node-easywechat 2.13.1 → 2.13.3

package/.github/workflows/build-2.yml

@@ -10,12 +10,19 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    strategy:
+      matrix:
+        node-version: [14.x, 16.x, 18.x, 20.x, 22.x, 24.x]
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
         with:
-          node-version: 16
+          show-progress: false
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+          registry-url: 'https://registry.npmjs.org'
       - run: npm install
       - run: npm run build
       - run: npm test
-

package/.github/workflows/publish-npm-2.yml

@@ -10,15 +10,19 @@ on:
 jobs:
   publish-npm:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
         with:
-          node-version: 16
-          registry-url: https://registry.npmjs.org/
+          show-progress: false
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          registry-url: 'https://registry.npmjs.org'
       - run: npm install
       - run: npm run build
       - run: npm test
-      - run: npm publish --tag second
+      - run: npm publish --tag latest --provenance --access public
         env:
           NODE_AUTH_TOKEN: ${{secrets.npm_token}}

package/CHANGELOG.md

@@ -1,6 +1,14 @@
 # CHANGELOG
 
 
+## v2.13.3 (2025-07-24)
+
+- Fix: 更新依赖包，修复安全漏洞
+
+## v2.13.2 (2025-03-13)
+
+- Fix: 自动回复视频消息的格式错误问题
+
 ## v2.13.1 (2023-11-11)
 
 - Fix: 更新依赖包

package/README.md

@@ -6,7 +6,7 @@
 
 **注：2.x分支针对 EasyWechat 的 5.x版本(由于4.x与5.x的结构基本一致，就不升级大版本了)。**
 
-若您需要 EasyWechat 的 5.x版本，请切换到 [3.x](https://github.com/hpyer/node-easywechat/tree/3.x) 分支。
+若您需要 EasyWechat 的 6.x版本，请切换到 [3.x](https://github.com/hpyer/node-easywechat/tree/3.x) 分支。
 
 [EasyWechat](https://github.com/w7corp/easywechat) 是一个由 `安正超` 大神用 PHP 开发的开源的微信非官方 SDK（现由微擎团队团队维护）。其功能强大，使用方便，个人一直很喜欢，所以近日将其在 Node.js 上实现。本人会尽量还原其配置项以及接口的调用方式，但毕竟语言环境不同，具体的实现方式会有些许差别，还请各位开发者见谅。
 

package/dist/Core/AES.d.ts

@@ -1,4 +1,6 @@
 /// <reference types="node" />
+/// <reference types="node" />
+/// <reference types="node" />
 import { CipherGCMTypes, BinaryLike, CipherKey } from 'crypto';
 export declare class AES {
     /**

package/dist/Core/Http/Request.d.ts

@@ -1,4 +1,5 @@
 /// <reference types="node" />
+/// <reference types="node" />
 import { IncomingMessage } from 'http';
 import RequestInterface from '../Contracts/RequestInterface';
 export default class Request implements RequestInterface {

package/dist/Core/Messages/Video.js

@@ -10,23 +10,17 @@ class Video extends Media_1.Media {
             'title',
             'description',
             'media_id',
-            'thumb_media_id',
         ];
     }
     toXmlArray() {
-        let music = {
-            Music: {
+        let video = {
+            Video: {
+                MediaId: this.get('media_id'),
                 Title: this.get('title'),
                 Description: this.get('description'),
-                MusicUrl: this.get('url'),
-                HQMusicUrl: this.get('hq_url'),
             }
         };
-        let thumbMediaId = this.get('thumb_media_id');
-        if (thumbMediaId) {
-            music['Music']['ThumbMediaId'] = thumbMediaId;
-        }
-        return music;
+        return video;
     }
 }
 exports.Video = Video;

package/dist/Core/RSA.d.ts

@@ -1,4 +1,5 @@
 /// <reference types="node" />
+/// <reference types="node" />
 import crypto from 'crypto';
 export default class RSA {
     protected publicKey: crypto.KeyObject;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-easywechat",
-  "version": "2.13.1",
+  "version": "2.13.3",
   "description": "EasyWechat SDK for Node.js (NOT OFFICIAL)",
   "main": "dist/index.js",
   "scripts": {
@@ -20,18 +20,18 @@
   "author": "Hpyer",
   "license": "MIT",
   "devDependencies": {
-    "@types/node": "^17.0.23",
-    "mocha": "^9.2.2",
-    "package-release": "^1.0.3",
+    "@types/node": "^17.0.45",
+    "package-release": "^1.0.4",
     "sinon": "^12.0.1",
-    "typescript": "^4.6.3"
+    "typescript": "^4.9.5"
   },
   "dependencies": {
-    "axios": "^1.6.1",
-    "form-data": "^4.0.0",
-    "node-socialite": "^1.4.1",
-    "qs": "^6.11.2",
+    "axios": "^1.11.0",
+    "form-data": "^4.0.4",
+    "node-socialite": "^1.4.3",
+    "qs": "^6.14.0",
     "raw-body": "^2.5.2",
     "xml2js": "^0.6.2"
-  }
+  },
+  "packageManager": "pnpm@10.12.4+sha512.5ea8b0deed94ed68691c9bad4c955492705c5eeb8a87ef86bc62c74a26b037b08ff9570f108b2e4dbd1dd1a9186fea925e527f141c648e85af45631074680184"
 }

package/.github/workflows/build-3.yml

@@ -1,21 +0,0 @@
-# 3.x 所有提交自动构建并测试
-
-name: Build 3.x
-
-on:
-  push:
-    branches:
-      - '3.x'
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
-        with:
-          node-version: 16
-      - run: npm install
-      - run: npm run build
-      - run: npm test
-

package/.github/workflows/publish-npm-3.yml

@@ -1,24 +0,0 @@
-# 构建、测试并发布3.x分支
-
-name: Publish 3.x to npm
-
-on:
-  push:
-    tags:
-      - v3.*
-
-jobs:
-  publish-npm:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
-        with:
-          node-version: 16
-          registry-url: https://registry.npmjs.org/
-      - run: npm install
-      - run: npm run build
-      - run: npm test
-      - run: npm publish --tag latest
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.npm_token}}