Starstruk Logo MarkStarstruk

v0.16.11

ConduitPlatform/Conduitv0.16.11Dec 9, 2024by kkopanidis

AI Summary

This release focuses on security patches, dependency updates, and new authentication features. Key additions include user activate/deactivate gRPC routes and default behavior for registration with invitation tokens, along with a refactoring to remove Express.js from module-tools to reduce size.

Key Highlights

  • Multiple security upgrades via Snyk: express, http-proxy-middleware, socket.io, node, axios, @apollo/server
  • New authentication features: user activate/deactivate gRPC routes and default behavior on register with invitation token
  • Refactored module-tools to remove Express.js, reducing size and dependencies
  • Updated database dependencies: mongoose (8.6.1 to 8.8.3), sequelize (6.37.3 to 6.37.5), mysql2 (3.10.0 to 3.11.5)
  • Upgraded bullmq from 5.12.14 to 5.21.2

Breaking Changes

  • Removed Express.js from module-tools - users depending on Express in module-tools will need to adjust their setup

New Features

  • User activate/deactivate gRPC routes for authentication
  • Default behavior on registration with invitation token
  • Merged fallback empty objects fix for authentication

Full Release Notes

## What's Changed
* build(deps-dev): bump @types/lodash from 4.17.6 to 4.17.12 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1197
* [Snyk] Security upgrade http-proxy-middleware from 2.0.6 to 2.0.7 by @kkopanidis in https://github.com/ConduitPlatform/Conduit/pull/1195
* [Snyk] Security upgrade express from 4.20.0 to 4.21.1 by @kkopanidis in https://github.com/ConduitPlatform/Conduit/pull/1191
* [Snyk] Fix for 1 vulnerabilities by @kkopanidis in https://github.com/ConduitPlatform/Conduit/pull/1188
* [Snyk] Security upgrade socket.io from 4.7.2 to 4.8.0 by @kkopanidis in https://github.com/ConduitPlatform/Conduit/pull/1165
* build(deps-dev): bump @types/jsonwebtoken from 9.0.5 to 9.0.7 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1163
* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.0.2 to 8.10.0 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1193
* build(deps-dev): bump smtp-server and @types/smtp-server by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1200
* build(deps): bump twilio from 5.3.0 to 5.3.4 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1198
* build(deps): bump bullmq from 5.12.14 to 5.21.2 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1202
* build(deps-dev): bump @types/bcrypt from 5.0.1 to 5.0.2 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1203
* build(deps-dev): bump @commitlint/config-conventional from 19.2.2 to 19.5.0 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1207
* refactor(module-tools): remove Express.js from module-tools to reduce size and dependencies by @kkopanidis in https://github.com/ConduitPlatform/Conduit/pull/1210
* build(deps): bump @scalar/api-reference from 1.25.10 to 1.25.57 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1222
* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.10.0 to 8.13.0 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1223
* build(deps): bump cross-spawn from 7.0.3 to 7.0.6 in the npm_and_yarn group by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1231
* feat(authentication): default behaviour on register with invitation token by @Renc17 in https://github.com/ConduitPlatform/Conduit/pull/1242
* fix(authentication): merge fallback empty objects by @Renc17 in https://github.com/ConduitPlatform/Conduit/pull/1243
* build(deps): bump sequelize from 6.37.3 to 6.37.5 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1211
* build(deps): bump mongoose from 8.6.1 to 8.8.3 in /modules/database in the npm_and_yarn group across 1 directory by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1239
* build(deps): bump mongoose from 8.6.1 to 8.8.3 in the npm_and_yarn group by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1240
* build(deps): bump graphql from 16.8.1 to 16.9.0 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1225
* [Snyk] Security upgrade node from 20.15.1-alpine3.20 to 20.18.1-alpine3.20 by @kkopanidis in https://github.com/ConduitPlatform/Conduit/pull/1232
* [Snyk] Security upgrade axios from 1.7.7 to 1.7.8 by @kkopanidis in https://github.com/ConduitPlatform/Conduit/pull/1238
* build(deps): bump mysql2 from 3.10.0 to 3.11.5 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1236
* [Snyk] Security upgrade @apollo/server from 4.11.0 to 4.11.1 by @kkopanidis in https://github.com/ConduitPlatform/Conduit/pull/1219
* feat(authentication): user activate/deactivate gRPC routes by @Renc17 in https://github.com/ConduitPlatform/Conduit/pull/1248
* build(deps): bump @sendgrid/client from 8.1.0 to 8.1.4 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1245
* build(deps): bump @google-cloud/storage from 7.7.0 to 7.14.0 by @dependabot in https://github.com/ConduitPlatform/Conduit/pull/1247


**Full Changelog**: https://github.com/ConduitPlatform/Conduit/compare/v0.16.10...v0.16.11