ipx 3.0.3 → 3.1.1

package/README.md

@@ -4,7 +4,7 @@
 [![npm downloads][npm-downloads-src]][npm-downloads-href]
 
 > [!NOTE]
-> This is the active branch for IPX v2. Check out [ipx/v1](https://github.com/unjs/ipx/tree/v1) for v1 docs.
+> This is the active development branch. Check out [v2](https://github.com/unjs/ipx/tree/v2) and [v3](https://github.com/unjs/ipx/tree/v3) for older docs.
 
 High performance, secure and easy-to-use image optimizer powered by [sharp](https://github.com/lovell/sharp) and [svgo](https://github.com/svg/svgo).
 
@@ -20,7 +20,7 @@ Using `npx`:
 npx ipx serve --dir ./
 ```
 
-Usin `bun`
+Using `bun`
 
 ```bash
 bun x npx ipx serve --dir ./
@@ -28,7 +28,7 @@ bun x npx ipx serve --dir ./
 
 The default serve directory is the current working directory.
 
-## Programatic API
+## Programmatic API
 
 You can use IPX as a middleware or directly use IPX interface.
 

package/dist/cli.cjs

@@ -3,7 +3,7 @@
 const listhen = require('listhen');
 const citty = require('citty');
 const cli = require('listhen/cli');
-const nodeFs = require('./shared/ipx.987wBc_s.cjs');
+const nodeFs = require('./shared/ipx.GUc23orS.cjs');
 require('defu');
 require('ufo');
 require('h3');
@@ -15,7 +15,7 @@ require('ofetch');
 require('pathe');
 
 const name = "ipx";
-const version = "3.0.3";
+const version = "3.1.1";
 const description = "High performance, secure and easy-to-use image optimizer.";
 
 const serve = citty.defineCommand({

package/dist/cli.mjs

@@ -1,7 +1,7 @@
 import { listen } from 'listhen';
 import { defineCommand, runMain } from 'citty';
 import { getArgs, parseArgs } from 'listhen/cli';
-import { c as createIPX, i as ipxHttpStorage, g as ipxFSStorage, e as createIPXNodeServer } from './shared/ipx.CTj1EgBv.mjs';
+import { c as createIPX, i as ipxHttpStorage, g as ipxFSStorage, e as createIPXNodeServer } from './shared/ipx.CXJeaylD.mjs';
 import 'defu';
 import 'ufo';
 import 'h3';
@@ -13,7 +13,7 @@ import 'ofetch';
 import 'pathe';
 
 const name = "ipx";
-const version = "3.0.3";
+const version = "3.1.1";
 const description = "High performance, secure and easy-to-use image optimizer.";
 
 const serve = defineCommand({

package/dist/index.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-const nodeFs = require('./shared/ipx.987wBc_s.cjs');
+const nodeFs = require('./shared/ipx.GUc23orS.cjs');
 const h3 = require('h3');
 require('defu');
 require('ufo');

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as createIPX, b as createIPXH3App, a as createIPXH3Handler, e as createIPXNodeServer, f as createIPXPlainServer, d as createIPXWebServer, g as ipxFSStorage, i as ipxHttpStorage } from './shared/ipx.CTj1EgBv.mjs';
+export { c as createIPX, b as createIPXH3App, a as createIPXH3Handler, e as createIPXNodeServer, f as createIPXPlainServer, d as createIPXWebServer, g as ipxFSStorage, i as ipxHttpStorage } from './shared/ipx.CXJeaylD.mjs';
 import { createError } from 'h3';
 import 'defu';
 import 'ufo';

package/dist/shared/{ipx.CTj1EgBv.mjs → ipx.CXJeaylD.mjs}

@@ -413,7 +413,7 @@ function createIPX(userOptions) {
           const { optimize } = await getSVGO();
           const svg = optimize(sourceData.toString("utf8"), {
             ...options.svgo,
-            plugins: ["removeScriptElement", ...options.svgo?.plugins || []]
+            plugins: ["removeScripts", ...options.svgo?.plugins || []]
           }).data;
           return {
             data: svg,
@@ -695,7 +695,7 @@ function ipxFSStorage(_options = {}) {
     const fs = await _getFS();
     for (const dir of dirs) {
       const filePath = join(dir, id);
-      if (!isValidPath(filePath) || !filePath.startsWith(dir)) {
+      if (!isValidPath(filePath) || !filePath.startsWith(dir + "/")) {
         throw createError({
           statusCode: 403,
           statusText: `IPX_FORBIDDEN_PATH`,

package/dist/shared/{ipx.987wBc_s.cjs → ipx.GUc23orS.cjs}

@@ -420,7 +420,7 @@ function createIPX(userOptions) {
           const { optimize } = await getSVGO();
           const svg = optimize(sourceData.toString("utf8"), {
             ...options.svgo,
-            plugins: ["removeScriptElement", ...options.svgo?.plugins || []]
+            plugins: ["removeScripts", ...options.svgo?.plugins || []]
           }).data;
           return {
             data: svg,
@@ -702,7 +702,7 @@ function ipxFSStorage(_options = {}) {
     const fs = await _getFS();
     for (const dir of dirs) {
       const filePath = pathe.join(dir, id);
-      if (!isValidPath(filePath) || !filePath.startsWith(dir)) {
+      if (!isValidPath(filePath) || !filePath.startsWith(dir + "/")) {
         throw h3.createError({
           statusCode: 403,
           statusText: `IPX_FORBIDDEN_PATH`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ipx",
-  "version": "3.0.3",
+  "version": "3.1.1",
   "repository": "unjs/ipx",
   "description": "High performance, secure and easy-to-use image optimizer.",
   "license": "MIT",
@@ -32,7 +32,6 @@
     "lint:fix": "eslint . --fix && prettier -w src test",
     "prepack": "pnpm build",
     "release": "pnpm test && changelogen --release --push && npm publish",
-    "prerelease": "pnpm test && pnpm build && changelogen --release --push --publish --publishTag latest",
     "start": "node bin/ipx.js",
     "test": "pnpm lint && vitest run --coverage"
   },
@@ -41,32 +40,32 @@
     "citty": "^0.1.6",
     "consola": "^3.4.2",
     "defu": "^6.1.4",
-    "destr": "^2.0.3",
+    "destr": "^2.0.5",
     "etag": "^1.8.1",
-    "h3": "^1.15.1",
+    "h3": "^1.15.3",
     "image-meta": "^0.2.1",
     "listhen": "^1.9.0",
     "ofetch": "^1.4.1",
     "pathe": "^2.0.3",
-    "sharp": "^0.33.5",
-    "svgo": "^3.3.2",
-    "ufo": "^1.5.4",
-    "unstorage": "^1.15.0",
+    "sharp": "^0.34.3",
+    "svgo": "^4.0.0",
+    "ufo": "^1.6.1",
+    "unstorage": "^1.16.1",
     "xss": "^1.0.15"
   },
   "devDependencies": {
-    "@types/etag": "^1.8.3",
+    "@types/etag": "^1.8.4",
     "@types/is-valid-path": "^0.1.2",
-    "@vitest/coverage-v8": "^3.0.9",
-    "changelogen": "^0.6.1",
-    "eslint": "^9.22.0",
-    "eslint-config-unjs": "^0.4.2",
+    "@vitest/coverage-v8": "^3.2.4",
+    "changelogen": "^0.6.2",
+    "eslint": "^9.31.0",
+    "eslint-config-unjs": "^0.5.0",
     "jiti": "^2.4.2",
-    "prettier": "^3.5.3",
+    "prettier": "^3.6.2",
     "serve-handler": "^6.1.6",
-    "typescript": "^5.8.2",
+    "typescript": "^5.8.3",
     "unbuild": "^3.5.0",
-    "vitest": "^3.0.9"
+    "vitest": "^3.2.4"
   },
-  "packageManager": "pnpm@10.6.5"
+  "packageManager": "pnpm@10.13.1"
 }