dinou 4.0.7 → 4.0.8

package/CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [4.0.8]
+
+### Changed
+
+- Increase versions of concurrently and copy-webpack-plugin for vulnerabilities.
+- Uninstall css-modules-require-hook and create dinou/core/css-require-hook.js.
+
 ## [4.0.7]
 
 ### Fixed

package/dinou/core/babel-esm-loader.js

@@ -6,10 +6,7 @@ const createScopedName = require("./createScopedName");
 const { extensionsWithDot } = require("./asset-extensions.js");
 const { getAbsPathWithExt } = require("./get-abs-path-with-ext.js");
 
-require("css-modules-require-hook")({
-  generateScopedName: createScopedName,
-  extensions: [".css"],
-});
+require("./css-require-hook.js")();
 
 exports.resolve = async function resolve(specifier, context, defaultResolve) {
   const absPathWithExt = getAbsPathWithExt(specifier, context);

package/dinou/core/css-require-hook.js

@@ -0,0 +1,64 @@
+const fs = require("fs");
+const postcss = require("postcss");
+const createScopedName = require("./createScopedName");
+
+function registerCSSRequireHook() {
+  require.extensions[".css"] = function (module, filename) {
+    const cssContent = fs.readFileSync(filename, "utf8");
+    const jsonResult = {};
+
+    const plugin = {
+      postcssPlugin: "extract-classes",
+      Rule(rule) {
+        // Ignorar clases dentro de animaciones (@keyframes)
+        if (rule.parent && rule.parent.name === "keyframes") {
+          return;
+        }
+
+        const selector = rule.selector;
+        // Regex para capturar nombres de clases válidos
+        const classRegex = /\.([_a-zA-Z0-9-]+)/g;
+        let match;
+
+        while ((match = classRegex.exec(selector)) !== null) {
+          const className = match[1];
+
+          // Manejo de selectores :global y :local
+          const index = match.index;
+          const before = selector.slice(0, index);
+          const lastGlobal = before.lastIndexOf(":global");
+          const lastLocal = before.lastIndexOf(":local");
+
+          // Si la clase está bajo el ámbito de un :global activo, no la hasheamos
+          if (lastGlobal > lastLocal) {
+            const afterGlobal = before.slice(lastGlobal);
+            if (afterGlobal.includes("(")) {
+              const openParens = afterGlobal.split("(").length - 1;
+              const closeParens = afterGlobal.split(")").length - 1;
+              if (openParens > closeParens) {
+                jsonResult[className] = className;
+                continue;
+              }
+            } else {
+              // Ejemplo: :global .my-class (sin paréntesis)
+              jsonResult[className] = className;
+              continue;
+            }
+          }
+
+          // Si es una clase local, generamos el hash determinista correspondiente
+          if (!jsonResult[className]) {
+            jsonResult[className] = createScopedName(className, filename);
+          }
+        }
+      }
+    };
+
+    // Procesamos de forma estrictamente síncrona (PostCSS es síncrono si sus plugins lo son)
+    postcss([plugin]).process(cssContent, { from: filename }).css;
+
+    module.exports = jsonResult;
+  };
+}
+
+module.exports = registerCSSRequireHook;

package/dinou/core/render-html.js

@@ -14,9 +14,7 @@ babelRegister({
 const addHook = require("./asset-require-hook.js");
 const { extensions } = require("./asset-extensions.js");
 const createScopedName = require("./createScopedName");
-require("css-modules-require-hook")({
-  generateScopedName: createScopedName,
-});
+require("./css-require-hook.js")();
 addHook({
   extensions,
   name: function (localName, filepath) {

package/dinou/core/server.js

@@ -23,9 +23,7 @@ babelRegister({
   extensions: [".js", ".jsx", ".ts", ".tsx"],
 });
 const createScopedName = require("./createScopedName");
-require("css-modules-require-hook")({
-  generateScopedName: createScopedName,
-});
+require("./css-require-hook.js")();
 addHook({
   extensions,
   name: function (localName, filepath) {

package/dinou/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dinou-ejected",
-  "version": "4.0.7",
+  "version": "4.0.8",
   "main": "index.js",
   "private": true,
   "exports": {
@@ -37,12 +37,11 @@
     "babel-plugin-react-compiler": "^1.0.0",
     "chokidar": "^4.0.3",
     "commander": "^14.0.0",
-    "concurrently": "^9.2.0",
+    "concurrently": "^10.0.3",
     "cookie-parser": "^1.4.7",
-    "copy-webpack-plugin": "^13.0.1",
+    "copy-webpack-plugin": "^14.0.0",
     "cross-env": "^7.0.3",
     "css-loader": "^7.1.2",
-    "css-modules-require-hook": "^4.2.3",
     "dotenv": "^16.5.0",
     "esbuild": "^0.27.0",
     "esbuild-copy-static-files": "^0.1.0",
@@ -74,4 +73,4 @@
     "react": ">=19.2.3",
     "react-dom": ">=19.2.3"
   }
-}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dinou",
-  "version": "4.0.7",
+  "version": "4.0.8",
   "description": "Full-Stack React 19 framework with React Server Components, Server Functions, and Streaming SSR.",
   "main": "index.js",
   "bin": {
@@ -61,12 +61,11 @@
     "babel-plugin-react-compiler": "^1.0.0",
     "chokidar": "^4.0.3",
     "commander": "^14.0.0",
-    "concurrently": "^9.2.0",
+    "concurrently": "^10.0.3",
     "cookie-parser": "^1.4.7",
-    "copy-webpack-plugin": "^13.0.1",
+    "copy-webpack-plugin": "^14.0.0",
     "cross-env": "^7.0.3",
     "css-loader": "^7.1.2",
-    "css-modules-require-hook": "^4.2.3",
     "dotenv": "^16.5.0",
     "esbuild": "^0.27.0",
     "esbuild-copy-static-files": "^0.1.0",