vela 0.26.0 → 0.28.0

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "vela",
-	"version": "0.26.0",
+	"version": "0.28.0",
 	"type": "module",
 	"description": "A CLI for creating and updating SvelteKit projects",
 	"license": "MIT",
@@ -10,7 +10,7 @@
 	},
 	"homepage": "https://velastack.dev",
 	"engines": {
-		"node": ">=22.17"
+		"node": ">=22.22"
 	},
 	"bin": {
 		"vela": "./dist/bin.js",
@@ -39,12 +39,14 @@
 		"prepare": "npm run build",
 		"version": "npm run build",
 		"lint:sh": "shellcheck -x -P SCRIPTDIR -S warning templates/server/*.sh",
-		"test:scripts": "bash scripts/test-server-scripts.sh"
+		"test:scripts": "bash scripts/test-server-scripts.sh",
+		"sync-versions": "node --experimental-strip-types scripts/sync-versions.ts",
+		"canary": "bash scripts/canary.sh"
 	},
 	"dependencies": {
 		"@clack/prompts": "^1.7.0",
 		"@faker-js/faker": "^10.6.0",
-		"@velastack/patterns": "^0.12.0",
+		"@velastack/patterns": "^0.13.0",
 		"@velastack/pocketbase-codegen": "^0.1.0",
 		"@velastack/schema": "^0.3.0",
 		"@velastack/schema-ui": "^0.3.1",

package/templates/minimal/package.template.json

@@ -21,44 +21,44 @@
 		"test:server": "vela test:server"
 	},
 	"devDependencies": {
-		"@lucide/svelte": "^1.40.0",
-		"@sveltejs/adapter-node": "^6.0.0",
-		"@sveltejs/kit": "^3.0.0",
+		"@lucide/svelte": "^1.70.0",
+		"@sveltejs/adapter-node": "^6.0.2",
+		"@sveltejs/kit": "^3.2.0",
 		"@sveltejs/vite-plugin-svelte": "^7.3.1",
-		"@tailwindcss/typography": "^0.5.19",
-		"@tailwindcss/vite": "^4.3.3",
-		"@types/node": "^26.4.1",
-		"@types/supertest": "^6.0.3",
-		"@velastack/kit": "^0.4.0",
-		"@velastack/pocketbase": "^0.4.0",
+		"@tailwindcss/typography": "^0.5.20",
+		"@tailwindcss/vite": "^4.3.5",
+		"@types/node": "^26.6.6",
+		"@types/supertest": "^7.2.1",
+		"@velastack/kit": "^0.4.1",
+		"@velastack/pocketbase": "^0.4.3",
 		"clsx": "^2.1.1",
 		"croner": "^10.0.1",
 		"formsnap": "^2.1.0",
 		"mode-watcher": "^1.1.0",
-		"openworkflow": "^0.10.0",
-		"openworkflow-pocketbase": "^0.1.1",
-		"pocketbase-sveltekit": "^0.28.0",
-		"prettier": "^3.9.6",
+		"openworkflow": "^0.11.0",
+		"openworkflow-pocketbase": "^0.2.1",
+		"pocketbase-sveltekit": "^0.28.2",
+		"prettier": "^3.9.10",
 		"prettier-plugin-svelte": "^4.1.1",
-		"shadcn-svelte": "^1.7.0",
-		"supertest": "^7.2.2",
-		"svelte": "^5.57.1",
-		"svelte-check": "^4.7.6",
-		"svelte-meta-tags": "^5.0.2",
-		"svelte-sonner": "^1.1.0",
-		"sveltekit-flash-message": "3.0.0",
-		"sveltekit-superforms": "3.0.0",
-		"tailwind-merge": "^3.5.0",
-		"tailwind-variants": "^3.3.0",
-		"tailwindcss": "^4.3.3",
-		"tw-animate-css": "^1.3.5",
+		"shadcn-svelte": "^1.8.0",
+		"supertest": "^7.3.2",
+		"svelte": "^5.57.2",
+		"svelte-check": "^4.7.8",
+		"svelte-meta-tags": "^5.0.3",
+		"svelte-sonner": "^1.2.3",
+		"sveltekit-flash-message": "^3.0.0",
+		"sveltekit-superforms": "^3.1.0",
+		"tailwind-merge": "^3.7.0",
+		"tailwind-variants": "^3.3.1",
+		"tailwindcss": "^4.3.5",
+		"tw-animate-css": "^1.4.0",
 		"typescript": "^6.0.3",
 		"vela": "^~VELA_VERSION~",
-		"vite": "^8.3.0",
-		"vitest": "^5.0.1",
-		"zod": "^4.1.11"
+		"vite": "^8.3.6",
+		"vitest": "^5.1.0",
+		"zod": "^4.6.7"
 	},
 	"engines": {
-		"node": ">=22.17"
+		"node": ">=22.22"
 	}
 }

package/templates/server/apply.sh

@@ -21,12 +21,13 @@ SCRIPT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
 require_provisioned
 [ "$(id -u)" -eq 0 ] || die "apply must run as root"
 
-# SvelteKit 3 and adapter-node 6 need Node 22.17. A server provisioned before
-# them can be older, and a release started on it fails as a crash loop the
-# health check reports as "did not become healthy". Refused here instead,
-# before anything is touched; `vela provision` upgrades Node in place.
-node_at_least 22 17 \
-	|| die "this server runs Node $(node -v 2>/dev/null || echo '(none)'), and vela apps need 22.17 or later - run 'vela provision' to upgrade it"
+# A vela project needs Node 22.22 (its `engines` floor, with engine-strict). A
+# server provisioned earlier can be older, and a release on it fails at
+# `npm ci`, or as a crash loop the health check reports as "did not become
+# healthy". Refused here instead, before anything is touched; `vela provision`
+# upgrades Node in place.
+node_at_least 22 22 \
+	|| die "this server runs Node $(node -v 2>/dev/null || echo '(none)'), and vela apps need 22.22 or later - run 'vela provision' to upgrade it"
 
 INSTANCE=${1:-}; shift || true
 RELEASE=${1:-}; shift || true

package/templates/server/lib.sh

@@ -306,9 +306,8 @@ runtime_origin_lines() {
 	fi
 }
 
-# Whether the server's Node is at least <major>.<minor>. SvelteKit 3 and
-# adapter-node 6 need 22.17, which a server provisioned for SvelteKit 2 may
-# not have; `vela provision` upgrades it. No Node at all, or a version that
+# Whether the server's Node is at least <major>.<minor>. A vela project needs
+# 22.22, which a server provisioned earlier may not have; `vela provision` upgrades it. No Node at all, or a version that
 # cannot be read, is not enough.
 #
 # usage: node_at_least <major> <minor>

package/templates/server/provision.sh

@@ -14,7 +14,7 @@ SCRIPT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
 PB_VERSION=""
 # The Node line a server is brought up to: the one releases are built with. A
 # server already on a later major keeps it; see install_node.
-NODE_MAJOR=24
+NODE_MAJOR=26
 CLI_VERSION="unknown"
 LAYOUT_VERSION=1
 
@@ -102,9 +102,9 @@ ensure_packages build-essential python3
 # action's default too), not merely one new enough to start them: npm ships with
 # Node, and the server's `npm ci` has to accept the lockfile the build's npm
 # wrote. npm 10 (Node 22) rejects some that npm 11 (Node 24) writes, as
-# "Missing: ... from lock file". SvelteKit 3 and adapter-node 6 also need 22.17,
-# which an explicit `--node-major 22` still has to reach within its line. A
-# server already on a later major than NODE_MAJOR is left alone.
+# "Missing: ... from lock file". A vela project also needs 22.22, which an
+# explicit `--node-major 22` still has to reach within its line. A server
+# already on a later major than NODE_MAJOR is left alone.
 #
 # Moving a major leaves the hosted apps on dependencies compiled for the old
 # one. Their running processes keep working, but each needs a redeploy (which
@@ -114,7 +114,7 @@ install_node() {
 	if command -v node >/dev/null 2>&1; then
 		current=$(node -p 'process.versions.node.split(".")[0]' 2>/dev/null || echo 0)
 	fi
-	if [ "$current" -ge "$line" ] 2>/dev/null && node_at_least 22 17; then
+	if [ "$current" -ge "$line" ] 2>/dev/null && node_at_least 22 22; then
 		log "node $(node -v) already installed"
 		return 0
 	fi
@@ -145,7 +145,7 @@ install_node() {
 	# old version in place with apt reporting success. Caught here, it names the
 	# problem; caught by the next deploy, it would only name the symptom.
 	current=$(node -p 'process.versions.node.split(".")[0]' 2>/dev/null || echo 0)
-	{ [ "$current" -ge "$line" ] 2>/dev/null && node_at_least 22 17; } \
+	{ [ "$current" -ge "$line" ] 2>/dev/null && node_at_least 22 22; } \
 		|| die "Node.js is $(node -v 2>/dev/null || echo 'missing') after installing $line.x - check for a held nodejs package or another repository pinned above nodesource"
 }
 install_node

package/templates/static/package.template.json

@@ -18,32 +18,32 @@
 		"format": "prettier --write ."
 	},
 	"devDependencies": {
-		"@lucide/svelte": "^1.40.0",
-		"@sveltejs/adapter-static": "^4.0.0",
-		"@sveltejs/kit": "^3.0.0",
+		"@lucide/svelte": "^1.70.0",
+		"@sveltejs/adapter-static": "^4.0.1",
+		"@sveltejs/kit": "^3.2.0",
 		"@sveltejs/vite-plugin-svelte": "^7.3.1",
-		"@tailwindcss/typography": "^0.5.19",
-		"@tailwindcss/vite": "^4.3.3",
-		"@types/node": "^26.4.1",
-		"@velastack/kit": "^0.4.0",
+		"@tailwindcss/typography": "^0.5.20",
+		"@tailwindcss/vite": "^4.3.5",
+		"@types/node": "^26.6.6",
+		"@velastack/kit": "^0.4.1",
 		"clsx": "^2.1.1",
 		"mode-watcher": "^1.1.0",
-		"prettier": "^3.9.6",
+		"prettier": "^3.9.10",
 		"prettier-plugin-svelte": "^4.1.1",
-		"shadcn-svelte": "^1.7.0",
-		"svelte": "^5.57.1",
-		"svelte-check": "^4.7.6",
-		"svelte-meta-tags": "^5.0.2",
-		"svelte-sonner": "^1.1.0",
-		"tailwind-merge": "^3.5.0",
-		"tailwind-variants": "^3.3.0",
-		"tailwindcss": "^4.3.3",
-		"tw-animate-css": "^1.3.5",
+		"shadcn-svelte": "^1.8.0",
+		"svelte": "^5.57.2",
+		"svelte-check": "^4.7.8",
+		"svelte-meta-tags": "^5.0.3",
+		"svelte-sonner": "^1.2.3",
+		"tailwind-merge": "^3.7.0",
+		"tailwind-variants": "^3.3.1",
+		"tailwindcss": "^4.3.5",
+		"tw-animate-css": "^1.4.0",
 		"typescript": "^6.0.3",
 		"vela": "^~VELA_VERSION~",
-		"vite": "^8.3.0"
+		"vite": "^8.3.6"
 	},
 	"engines": {
-		"node": ">=22.17"
+		"node": ">=22.22"
 	}
 }