rooibos-roku 5.16.2 → 5.16.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/CHANGELOG.md +37 -0
  2. package/README.md +7 -2
  3. package/audit-ci.jsonc +15 -0
  4. package/dist/lib/utils/Diagnostics.js +1 -0
  5. package/package.json +19 -17
package/CHANGELOG.md CHANGED
@@ -6,6 +6,43 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
6
6
 
7
7
 
8
8
 
9
+ ## [5.16.4](https://github.com/rokucommunity/rooibos/compare/5.16.3...v5.16.4) - 2026-06-10
10
+ ### Changed
11
+ - Make tests less brittle - removes full transpile string checks ([#396](https://github.com/rokucommunity/rooibos/pull/396))
12
+ - Security enhancements
13
+ - upgrade to [brighterscript@0.72.5](https://github.com/rokucommunity/brighterscript/blob/master/CHANGELOG.md#0725---2026-06-10). Notable changes since 0.72.2:
14
+ - Security enhancements
15
+ - upgrade to [roku-debug@0.23.11](https://github.com/rokucommunity/roku-debug/blob/master/CHANGELOG.md#02311---2026-06-04). Notable changes since 0.23.8:
16
+ - Fix pressHomeButton crash in disconnectRequest ([#358](https://github.com/rokucommunity/roku-debug/pull/358))
17
+ - Security enhancements
18
+ - upgrade to [roku-deploy@3.17.6](https://github.com/rokucommunity/roku-deploy/blob/master/CHANGELOG.md#3176---2026-06-04). Notable changes since 3.17.4:
19
+ - Fix case-insensitive matching for absolute `files.src` glob patterns on case-insensitive file systems ([#279](https://github.com/rokucommunity/roku-deploy/pull/279))
20
+ - Preserve `!` glob-negation prefix in standardizePath ([#277](https://github.com/rokucommunity/roku-deploy/pull/277))
21
+ - Security enhancements
22
+ - upgrade to [ropm@0.11.8](https://github.com/rokucommunity/ropm/blob/master/CHANGELOG.md#0118---2026-05-30). Notable changes since 0.11.7:
23
+ - Security enhancements
24
+
25
+
26
+
27
+ ## [5.16.3](https://github.com/rokucommunity/rooibos/compare/5.16.2...v5.16.3) - 2026-05-20
28
+ ### Changed
29
+ - Update ropm to 0.11.7 and remove lodash override ([#391](https://github.com/rokucommunity/rooibos/pull/391))
30
+ - Security enhancements ([#390](https://github.com/rokucommunity/rooibos/pull/390))
31
+ - upgrade to [brighterscript@0.72.2](https://github.com/rokucommunity/brighterscript/blob/master/CHANGELOG.md#0722---2026-05-19). Notable changes since 0.72.1:
32
+ - Security enhancements ([#1714](https://github.com/rokucommunity/brighterscript/pull/1714))
33
+ - upgrade to [roku-debug@0.23.8](https://github.com/rokucommunity/roku-debug/blob/master/CHANGELOG.md#0238---2026-05-19). Notable changes since 0.23.6:
34
+ - Security enhancements ([#350](https://github.com/rokucommunity/roku-debug/pull/350))
35
+ - Fix deferred capability handling for exception breakpoints ([#342](https://github.com/rokucommunity/roku-debug/pull/342))
36
+ - Fix sourcemap race in preprocessStagingFiles ([#339](https://github.com/rokucommunity/roku-debug/pull/339))
37
+ - upgrade to [roku-deploy@3.17.4](https://github.com/rokucommunity/roku-deploy/blob/master/CHANGELOG.md#3174---2026-05-19). Notable changes since 3.17.2:
38
+ - Security enhancements ([#263](https://github.com/rokucommunity/roku-deploy/pull/263))
39
+ - upgrade to [@rokucommunity/bslint@0.8.43](https://github.com/rokucommunity/bslint/blob/master/CHANGELOG.md#0843---2026-05-12).
40
+ - upgrade to [ropm@0.11.7](https://github.com/rokucommunity/ropm/blob/master/CHANGELOG.md#0117---2026-05-20). Notable changes since 0.11.5:
41
+ - Replace @xml-tools/ast with in-repo shim ([#138](https://github.com/rokucommunity/ropm/pull/138))
42
+ - Security enhancements ([#137](https://github.com/rokucommunity/ropm/pull/137))
43
+
44
+
45
+
9
46
  ## [5.16.2](https://github.com/rokucommunity/rooibos/compare/5.16.1...v5.16.2) - 2026-05-11
10
47
  ### Changed
11
48
  - upgrade to [brighterscript@0.72.1](https://github.com/rokucommunity/brighterscript/blob/master/CHANGELOG.md#0721---2026-05-11). Notable changes since 0.72.0:
package/README.md CHANGED
@@ -9,9 +9,10 @@ Simple, mocha and junit inspired, flexible, and fun Brightscript test framework
9
9
  </p>
10
10
 
11
11
  [![build status](https://img.shields.io/github/actions/workflow/status/rokucommunity/rooibos/build.yml?branch=master&logo=github)](https://github.com/rokucommunity/rooibos/actions?query=branch%3Amaster+workflow%3Abuild)
12
+ [![security](https://img.shields.io/github/actions/workflow/status/rokucommunity/rooibos/security-audit.yml?branch=master&label=security&logo=data:image/svg%2Bxml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAxNiAxNiI+PHJlY3QgeD0iMyIgeT0iOCIgd2lkdGg9IjEwIiBoZWlnaHQ9IjciIHJ4PSIxIiBmaWxsPSJ3aGl0ZSIvPjxwYXRoIGQ9Ik01IDhWNWEzIDMgMCAwIDEgNiAwdjMiIGZpbGw9Im5vbmUiIHN0cm9rZT0id2hpdGUiIHN0cm9rZS13aWR0aD0iMiIvPjwvc3ZnPg==)](https://github.com/rokucommunity/rooibos/actions/workflows/security-audit.yml)
12
13
  [![coverage status](https://img.shields.io/coveralls/github/rokucommunity/rooibos?logo=coveralls)](https://coveralls.io/github/rokucommunity/rooibos?branch=master)
13
- [![monthly downloads](https://img.shields.io/npm/dm/rooibos-roku.svg?sanitize=true&logo=npm&logoColor=)](https://npmcharts.com/compare/rooibos-roku?minimal=true)
14
- [![npm version](https://img.shields.io/npm/v/rooibos-roku.svg?logo=npm)](https://www.npmjs.com/package/rooibos-roku)
14
+ [![monthly downloads](https://img.shields.io/npm/dm/rooibos-roku.svg?sanitize=true&logo=npm&logoColor=&label=npm)](https://npmcharts.com/compare/rooibos-roku?minimal=true)
15
+ [![npm version](https://img.shields.io/npm/v/rooibos-roku.svg?logo=npm&label=npm)](https://www.npmjs.com/package/rooibos-roku)
15
16
  [![license](https://img.shields.io/npm/l/rooibos-roku.svg)](LICENSE)
16
17
  [![Slack](https://img.shields.io/badge/Slack-RokuCommunity-4A154B?logo=slack)](https://join.slack.com/t/rokudevelopers/shared_invite/zt-4vw7rg6v-NH46oY7hTktpRIBM_zGvwA)
17
18
 
@@ -46,3 +47,7 @@ Yes, it's been used in production by quite a few respectable companies. There ar
46
47
  ### Is Rooibos actively maintained?
47
48
 
48
49
  We at RokuCommunity love rooibos, and regularly keep it up to date.
50
+
51
+ ## Accepted security advisories
52
+
53
+ Dependencies flagged by `npm audit` that we have reviewed and chosen not to upgrade are tracked in [audit-ci.jsonc](https://github.com/RokuCommunity/rooibos/blob/master/audit-ci.jsonc). Each entry includes the advisory ID, the date it was added, and the reason it does not apply to this project.
package/audit-ci.jsonc ADDED
@@ -0,0 +1,15 @@
1
+ {
2
+ // Fail on high severity and above. See README "Accepted security advisories" for
3
+ // why each allowlisted entry is safe to defer.
4
+ "$schema": "https://github.com/IBM/audit-ci/raw/main/docs/schema.json",
5
+ "high": true,
6
+ "allowlist": [
7
+ {
8
+ "GHSA-w5hq-g745-h8pq": {
9
+ // Added: 2026-05-22
10
+ "active": true,
11
+ "notes": "`uuid` <11.1.1 (via `postman-request` and dev-only `nyc>istanbul-lib-processinfo`): vulnerable code path is `v3()`/`v5()`/`v6()` when a caller-provided buffer is passed. All consumers in this dep graph call only `v4()` (no buffer arg), so the vulnerable path is unreachable."
12
+ }
13
+ }
14
+ ]
15
+ }
package/dist/lib/utils/Diagnostics.js CHANGED
@@ -14,6 +14,7 @@ function addDiagnosticForStatement(file, code, message, statement, severity = br
14
14
  function addDiagnosticForAnnotation(file, code, message, annotation, severity = brighterscript_1.DiagnosticSeverity.Error, endChar) {
15
15
  let line = annotation.range.start.line;
16
16
  let col = annotation.range.start.character;
17
+ // TODO: Fix the end character to be the end of the annotation, not the start + 9999
17
18
  file.addDiagnostics([createDiagnostic(file, code, message, line, col, annotation.range.end.line, annotation.range.end.character + 9999, severity)]);
18
19
  }
19
20
  function createDiagnostic(bscFile, code, message, startLine = 0, startCol = 99999, endLine = 0, endCol = 99999, severity = brighterscript_1.DiagnosticSeverity.Error) {
package/package.json CHANGED
@@ -1,10 +1,10 @@
1
1
  {
2
2
  "name": "rooibos-roku",
3
- "version": "5.16.2",
3
+ "version": "5.16.4",
4
4
  "description": "simple, flexible, fun brightscript test framework for roku scenegraph apps - roku brighterscript plugin",
5
5
  "scripts": {
6
6
  "preversion": "npm run build && npm run lint && npm run test",
7
- "clean": "rm -rf ./dist && mkdir dist",
7
+ "clean": "node -e \"require('fs').rmSync('./dist', {recursive: true, force: true})\"",
8
8
  "compile": "npm run clean && tsc -p .",
9
9
  "lint": "eslint \"src/**\"",
10
10
  "ropm": "ropm install",
@@ -14,54 +14,55 @@
14
14
  "docs": "jsdoc -c jsdoc.json -d .tmp/docs --verbose",
15
15
  "test": "nyc mocha",
16
16
  "test:nocover": "mocha",
17
- "publish-coverage": "nyc report --reporter=text-lcov | coveralls",
17
+ "audit": "npm audit || audit-ci --config ./audit-ci.jsonc",
18
18
  "cli": "ts-node src/cli.ts",
19
19
  "package": "npm run build && npm pack"
20
20
  },
21
21
  "dependencies": {
22
- "brighterscript": "^0.72.1",
22
+ "brighterscript": "^0.72.5",
23
23
  "fast-glob": "^3.2.12",
24
24
  "fs-extra": "^10.1.0",
25
25
  "minimatch": "^3.0.4",
26
- "roku-debug": "^0.23.6",
27
- "roku-deploy": "^3.17.2",
26
+ "roku-debug": "^0.23.11",
27
+ "roku-deploy": "^3.17.6",
28
28
  "rooibos_promises": "npm:@rokucommunity/promises@^0.5.0",
29
29
  "source-map": "^0.7.3",
30
- "undent": "^0.1.0",
30
+ "undent": "^1.0.1",
31
31
  "vscode-languageserver": "~6.1.1",
32
32
  "vscode-languageserver-protocol": "~3.17.5",
33
33
  "yargs": "^16.2.0"
34
34
  },
35
35
  "devDependencies": {
36
- "@rokucommunity/bslint": "^0.8.42",
36
+ "@rokucommunity/bslint": "^0.8.43",
37
37
  "@types/chai": "^4.1.2",
38
38
  "@types/events": "^3.0.0",
39
39
  "@types/fs-extra": "^5.0.1",
40
40
  "@types/minimatch": "^3.0.5",
41
- "@types/mocha": "^9.1.1",
41
+ "@types/mocha": "^10.0.10",
42
42
  "@types/node": "^14.18.41",
43
43
  "@types/yargs": "^15.0.5",
44
44
  "@typescript-eslint/eslint-plugin": "^5.27.0",
45
45
  "@typescript-eslint/parser": "^5.27.0",
46
+ "audit-ci": "^7.1.0",
46
47
  "brighterscript-jsdocs-plugin": "^0.7.3",
47
48
  "chai": "^4.2.0",
48
- "coveralls": "^3.0.0",
49
- "cz-conventional-changelog": "^3.3.0",
49
+ "docdash": "^2.0.2",
50
50
  "eslint": "^8.16.0",
51
51
  "eslint-import-resolver-typescript": "^3.6.1",
52
52
  "eslint-plugin-import": "^2.31.0",
53
53
  "eslint-plugin-jsdoc": "^39.3.6",
54
54
  "eslint-plugin-no-only-tests": "2.6.0",
55
- "jsdoc": "^3.5.5",
56
- "minami": "^1.2.3",
57
- "mocha": "^11.1.0",
55
+ "jsdoc": "^4.0.5",
56
+ "mocha": "^10.8.2",
58
57
  "nyc": "^15.1.0",
59
- "release-it": "^17.6.0",
60
- "ropm": "^0.11.5",
58
+ "ropm": "^0.11.8",
61
59
  "source-map-support": "^0.5.13",
62
60
  "ts-node": "^10.7.0",
63
61
  "typescript": "^4.7.2"
64
62
  },
63
+ "overrides": {
64
+ "serialize-javascript": "^7.0.5"
65
+ },
65
66
  "main": "dist/plugin.js",
66
67
  "bin": {
67
68
  "rooibos": "dist/cli.js"
@@ -97,7 +98,8 @@
97
98
  ],
98
99
  "reporter": [
99
100
  "text-summary",
100
- "html"
101
+ "html",
102
+ "lcovonly"
101
103
  ],
102
104
  "sourceMap": true,
103
105
  "instrument": true,