cabloy 5.1.94 → 5.1.96

package/.cabloy-version

@@ -0,0 +1 @@
+5.1.96

package/.claude/skills/cabloy-backend-scaffold/references/follow-up-checklist.md

@@ -15,7 +15,10 @@ After generating or extending a backend thread, check which follow-up layers app
 - OpenAPI metadata
 - inferred DTO opportunities
 - frontend contract impact
-- `@Api.field(...)` / `$makeSchema(...)` ordering when an explicit zod/custom schema is present: put that schema last because `makeSchemaLikes(...)` applies arguments right-to-left and later helpers can otherwise be ignored
+- `@Api.field(...)` / `$makeSchema(...)` ordering: framework guards now preserve previously attached OpenAPI metadata across schema rebuilds, but structure-shaping schemaLike is still order-sensitive
+- when an explicit zod/custom schema or other structure-defining schemaLike is present, put that structure-defining schemaLike last because `makeSchemaLikes(...)` applies arguments right-to-left and later structure changes can otherwise alter or replace the intended schema
+- treat `v.object(...)`, `v.array(...)`, `v.optional()`, `v.nullable()`, `v.default(...)`, and preprocess/transform wrappers as structure-shaping rather than metadata-only
+- after touching structure-shaping schemaLike, verify the emitted schema/OpenAPI result explicitly
 
 ## Persistence follow-up
 

package/.claude/skills/cabloy-resource-field-update/SKILL.md

@@ -158,9 +158,12 @@ For enum-like numeric or string values, prefer an explicit constrained schema su
 
 Ordering rule:
 
-- when that explicit zod schema is passed into `@Api.field(...)`, put it as the **last argument**
-- keep helper metadata such as `v.xxx(...)` and `ZovaRender.xxx(...)` before the zod schema
-- otherwise helpers written after the zod schema may stop taking effect
+- framework-level guarding now preserves previously attached OpenAPI metadata across schema rebuilds, so metadata-only helpers are less order-sensitive than before
+- this only removes **metadata-loss order pitfalls**; it does **not** make all `schemaLike` arguments fully order-independent
+- when an explicit zod/custom schema or other structure-shaping schemaLike is passed into `@Api.field(...)`, keep that structure-defining schemaLike as the **last argument** unless a local pattern clearly requires otherwise
+- treat helpers such as `v.object(...)`, `v.array(...)`, `v.optional()`, `v.nullable()`, `v.default(...)`, and preprocess/transform wrappers as structure-shaping, not metadata-only
+- keep helper metadata such as `v.xxx(...)` and `ZovaRender.xxx(...)` before the final structure-defining schemaLike
+- after edits involving structure-shaping schemaLike, verify the emitted schema/OpenAPI result instead of assuming reorder is safe
 
 Then check whether DTOs are already inferred through patterns such as:
 

package/.github/workflows/vona-test-crud.yml

@@ -37,5 +37,7 @@ jobs:
         working-directory: vona
       - run: npm run build -- --flavor=ci
         working-directory: vona
+      - run: pnpm -C ./dist/ci install
+        working-directory: vona
       - run: npm run play -- --mode=prod --flavor=ci
         working-directory: vona

package/.github/workflows/vona-test-mysql.yml

@@ -38,5 +38,7 @@ jobs:
         working-directory: vona
       - run: DATABASE_DEFAULT_CLIENT=mysql DATABASE_CLIENT_MYSQL_HOST=127.0.0.1 DATABASE_CLIENT_MYSQL_PASSWORD=root npm run build -- --flavor=ci
         working-directory: vona
+      - run: pnpm -C ./dist/ci install
+        working-directory: vona
       - run: DATABASE_DEFAULT_CLIENT=mysql DATABASE_CLIENT_MYSQL_HOST=127.0.0.1 DATABASE_CLIENT_MYSQL_PASSWORD=root npm run play -- --mode=prod --flavor=ci
         working-directory: vona

package/.github/workflows/vona-test-pg.yml

@@ -38,5 +38,7 @@ jobs:
         working-directory: vona
       - run: DATABASE_DEFAULT_CLIENT=pg npm run build -- --flavor=ci
         working-directory: vona
+      - run: pnpm -C ./dist/ci install
+        working-directory: vona
       - run: DATABASE_DEFAULT_CLIENT=pg npm run play -- --mode=prod --flavor=ci
         working-directory: vona

package/.github/workflows/vona-test-sqlite3.yml

@@ -31,5 +31,7 @@ jobs:
         working-directory: vona
       - run: DATABASE_DEFAULT_CLIENT=sqlite3 npm run build -- --flavor=ci
         working-directory: vona
+      - run: pnpm -C ./dist/ci install
+        working-directory: vona
       - run: DATABASE_DEFAULT_CLIENT=sqlite3 npm run play -- --mode=prod --flavor=ci
         working-directory: vona

package/CHANGELOG.md

@@ -1,5 +1,43 @@
 # Changelog
 
+## 5.1.96
+
+### Features
+
+- Integrate Cloudflare image provider with signed image delivery.
+- Add scene-based image upload flow.
+- Secure image upload token flow and support imageId-based training images.
+- Restore `expiresIn` support for image upload tokens.
+- Add basic-image table cell thumbnails.
+- Add basic-image student field integration.
+- Add the `a-image` upload API contract.
+- Align image variants with transform options.
+- Add the `a-image` suite scaffold and tests.
+
+### Bug Fixes
+
+- Sync nested detail image previews after dialog submission.
+- Preserve OpenAPI metadata across schema rebuilds.
+- Correct basic-image upload and preview URLs.
+- Tighten image upload constraints.
+
+### Improvements
+
+- Strengthen image variant typing.
+- Move basic-image types into `src/types`.
+- Generate the basic-image OpenAPI SDK.
+- Skip redundant OpenAPI metadata merges.
+- Configure the default image upload provider.
+- Extract shared base options for image provider clients.
+- Remove the unused native signed URL helper.
+
+## 5.1.95
+
+### Improvements
+
+- Refresh the Zova lockfile to prepare for the compensation rerun.
+- Refresh the `vona zova-core` patch for compatibility with `v5.1.75`.
+
 ## 5.1.94
 
 ### Features

package/CLAUDE.md

@@ -65,6 +65,7 @@ Before inventing a custom implementation path:
 - `src/bean` defines the global shorthand surface; classes that should not appear in `IBeanRecordGlobal` should move to `src/lib` or `src/service` rather than being filtered by `@Virtual()`.
 - When backend code references `this.bean.xxx`, `ctx.bean.xxx`, or `app.bean.xxx`, use `IBeanRecordGlobal` and module `src/.metadata/index.ts` as the first static lookup surface; use `IBeanRecordGeneral` or `src/service` only when the target is not a global shorthand.
 - When adding a persisted field to an existing backend resource, ask the user whether `vonaModule.fileVersion` should be incremented before changing `meta.version.ts` or the module schema path. If yes, add a new migration version and bump `fileVersion`. If no, keep the current `fileVersion` and fold the schema change into the current version path. Do not assume the versioning strategy without confirmation.
+- For `@Api.field(...)` and related schemaLike composition, framework guards now preserve previously attached OpenAPI metadata across schema rebuilds, but structure-shaping schemaLike is still order-sensitive. Treat `v.object(...)`, `v.array(...)`, `v.optional()`, `v.nullable()`, `v.default(...)`, and preprocess/transform wrappers as structure-shaping; keep the final structure-defining schemaLike last and verify emitted schema/OpenAPI output after such edits.
 
 ## Verification expectations
 

package/cabloy-docs/ai/playbook-backend-module.md

@@ -68,9 +68,12 @@ Depending on the feature, extend the generated code with the right framework-lev
 
 When refining entity or DTO fields that use `@Api.field(...)`, apply this framework-specific guardrail:
 
-- if you include an explicit zod schema such as `z.number().int().min(1)`, place it as the **last argument**
-- keep helper metadata such as `v.xxx(...)` and `ZovaRender.xxx(...)` before the zod schema
-- otherwise helpers written after the zod schema may stop taking effect
+- framework-level guarding now preserves previously attached OpenAPI metadata across schema rebuilds, so metadata-only helpers are less order-sensitive than before
+- this only removes **metadata-loss order pitfalls**; it does **not** make all `schemaLike` arguments fully order-independent
+- if you include an explicit zod schema such as `z.number().int().min(1)`, or another structure-shaping schemaLike, place that structure-defining schemaLike as the **last argument**
+- treat helpers such as `v.object(...)`, `v.array(...)`, `v.optional()`, `v.nullable()`, `v.default(...)`, and preprocess/transform wrappers as structure-shaping rather than metadata-only
+- keep helper metadata such as `v.xxx(...)` and `ZovaRender.xxx(...)` before the final structure-defining schemaLike
+- after edits involving structure-shaping schemaLike, verify the emitted schema/OpenAPI result instead of assuming reorder is safe
 
 Relevant docs:
 

package/cabloy-docs/fullstack/framework-performance.md

@@ -42,17 +42,17 @@ For the current public explanation of this backend capability, see [Cache Guide]
 
 This is the kind of result Cabloy is designed to support: a framework that stays operationally calm even when the system keeps running for long periods.
 
-One internally generated project was kept running continuously for **2 days**. At one representative PM2 snapshot, the process looked like this:
+One internally generated project was kept running continuously for **21 days**. At one representative PM2 snapshot, the process looked like this:
 
 ```text
 ┌────┬─────────────────┬─────────────┬─────────┬─────────┬──────────┬────────┬──────┬───────────┬──────────┬──────────┬──────────┬──────────┐
 │ id │ name            │ namespace   │ version │ mode    │ pid      │ uptime │ ↺    │ status    │ cpu      │ mem      │ user     │ watching │
 ├────┼─────────────────┼─────────────┼─────────┼─────────┼──────────┼────────┼──────┼───────────┼──────────┼──────────┼──────────┼──────────┤
-│ 0  │ cabloy_***    │ default     │ N/A     │ cluster │ 226947   │ 2D    │ 17   │ online    │ 0%       │ 376.2mb  │ ubuntu   │ disabled │
+│ 0  │ cabloy_***    │ default     │ N/A     │ cluster │ 226947   │ 21D    │ 17   │ online    │ 0%       │ 435.0mb  │ ubuntu   │ disabled │
 └────┴─────────────────┴─────────────┴─────────┴─────────┴──────────┴────────┴──────┴───────────┴──────────┴──────────┴──────────┴──────────┘
 ```
 
-For this 2-day continuous run, the observed result was **0 memory leak**.
+For this 21-day continuous run, the observed result was **0 memory leak**.
 
 The value of this example is not that it is a synthetic micro-benchmark. The value is that it reflects a real long-running project process with a clear, inspectable runtime footprint.
 

package/cabloy-docs/fullstack/quickstart.md

@@ -90,7 +90,7 @@ Both Cabloy Basic and Cabloy Start support the same Docker Compose command flow.
 
 ```bash
 npm run build:docker
-cd docker-compose
+cd vona/docker-compose
 sudo COMPOSE_BAKE=true docker-compose build
 sudo docker-compose up
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cabloy",
-  "version": "5.1.94",
+  "version": "5.1.96",
   "gitHead": "2c5c19284bab738e492856189acb6fad74b8a7b7",
   "description": "A Node.js fullstack framework",
   "keywords": [

package/scripts/release.ts

@@ -37,6 +37,7 @@ const ZOVA_CORE_PACKAGE_JSON_PATH = resolve(
   'package.json',
 );
 const PACKAGE_JSON_PATH = resolve(ROOT_DIR, 'package.json');
+const CABLOY_VERSION_PATH = resolve(ROOT_DIR, '.cabloy-version');
 const CHANGELOG_PATH = resolve(ROOT_DIR, 'CHANGELOG.md');
 const ZOVA_CORE_PATCH_TARGETS = [
   'dist/bean/resource/error/errorGlobal.d.ts',
@@ -95,6 +96,23 @@ function writePackageJson(pkg: Record<string, any>): void {
   writeFileSync(PACKAGE_JSON_PATH, `${JSON.stringify(pkg, null, 2)}\n`);
 }
 
+function readCabloyVersion(): string | null {
+  if (!existsSync(CABLOY_VERSION_PATH)) return null;
+  const version = readFileSync(CABLOY_VERSION_PATH, 'utf-8').trim();
+  if (!version) return null;
+  if (!isValidVersion(version)) {
+    throw new Error(`Invalid Cabloy version marker: ${version}`);
+  }
+  return version;
+}
+
+function writeCabloyVersion(version: string): void {
+  if (!isValidVersion(version)) {
+    throw new Error(`Invalid Cabloy version: ${version}`);
+  }
+  writeFileSync(CABLOY_VERSION_PATH, `${version}\n`);
+}
+
 function isValidVersion(version: string): boolean {
   return /^\d+\.\d+\.\d+$/.test(version);
 }
@@ -612,6 +630,7 @@ async function versionBump(
 ): Promise<string> {
   const pkg = readPackageJson();
   const currentVersion = pkg.version;
+  const currentCabloyVersion = readCabloyVersion();
   const lastTag = getLastTag();
 
   // Check for changes since last tag
@@ -629,6 +648,12 @@ async function versionBump(
     }
   }
 
+  if (currentCabloyVersion && currentCabloyVersion !== currentVersion) {
+    throw new Error(
+      `Version mismatch before release: package.json=${currentVersion}, .cabloy-version=${currentCabloyVersion}`,
+    );
+  }
+
   const newVersion = bumpVersion(currentVersion, bumpType);
   // eslint-disable-next-line
   console.log(`\n📦 Version bump: ${currentVersion} → ${newVersion}`);
@@ -636,10 +661,11 @@ async function versionBump(
   pkg.version = newVersion;
   if (!dryRun) {
     writePackageJson(pkg);
+    writeCabloyVersion(newVersion);
   }
 
   const tag = `${TAG_PREFIX}${newVersion}`;
-  exec('git add package.json', dryRun);
+  exec('git add package.json .cabloy-version', dryRun);
   exec(`git commit -m "chore: release v${newVersion}"`, dryRun);
   exec(`git tag ${tag}`, dryRun);
   exec('git push', dryRun);

package/vona/docker-compose-original/docker-compose-dockerfile-app

@@ -1,10 +1,14 @@
 FROM node:24
 
+RUN corepack enable && corepack prepare pnpm@11.5.2 --activate
+
 RUN mkdir -p /opt/node/app/dist
 WORKDIR /opt/node/app
 
+COPY ./dist/docker /opt/node/app/dist/docker
 COPY ./scripts /opt/node/app/scripts
 
+RUN pnpm -C ./dist/docker install
 RUN chmod +x /opt/node/app/scripts/*.sh
 
 # start

package/vona/docker-compose-original/docker-compose.original.yml

@@ -10,7 +10,6 @@ services:
     ports:
       - '7202:7102'
     volumes:
-      - ./output/dist/docker:/opt/node/app/dist/docker
       - ./output/app/.vona:/root/.vona
     command: [./scripts/wait-for-it.sh, 'pg:5432', 'redis:6379', -s, --, ./scripts/app-init.sh]
 

package/vona/env/.env

@@ -56,7 +56,6 @@ TEST_PATTERNS_IGNORE = '**/test-vona/test/cache/cacheMem.test.ts,**/test-vona/te
 DATABASE_DEFAULT_CLIENT = 'sqlite3' # sqlite3/pg/mysql
 
 DATABASE_CLIENT_SQLITE3_FILENAME =
-DATABASE_CLIENT_SQLITE3_NATIVEBINDING = false
 
 DATABASE_CLIENT_PG_HOST = 127.0.0.1
 DATABASE_CLIENT_PG_PORT = 5432

package/vona/env/.env.prod

@@ -7,7 +7,6 @@ SERVER_KEYS = vona__1596889048291_2867
 DATABASE_DEFAULT_CLIENT = 'sqlite3' # sqlite3/pg/mysql
 
 DATABASE_CLIENT_SQLITE3_FILENAME =
-DATABASE_CLIENT_SQLITE3_NATIVEBINDING = true
 
 DATABASE_CLIENT_PG_HOST = 127.0.0.1
 DATABASE_CLIENT_PG_PORT = 5432

package/vona/env/.env.prod.docker

@@ -3,17 +3,10 @@
 SERVER_KEYS = vona__1596889048291_2867
 SERVER_WORKERS = 1
 
-# build
-
-BUILD_MINIFY = false
-BUILD_COPY_DIST = ./docker-compose/output/dist
-
 # database
 
 DATABASE_DEFAULT_CLIENT = 'pg' # sqlite3/pg/mysql
 
-DATABASE_CLIENT_SQLITE3_NATIVEBINDING = false
-
 DATABASE_CLIENT_PG_HOST = pg # see: docker-compose.yml
 DATABASE_CLIENT_PG_PORT = 5432
 DATABASE_CLIENT_PG_USER = postgres

package/vona/package.original.json

@@ -28,9 +28,9 @@
     "tsc": "npm run prerun && npm run vona :bin:tsc",
     "build": "npm run prerun && npm run vona :bin:build -- --flavor=normal",
     "build:docker": "npm run prerun && npm run vona :bin:build -- --flavor=docker",
-    "start": "node ./dist/normal/bootstrap.js",
-    "start:one": "cross-env SERVER_WORKERS=1 node ./dist/normal/bootstrap.js",
-    "start:docker": "cross-env SERVER_WORKERS=1 node ./dist/docker/bootstrap.js",
+    "start": "pnpm -C ./dist/normal install && node ./dist/normal/bootstrap.js",
+    "start:one": "pnpm -C ./dist/normal install && cross-env SERVER_WORKERS=1 node ./dist/normal/bootstrap.js",
+    "start:docker": "pnpm -C ./dist/docker install && cross-env SERVER_WORKERS=1 node ./dist/docker/bootstrap.js",
     "prerun": "npm run vona :tools:deps",
     "format": "oxfmt --check",
     "format:fix": "oxfmt --write",

package/vona/packages-cli/cabloy-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabloy/cli",
-  "version": "3.1.27",
+  "version": "3.1.28",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "@cabloy/cli",
   "keywords": [
@@ -37,7 +37,7 @@
   "dependencies": {
     "@babel/parser": "^7.29.2",
     "@cabloy/module-glob": "workspace:^",
-    "@cabloy/module-info": "^2.0.0",
+    "@cabloy/module-info": "^2.0.3",
     "@cabloy/process-helper": "workspace:^",
     "@cabloy/utils": "workspace:^",
     "@cabloy/word-utils": "^2.1.8",

package/vona/packages-cli/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-cli",
-  "version": "1.1.127",
+  "version": "1.1.128",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "vona cli",
   "keywords": [

package/vona/packages-cli/cli-set-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-cli-set-api",
-  "version": "1.1.125",
+  "version": "1.1.126",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "vona cli-set-api",
   "keywords": [
@@ -46,7 +46,7 @@
     "@cabloy/dotenv": "workspace:^",
     "@cabloy/extend": "workspace:^",
     "@cabloy/module-glob": "workspace:^",
-    "@cabloy/module-info": "^2.0.0",
+    "@cabloy/module-info": "^2.0.3",
     "@cabloy/utils": "workspace:^",
     "@cabloy/word-utils": "^2.1.8",
     "@lcov-viewer/cli": "^1.3.0",

package/vona/packages-cli/cli-set-api/src/lib/bean/cli.bin.build.ts

@@ -93,7 +93,8 @@ export class CliBinBuild extends BeanCliBase {
     const { env, modulesMeta } = await generateVonaMeta(configMeta, configOptions);
     const outDir = path.join(projectPath, getOutDir());
     await rimraf(outDir);
-    await this._rollup(projectPath, env, outDir);
+    const { externals, allowBuilds } = await this._rollup(projectPath, env, modulesMeta, outDir);
+    await this._packageJson(projectPath, outDir, externals, allowBuilds);
     await this._assets(projectPath, modulesMeta, outDir);
     // custom
     await this._custom(projectPath, env, outDir);
@@ -122,6 +123,37 @@ export class CliBinBuild extends BeanCliBase {
     }
   }
 
+  async _packageJson(
+    _projectPath: string,
+    outDir: string,
+    externals: Record<string, string>,
+    allowBuilds: Record<string, boolean>,
+  ) {
+    // package.json
+    const dependencies: Record<string, string> = {};
+    for (const name of Object.keys(externals).sort()) {
+      const version = externals[name];
+      if (!version) throw new Error(`external dependency version not found: ${name}`);
+      dependencies[name] = version;
+    }
+    const pkgContent = {
+      type: 'module',
+      dependencies,
+    };
+    await fse.writeFile(
+      path.join(outDir, 'package.json'),
+      `${JSON.stringify(pkgContent, null, 2)}\n`,
+    );
+    // pnpm-workspace.yaml
+    const nativeBuildDepsAllowList = Object.keys(allowBuilds);
+    const content = [
+      'allowBuilds:',
+      ...nativeBuildDepsAllowList.map(name => `  ${name}: true`),
+      '',
+    ].join('\n');
+    await fse.writeFile(path.join(outDir, 'pnpm-workspace.yaml'), content);
+  }
+
   async _custom(projectPath: string, env: NodeJS.ProcessEnv, outDir: string) {
     // custom
     const jsFile = path.join(projectPath, 'src/backend/cli.ts');
@@ -156,7 +188,12 @@ export class CliBinBuild extends BeanCliBase {
     await rimraf(`${assetsPath}/**/.DS_Store`, { glob: true });
   }
 
-  async _rollup(projectPath: string, env: NodeJS.ProcessEnv, outDir: string) {
+  async _rollup(
+    projectPath: string,
+    env: NodeJS.ProcessEnv,
+    modulesMeta: Awaited<ReturnType<typeof glob>>,
+    outDir: string,
+  ) {
     const aliasEntries: aliasImport.Alias[] = [];
     const dialectDrivers = (process.env.BUILD_DIALECT_DRIVERS || '').split(',');
     for (const name of __dialectDriversAll) {
@@ -167,6 +204,34 @@ export class CliBinBuild extends BeanCliBase {
     const sourceMap = process.env.BUILD_SOURCEMAP === 'true';
 
     const replaceValues = generateConfigDefine(env, ['NODE_ENV', 'META_MODE', 'META_FLAVOR']);
+    for (const relativeName in modulesMeta.modules) {
+      const module = modulesMeta.modules[relativeName];
+      const replacesModule = module.package.vonaModule?.bundle?.replaces;
+      if (!replacesModule) continue;
+      for (const replaceModule of replacesModule) {
+        replaceValues[replaceModule[0]] = replaceModule[1];
+      }
+    }
+
+    const externals: Record<string, string> = {};
+    for (const relativeName in modulesMeta.modules) {
+      const module = modulesMeta.modules[relativeName];
+      const externalsModule = module.package.vonaModule?.bundle?.externals;
+      if (!externalsModule) continue;
+      for (const external of externalsModule) {
+        externals[external] = module.package.dependencies[external];
+      }
+    }
+
+    const allowBuilds: Record<string, true> = {};
+    for (const relativeName in modulesMeta.modules) {
+      const module = modulesMeta.modules[relativeName];
+      const allowBuildsModule = module.package.vonaModule?.bundle?.allowBuilds;
+      if (!allowBuildsModule) continue;
+      for (const allowBuild of allowBuildsModule) {
+        allowBuilds[allowBuild] = true;
+      }
+    }
 
     const babelPluginVonaBeanModule = getAbsolutePathOfModule('babel-plugin-vona-bean-module', '');
     const babelPluginTransformTypescriptMetadata = getAbsolutePathOfModule(
@@ -235,6 +300,7 @@ export class CliBinBuild extends BeanCliBase {
     const inputOptions: RollupOptions = {
       input: path.join(projectPath, '.vona/bootstrap.ts'),
       plugins,
+      external: Object.keys(externals),
       onLog: (level: LogLevel, log: RollupLog, defaultHandler: LogOrStringHandler) => {
         if (
           log.code === 'CIRCULAR_DEPENDENCY' &&
@@ -276,5 +342,7 @@ export class CliBinBuild extends BeanCliBase {
         await bundle.close();
       }
     }
+
+    return { externals, allowBuilds };
   }
 }

package/vona/packages-utils/babel-plugin-vona-bean-module/package.json

@@ -1,6 +1,6 @@
 {
   "name": "babel-plugin-vona-bean-module",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "babel-plugin-vona-bean-module",
   "keywords": [
@@ -39,7 +39,7 @@
   "dependencies": {
     "@babel/core": "^7.29.0",
     "@babel/traverse": "^7.29.0",
-    "@cabloy/module-info": "^2.0.0",
+    "@cabloy/module-info": "^2.0.3",
     "@cabloy/word-utils": "^2.1.8"
   },
   "devDependencies": {

package/vona/packages-utils/module-glob/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabloy/module-glob",
-  "version": "5.3.16",
+  "version": "5.3.17",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "cabloy module-glob",
   "keywords": [
@@ -34,7 +34,7 @@
     "postpack": "clean-package restore"
   },
   "dependencies": {
-    "@cabloy/module-info": "^2.0.0",
+    "@cabloy/module-info": "^2.0.3",
     "@cabloy/utils": "workspace:^",
     "boxen": "^4.2.0",
     "chalk": "^3.0.0",

package/vona/packages-utils/module-info-pro/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabloy/module-info-pro",
-  "version": "1.1.7",
+  "version": "1.1.8",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "cabloy module-info-pro",
   "keywords": [
@@ -34,7 +34,7 @@
     "postpack": "clean-package restore"
   },
   "dependencies": {
-    "@cabloy/module-info": "^2.0.0",
+    "@cabloy/module-info": "^2.0.3",
     "stack-utils": "^2.0.6"
   },
   "devDependencies": {

package/vona/packages-utils/utils/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabloy/utils",
-  "version": "2.1.25",
+  "version": "2.1.26",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "cabloy utils",
   "keywords": [
@@ -34,7 +34,7 @@
     "postpack": "clean-package restore"
   },
   "dependencies": {
-    "@cabloy/module-info": "^2.0.0",
+    "@cabloy/module-info": "^2.0.3",
     "@cabloy/word-utils": "^2.1.8",
     "@marcbachmann/cel-js": "^7.6.0",
     "object-hash": "^3.0.0"

package/vona/packages-vona/vona/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona",
-  "version": "5.1.67",
+  "version": "5.1.68",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "Vona is an intuitive, elegant and powerful Node.js framework for rapidly developing enterprise applications of any size",
   "keywords": [

package/vona/packages-vona/vona-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-core",
-  "version": "5.1.30",
+  "version": "5.1.31",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "vona",
   "keywords": [
@@ -39,7 +39,7 @@
     "@cabloy/extend": "workspace:^",
     "@cabloy/json5": "workspace:^",
     "@cabloy/localeutil": "workspace:^",
-    "@cabloy/module-info": "^2.0.0",
+    "@cabloy/module-info": "^2.0.3",
     "@cabloy/module-info-pro": "workspace:^",
     "@cabloy/type-fest": "^5.3.1",
     "@cabloy/utils": "workspace:^",