node-easywechat 2.13.2 → 2.13.3

package/.github/workflows/build-2.yml

@@ -10,12 +10,19 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    strategy:
+      matrix:
+        node-version: [14.x, 16.x, 18.x, 20.x, 22.x, 24.x]
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
         with:
-          node-version: 16
+          show-progress: false
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+          registry-url: 'https://registry.npmjs.org'
       - run: npm install
       - run: npm run build
       - run: npm test
-

package/.github/workflows/publish-npm-2.yml

@@ -10,15 +10,19 @@ on:
 jobs:
   publish-npm:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
         with:
-          node-version: 16
-          registry-url: https://registry.npmjs.org/
+          show-progress: false
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          registry-url: 'https://registry.npmjs.org'
       - run: npm install
       - run: npm run build
       - run: npm test
-      - run: npm publish --tag second
+      - run: npm publish --tag latest --provenance --access public
         env:
           NODE_AUTH_TOKEN: ${{secrets.npm_token}}

package/CHANGELOG.md

@@ -1,6 +1,10 @@
 # CHANGELOG
 
 
+## v2.13.3 (2025-07-24)
+
+- Fix: 更新依赖包，修复安全漏洞
+
 ## v2.13.2 (2025-03-13)
 
 - Fix: 自动回复视频消息的格式错误问题

package/dist/Core/AES.d.ts

@@ -1,4 +1,6 @@
 /// <reference types="node" />
+/// <reference types="node" />
+/// <reference types="node" />
 import { CipherGCMTypes, BinaryLike, CipherKey } from 'crypto';
 export declare class AES {
     /**

package/dist/Core/Http/Request.d.ts

@@ -1,4 +1,5 @@
 /// <reference types="node" />
+/// <reference types="node" />
 import { IncomingMessage } from 'http';
 import RequestInterface from '../Contracts/RequestInterface';
 export default class Request implements RequestInterface {

package/dist/Core/RSA.d.ts

@@ -1,4 +1,5 @@
 /// <reference types="node" />
+/// <reference types="node" />
 import crypto from 'crypto';
 export default class RSA {
     protected publicKey: crypto.KeyObject;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-easywechat",
-  "version": "2.13.2",
+  "version": "2.13.3",
   "description": "EasyWechat SDK for Node.js (NOT OFFICIAL)",
   "main": "dist/index.js",
   "scripts": {
@@ -20,18 +20,18 @@
   "author": "Hpyer",
   "license": "MIT",
   "devDependencies": {
-    "@types/node": "^17.0.23",
-    "mocha": "^9.2.2",
-    "package-release": "^1.0.3",
+    "@types/node": "^17.0.45",
+    "package-release": "^1.0.4",
     "sinon": "^12.0.1",
-    "typescript": "^4.6.3"
+    "typescript": "^4.9.5"
   },
   "dependencies": {
-    "axios": "^1.6.1",
-    "form-data": "^4.0.0",
-    "node-socialite": "^1.4.1",
-    "qs": "^6.11.2",
+    "axios": "^1.11.0",
+    "form-data": "^4.0.4",
+    "node-socialite": "^1.4.3",
+    "qs": "^6.14.0",
     "raw-body": "^2.5.2",
     "xml2js": "^0.6.2"
-  }
+  },
+  "packageManager": "pnpm@10.12.4+sha512.5ea8b0deed94ed68691c9bad4c955492705c5eeb8a87ef86bc62c74a26b037b08ff9570f108b2e4dbd1dd1a9186fea925e527f141c648e85af45631074680184"
 }

package/.github/workflows/build-3.yml

@@ -1,21 +0,0 @@
-# 3.x 所有提交自动构建并测试
-
-name: Build 3.x
-
-on:
-  push:
-    branches:
-      - '3.x'
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
-        with:
-          node-version: 16
-      - run: npm install
-      - run: npm run build
-      - run: npm test
-

package/.github/workflows/publish-npm-3.yml

@@ -1,24 +0,0 @@
-# 构建、测试并发布3.x分支
-
-name: Publish 3.x to npm
-
-on:
-  push:
-    tags:
-      - v3.*
-
-jobs:
-  publish-npm:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
-        with:
-          node-version: 16
-          registry-url: https://registry.npmjs.org/
-      - run: npm install
-      - run: npm run build
-      - run: npm test
-      - run: npm publish --tag latest
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.npm_token}}