Skip to content

Commit 0fa416a

Browse files
authored
⬆️ chore(deps): upgrade all dependencies to latest versions (#4)
* ⬆️ chore(deps): upgrade all dependencies to latest versions Ran npm-check-updates -u across the manifest. No major version bumps were available: pg and ws are both still on major 8 upstream, so this is the latest of everything, not a major-version migration. - pg ^8.20.0 -> ^8.22.0 (transitively pg-protocol 1.13.0 -> 1.15.0, pg-pool 3.13.0 -> 3.14.0, pg-connection-string 2.12.0 -> 2.14.0, pg-cloudflare 1.3.0 -> 1.4.0) - ws ^8.19.0 -> ^8.21.1 Clears both open Dependabot alerts, both against ws: - high GHSA-96hv-2xvq-fx4p memory exhaustion DoS (fixed in 8.21.0) - medium GHSA-58qx-3vcg-4xpx uninitialized memory disclosure (8.20.1) No source changes were needed. The only APIs this repo touches are WebSocketServer from ws and Pool/Pool.query from pg, both unchanged. npm audit now reports 0 vulnerabilities. * ⬆️ chore: standardize on Node 24 - Dockerfile: node:22-alpine -> node:24-alpine - package.json: add engines.node >=24 Verified: npm ci + npm test 25/25 pass, npm audit 0 vulns, docker build succeeds, running 24-alpine image serves /health -> {"status":"ok"} (HTTP 200).
1 parent f94c892 commit 0fa416a

3 files changed

Lines changed: 30 additions & 27 deletions

File tree

Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
FROM node:22-alpine
1+
FROM node:24-alpine
22
WORKDIR /app
33
COPY package.json package-lock.json ./
44
RUN npm ci --omit=dev

package-lock.json

Lines changed: 24 additions & 24 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,11 @@
77
"start": "node server.js",
88
"test": "node --test"
99
},
10+
"engines": {
11+
"node": ">=24"
12+
},
1013
"dependencies": {
11-
"pg": "^8.20.0",
12-
"ws": "^8.19.0"
14+
"pg": "^8.22.0",
15+
"ws": "^8.21.1"
1316
}
1417
}

0 commit comments

Comments
 (0)