Skip to content

Merge dev into v1: dependency vuln fixes + AeroDataBox rate limit bump - #95

Merged
asubowo merged 10 commits into
v1from
dev
Jul 31, 2026
Merged

Merge dev into v1: dependency vuln fixes + AeroDataBox rate limit bump#95
asubowo merged 10 commits into
v1from
dev

Conversation

@asubowo

@asubowo asubowo commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Upgrade AeroDataBox/api.market plan capacity: bump AeroClient queue interval from 1100ms (~1 req/s) to 550ms (~1.8 req/s) to use the new 2 req/s tier
  • Fix 3 Dependabot alerts (2 high, 1 moderate): fast-uri 3.1.2→3.1.5, @hono/node-server 1.19.14→2.0.12 (transitive via @modelcontextprotocol/sdk 1.26.0→1.30.0)
  • Fix yahoo-finance2 pinned to a broken 2.14.0 publish missing the search module (was failing typecheck/build); bumped to 2.14.2

Test plan

  • npm run typecheck passes
  • npm run build passes
  • npm run test — 50/50 passing
  • npm audit — 0 vulnerabilities

asubowo and others added 10 commits July 17, 2026 12:48
FlightDisplayData moved to src/types/aerodatabox/types.ts but these
two files still imported from the old src/types/trmnl/flightTypes.js
path, breaking tsc -p tsconfig.test.json in CI.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2.14.0 shipped without the search/chart/historical/etc. modules, breaking
typecheck and build. 2.14.2 restores them; still on v2, no API migration.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@asubowo
asubowo merged commit d78a34f into v1 Jul 31, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant