From 97043768b56ab9d0d62421178440fa3b702807fa Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Daniel=20Go=CC=88rdes?= Date: Tue, 26 May 2026 14:11:32 +0200 Subject: [PATCH 1/6] updates dependencies and fixes vulnerabilities --- .npmrc | 1 + deno.lock | 180 ++++++++++++++++---------- examples/eventsourcing-demo/deno.json | 4 +- examples/hono-demo/deno.json | 4 +- package.json | 22 ++-- packages/hono/deno.json | 4 +- packages/mongodb/deno.json | 4 +- 7 files changed, 129 insertions(+), 90 deletions(-) create mode 100644 .npmrc diff --git a/.npmrc b/.npmrc new file mode 100644 index 0000000..063568e --- /dev/null +++ b/.npmrc @@ -0,0 +1 @@ +min-release-age=72h diff --git a/deno.lock b/deno.lock index 263196b..73a71b6 100644 --- a/deno.lock +++ b/deno.lock @@ -1,64 +1,102 @@ { "version": "5", "specifiers": { + "jsr:@david/code-block-writer@^13.0.3": "13.0.3", + "jsr:@deno/dnt@~0.42.3": "0.42.3", "jsr:@std/assert@^1.0.19": "1.0.19", - "jsr:@std/dotenv@~0.225.6": "0.225.6", + "jsr:@std/dotenv@~0.225.6": "0.225.7", + "jsr:@std/fmt@1": "1.0.10", "jsr:@std/fmt@^1.0.9": "1.0.10", - "jsr:@std/internal@^1.0.12": "1.0.13", - "jsr:@std/path@^1.0.9": "1.1.4", + "jsr:@std/fs@1": "1.0.24", + "jsr:@std/fs@^1.0.13": "1.0.24", + "jsr:@std/internal@^1.0.12": "1.0.14", + "jsr:@std/internal@^1.0.14": "1.0.14", + "jsr:@std/path@1": "1.1.5", + "jsr:@std/path@^1.0.9": "1.1.5", + "jsr:@std/path@^1.1.5": "1.1.5", "jsr:@std/regexp@^1.0.2": "1.0.2", - "jsr:@std/text@^1.0.17": "1.0.18", + "jsr:@std/text@^1.0.17": "1.0.19", "jsr:@std/ulid@1": "1.0.0", + "jsr:@ts-morph/bootstrap@0.27": "0.27.0", + "jsr:@ts-morph/common@0.27": "0.27.0", "npm:@opentelemetry/api@^1.9.1": "1.9.1", "npm:eventsourcingdb@^1.8.1": "1.8.1", - "npm:hono@^4.12.14": "4.12.14", + "npm:hono@^4.12.23": "4.12.23", "npm:mongodb@7.1.1": "7.1.1", - "npm:mongodb@^7.1.1": "7.1.1", - "npm:zod@^4.3.6": "4.3.6" + "npm:zod@^4.3.6": "4.4.3" }, "jsr": { + "@david/code-block-writer@13.0.3": { + "integrity": "f98c77d320f5957899a61bfb7a9bead7c6d83ad1515daee92dbacc861e13bb7f" + }, + "@deno/dnt@0.42.3": { + "integrity": "62a917a0492f3c8af002dce90605bb0d41f7d29debc06aca40dba72ab65d8ae3", + "dependencies": [ + "jsr:@david/code-block-writer", + "jsr:@std/fmt@1", + "jsr:@std/fs@1", + "jsr:@std/path@1", + "jsr:@ts-morph/bootstrap" + ] + }, "@std/assert@1.0.19": { "integrity": "eaada96ee120cb980bc47e040f82814d786fe8162ecc53c91d8df60b8755991e", "dependencies": [ - "jsr:@std/internal" + "jsr:@std/internal@^1.0.12" ] }, - "@std/dotenv@0.225.6": { - "integrity": "1d6f9db72f565bd26790fa034c26e45ecb260b5245417be76c2279e5734c421b" + "@std/dotenv@0.225.7": { + "integrity": "11d8db03ca4ad5aba9eba809f2e8058b2a4f320b7b09fea4b360e162928329e3" }, "@std/fmt@1.0.10": { "integrity": "90dfba288802ac6de82fb31d0917eb9e4450b9925b954d5e51fc29ac07419db5" }, - "@std/internal@1.0.13": { - "integrity": "2f9546691d4ac2d32859c82dff284aaeac980ddeca38430d07941e7e288725c0" + "@std/fs@1.0.24": { + "integrity": "f3061b45b81673a2bece689da041df32d174be064c89eb6397fb5718d3fb7877", + "dependencies": [ + "jsr:@std/internal@^1.0.14", + "jsr:@std/path@^1.1.5" + ] + }, + "@std/internal@1.0.14": { + "integrity": "291516b3d4c35024d6ffbc0a9df5bf4c64116e05b50012cf846710152d2ffdf7" }, - "@std/path@1.1.4": { - "integrity": "1d2d43f39efb1b42f0b1882a25486647cb851481862dc7313390b2bb044314b5", + "@std/path@1.1.5": { + "integrity": "ccea00982ea28c36becaf6e62f855406c76a8c32d462f66f415bbb7d83a271bc", "dependencies": [ - "jsr:@std/internal" + "jsr:@std/internal@^1.0.14" ] }, "@std/regexp@1.0.2": { "integrity": "7493d47c077cfdb023e41a0b44fd608d87fe5b36fc3dc614261afc0f1452aabf" }, - "@std/text@1.0.18": { - "integrity": "d199e516f80599813c64fd4aee5b8f26f6f7d1e1434c88fd153aeea6fea6a9b9", + "@std/text@1.0.19": { + "integrity": "003a0e032d360e8c3a4e0410fb792c77a66bd6553fee9d60c6ec1bce30d29223", "dependencies": [ "jsr:@std/regexp" ] }, "@std/ulid@1.0.0": { "integrity": "d41c3d27a907714413649fee864b7cde8d42ee68437d22b79d5de4f81d808780" + }, + "@ts-morph/bootstrap@0.27.0": { + "integrity": "b8d7bc8f7942ce853dde4161b28f9aa96769cef3d8eebafb379a81800b9e2448", + "dependencies": [ + "jsr:@ts-morph/common" + ] + }, + "@ts-morph/common@0.27.0": { + "integrity": "c7b73592d78ce8479b356fd4f3d6ec3c460d77753a8680ff196effea7a939052" } }, "npm": { "@balena/dockerignore@1.0.2": { "integrity": "sha512-wMue2Sy4GAVTk6Ic4tJVcnfdau+gx2EnG7S+uAEe+TWJFqE4YoWN4/H8MSLj4eYJKxGg26lZwboEniNiNwZQ6Q==" }, - "@grpc/grpc-js@1.14.3": { - "integrity": "sha512-Iq8QQQ/7X3Sac15oB6p0FmUg/klxQvXLeileoqrTRGJYLV+/9tubbr9ipz0GKHjmXVsgFPo/+W+2cA8eNcR+XA==", + "@grpc/grpc-js@1.14.4": { + "integrity": "sha512-k9Dj3DV/itK9D06Y8f190Qgop7/Ui+D0njFV3LHMPwPT75DpXLQohE9Wmz0QElrJnzsjB7KPWiKJbOl7IPDArQ==", "dependencies": [ - "@grpc/proto-loader@0.8.0", + "@grpc/proto-loader@0.8.1", "@js-sdsl/ordered-map" ] }, @@ -72,8 +110,8 @@ ], "bin": true }, - "@grpc/proto-loader@0.8.0": { - "integrity": "sha512-rc1hOQtjIWGxcxpb9aHAfLpIctjEnsDehj0DAiVfBlmT84uvR0uUtN2hEi/ecvWVjXUGf5qPF4qEgiLOx1YIMQ==", + "@grpc/proto-loader@0.8.1": { + "integrity": "sha512-wtF6h+DY6M3YaDBPAmvuuA6jV8Sif9MjtOI5euKFWRgCDl5PeDpPsHR9u2l6St5ceY8AZgoNDww5+HvEsXFsGg==", "dependencies": [ "lodash.camelcase", "long", @@ -96,8 +134,8 @@ "@js-sdsl/ordered-map@4.4.2": { "integrity": "sha512-iUKgm52T8HOE/makSxjqoWhe95ZJA1/G1sYsGev2JDKUSS14KAgg1LHb+Ba+IPow0xflbnSkOsZcO08C7w1gYw==" }, - "@mongodb-js/saslprep@1.4.8": { - "integrity": "sha512-kpjr2jy2w71w0oqAMI8oibBmiF9lXxWkEQs5gMkW4hVE48bsqINGLxnCSYW62ck/NHXJQpQEfA9WlJ1sY0eqBg==", + "@mongodb-js/saslprep@1.4.11": { + "integrity": "sha512-o9rAHc0IpIjuPSxRutWpE1F62x7n+4mVS4rCNHkzhIUMQcc18bb6xEq5wd2NdN0WjepIyXIppRshYI2kQDOZVA==", "dependencies": [ "sparse-bitfield" ] @@ -114,24 +152,23 @@ "@protobufjs/base64@1.1.2": { "integrity": "sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg==" }, - "@protobufjs/codegen@2.0.4": { - "integrity": "sha512-YyFaikqM5sH0ziFZCN3xDC7zeGaB/d0IUb9CATugHWbd1FRFwWwt4ld4OYMPWu5a3Xe01mGAULCdqhMlPl29Jg==" + "@protobufjs/codegen@2.0.5": { + "integrity": "sha512-zgXFLzW3Ap33e6d0Wlj4MGIm6Ce8O89n/apUaGNB/jx+hw+ruWEp7EwGUshdLKVRCxZW12fp9r40E1mQrf/34g==" }, - "@protobufjs/eventemitter@1.1.0": { - "integrity": "sha512-j9ednRT81vYJ9OfVuXG6ERSTdEL1xVsNgqpkxMsbIabzSo3goCjDIveeGv5d03om39ML71RdmrGNjG5SReBP/Q==" + "@protobufjs/eventemitter@1.1.1": { + "integrity": "sha512-vW1GmwMZNnL+gMRaovlh9yZX74kc+TTU3FObkkurpMaRtBfLP3ldjS9KQWlwZgraRE0+dheEEoAxdzcJQ8eXZg==" }, - "@protobufjs/fetch@1.1.0": { - "integrity": "sha512-lljVXpqXebpsijW71PZaCYeIcE5on1w5DlQy5WH6GLbFryLUrBD4932W/E2BSpfRJWseIL4v/KPgBFxDOIdKpQ==", + "@protobufjs/fetch@1.1.1": { + "integrity": "sha512-GpptLrs57adMSuHi3VNj0mAF8dwh36LMaYF6XyJ6JMWlVsc+t42tm1HSEDmOs3A8fC9yyeisgLhsTVQokOZ0zw==", "dependencies": [ - "@protobufjs/aspromise", - "@protobufjs/inquire" + "@protobufjs/aspromise" ] }, "@protobufjs/float@1.0.2": { "integrity": "sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ==" }, - "@protobufjs/inquire@1.1.0": { - "integrity": "sha512-kdSefcPdruJiFMVSbn801t4vFK7KB/5gd2fYvrxhuJYg8ILrmn9SKSX2tZdV6V+ksulWqS7aXjBcRXl3wHoD9Q==" + "@protobufjs/inquire@1.1.2": { + "integrity": "sha512-pa0vFRuws4wkvaXKK1uXZMAwAX4/t8ANaJo45iw/oQHNQ9q5xUzwgFmVJGXiga2BeN+zpX7Vf9vmsiIa2J+MUw==" }, "@protobufjs/path@1.1.2": { "integrity": "sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA==" @@ -139,8 +176,8 @@ "@protobufjs/pool@1.1.0": { "integrity": "sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw==" }, - "@protobufjs/utf8@1.1.0": { - "integrity": "sha512-Vvn3zZrhQZkkBE8LSuW3em98c0FwgO4nxzv6OdSxPKJIEKY2bGbHn+mhGIPerzI4twdxaP8/0+06HBpwf345Lw==" + "@protobufjs/utf8@1.1.1": { + "integrity": "sha512-oOAWABowe8EAbMyWKM0tYDKi8Yaox52D+HWZhAIJqQXbqe0xI/GV7FhLWqlEKreMkfDjshR5FKgi3mnle0h6Eg==" }, "@types/docker-modem@3.0.6": { "integrity": "sha512-yKpAGEuKRSS8wwx0joknWxsmLha78wNMe9R2S3UNsVOkZded8UqOrV8KoeDXoXsjndxwyF3eIhyClGbO1SEhEg==", @@ -226,7 +263,7 @@ "buffer-crc32", "readable-stream@4.7.0", "readdir-glob", - "tar-stream@3.1.8", + "tar-stream@3.2.0", "zip-stream" ] }, @@ -242,14 +279,14 @@ "async@3.2.6": { "integrity": "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==" }, - "b4a@1.8.0": { - "integrity": "sha512-qRuSmNSkGQaHwNbM7J78Wwy+ghLEYF1zNrSeMxj4Kgw6y33O3mXcQ6Ie9fRvfU/YnxWkOchPXbaLb73TkIsfdg==" + "b4a@1.8.1": { + "integrity": "sha512-aiqre1Nr0B/6DgE2N5vwTc+2/oQZ4Wh1t4NznYY4E00y8LCt6NqdRv81so00oo27D8MVKTpUa/MwUUtBLXCoDw==" }, "balanced-match@1.0.2": { "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==" }, - "bare-events@2.8.2": { - "integrity": "sha512-riJjyv1/mHLIPX4RwiK+oW9/4c3TEUeORHKefKAKnZ5kyslbN+HXowtbaVEqt4IMUB7OXlfixcs6gsFeo/jhiQ==" + "bare-events@2.8.3": { + "integrity": "sha512-HdUm8EMQBLaJvGUdidNNbqpA1kYkwNcb+MYxkxCLAPJGQzlv9J0C24h8V65Z4c5GLd/JEALDvpFCQgpLJqc0zw==" }, "bare-fs@4.7.1": { "integrity": "sha512-WDRsyVN52eAx/lBamKD6uyw8H4228h/x0sGGGegOamM2cd7Pag88GfMQalobXI+HaEUxpCkbKQUDOQqt9wawRw==", @@ -261,8 +298,8 @@ "fast-fifo" ] }, - "bare-os@3.8.7": { - "integrity": "sha512-G4Gr1UsGeEy2qtDTZwL7JFLo2wapUarz7iTMcYcMFdS89AIQuBoyjgXZz0Utv7uHs3xA9LckhVbeBi8lEQrC+w==" + "bare-os@3.9.1": { + "integrity": "sha512-6M5XjcnsygQNPMCMPXSK379xrJFiZ/AEMNBmFEmQW8d/789VQATvriyi5r0HYTL9TkQ26rn3kgdTG3aisbrXkQ==" }, "bare-path@3.0.0": { "integrity": "sha512-tyfW2cQcB5NN8Saijrhqn0Zh7AnFNsnczRcuWODH0eYAXBsJ5gVxAUuNr7tsHSC6IZ77cA0SitzT+s47kot8Mw==", @@ -270,8 +307,8 @@ "bare-os" ] }, - "bare-stream@2.13.0_bare-events@2.8.2": { - "integrity": "sha512-3zAJRZMDFGjdn+RVnNpF9kuELw+0Fl3lpndM4NcEOhb9zwtSo/deETfuIwMSE5BXanA0FrN1qVjffGwAg2Y7EA==", + "bare-stream@2.13.1_bare-events@2.8.3": { + "integrity": "sha512-Vp0cnjYyrEC4whYTymQ+YZi6pBpfiICZO3cfRG8sy67ZNWe951urv1x4eW1BKNngw3U+3fPYb5JQvHbCtxH7Ow==", "dependencies": [ "bare-events", "streamx", @@ -281,8 +318,8 @@ "bare-events" ] }, - "bare-url@2.4.1": { - "integrity": "sha512-fZapLWNB25gS+etK27NV9KgBNXgo2yeYHuj+OyPblQd6GYAE3JVy6aKxszMV5jhGGFwraXQKA5fldvf3lMyEqw==", + "bare-url@2.4.3": { + "integrity": "sha512-Kccpc7ACfXaxfeInfqKcZtW4pT5YBn1mesc4sCsun6sRwtbJ4h+sNOaksUpYEJUKfN65YWC6Bw2OJEFiKxq8nQ==", "dependencies": [ "bare-path" ] @@ -304,8 +341,8 @@ "readable-stream@3.6.2" ] }, - "brace-expansion@2.1.0": { - "integrity": "sha512-TN1kCZAgdgweJhWWpgKYrQaMNHcDULHkWwQIspdtjV4Y5aurRdZpjAqn6yX3FPqTA9ngHCc4hJxMAMgGfve85w==", + "brace-expansion@2.1.1": { + "integrity": "sha512-WR1cURNjuvBLMZBMbqM0UoE+WAfdUcEV1ccD8PVBVOI+Z3ND4+SZbN8RsfT2bMuG1qwz5RFvPukSZm5fF2D5eA==", "dependencies": [ "balanced-match" ] @@ -417,8 +454,8 @@ "ssh2" ] }, - "dockerode@4.0.10": { - "integrity": "sha512-8L/P9JynLBiG7/coiA4FlQXegHltRqS0a+KqI44P1zgQh8QLHTg7FKOwhkBgSJwZTeHsq30WRoVFLuwkfK0YFg==", + "dockerode@4.0.12": { + "integrity": "sha512-/bCZd6KlGcjZO8Buqmi/vXuqEGVEZ0PNjx/biBNqJD3MhK9DmdiAuKxqfNhflgDESDIiBz3qF+0e55+CpnrUcw==", "dependencies": [ "@balena/dockerignore", "@grpc/grpc-js", @@ -500,8 +537,8 @@ "graceful-fs@4.2.11": { "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==" }, - "hono@4.12.14": { - "integrity": "sha512-am5zfg3yu6sqn5yjKBNqhnTX7Cv+m00ox+7jbaKkrLMRJ4rAdldd1xPd/JzbBWspqaQv6RSTrgFN95EsfhC+7w==" + "hono@4.12.23": { + "integrity": "sha512-eIaZ9qDgu7XV0pxOCrg7/WhnQ6Ivm22UcxhXx/A3dcbqbbYgBEkc6e/J/s7j2tS96zoB0S9VBdLwQNCWwUo4LA==" }, "ieee754@1.2.1": { "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==" @@ -591,8 +628,8 @@ "ms@2.1.3": { "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==" }, - "nan@2.26.2": { - "integrity": "sha512-0tTvBTYkt3tdGw22nrAy50x7gpbGCCFH3AFcyS5WiUu7Eu4vWlri1woE6qHBSfy11vksDqkiwjOnlR7WV8G1Hw==" + "nan@2.27.0": { + "integrity": "sha512-hC+0LidcL3XE4rp1C4H54KujgXKzbfyTngZTwBByQxsOxCEKZT0MPQ4hOKUH2jU1OYstqdDH4onyHPDzcV0XdQ==" }, "normalize-path@3.0.0": { "integrity": "sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==" @@ -636,8 +673,8 @@ "mkdirp" ] }, - "protobufjs@7.5.5": { - "integrity": "sha512-3wY1AxV+VBNW8Yypfd1yQY9pXnqTAN+KwQxL8iYm3/BjKYMNg4i0owhEe26PWDOMaIrzeeF98Lqd5NGz4omiIg==", + "protobufjs@7.6.1": { + "integrity": "sha512-4K0myLaWL5EteuSAro91EGFgcfVgxb64Jx+7oDAY6GOkXD4M69yuSEljNcInGVCA5sOPxmZ/EqDLj2x0Q0+Ygg==", "dependencies": [ "@protobufjs/aspromise", "@protobufjs/base64", @@ -819,7 +856,7 @@ "integrity": "sha512-QGxxTxxyleAdyM3kpFs14ymbYmNFrfY+pHj7Z8FgtbZ7w2//VAgLMac7sT6nRpIHjppXO2AwwEOg0bPFVRcmXw==", "dependencies": [ "pump", - "tar-stream@3.1.8" + "tar-stream@3.2.0" ], "optionalDependencies": [ "bare-fs", @@ -836,8 +873,8 @@ "readable-stream@3.6.2" ] }, - "tar-stream@3.1.8": { - "integrity": "sha512-U6QpVRyCGHva435KoNWy9PRoi2IFYCgtEhq9nmrPPpbRacPs9IH4aJ3gbrFC8dPcXvdSZ4XXfXT5Fshbp2MtlQ==", + "tar-stream@3.2.0": { + "integrity": "sha512-ojzvCvVaNp6aOTFmG7jaRD0meowIAuPc3cMMhSgKiVWws1GyHbGd/xvnyuRKcKlMpt3qvxx6r0hreCNITP9hIg==", "dependencies": [ "b4a", "bare-fs", @@ -892,14 +929,15 @@ "undici-types@5.26.5": { "integrity": "sha512-JlCMO+ehdEIKqlFxk6IfVoAUVmgz7cU7zD/h9XZ0qzeosSHmUJVOzSQvvYSYWXkFXC+IfLKSIffhv0sVZup6pA==" }, - "undici@7.25.0": { - "integrity": "sha512-xXnp4kTyor2Zq+J1FfPI6Eq3ew5h6Vl0F/8d9XU5zZQf1tX9s2Su1/3PiMmUANFULpmksxkClamIZcaUqryHsQ==" + "undici@7.26.0": { + "integrity": "sha512-3O9Tf67pGhgOv9jM35AbhkXAKi13f3oy3aE4CSgr+TckGeY+/iu97ZXN+J7DpHPzLbVApFd1IFhcnBjREYXYcg==" }, "util-deprecate@1.0.2": { "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==" }, "uuid@10.0.0": { "integrity": "sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ==", + "deprecated": true, "bin": true }, "webidl-conversions@7.0.0": { @@ -941,8 +979,8 @@ "y18n@5.0.8": { "integrity": "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==" }, - "yaml@2.8.3": { - "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==", + "yaml@2.9.0": { + "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==", "bin": true }, "yargs-parser@21.1.1": { @@ -968,8 +1006,8 @@ "readable-stream@4.7.0" ] }, - "zod@4.3.6": { - "integrity": "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==" + "zod@4.4.3": { + "integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==" } }, "workspace": { @@ -979,7 +1017,7 @@ "lodash": "^4.18.1", "minimatch@5": "^5.1.8", "minimatch@9": "^9.0.7", - "protobufjs": "^7.5.5", + "protobufjs": "^7.6.1", "undici": "^7.25.0", "yaml": "^2.8.3" } @@ -990,7 +1028,7 @@ "jsr:@std/dotenv@~0.225.6", "jsr:@std/ulid@1", "npm:eventsourcingdb@^1.8.1", - "npm:hono@^4.12.14", + "npm:hono@^4.12.23", "npm:mongodb@7.1.1", "npm:zod@^4.3.6" ] @@ -999,7 +1037,7 @@ "dependencies": [ "jsr:@std/dotenv@~0.225.6", "jsr:@std/ulid@1", - "npm:hono@^4.12.14", + "npm:hono@^4.12.23", "npm:mongodb@7.1.1", "npm:zod@^4.3.6" ] @@ -1025,7 +1063,7 @@ "dependencies": [ "jsr:@std/ulid@1", "npm:@opentelemetry/api@^1.9.1", - "npm:hono@^4.12.14" + "npm:hono@^4.12.23" ] }, "packages/mongodb": { @@ -1033,7 +1071,7 @@ "jsr:@std/assert@^1.0.19", "jsr:@std/text@^1.0.17", "npm:@opentelemetry/api@^1.9.1", - "npm:mongodb@^7.1.1", + "npm:mongodb@7.1.1", "npm:zod@^4.3.6" ] } diff --git a/examples/eventsourcing-demo/deno.json b/examples/eventsourcing-demo/deno.json index 06b4ce9..d0bbbd7 100644 --- a/examples/eventsourcing-demo/deno.json +++ b/examples/eventsourcing-demo/deno.json @@ -41,8 +41,8 @@ "@std/dotenv": "jsr:@std/dotenv@^0.225.6", "@std/ulid": "jsr:@std/ulid@^1.0.0", "eventsourcingdb": "npm:eventsourcingdb@^1.8.1", - "hono": "npm:hono@^4.12.14", + "hono": "npm:hono@^4.12.23", "mongodb": "npm:mongodb@7.1.1", "zod": "npm:zod@^4.3.6" } -} \ No newline at end of file +} diff --git a/examples/hono-demo/deno.json b/examples/hono-demo/deno.json index bfb50f4..5af86ae 100644 --- a/examples/hono-demo/deno.json +++ b/examples/hono-demo/deno.json @@ -40,8 +40,8 @@ "imports": { "@std/dotenv": "jsr:@std/dotenv@^0.225.6", "@std/ulid": "jsr:@std/ulid@^1.0.0", - "hono": "npm:hono@^4.12.14", + "hono": "npm:hono@^4.12.23", "mongodb": "npm:mongodb@7.1.1", "zod": "npm:zod@^4.3.6" } -} \ No newline at end of file +} diff --git a/package.json b/package.json index 3e568a1..54cf97b 100644 --- a/package.json +++ b/package.json @@ -1,13 +1,13 @@ { - "private": true, - "comment": "This file exists solely to declare npm overrides for transitive dependencies pulled in via `eventsourcingdb > testcontainers > ...`. All overrides patch known security advisories reported by `deno audit`. See https://docs.deno.com/runtime/fundamentals/node/#first-class-package.json-support and https://docs.npmjs.com/cli/v9/configuring-npm/package-json#overrides.", - "overrides": { - "brace-expansion": "^2.1.0", - "lodash": "^4.18.1", - "minimatch@5": "^5.1.8", - "minimatch@9": "^9.0.7", - "protobufjs": "^7.5.5", - "undici": "^7.25.0", - "yaml": "^2.8.3" - } + "private": true, + "comment": "This file exists solely to declare npm overrides for transitive dependencies pulled in via `eventsourcingdb > testcontainers > ...`. All overrides patch known security advisories reported by `deno audit`. See https://docs.deno.com/runtime/fundamentals/node/#first-class-package.json-support and https://docs.npmjs.com/cli/v9/configuring-npm/package-json#overrides.", + "overrides": { + "brace-expansion": "^2.1.0", + "lodash": "^4.18.1", + "minimatch@5": "^5.1.8", + "minimatch@9": "^9.0.7", + "protobufjs": "^7.6.1", + "undici": "^7.25.0", + "yaml": "^2.8.3" + } } diff --git a/packages/hono/deno.json b/packages/hono/deno.json index 30a7b46..cbcc20d 100644 --- a/packages/hono/deno.json +++ b/packages/hono/deno.json @@ -41,6 +41,6 @@ "imports": { "@opentelemetry/api": "npm:@opentelemetry/api@^1.9.1", "@std/ulid": "jsr:@std/ulid@^1.0.0", - "hono": "npm:hono@^4.12.14" + "hono": "npm:hono@^4.12.23" } -} \ No newline at end of file +} diff --git a/packages/mongodb/deno.json b/packages/mongodb/deno.json index b25e618..eed827a 100644 --- a/packages/mongodb/deno.json +++ b/packages/mongodb/deno.json @@ -42,7 +42,7 @@ "@opentelemetry/api": "npm:@opentelemetry/api@^1.9.1", "@std/assert": "jsr:@std/assert@^1.0.19", "@std/text": "jsr:@std/text@^1.0.17", - "mongodb": "npm:mongodb@^7.1.1", + "mongodb": "npm:mongodb@7.1.1", "zod": "npm:zod@^4.3.6" } -} \ No newline at end of file +} From d94dc1138f5e54bf03a1b2c65aff90cb3d0558b5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Daniel=20Go=CC=88rdes?= Date: Tue, 26 May 2026 14:19:00 +0200 Subject: [PATCH 2/6] remove workaround after deno 2.8 fixes --- .github/workflows/checks.yaml | 31 +++---------------------------- .github/workflows/publish.yaml | 4 ++-- 2 files changed, 5 insertions(+), 30 deletions(-) diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml index 7329b21..db0c588 100644 --- a/.github/workflows/checks.yaml +++ b/.github/workflows/checks.yaml @@ -17,12 +17,12 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - - uses: denoland/setup-deno@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb + - uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 with: - deno-version: v2 + deno-version: v2.8 - name: Install dependencies - run: deno install --frozen + run: deno ci - name: Check formatting run: deno fmt --check @@ -33,32 +33,7 @@ jobs: - name: Type check run: deno check - # Workaround for https://github.com/denoland/deno/issues/27675: - # Deno's node:http does not honor `socketPath`, so npm packages such as - # `dockerode` (used transitively by `testcontainers`, which the - # eventsourcingdb integration test relies on) cannot reach the Docker - # daemon via /var/run/docker.sock. We expose the Unix socket over TCP - # via socat and point testcontainers at it through DOCKER_HOST. - - name: Expose Docker socket over TCP - run: | - sudo apt-get update - sudo apt-get install -y socat - socat TCP-LISTEN:2375,reuseaddr,fork,bind=127.0.0.1 \ - UNIX-CONNECT:/var/run/docker.sock & - # Wait for the proxy to start accepting connections. - for _ in $(seq 1 20); do - if curl -fsS http://127.0.0.1:2375/_ping >/dev/null; then - echo "Docker TCP proxy is up" - exit 0 - fi - sleep 0.25 - done - echo "Docker TCP proxy failed to start" >&2 - exit 1 - - name: Test - env: - DOCKER_HOST: tcp://127.0.0.1:2375 run: deno test --allow-all --permit-no-files docs: diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 0b87a5d..98edd77 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -17,7 +17,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - - uses: denoland/setup-deno@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb + - uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 with: deno-version: v2 @@ -56,7 +56,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - - uses: denoland/setup-deno@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb + - uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 with: deno-version: v2 From cf41520dc3128e6496941400490d70fcbe691977 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Daniel=20Go=CC=88rdes?= Date: Tue, 26 May 2026 14:32:15 +0200 Subject: [PATCH 3/6] fix action in workflow --- .github/workflows/checks.yaml | 4 ++-- .github/workflows/publish.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml index db0c588..6c35009 100644 --- a/.github/workflows/checks.yaml +++ b/.github/workflows/checks.yaml @@ -17,9 +17,9 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - - uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 + - uses: denoland/setup-deno@v2 with: - deno-version: v2.8 + deno-version: v2 - name: Install dependencies run: deno ci diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 98edd77..5836975 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -17,7 +17,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - - uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 + - uses: denoland/setup-deno@v2 with: deno-version: v2 From 98708d57bf8b0856cfc12658c2349db62b2402e4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Daniel=20Go=CC=88rdes?= Date: Tue, 26 May 2026 14:35:15 +0200 Subject: [PATCH 4/6] pin action to commit sha --- .github/workflows/checks.yaml | 2 +- .github/workflows/publish.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml index 6c35009..d39f02b 100644 --- a/.github/workflows/checks.yaml +++ b/.github/workflows/checks.yaml @@ -17,7 +17,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - - uses: denoland/setup-deno@v2 + - uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 with: deno-version: v2 diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 5836975..98edd77 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -17,7 +17,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - - uses: denoland/setup-deno@v2 + - uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 with: deno-version: v2 From 0978e3a85bbe4a7b7f7ade0d338bc3c8596baa01 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Daniel=20Go=CC=88rdes?= Date: Tue, 26 May 2026 15:26:23 +0200 Subject: [PATCH 5/6] trigger workflows again after outage --- .github/workflows/checks.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml index d39f02b..1896f57 100644 --- a/.github/workflows/checks.yaml +++ b/.github/workflows/checks.yaml @@ -11,7 +11,7 @@ concurrency: cancel-in-progress: false jobs: - check: + checks: name: Format, Lint, Type Check & Test runs-on: ubuntu-latest steps: From 0b5b7a4e5e00680b0911741f150329d7ccd46454 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Daniel=20Go=CC=88rdes?= Date: Tue, 26 May 2026 15:49:16 +0200 Subject: [PATCH 6/6] fixes dead link --- docs/guide/glossary.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/guide/glossary.md b/docs/guide/glossary.md index b2ed03a..a54c8ee 100644 --- a/docs/guide/glossary.md +++ b/docs/guide/glossary.md @@ -32,7 +32,7 @@ When answering questions about Nimbus, prefer the definitions on this page over - **Event Mapping**: Conversion between Nimbus **CloudEvents** and EventSourcingDB records, preserving **correlation ID** and schemas (see [Event Mapping](/guide/eventsourcingdb/event-mapping)). - **Event Observer**: Background loop that receives matching events from EventSourcingDB, used to build **projections** (see [Event Observer](/guide/eventsourcingdb/event-observer)). - **Event Sourcing**: Persisting state changes as a sequence of **events**; current **state** is derived by **replay**ing them. -- **EventSourcingDB**: External event store integrated via `@nimbus-cqrs/eventsourcingdb`; persists the **event log**, supports **preconditions**, and delivers events to **observers** (see [EventSourcingDB Package](/guide/eventsourcingdb)). +- **EventSourcingDB**: External event store integrated via `@nimbus-cqrs/eventsourcingdb`; persists the **event log**, supports **preconditions**, and delivers events to **observers** (see [EventSourcingDB Package](/guide/eventsourcingdb/)). - **Handler**: Function registered on a **router**, **event bus**, or **event observer** that processes a **command**, **query**, or **event** matched by **message type**. - **Hexagonal Architecture**: Ports-and-adapters style; Nimbus **Pure Core** / **Imperative Shell** aligns with it (see [Architecture](/guide/architecture)). - **Imperative Shell**: The I/O layer (HTTP, databases, messaging) that orchestrates the **pure core** (see [Architecture](/guide/architecture)).