matterbridge 3.7.2 → 3.7.3-dev-20260402-2f4f273

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +14 -0
  2. package/package.json +15 -14
package/CHANGELOG.md CHANGED
@@ -53,6 +53,20 @@ These classes will run as threads in the next releases:
53
53
  - all plugins in bridge mode;
54
54
  - each plugin in childbridge mode;
55
55
 
56
+ ## [3.7.3] - Dev branch
57
+
58
+ ### Added
59
+
60
+ - [security]: Escape user-controlled strings in backend responses (e.g. upload `filename`) before sending them to the browser to reduce XSS risk.
61
+ - [security]: Apply rate limiting to backend file-transfer endpoints (upload/download) to reduce brute-force/abuse and accidental DoS.
62
+
63
+ ### Changed
64
+
65
+ - [package]: Update dependencies.
66
+ - [terminal]: Ignore process.stdout.isTTY that was too restrictive.
67
+
68
+ <a href="https://www.buymeacoffee.com/luligugithub"><img src="https://matterbridge.io/assets/bmc-button.svg" alt="Buy me a coffee" width="80"></a>
69
+
56
70
  ## [3.7.2] - 2026-04-02
57
71
 
58
72
  ### Dev Breaking Changes
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "matterbridge",
3
- "version": "3.7.2",
3
+ "version": "3.7.3-dev-20260402-2f4f273",
4
4
  "description": "Matterbridge plugin manager for Matter",
5
5
  "author": "https://github.com/Luligu",
6
6
  "license": "Apache-2.0",
@@ -130,25 +130,26 @@
130
130
  "README-SERVICE.md"
131
131
  ],
132
132
  "dependencies": {
133
- "@matterbridge/core": "3.7.2",
134
- "@matterbridge/dgram": "3.7.2",
135
- "@matterbridge/jest-utils": "3.7.2",
136
- "@matterbridge/thread": "3.7.2",
137
- "@matterbridge/types": "3.7.2",
138
- "@matterbridge/utils": "3.7.2",
139
- "@matterbridge/vitest-utils": "3.7.2"
133
+ "@matterbridge/core": "3.7.3-dev-20260402-2f4f273",
134
+ "@matterbridge/dgram": "3.7.3-dev-20260402-2f4f273",
135
+ "@matterbridge/jest-utils": "3.7.3-dev-20260402-2f4f273",
136
+ "@matterbridge/thread": "3.7.3-dev-20260402-2f4f273",
137
+ "@matterbridge/types": "3.7.3-dev-20260402-2f4f273",
138
+ "@matterbridge/utils": "3.7.3-dev-20260402-2f4f273",
139
+ "@matterbridge/vitest-utils": "3.7.3-dev-20260402-2f4f273"
140
140
  },
141
141
  "overrides": {
142
142
  "eslint": "10.1.0",
143
143
  "@eslint/js": "10.0.1"
144
144
  },
145
145
  "build": {
146
- "sha": "612c0097145c6a80f071d60faf01dbff4734c3df",
147
- "sha7": "612c009",
148
- "event": "release",
146
+ "version": "3.7.3",
147
+ "sha": "2f4f27337db094e36a7e05c8643ba651655e3046",
148
+ "sha7": "2f4f273",
149
+ "event": "workflow_dispatch",
149
150
  "workflow": "Publish to npm and trigger docker builds",
150
- "type": "tag",
151
- "name": "3.7.2",
152
- "dev": "false"
151
+ "type": "branch",
152
+ "name": "dev",
153
+ "dev": "true"
153
154
  }
154
155
  }