- engines update minimum Node.js version requirement to
>= 24.15.0(was>= 20.0.0)
- Reduce npm audit findings from 15 to 0 (1 critical, 6 high, 6 moderate, 1 low → 0)
- Remove abandoned
coverallspackage and its unfixable transitive chain (request,form-data,qs,tough-cookie) - Upgrade
axios^1.13.2 → ^1.16.1 — fixes 16 CVEs (SSRF, prototype pollution, header injection) - Upgrade
mocha^10 → ^11.7.5; addoverridesforserialize-javascript@^7.0.5anddiff@^9to patch vulnerabilities bundled inside mocha 11 - Upgrade
nock14.0.10 → 14.0.15 (memory leak fix)
- Migrate ESLint 8 → 10 with flat config (
eslint.config.js); replace.eslintrcand.eslintignoreeslint-config-lob^5.2.0 → ^7.0.0eslint-plugin-lob^3.0.0 → ^3.0.2- Add
@eslint/js,@stylistic/eslint-plugin,eslint-plugin-jsdoc,globals - Removed rules replaced:
valid-jsdoc→jsdoc/*,no-negated-in-lhs→no-unsafe-negation, formatting rules →@stylistic/*
- Upgrade
chai2.3.0 → 6.2.2 (Node 24 synchronous ESM interop) - Upgrade
p-map2.1.0 → 7.0.4 (Node 24 synchronous ESM interop) - Upgrade
csv-parse4 → 6; fix named-export import and data-first argument in examples - Upgrade
json-2-csv3 → 5; migrate callback API to Promise in examples - Upgrade
nyc15.1.0 → 18.0.0 - Upgrade
cross-env5.2.1 → 10.1.0 - Remove unused
uuiddevDependency - Pin
.node-versionto 24.15.0 - GitHub Actions: upgrade
actions/checkoutv2 → v4,actions/setup-nodev2 → v4 - GitHub Actions: add Node 24 to CI matrix; pin
npm@11; pincoverallsapp/github-action@master→@v2 - Add macOS entries to
.gitignore
- Replace deprecated
requestpackage withaxiosandform-datato address critical vulnerability (CVE-2023-28155) - Add path traversal protection with URI encoding in resource methods
- Fix bulk verification endpoints (US and International) to send JSON body format instead of form-encoded data
- Fix object iteration to use
Object.keys()instead offor...into avoid prototype chain issues
- Add comprehensive unit test suite with HTTP mocking using
nock(94 tests) - Add integration test suite for live API validation (24 tests)
- Unit tests no longer require API keys - mocked responses enable offline development
- Integration tests run separately with
npm run test:integration
- Update README with current testing instructions
- Clean up unreachable error handling code in HTTP client
- engines update minimum Node.js version requirement to >= 20.0.0
- engines update minimum npm version requirement to >= 11.5.1
- Updates address used in example address
- campaigns add support for campaigns endpoint (PR_275)
- bump mocha from 9.1.3 to 10.0.0
- bump eslint-config-lob from 1.0.1 to 5.2.0
- bump minimist from 1.2.0 to 1.2.6
- bump moment from 2.29.1 to 2.29.2
- autocomplete add query param for address casing
- Update dependency version
- Updates to CI process
- Updates to Repo branch naming
- Removed Bluebird dependency and replaced with p-map
- Updated 4 out of date dev dependencies
- Updated min required version of NodeJS to 10
- Removed package-lock.json from gitignore - it is now included in the repo.
- templates add support for HTML templates endpoint (PR_258)
- card orders: updates the card orders "quantity_ordered" field to "quantity" in the integration test & example to reflect the recent change in Lob API endpoint for creating card orders. (PR_254) (9d3a261)
- cards: add support for cards endpoint (PR_252) (e744da5)
- card_orders: add support for card orders endpoint (PR_252) (35bc050)
- examples: add examples for creating a card and card order (PR_252) (1c41494)
- us_verifications: Reverse Geocoding endpoint (#250) (ea1e49df)
- examples: added a bunch of examples which WERE in the old docs (#249) (bba10957)
- deps:
- bump hosted-git-info from 2.1.4 to 2.8.9 (#241) (a10ed786)
- bump lodash from 4.17.19 to 4.17.21 (#239) (b38f7e5e)
- bump handlebars from 4.5.3 to 4.7.7 (#238) (72198ab6)
- bump acorn from 6.2.0 to 6.4.2 (#233) (533d8309)
- bump yargs-parser from 13.1.1 to 13.1.2 (#230) (96cd091c)
- bump lodash from 4.17.14 to 4.17.19 (#228) (48e444d1)
- node14: add node14 for travis (#240) (15d83747)
- self-mailers: Add support for Self Mailers (#236)
- deps:
- resource: add ability to specify custom HTTP agent (#224) (bf925b1c)
- intl-verifications: fixed failing test (#219) (f2b712ad)
- plc: add tests for new versions (template syntax and cursor pagination) (#226) (d5806217)
- deps:
- postcards: add ability to modify concurrency (4a3bbf37)
- assets: update links (5d7f66f0)
- api-key:
- resource-base: default body to empty object (70f9c804)
- deps:
- addresses: fix broken test (#202) (e560d6bc)
- headers: don't save request specific headers in configs (#201) (cfa0fb19)
- area-mail: remove areas and routes resources (a17d234d)
- us-autocompletions: add USAutocompletions (b64b02db)
- us-verifications: allow passing queries in verification creation (#197) (84b9a44a)
- test: fix US verification test (a0f10925)
- auto-verify: update tests to manage auto-verify (107eeae3)
- postcards: Remove message field from postcard (c298fe4c)
- object: Use Object.prototype.call, instead of assuming objects inherit from Object.prototype (#191) (8648cb0c)
- intl: Update international verifications tests (5f38b3d3)
- examples:
- idempotency-key: Add optional headers argument to create() methods to support idempotency-key (99ef7e92)
- us-zip-lookups: Add US Zip Code Lookup (d51e8c8b)
- delete: Add delete method to postcards, letters, and checks chore(ignore): ignore Sublime files (aa340b57)
- readme: update documentation (73afa906)
- examples:
- idempotency-key: Add optional headers argument to create() methods to support idempotency-key (99ef7e92)
- us-zip-lookups: Add US Zip Code Lookup (d51e8c8b)
- delete: Add delete method to postcards, letters, and checks chore(ignore): ignore Sublime files (aa340b57)
- readme: update documentation (73afa906)
- contributing: changed out-of-date link to valid (96e21cff)
- verifications: add us and intl verification endpoints ENG-2769 (13f5ed8c)
- version: support Node versions 0.12, 4, 5, and 6. (7754b22f)
- release: add release scripts (7cc243eb)
- version: support api version 2016-01-19 (6cb6cec0)
- bank-accounts: standardize verify function (1d0b37c2)
- deps: remove gulp (a2c164a7)
- resources: standardize and remove unnecessary tests (ad0e45ed)
- setup: use global expect, api key, Lob (6e44ce0b)
- [#88] (#88) changed asset URLs to use lob-assets bucket