postman-runtime 7.40.0 → 7.41.1

package/lib/requester/core.js

@@ -82,7 +82,10 @@ var dns = require('dns'),
 
         // removes the `referer` header when a redirect happens (default: false)
         // @note `referer` header set in the initial request will be preserved during redirect chain
-        removeRefererHeader: 'removeRefererHeaderOnRedirect'
+        removeRefererHeader: 'removeRefererHeaderOnRedirect',
+
+        // Select the HTTP protocol version to be used. Valid options are http1/http2/auto
+        protocolVersion: 'protocolVersion'
     },
 
     /**
@@ -399,6 +402,7 @@ module.exports = {
      * @param defaultOpts.followOriginalHttpMethod
      * @param defaultOpts.maxRedirects
      * @param defaultOpts.maxResponseSize
+     * @param defaultOpts.protocolVersion
      * @param defaultOpts.implicitCacheControl
      * @param defaultOpts.implicitTraceHeader
      * @param defaultOpts.removeRefererHeaderOnRedirect

package/lib/requester/requester-pool.js

@@ -24,6 +24,7 @@ RequesterPool = function (options, callback) {
         cookieJar: _.get(options, 'requester.cookieJar'), // default set later in this constructor
         strictSSL: _.get(options, 'requester.strictSSL'),
         maxResponseSize: _.get(options, 'requester.maxResponseSize'),
+        protocolVersion: _.get(options, 'requester.protocolVersion'),
         // @todo drop support in v8
         useWhatWGUrlParser: _.get(options, 'requester.useWhatWGUrlParser', false),
         insecureHTTPParser: _.get(options, 'requester.insecureHTTPParser'),

package/lib/requester/requester.js

@@ -418,7 +418,7 @@ class Requester extends EventEmitter {
         // we can't trust the integrity of this request
         // bail out if request url is empty
         if (!(request && request.url && request.url.toString && request.url.toString())) {
-            return onEnd(new Error('runtime:extensions~request: request url is empty'));
+            return onEnd(new Error('runtime: request url is empty'));
         }
 
         cookieJar = self.options.cookieJar;
@@ -470,7 +470,8 @@ class Requester extends EventEmitter {
                 status: res && res.statusMessage,
                 header: responseHeaders,
                 stream: resBody,
-                responseTime: responseTime
+                responseTime: responseTime,
+                downloadedBytes: history.execution.data[0].response.downloadedBytes
             });
 
             onComplete(RESPONSE_END, response, history);

package/lib/runner/extensions/event.command.js

@@ -270,7 +270,7 @@ module.exports = {
             async.mapSeries(events, function (event, next) {
                 // In case the event has no script or execution was skipped
                 // in some previous script we bail out early
-                if (!event.script || shouldSkipExecution) {
+                if (shouldSkipExecution || !event.script || event.script.isEmpty()) {
                     return next(null, { event });
                 }
 
@@ -434,7 +434,10 @@ module.exports = {
                                     // instance once it is fully supported
                                     result && { cookies: result.cookies });
                             }).catch(function (err) {
-                                this.host.dispatch(EXECUTION_RESPONSE_EVENT_BASE + id, requestId, err);
+                                const error = serialisedError(err);
+
+                                delete error.stack; // remove stack to avoid leaking runtime internals
+                                this.host.dispatch(EXECUTION_RESPONSE_EVENT_BASE + id, requestId, error);
                             });
                         }.bind(this));
                     }.bind(this));
@@ -455,7 +458,11 @@ module.exports = {
                             // @todo: Expose this as a property in Collection SDK's Script
                             timeout: payload.scriptTimeout,
                             cursor: scriptCursor,
-                            context: _.pick(payload.context, SAFE_CONTEXT_VARIABLES),
+                            context: {
+                                ..._.pick(payload.context, SAFE_CONTEXT_VARIABLES),
+                                vaultSecrets: _.get(payload.context.vaultSecrets, '_.allowScriptAccess') ?
+                                    payload.context.vaultSecrets : undefined
+                            },
                             resolvedPackages: resolvedPackages,
 
                             // legacy options
@@ -522,6 +529,8 @@ module.exports = {
                             result && result.globals && (result.globals = new sdk.VariableScope(result.globals));
                             result && result.collectionVariables &&
                                 (result.collectionVariables = new sdk.VariableScope(result.collectionVariables));
+                            result && result.vaultSecrets &&
+                                (result.vaultSecrets = new sdk.VariableScope(result.vaultSecrets));
                             result && result.request && (result.request = new sdk.Request(result.request));
 
                             // @note Since postman-sandbox@3.5.2, response object is not included in the execution

package/lib/runner/extensions/item.command.js

@@ -70,7 +70,8 @@ getResponseJSON = function (response) {
             type: 'Base64',
             data: response.stream.toString('base64')
         },
-        responseTime: response.responseTime
+        responseTime: response.responseTime,
+        downloadedBytes: response.downloadedBytes
     };
 };
 
@@ -137,6 +138,7 @@ module.exports = {
                 // create the context object for scripts to run
                 ctxTemplate = {
                     collectionVariables: collectionVariables,
+                    vaultSecrets: vaultSecrets,
                     _variables: _variables,
                     globals: globals,
                     environment: environment,
@@ -150,7 +152,7 @@ module.exports = {
                     item: item,
                     coords: coords,
                     context: ctxTemplate,
-                    trackContext: ['globals', 'environment', 'collectionVariables'],
+                    trackContext: ['globals', 'environment', 'collectionVariables', 'vaultSecrets'],
                     stopOnScriptError: stopOnError,
                     stopOnFailure: stopOnFailure
                 }).done(function (prereqExecutions, prereqExecutionError, shouldSkipExecution) {
@@ -188,7 +190,7 @@ module.exports = {
 
                     this.queue('request', {
                         item: item,
-                        vaultSecrets: vaultSecrets,
+                        vaultSecrets: ctxTemplate.vaultSecrets,
                         globals: ctxTemplate.globals,
                         environment: ctxTemplate.environment,
                         collectionVariables: ctxTemplate.collectionVariables,
@@ -232,7 +234,7 @@ module.exports = {
                             item: item,
                             coords: coords,
                             context: ctxTemplate,
-                            trackContext: ['tests', 'globals', 'environment', 'collectionVariables'],
+                            trackContext: ['tests', 'globals', 'environment', 'collectionVariables', 'vaultSecrets'],
                             stopOnScriptError: stopOnError,
                             abortOnFailure: abortOnFailure,
                             stopOnFailure: stopOnFailure

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "postman-runtime",
-  "version": "7.40.0",
+  "version": "7.41.1",
   "description": "Underlying library of executing Postman Collections",
   "author": "Postman Inc.",
   "license": "Apache-2.0",
@@ -44,19 +44,19 @@
   "dependencies": {
     "@postman/tough-cookie": "4.1.3-postman.1",
     "async": "3.2.5",
-    "aws4": "1.13.0",
+    "aws4": "1.13.1",
     "handlebars": "4.7.8",
     "httpntlm": "1.8.13",
-    "jose": "5.4.1",
+    "jose": "5.6.3",
     "js-sha512": "0.9.0",
     "lodash": "4.17.21",
     "mime-types": "2.1.35",
     "node-forge": "1.3.1",
     "node-oauth1": "1.3.0",
     "performance-now": "2.1.0",
-    "postman-collection": "4.4.0",
-    "postman-request": "2.88.1-postman.34",
-    "postman-sandbox": "5.0.0",
+    "postman-collection": "4.5.0",
+    "postman-request": "2.88.1-postman.38",
+    "postman-sandbox": "5.1.1",
     "postman-url-encoder": "3.0.5",
     "serialised-error": "1.1.3",
     "strip-json-comments": "3.1.1",
@@ -65,7 +65,7 @@
   "devDependencies": {
     "@postman/shipit": "^0.4.0",
     "@stylistic/eslint-plugin-js": "^1.8.0",
-    "ajv": "^8.16.0",
+    "ajv": "^8.17.1",
     "browserify": "^17.0.0",
     "chai": "^4.3.10",
     "chalk": "^4.1.2",
@@ -74,13 +74,13 @@
     "eslint": "^8.57.0",
     "eslint-plugin-jsdoc": "^47.0.2",
     "eslint-plugin-lodash": "^7.4.0",
-    "eslint-plugin-mocha": "^10.4.3",
+    "eslint-plugin-mocha": "^10.5.0",
     "eslint-plugin-n": "^16.6.2",
     "eslint-plugin-security": "^2.1.1",
     "express": "^4.17.2",
     "graphql": "^15.7.2",
     "js-yaml": "^4.1.0",
-    "karma": "^6.4.3",
+    "karma": "^6.4.4",
     "karma-browserify": "^8.1.0",
     "karma-chrome-launcher": "^3.2.0",
     "karma-mocha": "^2.0.1",
@@ -95,9 +95,9 @@
     "shelljs": "^0.8.5",
     "sinon": "^18.0.0",
     "teleport-javascript": "^1.0.0",
-    "terser": "^5.31.1",
+    "terser": "^5.31.3",
     "tmp": "^0.2.3",
-    "webpack": "^5.92.0",
+    "webpack": "^5.93.0",
     "yankee": "^1.0.8"
   },
   "engines": {