zod": "^4.6.5"
+    "react-hook-form": "^7.91.0",
+    "zod": "^4.6.7"
   },
   "devDependencies": {},
   "scripts": {},

package/templates/modules/ci/.github/workflows/ci.yml.hbs

@@ -0,0 +1,43 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    name: Build, type-check, lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+{{#if (eq packageManager 'pnpm')}}
+      - uses: pnpm/action-setup@v6
+        with:
+          version: 11
+{{/if}}
+      - uses: actions/setup-node@v7
+        with:
+          node-version: 24
+{{#if (eq packageManager 'bun')}}
+      - uses: oven-sh/setup-bun@v2
+{{/if}}
+      - name: Install
+        run: {{docker.install}}
+      - name: Build
+{{#if ciBuildEnv.length}}
+        # Placeholders: the build never connects to a database. Add real values
+        # as repository secrets if your build needs them
+        env:
+{{#each ciBuildEnv}}
+          {{name}}: "{{value}}"
+{{/each}}
+{{/if}}
+        run: {{docker.run}} build
+      - name: Type-check
+        run: {{docker.run}} type:check
+      - name: Lint
+        run: {{docker.run}} lint

package/templates/modules/ci/config.json

@@ -0,0 +1,10 @@
+{
+  "id": "ci",
+  "name": "GitHub Actions CI",
+  "description": "A GitHub Actions workflow that builds, type-checks, and lints every push and pull request",
+  "type": "feature",
+  "dependencies": {},
+  "devDependencies": {},
+  "scripts": {},
+  "envVars": {}
+}

package/templates/modules/docker/.dockerignore

@@ -2,6 +2,7 @@ node_modules
 npm-debug.log
 .env*
 .git
+.github
 .gitignore
 README.md
 .vscode

package/templates/modules/docker/docker-compose.yml.hbs

@@ -1,5 +1,5 @@
 services:
-  {{projectName}}:
+  app:
     build: .
     ports:
       - "{{port}}:{{port}}"

package/templates/modules/drizzle/express/config.json

@@ -4,12 +4,12 @@
   "description": "Drizzle ORM for Express with PostgreSQL",
   "type": "database",
   "dependencies": {
-    "drizzle-orm": "^0.45.2",
-    "pg": "^8.23.0",
+    "drizzle-orm": "^0.45.4",
+    "pg": "^8.23.1",
     "dotenv": "^17.4.2"
   },
   "devDependencies": {
-    "drizzle-kit": "^0.31.10",
+    "drizzle-kit": "^0.31.11",
     "@types/pg": "^8.23.1"
   },
   "scripts": {

package/templates/modules/drizzle/nestjs/config.json

@@ -4,12 +4,12 @@
   "description": "Drizzle ORM for NestJS with PostgreSQL",
   "type": "database",
   "dependencies": {
-    "drizzle-orm": "^0.45.2",
-    "pg": "^8.23.0",
+    "drizzle-orm": "^0.45.4",
+    "pg": "^8.23.1",
     "dotenv": "^17.4.2"
   },
   "devDependencies": {
-    "drizzle-kit": "^0.31.10",
+    "drizzle-kit": "^0.31.11",
     "@types/pg": "^8.23.1"
   },
   "scripts": {

package/templates/modules/drizzle/nextjs/config.json

@@ -4,12 +4,12 @@
   "description": "Drizzle ORM for Next.js with PostgreSQL",
   "type": "database",
   "dependencies": {
-    "drizzle-orm": "^0.45.2",
-    "pg": "^8.23.0",
+    "drizzle-orm": "^0.45.4",
+    "pg": "^8.23.1",
     "dotenv": "^17.4.2"
   },
   "devDependencies": {
-    "drizzle-kit": "^0.31.10",
+    "drizzle-kit": "^0.31.11",
     "@types/pg": "^8.23.1"
   },
   "scripts": {

package/templates/modules/drizzle/tanstack/config.json

@@ -4,12 +4,12 @@
   "description": "Drizzle ORM for TanStack Start with PostgreSQL",
   "type": "database",
   "dependencies": {
-    "drizzle-orm": "^0.45.2",
-    "pg": "^8.23.0",
+    "drizzle-orm": "^0.45.4",
+    "pg": "^8.23.1",
     "dotenv": "^17.4.2"
   },
   "devDependencies": {
-    "drizzle-kit": "^0.31.10",
+    "drizzle-kit": "^0.31.11",
     "@types/pg": "^8.23.1"
   },
   "scripts": {

package/templates/modules/mongoose/express/config.json

@@ -4,8 +4,8 @@
   "description": "MongoDB database integration for Express using Mongoose ODM",
   "type": "database",
   "dependencies": {
-    "mongoose": "^9.9.5",
-    "mongodb": "^7.6.0"
+    "mongoose": "^9.11.4",
+    "mongodb": "^7.8.0"
   },
   "devDependencies": {},
   "scripts": {},

package/templates/modules/mongoose/nestjs/config.json

@@ -5,7 +5,7 @@
   "type": "database",
   "dependencies": {
     "@nestjs/mongoose": "^12.0.0",
-    "mongoose": "^9.9.5"
+    "mongoose": "^9.11.4"
   },
   "devDependencies": {},
   "scripts": {},

package/templates/modules/mongoose/nextjs/config.json

@@ -4,8 +4,8 @@
   "description": "MongoDB database integration for Next.js using Mongoose ODM",
   "type": "database",
   "dependencies": {
-    "mongoose": "^9.9.5",
-    "mongodb": "^7.6.0"
+    "mongoose": "^9.11.4",
+    "mongodb": "^7.8.0"
   },
   "devDependencies": {},
   "scripts": {},

package/templates/modules/mongoose/tanstack/config.json

@@ -4,8 +4,8 @@
   "description": "MongoDB database integration for TanStack Start using Mongoose ODM",
   "type": "database",
   "dependencies": {
-    "mongoose": "^9.9.5",
-    "mongodb": "^7.6.0",
+    "mongoose": "^9.11.4",
+    "mongodb": "^7.8.0",
     "dotenv": "^17.4.2"
   },
   "devDependencies": {},

package/templates/modules/prisma/express/config.json

@@ -4,11 +4,11 @@
   "description": "Prisma ORM with PostgreSQL database support",
   "type": "database",
   "dependencies": {
-    "@prisma/adapter-pg": "^7.10.0",
-    "@prisma/client": "^7.10.0"
+    "@prisma/adapter-pg": "^7.10.1",
+    "@prisma/client": "^7.10.1"
   },
   "devDependencies": {
-    "prisma": "^7.10.0"
+    "prisma": "^7.10.1"
   },
   "scripts": {
     "prisma:generate": "prisma generate",
@@ -22,6 +22,6 @@
   },
   "overrides": {
     "deepmerge-ts": "^8.0.2",
-    "mysql2": "^3.24.3"
+    "mysql2": "^3.24.6"
   }
 }

package/templates/modules/prisma/express/prisma.config.ts

@@ -1,5 +1,5 @@
 import "dotenv/config";
-import { defineConfig, env } from "prisma/config";
+import { defineConfig } from "prisma/config";
 
 export default defineConfig({
   schema: "prisma/schema.prisma",
@@ -7,6 +7,8 @@ export default defineConfig({
     path: "prisma/migrations",
   },
   datasource: {
-    url: env("DATABASE_URL"),
+    // prisma generate needs no URL, so a build without .env (CI, a host) works.
+    // Commands that connect report the empty URL
+    url: process.env.DATABASE_URL ?? "",
   },
 });

package/templates/modules/prisma/nestjs/config.json

@@ -4,11 +4,11 @@
   "description": "Prisma ORM for NestJS with PostgreSQL",
   "type": "database",
   "dependencies": {
-    "@prisma/adapter-pg": "^7.10.0",
-    "@prisma/client": "^7.10.0"
+    "@prisma/adapter-pg": "^7.10.1",
+    "@prisma/client": "^7.10.1"
   },
   "devDependencies": {
-    "prisma": "^7.10.0"
+    "prisma": "^7.10.1"
   },
   "scripts": {
     "prisma:generate": "prisma generate",
@@ -22,6 +22,6 @@
   },
   "overrides": {
     "deepmerge-ts": "^8.0.2",
-    "mysql2": "^3.24.3"
+    "mysql2": "^3.24.6"
   }
 }

package/templates/modules/prisma/nestjs/prisma.config.ts

@@ -1,5 +1,5 @@
 import "dotenv/config";
-import { defineConfig, env } from "prisma/config";
+import { defineConfig } from "prisma/config";
 
 export default defineConfig({
   schema: "prisma/schema.prisma",
@@ -7,6 +7,8 @@ export default defineConfig({
     path: "prisma/migrations",
   },
   datasource: {
-    url: env("DATABASE_URL"),
+    // prisma generate needs no URL, so a build without .env (CI, a host) works.
+    // Commands that connect report the empty URL
+    url: process.env.DATABASE_URL ?? "",
   },
 });

package/templates/modules/prisma/nextjs/config.json

@@ -4,11 +4,11 @@
   "description": "Prisma ORM for Next.js with PostgreSQL",
   "type": "database",
   "dependencies": {
-    "@prisma/client": "^7.10.0",
-    "@prisma/adapter-pg": "^7.10.0"
+    "@prisma/client": "^7.10.1",
+    "@prisma/adapter-pg": "^7.10.1"
   },
   "devDependencies": {
-    "prisma": "^7.10.0",
+    "prisma": "^7.10.1",
     "dotenv": "^17.4.2"
   },
   "scripts": {
@@ -23,6 +23,6 @@
   },
   "overrides": {
     "deepmerge-ts": "^8.0.2",
-    "mysql2": "^3.24.3"
+    "mysql2": "^3.24.6"
   }
 }

package/templates/modules/prisma/nextjs/prisma.config.ts

@@ -1,5 +1,5 @@
 import "dotenv/config";
-import { defineConfig, env } from "prisma/config";
+import { defineConfig } from "prisma/config";
 
 export default defineConfig({
   schema: "prisma/schema.prisma",
@@ -7,6 +7,8 @@ export default defineConfig({
     path: "prisma/migrations",
   },
   datasource: {
-    url: env("DATABASE_URL"),
+    // prisma generate needs no URL, so a build without .env (CI, a host) works.
+    // Commands that connect report the empty URL
+    url: process.env.DATABASE_URL ?? "",
   },
 });

package/templates/modules/prisma/tanstack/config.json

@@ -4,11 +4,11 @@
   "description": "Prisma ORM for TanStack Start with PostgreSQL",
   "type": "database",
   "dependencies": {
-    "@prisma/client": "^7.10.0",
-    "@prisma/adapter-pg": "^7.10.0"
+    "@prisma/client": "^7.10.1",
+    "@prisma/adapter-pg": "^7.10.1"
   },
   "devDependencies": {
-    "prisma": "^7.10.0",
+    "prisma": "^7.10.1",
     "dotenv": "^17.4.2"
   },
   "scripts": {
@@ -23,6 +23,6 @@
   },
   "overrides": {
     "deepmerge-ts": "^8.0.2",
-    "mysql2": "^3.24.3"
+    "mysql2": "^3.24.6"
   }
 }

package/templates/modules/prisma/tanstack/prisma.config.ts

@@ -1,5 +1,5 @@
 import "dotenv/config";
-import { defineConfig, env } from "prisma/config";
+import { defineConfig } from "prisma/config";
 
 export default defineConfig({
   schema: "prisma/schema.prisma",
@@ -7,6 +7,8 @@ export default defineConfig({
     path: "prisma/migrations",
   },
   datasource: {
-    url: env("DATABASE_URL"),
+    // prisma generate needs no URL, so a build without .env (CI, a host) works.
+    // Commands that connect report the empty URL
+    url: process.env.DATABASE_URL ?? "",
   },
 });

package/templates/modules/rate-limit/express/config.json

@@ -4,7 +4,7 @@
   "description": "Per-IP request limits for Express with express-rate-limit",
   "type": "feature",
   "dependencies": {
-    "express-rate-limit": "^8.7.1"
+    "express-rate-limit": "^8.7.2"
   },
   "devDependencies": {},
   "scripts": {},

package/templates/modules/rate-limit/express/src/middleware/rateLimit.ts

@@ -4,12 +4,14 @@ import { rateLimit } from "express-rate-limit";
 // balancer, set app.set("trust proxy", 1) so the real client IP is used.
 const FIFTEEN_MINUTES = 15 * 60 * 1000;
 
-// Every route: 100 requests per IP in 15 minutes
+// Every route: 100 requests per IP in 15 minutes. The health check is left out
+// because Docker and load balancers call it on a schedule
 export const apiLimiter = rateLimit({
   windowMs: FIFTEEN_MINUTES,
   limit: 100,
   standardHeaders: "draft-8",
   legacyHeaders: false,
+  skip: (req) => req.path === "/health",
 });
 
 // Sign-up and login: 10 attempts per IP in 15 minutes, against password guessing