ad41319667
Merge e47b1b6e4d into a3f72e9ab9
2025-12-07 15:52:19 +00:00
e47b1b6e4d
Update package.json
2025-12-07 16:52:13 +01:00
290f8c6b15
chore: add Node version management and update engine requirements
...
Add .nvmrc file specifying Node 20.18.1 LTS for consistent development
environment. Update package.json engines to require Node 20-22 to align
with security resolution requirements and ensure compatibility.
2025-12-07 16:45:57 +01:00
1ea62f8320
chore: resolve CVE security vulnerabilities via package resolutions (HIGH / CRITICAL)
...
Add package resolutions to fix all critical and high severity CVE vulnerabilities detected in dependencies.
Security fixes:
- elliptic@^6.6.1 - Fixes critical CVE (private key extraction vulnerability)
- glob@^10.5.0 - Fixes CVE-2025-64756 (command injection in CLI)
- tmp@^0.2.4 - Fixes CVE-2025-54798 (arbitrary file write via symlink)
- @babel/helpers@^7.26.10 - Fixes RegExp complexity vulnerability
- js-yaml@^3.14.2 - Fixes prototype pollution vulnerability
Results:
- Eliminated all critical vulnerabilities (1 → 0)
- Eliminated all high severity vulnerabilities (4 → 0)
- Reduced moderate vulnerabilities (33 → 11)
- Production dependencies: only 2 low severity issues remaining
Build and ESLint checks pass successfully.
2025-11-24 23:19:28 +01:00
a3f72e9ab9
chore: update packages in playground
2025-11-10 22:05:36 +01:00
48947fc9cc
chore: update strapi dependencies
2025-11-10 21:49:38 +01:00
36cd67cbe1
chore: update pipeline
2025-11-10 21:19:28 +01:00
8759690b71
Merge pull request #194 from pluginpal/dependabot/npm_and_yarn/docs/mermaid-10.9.4
...
chore(deps): bump mermaid from 10.9.3 to 10.9.4 in /docs
2025-10-28 08:22:06 +01:00
684df11531
Merge pull request #193 from pluginpal/dependabot/npm_and_yarn/sha.js-2.4.12
...
chore(deps): bump sha.js from 2.4.11 to 2.4.12
2025-10-28 08:21:54 +01:00
9b1f6caff4
Merge pull request #192 from pluginpal/dependabot/npm_and_yarn/cipher-base-1.0.6
...
chore(deps): bump cipher-base from 1.0.4 to 1.0.6
2025-10-28 08:21:41 +01:00
00a2e0e5c6
chore(deps): bump mermaid from 10.9.3 to 10.9.4 in /docs
...
Bumps [mermaid](https://github.com/mermaid-js/mermaid ) from 10.9.3 to 10.9.4.
- [Release notes](https://github.com/mermaid-js/mermaid/releases )
- [Commits](https://github.com/mermaid-js/mermaid/compare/v10.9.3...v10.9.4 )
---
updated-dependencies:
- dependency-name: mermaid
dependency-version: 10.9.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-08-22 22:57:52 +00:00
ba7561fbd6
chore(deps): bump sha.js from 2.4.11 to 2.4.12
...
Bumps [sha.js](https://github.com/crypto-browserify/sha.js ) from 2.4.11 to 2.4.12.
- [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crypto-browserify/sha.js/compare/v2.4.11...v2.4.12 )
---
updated-dependencies:
- dependency-name: sha.js
dependency-version: 2.4.12
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-08-22 03:08:09 +00:00
0d5c03330b
chore(deps): bump cipher-base from 1.0.4 to 1.0.6
...
Bumps [cipher-base](https://github.com/crypto-browserify/cipher-base ) from 1.0.4 to 1.0.6.
- [Changelog](https://github.com/browserify/cipher-base/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crypto-browserify/cipher-base/compare/v1.0.4...v1.0.6 )
---
updated-dependencies:
- dependency-name: cipher-base
dependency-version: 1.0.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-08-22 02:00:46 +00:00
047af45cc1
Merge pull request #189 from pluginpal/dependabot/npm_and_yarn/form-data-4.0.4
...
chore(deps): bump form-data from 4.0.1 to 4.0.4
2025-07-22 14:25:59 +02:00
355b3d2c9c
chore(deps): bump form-data from 4.0.1 to 4.0.4
...
Bumps [form-data](https://github.com/form-data/form-data ) from 4.0.1 to 4.0.4.
- [Release notes](https://github.com/form-data/form-data/releases )
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md )
- [Commits](https://github.com/form-data/form-data/compare/v4.0.1...v4.0.4 )
---
updated-dependencies:
- dependency-name: form-data
dependency-version: 4.0.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-22 12:23:55 +00:00
7140fac0af
chore: Bump version to 3.1.2
2025-06-30 07:26:35 +00:00
6a060c9b11
Merge pull request #185 from pluginpal/dependabot/npm_and_yarn/pbkdf2-3.1.3
...
chore(deps): bump pbkdf2 from 3.1.2 to 3.1.3
2025-06-30 07:49:50 +02:00
10c3a80a7d
Merge branch 'master' of github.com:pluginpal/strapi-plugin-config-sync
2025-06-30 07:36:41 +02:00
fc82cc962f
fix: add /config/sync folder to the watchIgnoreFiles
2025-06-30 07:36:31 +02:00
daec71f7eb
chore: Bump version to 3.1.2-beta.2
2025-06-30 05:29:33 +00:00
bb944efb16
chore: update lockfile
2025-06-30 07:27:17 +02:00
b55dc1864d
fix: add @strapi/typescript-utils to peerDependencies to prevent it from being bundled
2025-06-30 07:24:29 +02:00
db6659ce4b
chore(deps): bump pbkdf2 from 3.1.2 to 3.1.3
...
Bumps [pbkdf2](https://github.com/crypto-browserify/pbkdf2 ) from 3.1.2 to 3.1.3.
- [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crypto-browserify/pbkdf2/compare/v3.1.2...v3.1.3 )
---
updated-dependencies:
- dependency-name: pbkdf2
dependency-version: 3.1.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-30 05:17:05 +00:00
432b0c1aec
chore: Bump version to 3.1.2-beta.1
2025-06-30 05:15:01 +00:00
75e9f4cb04
Merge branch 'master' of github.com:pluginpal/strapi-plugin-config-sync
2025-06-30 07:07:57 +02:00
5fc0aea585
feat: ability to create automated alpha & beta releases
2025-06-30 07:07:42 +02:00
748a31a0b6
Merge pull request #187 from gboutte/master
...
Avoid CLI re building the project if it's already built
2025-06-29 20:27:53 +02:00
0b71235389
test: restore dist folder after the tests are done
2025-06-29 19:03:27 +02:00
8b0f41bcd1
chore: update playground
2025-06-29 11:35:04 +02:00
a31a06cd72
chore: playground typescript cleanup
2025-06-29 11:20:27 +02:00
b45ec9c8d1
test: cli compile strapi only when not already built
2025-06-28 17:37:38 +02:00
c0253b5498
feat: migrate playground to typescript
2025-06-28 17:21:16 +02:00
1e78cca1d3
fix: app context dist directory
2025-06-26 21:45:17 +02:00
251d8df336
feat: avoid compilation is project already compiled
2025-06-26 13:49:39 +02:00
8a7d4baca8
chore: update github action workflows
2025-05-29 17:22:35 +02:00
8becc53ddf
Merge pull request #184 from mccrackend/patch-1
...
Documentation typo, fixing broken link
2025-05-29 17:19:56 +02:00
a2a136a336
fixing broken image ref
...
See docs state <img..> tags in .md https://docusaurus.io/docs/static-assets#in-markdown
2025-05-27 13:05:30 -04:00
3835908542
fixing typo
2025-05-27 12:21:57 -04:00
c6e865bec1
Merge pull request #183 from pluginpal/dependabot/npm_and_yarn/docs/prismjs-1.30.0
...
chore(deps): bump prismjs from 1.29.0 to 1.30.0 in /docs
2025-04-29 10:38:56 +02:00
5fa1fc7a1f
chore(deps): bump prismjs from 1.29.0 to 1.30.0 in /docs
...
Bumps [prismjs](https://github.com/PrismJS/prism ) from 1.29.0 to 1.30.0.
- [Release notes](https://github.com/PrismJS/prism/releases )
- [Changelog](https://github.com/PrismJS/prism/blob/v2/CHANGELOG.md )
- [Commits](https://github.com/PrismJS/prism/compare/v1.29.0...v1.30.0 )
---
updated-dependencies:
- dependency-name: prismjs
dependency-version: 1.30.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-29 08:24:24 +00:00
07ee4ebd90
Merge pull request #182 from pluginpal/dependabot/npm_and_yarn/docs/http-proxy-middleware-2.0.9
...
chore(deps): bump http-proxy-middleware from 2.0.7 to 2.0.9 in /docs
2025-04-29 10:22:44 +02:00
60b7cb9614
chore(deps): bump http-proxy-middleware from 2.0.7 to 2.0.9 in /docs
...
Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware ) from 2.0.7 to 2.0.9.
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases )
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md )
- [Commits](https://github.com/chimurai/http-proxy-middleware/compare/v2.0.7...v2.0.9 )
---
updated-dependencies:
- dependency-name: http-proxy-middleware
dependency-version: 2.0.9
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-29 02:13:11 +00:00
1ae52f0ebd
Merge pull request #181 from pluginpal/dependabot/npm_and_yarn/docs/estree-util-value-to-estree-3.3.3
...
chore(deps): bump estree-util-value-to-estree from 3.1.2 to 3.3.3 in /docs
2025-04-09 17:54:49 +02:00
18856cc719
chore(deps): bump estree-util-value-to-estree in /docs
...
Bumps [estree-util-value-to-estree](https://github.com/remcohaszing/estree-util-value-to-estree ) from 3.1.2 to 3.3.3.
- [Release notes](https://github.com/remcohaszing/estree-util-value-to-estree/releases )
- [Commits](https://github.com/remcohaszing/estree-util-value-to-estree/compare/v3.1.2...v3.3.3 )
---
updated-dependencies:
- dependency-name: estree-util-value-to-estree
dependency-version: 3.3.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-08 02:05:46 +00:00
7317a3e14d
Merge pull request #176 from pluginpal/dependabot/npm_and_yarn/docs/babel/runtime-7.27.0
...
chore(deps): bump @babel/runtime from 7.25.6 to 7.27.0 in /docs
2025-04-07 10:11:10 +02:00
fefe1bd93a
Merge pull request #177 from pluginpal/dependabot/npm_and_yarn/docs/cross-spawn-7.0.6
...
chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /docs
2025-04-07 10:11:01 +02:00
954c3fb1d1
Merge pull request #178 from pluginpal/dependabot/npm_and_yarn/docs/http-proxy-middleware-2.0.7
...
chore(deps): bump http-proxy-middleware from 2.0.6 to 2.0.7 in /docs
2025-04-07 10:10:52 +02:00
69b1633af8
Merge pull request #179 from pluginpal/dependabot/npm_and_yarn/docs/mermaid-10.9.3
...
chore(deps): bump mermaid from 10.9.1 to 10.9.3 in /docs
2025-04-07 10:10:44 +02:00
790228f9e4
Merge pull request #180 from pluginpal/dependabot/npm_and_yarn/docs/image-size-1.2.1
...
chore(deps): bump image-size from 1.1.1 to 1.2.1 in /docs
2025-04-07 10:10:31 +02:00
d330a80e60
chore(deps): bump image-size from 1.1.1 to 1.2.1 in /docs
...
Bumps [image-size](https://github.com/image-size/image-size ) from 1.1.1 to 1.2.1.
- [Release notes](https://github.com/image-size/image-size/releases )
- [Commits](https://github.com/image-size/image-size/compare/v1.1.1...v1.2.1 )
---
updated-dependencies:
- dependency-name: image-size
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-02 15:10:22 +00:00
Mathijs Schouten