iobroker.sigenergy 3.1.0 → 3.1.2

package/README.md

@@ -255,6 +255,15 @@ Status and power readings for the DC charger.
 
 ## Changelog
 
+### 3.1.2 (2026-08-06)
+- (ssbingo) chore: resolved all 28 npm audit findings (3 critical, 11 high) — development tooling only, the published adapter is unchanged
+- (ssbingo) chore: removed `@iobroker/dev-server`; it was the sole source of the critical findings via the deprecated `request` and `xmldom` packages, for which no fixed release exists. This also removes the `npm start` / `npm run watch` scripts
+- (ssbingo) chore: added `overrides` lifting transitive dev dependencies onto patched versions
+- (ssbingo) chore: removed `main.test.js`, an unused create-adapter template stub
+
+### 3.1.1 (2026-08-05)
+- (ssbingo) chore: security updates for transitive dependencies (brace-expansion 1.1.18, axios 1.19.0, fast-uri 3.1.5, socket.io-parser 4.2.7)
+
 ### 3.1.0 (2026-08-05)
 - (MMeinhardt1) feat: statistics module improvements — new states `pvToBatteryPower`, `batteryToHousePower`, `gridImportToday`, `gridExportToday`, `currentSoc`, `currentPvPower` and `h:mm` formatted durations for all time statistics
 - (MMeinhardt1) feat: daily statistics (SOC min/max, coverage time, grid energy, charging time) are restored from persisted states and now survive an adapter restart mid-day

package/io-package.json

@@ -1,8 +1,34 @@
 {
     "common": {
         "name": "sigenergy",
-        "version": "3.1.0",
+        "version": "3.1.2",
         "news": {
+            "3.1.2": {
+                "en": "(ssbingo) chore: all npm audit findings resolved (28 -> 0); removed @iobroker/dev-server, which pulled in unpatchable deprecated packages. Development tooling only — the adapter itself is unchanged.",
+                "de": "(ssbingo) chore: alle npm-audit-Findings behoben (28 -> 0); @iobroker/dev-server entfernt, das nicht patchbare veraltete Pakete mitzog. Betrifft nur das Entwicklungs-Tooling — der Adapter selbst ist unverändert.",
+                "ru": "(ssbingo) chore: устранены все замечания npm audit (28 -> 0); удалён @iobroker/dev-server, тянувший устаревшие пакеты без исправлений. Затрагивает только инструменты разработки — сам адаптер не изменён.",
+                "pt": "(ssbingo) chore: todos os alertas do npm audit resolvidos (28 -> 0); removido o @iobroker/dev-server, que trazia pacotes obsoletos sem correção. Apenas ferramentas de desenvolvimento — o adaptador em si não mudou.",
+                "nl": "(ssbingo) chore: alle npm audit-meldingen opgelost (28 -> 0); @iobroker/dev-server verwijderd, dat niet-patchbare verouderde pakketten meebracht. Alleen ontwikkeltooling — de adapter zelf is ongewijzigd.",
+                "fr": "(ssbingo) chore : tous les signalements npm audit résolus (28 -> 0) ; suppression de @iobroker/dev-server, qui entraînait des paquets obsolètes non corrigeables. Outillage de développement uniquement — l'adaptateur lui-même est inchangé.",
+                "it": "(ssbingo) chore: risolti tutti i rilievi di npm audit (28 -> 0); rimosso @iobroker/dev-server, che trascinava pacchetti obsoleti non correggibili. Solo strumenti di sviluppo — l'adattatore stesso è invariato.",
+                "es": "(ssbingo) chore: resueltos todos los hallazgos de npm audit (28 -> 0); eliminado @iobroker/dev-server, que arrastraba paquetes obsoletos sin parche. Solo herramientas de desarrollo — el adaptador en sí no cambia.",
+                "pl": "(ssbingo) chore: usunięto wszystkie zgłoszenia npm audit (28 -> 0); usunięto @iobroker/dev-server, który wciągał przestarzałe pakiety bez poprawek. Dotyczy tylko narzędzi deweloperskich — sam adapter bez zmian.",
+                "uk": "(ssbingo) chore: усунуто всі зауваження npm audit (28 -> 0); видалено @iobroker/dev-server, який тягнув застарілі пакети без виправлень. Стосується лише інструментів розробки — сам адаптер не змінено.",
+                "zh-cn": "(ssbingo) chore: 解决全部 npm audit 问题（28 -> 0）；移除了引入无法修补的废弃软件包的 @iobroker/dev-server。仅涉及开发工具链，适配器本身未变更。"
+            },
+            "3.1.1": {
+                "en": "(ssbingo) chore: security updates for transitive dependencies (brace-expansion 1.1.18, axios 1.19.0, fast-uri 3.1.5, socket.io-parser 4.2.7)",
+                "de": "(ssbingo) chore: Sicherheitsupdates für transitive Abhängigkeiten (brace-expansion 1.1.18, axios 1.19.0, fast-uri 3.1.5, socket.io-parser 4.2.7)",
+                "ru": "(ssbingo) chore: обновления безопасности для транзитивных зависимостей (brace-expansion 1.1.18, axios 1.19.0, fast-uri 3.1.5, socket.io-parser 4.2.7)",
+                "pt": "(ssbingo) chore: atualizações de segurança para dependências transitivas (brace-expansion 1.1.18, axios 1.19.0, fast-uri 3.1.5, socket.io-parser 4.2.7)",
+                "nl": "(ssbingo) chore: beveiligingsupdates voor transitieve afhankelijkheden (brace-expansion 1.1.18, axios 1.19.0, fast-uri 3.1.5, socket.io-parser 4.2.7)",
+                "fr": "(ssbingo) chore : mises à jour de sécurité pour les dépendances transitives (brace-expansion 1.1.18, axios 1.19.0, fast-uri 3.1.5, socket.io-parser 4.2.7)",
+                "it": "(ssbingo) chore: aggiornamenti di sicurezza per le dipendenze transitive (brace-expansion 1.1.18, axios 1.19.0, fast-uri 3.1.5, socket.io-parser 4.2.7)",
+                "es": "(ssbingo) chore: actualizaciones de seguridad para dependencias transitivas (brace-expansion 1.1.18, axios 1.19.0, fast-uri 3.1.5, socket.io-parser 4.2.7)",
+                "pl": "(ssbingo) chore: aktualizacje bezpieczeństwa zależności przechodnich (brace-expansion 1.1.18, axios 1.19.0, fast-uri 3.1.5, socket.io-parser 4.2.7)",
+                "uk": "(ssbingo) chore: оновлення безпеки для транзитивних залежностей (brace-expansion 1.1.18, axios 1.19.0, fast-uri 3.1.5, socket.io-parser 4.2.7)",
+                "zh-cn": "(ssbingo) chore: 传递依赖的安全更新（brace-expansion 1.1.18、axios 1.19.0、fast-uri 3.1.5、socket.io-parser 4.2.7）"
+            },
             "3.1.0": {
                 "en": "(MMeinhardt1) feat: statistics improvements — battery flow power, daily grid import/export, h:mm durations, cumulative daily charging time; daily statistics now survive an adapter restart. (ssbingo) chore: minimum requirements raised to js-controller 6.0.11 / admin 8.0.0 / Node.js 22",
                 "de": "(MMeinhardt1) feat: Statistik-Erweiterungen — Batterie-Flussleistung, täglicher Netzbezug/-einspeisung, h:mm-Zeitdauern, kumulierte tägliche Ladezeit; Tagesstatistiken überstehen jetzt einen Adapter-Neustart. (ssbingo) chore: Mindestanforderungen angehoben auf js-controller 6.0.11 / admin 8.0.0 / Node.js 22",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "iobroker.sigenergy",
-  "version": "3.1.0",
+  "version": "3.1.2",
   "description": "ioBroker adapter for Sigenergy solar energy systems via Modbus TCP/RTU",
   "author": {
     "name": "ssbingo",
@@ -33,7 +33,6 @@
     "@alcalzone/release-script-plugin-license": "^5.2.0",
     "@alcalzone/release-script-plugin-manual-review": "^5.2.0",
     "@iobroker/adapter-dev": "^1.5.0",
-    "@iobroker/dev-server": "^0.8.0",
     "@iobroker/eslint-config": "^2.3.4",
     "@iobroker/testing": "^5.3.0",
     "@tsconfig/node22": "^22.0.5",
@@ -50,8 +49,6 @@
     "node": ">= 22.0.0"
   },
   "scripts": {
-    "start": "node node_modules/@iobroker/dev-server/build/main.js watch",
-    "watch": "node node_modules/@iobroker/dev-server/build/main.js watch",
     "test:package": "mocha test/package.js --exit",
     "test:unit": "mocha test/unit.js --exit",
     "test:integration": "mocha test/integration.js --exit",
@@ -65,6 +62,20 @@
     "url": "https://github.com/ssbingo/ioBroker.sigenergy/issues"
   },
   "overrides": {
-    "node-gyp": "^10.3.1"
+    "node-gyp": "^10.3.1",
+    "@babel/core": "^7.29.7",
+    "@grpc/grpc-js": "^1.14.4",
+    "adm-zip": "^0.6.0",
+    "body-parser": "^1.20.6",
+    "deepl-node": "^1.27.0",
+    "diff": "^8.0.3",
+    "esbuild": "^0.28.1",
+    "immutable": "^4.3.9",
+    "path-to-regexp": "^0.1.13",
+    "protobufjs": "^8.7.1",
+    "qs": "^6.15.3",
+    "serialize-javascript": "^7.0.7",
+    "tough-cookie": "^4.1.3",
+    "uuid": "^11.1.1"
   }
 }