aboutsummaryrefslogtreecommitdiffstats
path: root/bun.lockb
Commit message (Collapse)AuthorAgeFilesLines
* deps: bump file-type 18->21 and uuid 8->11 (Dependabot)Adam Soltys2026-06-071-0/+0
| | | | | | | | | | | | | | | | | | | | Clears two Dependabot alerts: - file-type (medium): infinite loop in ASF parser on malformed input — reachable via avatar/image upload (fileTypeFromBuffer in lib/upload.ts). -> 21.3.4 - uuid (medium): missing buffer bounds check in v3/v5/v6 when buf is provided — we only ever call v4() with no buffer so not actually exposed, bumped anyway. -> 11.1.1 Both are major bumps but drop-in for our usage: project is already ESM ("type":"module") so file-type's ESM-only requirement is fine, and we use the stable named exports (fileTypeFromBuffer, v4). Verified live: v4() and fileTypeFromBuffer JPEG detection both work; full app compiles + healthy. Installed inside the app container (node_modules is root-owned, volume-mounted). The 4 remaining fastify-family alerts (incl. the critical http-proxy one) need a fastify 4->5 + 8 plugins lockstep upgrade — deferred to a dedicated window; real exposure is low behind Cloudflare/Caddy with localhost binding. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
* pass bytes for app secretAdam Soltys2026-03-141-0/+0
|
* use bytes for nostr toolsAdam Soltys2026-03-131-0/+0
|
* fix transitive dependency vulnerabilitiesAdam Soltys2026-02-241-0/+0
| | | | Co-Authored-By: Claude Opus 4.6 <[email protected]>
* fix invoice userAdam Soltys2025-09-201-0/+0
|
* bun lockAdam Soltys2025-09-111-0/+0
|
* update dependenciesAdam Soltys2025-09-101-0/+0
|
* bump dependencyAdam Soltys2025-09-091-0/+0
|
* update dependencyAdam Soltys2025-09-081-0/+0
|
* square endpointsAdam Soltys2025-07-171-0/+0
|
* log zap failuresAdam Soltys2025-01-191-0/+0
|
* return event partsAdam Soltys2025-01-171-0/+0
|
* use strfry scanAdam Soltys2025-01-141-0/+0
|
* bun lockAdam Soltys2024-11-271-0/+0
|
* xpayAdam Soltys2024-11-271-0/+0
|
* wipAdam Soltys2024-11-211-0/+0
|
* use renepayAdam Soltys2024-11-071-0/+0
|
* bun lockAdam Soltys2024-10-191-0/+0
|
* subscriptionsAdam Soltys2024-10-191-0/+0
|
* lockfileAdam Soltys2024-09-251-0/+0
|
* reconcile on-chain balanceAdam Soltys2024-09-231-0/+0
|
* nwcAdam Soltys2024-09-161-0/+0
|
* descriptor importAdam Soltys2024-09-121-0/+0
|
* accountsAdam Soltys2024-09-101-0/+0
|
* fix syncAdam Soltys2024-09-101-0/+0
|
* bump rpcAdam Soltys2024-09-091-0/+0
|
* package rpcAdam Soltys2024-09-081-0/+0
|
* fix upload endpointAdam Soltys2024-09-061-0/+0
|
* cashu dev branchAdam Soltys2024-09-031-0/+0
|
* more ts housekeepingAdam Soltys2024-08-261-0/+0
|
* typescriptAdam Soltys2024-08-261-0/+0
|
* switch to bunAdam Soltys2024-08-261-0/+0
|
* update fastifyAdam Soltys2024-08-251-0/+0
|
* add nwc field to userAdam Soltys2024-08-251-0/+0
|
* show spent ecashAdam Soltys2024-08-201-0/+0
|
* transfer ecashAdam Soltys2024-08-161-0/+0
|
* lock fileAdam Soltys2024-03-051-0/+0
|
* rate limitingAdam Soltys2024-03-051-0/+0
|
* node 21Adam Soltys2023-12-201-0/+0
generated by cgit v1.2.3 (git 2.51.0) at 2026-10-18 23:39:22 +0000