Repository navigation
0.8.1: the toolchain at its latest, and undici past its advisories - #26
Merged
Merged
Conversation
LuneBlox goes from 0.10.16 to 0.11.1, StyLua from 2.5.2 to 2.6.0 and lefthook from 2.2.1 to 2.2.2 in rokit.toml, edited by hand so its comments stay, and .luaurc's @lune alias follows LuneBlox. LuneBlox 0.11.1 runs the Luau and fast flags 0.10.16 did plus the fixes since, Roblox's Enum as a global among them; its setup adds no globals to .luaurc in a project whose editor settings keep the Roblox types, as this one's do. StyLua 2.6.0 changes no file here. Every other tool and every CI action was at its latest release. Checked: lefthook run pre-commit --all-files, every gate green, the Worker among them; sh scripts/run-tests.sh, all 119 specs passed; luneblox run tests/Mutate --yes, 226 of 226 mutants killed; sh scripts/check-package.sh, all 14 files of src/; npm test, 96 passed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01JRrMnksQ2aFgqbGgeZgVvE
…sories Biome goes from 2.5.15 to 2.6.3 and @cloudflare/workers-types from 5.20261013.1 to 5.20261025.1; TypeScript 7.0.2 and miniflare 4.20260730.0 were already the latest. biome migrate moved biome.json's schema to 2.6.3 and nothing else, and Biome 2.6.3 finds nothing to change. npm audit had found three advisories in undici 7.0.0 to 7.30.0, the version the overrides held miniflare's undici at: an unbounded EventSource parser, a Subresource Integrity bypass and an unhandled error on excessive content-encodings. The override moves to 7.30.1, the first patched release of 7.x and the line miniflare asks for, and npm audit reports nothing. The lock was made against registry.npmjs.org. worker/dist is unchanged. Checked: lefthook run pre-commit --all-files, every gate green; sh scripts/check-worker.sh, types, format, build, 96 tests and the workerd smoke clean; npm audit, 0 vulnerabilities; sh scripts/check-lockfile.sh, all 89 packages from registry.npmjs.org. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01JRrMnksQ2aFgqbGgeZgVvE
The pipe and the Worker are 0.8.0's: src/ and worker/dist do not change, the wire is schemaVersion 1 and no migration is added. The two steps before this one bring LuneBlox, StyLua, lefthook, Biome and workers-types to their latest releases and hold miniflare's undici at 7.30.1, past three advisories. The version moves to 0.8.1 in pesde.toml, pesde.lock, package.json, package-lock.json and the README, and CHANGELOG.md says why a game need not deploy for it. Checked: lefthook run pre-commit --all-files, every gate green; sh scripts/run-tests.sh, all 119 specs passed; luneblox run tests/Mutate --yes, 226 of 226 mutants killed; sh scripts/check-package.sh, all 14 files of src/; sh scripts/check-worker.sh, 96 tests and the workerd smoke clean. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01JRrMnksQ2aFgqbGgeZgVvE
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The pipe and the Worker are 0.8.0's:
src/andworker/distdo not change, the wire isschemaVersion1, and no migration is added.@lunealias following LuneBlox. StyLua changes no file. With LuneBlox 0.11.1, setup leaves.luaurcwithout globals.biome.jsonnames the new schema; nothing is reformatted) and@cloudflare/workers-types5.20261025.1.npm auditnow reports 0.Checked:
check-package: 14 filescheck-worker: 96 tests and the workerd smokecheck-lockfile: 89 packages, all from registry.npmjs.org🤖 Generated with Claude Code
https://claude.ai/code/session_01JRrMnksQ2aFgqbGgeZgVvE