keligrubb/kestrelos
1
0
Fork 0
Code Issues 2 Pull Requests 1 Actions Packages Projects Releases 27 Wiki Activity
Files
1f45cc152aa229cbf6846d8d55be3758f0487dde
kestrelos/CHANGELOG.md
T
CI be95b6864b release v1.1.10 [skip ci]
2026-08-14 22:27:50 +00:00

49 KiB
Raw Blame History

[1.1.10] - 2026-08-14

Changed

  • update dependencies and fix security vulnerabilities (#44)

Summary

Updates all out-of-date dependencies and applies npm audit fix to resolve 14 security vulnerabilities (3 critical, 8 high).

Dependency Updates

Package Current → Latest
nuxt 4.4.8 → 4.5.2
mediasoup 3.20.9 → 3.24.2
mediasoup-client 3.21.0 → 3.22.0
hls.js 1.6.16 → 1.7.0
vue 3.5.38 → 3.5.41
vue-router 5.1.0 → 5.2.0
@nuxt/icon 2.2.3 → 2.5.0
eslint 10.5.0 → 10.8.1
vitest / @vitest/coverage-v8 4.1.9 → 4.1.10
ws 8.21.0 → 8.21.3
openid-client 6.8.4 → 6.8.5
fast-xml-parser 5.9.3 → 5.10.1
happy-dom 20.10.6 → 20.11.2
@playwright/test 1.61.1 → 1.62.1
@nuxt/eslint 1.16.0 → 1.17.0
@nuxt/test-utils 4.0.3 → 4.1.0
@iconify-json/tabler 1.2.35 → 1.2.38

Security Audit Fixes (npm audit fix)

  • @nuxt/devtools (critical): Unauthenticated DevTools RPC allows arbitrary command execution on the developer's host
  • tar (critical): Multiple process-crash/DoS vulnerabilities via crafted tar archives
  • esbuild (high): Arbitrary file read when running dev server on Windows
  • brace-expansion (high): Multiple DoS vectors (memory exhaustion, process hang)
  • flatted (high): Prototype pollution via parse()
  • svgo (high): removeScripts plugin leaves executable scripts intact

Verification

  • All 406 tests pass (3 skipped)
  • Lint clean (eslint . --max-warnings 0)
  • npm audit reports 0 vulnerabilities

[1.1.9] - 2026-08-13

Changed

  • update dependency fast-xml-parser to v5.10.1 [security] (#42)

This PR contains the following updates:

Package Change Age Confidence
fast-xml-parser 5.9.3 → 5.10.1 age confidence

fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

GHSA-8r6m-32jq-jx6q

More information

Details

Impact

fast-xml-parser processes multiple "DOCTYPE" declarations within a single XML document. Each declaration passes its entities to @nodable/entities through addInputEntities().

addInputEntities() resets the entity expansion counters every time it is called. An attacker can therefore insert additional DOCTYPE declarations to repeatedly reset maxTotalExpansions and maxExpandedLength during one parse operation.

This allows a crafted XML document to exceed the configured entity-expansion limits and can cause excessive CPU use, event-loop blocking, memory exhaustion, and process termination.

Workarounds
  • Manually check if multiple DOCTYPEs are not present in input contents
  • Update to v5.10.1
  • Keep processEntity flag off

Severity

  • CVSS Score: 8.7 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Release Notes

NaturalIntelligence/fast-xml-parser (fast-xml-parser)

v5.10.1

Compare Source

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.10.0...v5.10.1

v5.10.0

Compare Source

What's Changed

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.3...v5.10.0

  • If you want to rebase/retry this PR, check this box

[1.1.8] - 2026-08-13

Changed

This PR contains the following updates:

Package Type Update Change
https://git.keligrubb.com/actions/setup-node action major v6 → v7

Release Notes

actions/setup-node (https://git.keligrubb.com/actions/setup-node)

v7.0.0

Compare Source

v7

Compare Source

  • If you want to rebase/retry this PR, check this box

[1.1.7] - 2026-08-13

Changed

  • update dependency supercluster to v9 (#41)

This PR contains the following updates:

Package Change Age Confidence
supercluster ^8.0.1 → ^9.0.0 age confidence

Release Notes

mapbox/supercluster (supercluster)

v9.0.0

Compare Source

  • Radically optimize memory footprint and performance — on a sample 1M points index, Supercluster now uses 94% less transient allocation, 57% lower peak heap, 65% less retained memory, and runs 23% faster. #​258
  • Improve internal coordinate precision by 6 bits (64 times).
  • ⚠️ Breaking: hard-cap maxZoom at 30 (it wasn't practical to use it on higher zooms anyway).
  • Add support for MultiPoint features. #​263
  • If you want to rebase/retry this PR, check this box

[1.1.6] - 2026-06-24

Changed

  • Add ADS-B, AIS, and ALPR map layers with live CoT streaming (#36)

Summary

  • ADS-B & AIS: OpenSky and AISStream OSINT feeds upsert into the CoT store; tactical tracks still arrive via adsbcot/aiscot on :8089. Map clients subscribe via GET /api/cot/stream (SSE) with viewport bbox filtering and Air / Surface / Team layer toggles.
  • ALPR (Flock/OSM): Toggleable license-plate reader layer sourced from OpenStreetMap, with SQLite cache, Overpass fallback, tiled viewport fetching, and clustered markers with direction cones.
  • Map performance: Ring-based tile selection (fixes zoom-out crash), immutable tile cache, incremental marker sync, split cluster load/query, and padded SSE bbox to reduce reconnect churn.

Docs

  • docs/tracking.md — ADS-B/AIS accuracy tiers, freshness, self-hosted receivers, optional OSINT API keys
  • docs/map-and-cameras.md — ALPR layer and map behavior updates

[1.1.5] - 2026-06-21

Changed

This PR contains the following updates:

Package Type Update Change
https://git.keligrubb.com/actions/checkout action major v6 → v7

Release Notes

actions/checkout (https://git.keligrubb.com/actions/checkout)

v7.0.0

Compare Source

v7

Compare Source

  • If you want to rebase/retry this PR, check this box

[1.1.4] - 2026-04-29

Changed

  • update all non-major dependencies (#31)

This PR contains the following updates:

Package Change Age Confidence
@vitest/coverage-v8 (source) 4.1.4 → 4.1.5 age confidence
@vue/test-utils 2.4.6 → 2.4.8 age confidence
eslint (source) 10.2.0 → 10.2.1 age confidence
fast-xml-parser 5.6.0 → 5.7.2 age confidence
mediasoup (source) 3.19.19 → 3.19.21 age confidence
mediasoup-client (source) 3.18.8 → 3.19.0 age confidence
vitest (source) 4.1.4 → 4.1.5 age confidence
vue (source) 3.5.32 → 3.5.33 age confidence
vue-router (source) 5.0.4 → 5.0.6 age confidence

Release Notes

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.5

Compare Source

   🚀 Experimental Features
   🐞 Bug Fixes
    View changes on GitHub
vuejs/test-utils (@​vue/test-utils)

v2.4.8

Compare Source

compare changes

🩹 Fixes
  • Correct declaration entrypoint (#​2826)
🤖 CI
❤️ Contributors

v2.4.7

Compare Source

compare changes

🚀 Enhancements
  • Add Chinese docs translation (#​2552)
  • SetData()/shallowMount with initialData for components using the Composition API / <script setup> (#​2655)
🩹 Fixes
  • Preserve code from keyboard events (#​2434)
  • Switch browser and require exports definitions (#​2501)
  • Re-add peer dependencies but with wider range (#​2511)
  • Resolve warnings in docs:dev (30b7491)
  • Resolve TypeScript type errors in .vitepress/config (#​2549)
  • Accept FunctionalComponent as selector (0bb947f)
  • Text() misses content for array functional component (#​2579)
  • Use await in test (c5482b4)
  • deps: Update dependency vue-component-type-helpers to v3 (#​2683)
  • Remove wrapper div when unmount (#​2700)
  • Make mount options slots compatible with noUncheckedIndexedAccess true (#​2713)
  • Add missing peerDependency @​vue/compiler-dom (75801ba)
  • docs: Declare css module for vitepress typecheck (ddaca97)
💅 Refactors
  • Enforce consistent usage of type imports (#​2734)
📖 Documentation
  • Clarify findComponent vs getComponent (#​2435)
  • Update fr docs (67064ef)
  • Add note about partial transition stub support (#​2431)
  • Fix missing data at passing data section essentials guide (dda205e)
  • Fix missing data at passing data section essentials guide fr (ae2c72c)
  • Fix plugin TS declaration example (#​2466)
  • Fixed incorrect checkbox value check (#​2495)
  • Capital letter in sentence fix (#​2499)
  • Import missing DOMWrapper on Implementation of the plugin section (#​2519)
  • Add migration step for deprecated ref syntax in findAllComponents (#​2498)
  • Correct anchor hash links and fix typo (#​2551)
  • Center logo on home (#​2559)
  • zh-cn: Review a-crash-course (#​2563)
  • Use code-group for install commands (#​2571)
  • zh-cn: Review event-handing.md (#​2572)
  • zh-cn: Enhance conditional-rendering.md (#​2562)
  • zh-cn: Review easy-to-test (#​2567)
  • zh-cn: Review passing-data.md (#​2575)
  • zh-cn: Review async-suspense.md (#​2576)
  • zh: 优化 API 文档格式和内容 (#​2569)
  • zh: 更新 Vitest 模拟日期和计时器的说明 (#​2578)
  • zh-cn: Review http-requests.md (#​2580)
  • zh-cn: Review forms (#​2582)
  • zh-cn: Guide/advanced/slots.md (#​2565)
  • zh: Review extending-vtu (#​2583)
  • zh: Review index (#​2584)
  • Fix modelValue test example (85bfdf4)
  • Removes broken link from plugins.md (69bc1ce)
  • zh: Review transitions, component-instance, and reusability-composition (#​2616)
  • zh: Review v-model and vuex (#​2617)
  • zh: Review all the rest advanced guide (#​2619)
  • zh: Review migration (#​2623)
  • Fix a typo in transitions.md (#​2635)
  • Update crash-course to script setup (c81aa79)
  • Update Essentials section to setup (composition api) (#​2647)
  • Typos in examples (#​2678)
  • Typo in easy-to-test.md (#​2710)
  • Add note about mocking requestAnimationFrame for transitions (2324c65)
  • Updated example TodoApp to script setup (#​2727)
  • Remove "Using data" section from "Conditional Rendering" guide and fix passing data test example (#​2743)
  • Follow-up fixes for the conditional rendering guide (#​2744)
  • Mention shallowMount stub name changes in migration guide (80e051a)
  • Update conditional rendering documentation to clarify isVisible() usage with attachTo (#​2799)
  • Restore Options API component for data() mounting example (#​2804)
  • Promote Vitest as recommended test runner (#​2805)
  • api: Note that setValue does not accept objects on <select> (#​2819)
🏡 Chore
  • Add api/index.md to docs:translation:compare (6b8681c)
  • Remove unnecessary generic arguments (cfd70c6)
  • Ignore TS error in config object (9d0a618)
  • Simplify eslint packages (c1d0ffd)
  • Use eslint v9 with flat config (2f19fdf)
  • Expose Stubs type publicly (#​2492)
  • Update documentation file path (9c96594)
  • Use pnpm v10 (e4c2cb3)
  • Pnpm approve build (81c54e9)
  • Use github issue forms (#​2673)
  • Exclude class components from test type-checking (0899008)
  • Add explicit coverage include for vitest v4 (51672b9)
  • Update to prettier v3.7 (fed9e7c)
  • Migrate to oxfmt (81c1de9)
  • Migrate to oxlint (a361908)
  • Prepare TypeScript 6 migration settings (55e1262)
  • Adjust tsd config for TypeScript 6 (7d23eb5)
  • Avoid TypeScript 6 target deprecation warning (81d063c)
🤖 CI
  • Remove node v22 build (7ebf58d)
  • Add node v22 build (57540ee)
  • Use "pool: threads" instead of vmThreads (d0cbb54)
  • Remove node v18 and add v24 (fd9cf95)
  • Add trusted publishing release workflow (#​2825)
❤️ Contributors
eslint/eslint (eslint)

v10.2.1

Compare Source

Bug Fixes

  • 14be92b fix: model generator yield resumption paths in code path analysis (#​20665) (sethamus)
  • 84a19d2 fix: no-async-promise-executor false positives for shadowed Promise (#​20740) (xbinaryx)
  • af764af fix: clarify language and processor validation errors (#​20729) (Pixel998)
  • e251b89 fix: update eslint (#​20715) (renovate[bot])

Documentation

  • ca92ca0 docs: reuse markdown-it instance for markdown filter (#​20768) (Amaresh S M)
  • 57d2ee2 docs: Enable Eleventy incremental mode for watch (#​20767) (Amaresh S M)
  • c1621b9 docs: fix typos in code-path-analyzer.js (#​20700) (Ayush Shukla)
  • 1418d52 docs: Update README (GitHub Actions Bot)
  • 39771e6 docs: Update README (GitHub Actions Bot)
  • 71e0469 docs: fix incomplete JSDoc param description in no-shadow rule (#​20728) (kuldeep kumar)
  • 22119ce docs: clarify scope of for-direction rule with dead code examples (#​20723) (Amaresh S M)
  • 8f3fb77 docs: document meta.docs.dialects (#​20718) (Pixel998)

Chores

  • 7ddfea9 chore: update dependency prettier to v3.8.2 (#​20770) (renovate[bot])
  • fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#​20763) (dependabot[bot])
  • 7246f92 test: add tests for SuppressionsService.load() error handling (#​20734) (kuldeep kumar)
  • 4f34b1e chore: update pnpm/action-setup action to v5 (#​20762) (renovate[bot])
  • 51080eb test: processor service (#​20731) (kuldeep kumar)
  • e7e1889 chore: remove stale babel-eslint10 fixture and test (#​20727) (kuldeep kumar)
  • 4e1a87c test: remove redundant async/await in flat config array tests (#​20722) (Pixel998)
  • 066eabb test: add rule metadata coverage for languages and docs.dialects (#​20717) (Pixel998)
NaturalIntelligence/fast-xml-parser (fast-xml-parser)

v5.7.2: backward compatibility for numerical external entity, fix #​705, #​817

Compare Source

  • allow numerical external entity for backward compatibility
  • fix #​705: attributesGroupName working with preserveOrder
  • fix #​817: stackoverflow when tag expression is very long

v5.7.1: upgrade @​nodable/entities and FXB

Compare Source

  • Use @nodable/entities v2.1.0
    • breaking changes
      • single entity scan. You're not allowed to use entity value to form another entity name.
      • you cant add numeric external entity
      • entity error message when expantion limit is crossed might change
    • typings are updated for new options related to process entity
    • please follow documentation of @nodable/entities for more detail.
    • performance
      • if processEntities is false, then there should not be impact on performance.
      • if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%
      • if processEntities is true, and you pass entity decoder separately
        • if no entity then performance should be same as before
        • if there are entities then performance should be increased from past versions
    • ignoreAttributes is not required to be set to set xml version for NCR entity value
  • update 'fast-xml-builder' to sanitize malicious CDATA and comment's content

v5.7.0

Compare Source

versatica/mediasoup (mediasoup)

v3.19.21

Compare Source

  • Worker: Fix regression in DirectTransport when closing a DataProducer or DataConsumer (PR #​1780).

v3.19.20

Compare Source

  • Worker: Add useBuiltInSctpStack setting (defaults to false) to enable mediasoup built-in SCTP stack (PR #​1777).
versatica/mediasoup-client (mediasoup-client)

v3.19.0

Compare Source

vuejs/core (vue)

v3.5.33

Compare Source

Bug Fixes
vuejs/router (vue-router)

v5.0.6

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v5.0.5

Compare Source

   🚀 Features
   🐞 Bug Fixes
  • Track definePage imports per-file to fix named view race condition  -  by @​posva (11191)
  • Avoid double decoding hash on string location  -  by @​posva (1578c)
    View changes on GitHub
  • If you want to rebase/retry this PR, check this box

[1.1.3] - 2026-04-19

Changed

  • update dependency mediasoup-client to v3.18.8 (#30)

This PR contains the following updates:

Package Change Age Confidence
mediasoup-client (source) 3.18.7 → 3.18.8 age confidence

Release Notes

versatica/mediasoup-client (mediasoup-client)

v3.18.8

Compare Source

  • If you want to rebase/retry this PR, check this box

[1.1.2] - 2026-04-15

Changed

  • Update dependency fast-xml-parser to v5.6.0 (#28)

This PR contains the following updates:

Package Change Age Confidence
fast-xml-parser 5.5.12 → 5.6.0 age confidence

Release Notes

NaturalIntelligence/fast-xml-parser (fast-xml-parser)

v5.6.0: use @​nodable/entities to replace entities

Compare Source

  • No API change
  • No change in performance for basic usage
  • No typing change
  • No config change
  • new dependency
  • breaking: error messages for entities might have been changed.

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.12...v5.6.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

[1.1.1] - 2026-04-15

Changed

  • split push release/publish and harden workflows (#27)

Added

  • Separate release from Docker/Helm publish
  • enrich releases with PRbodies when available
  • tighten release.sh validation and idempotency
  • trim PR docker-build metadata for act-runner stability

[1.1.0] - 2026-04-15

Changed

  • Update all non-major dependencies (#25)

[1.0.10] - 2026-04-15

Changed

  • Remove npm overrides for tar (#26)

[1.0.9] - 2026-03-24

Changed

[1.0.8] - 2026-03-12

Changed

  • fix release file (#22)

[1.0.7] - 2026-03-06

Changed

  • chore(deps): update docker/build-push-action action to v7 (#19)

[1.0.6] - 2026-03-05

Changed

  • fix docker login during push stage (#18)

[1.0.5] - 2026-03-05

Changed

  • fix deploy pipeline stages for token registry uploads (#17)

[1.0.4] - 2026-03-04

Changed

  • fix deploy pipeline (#15)

[1.0.3] - 2026-02-23

Changed

  • fix(deps): update dependency vue-router to v5 (#12)

[1.0.2] - 2026-02-22

Changed

  • chore(deps): update dependency eslint to v10 (#10)

[1.0.1] - 2026-02-22

Changed

  • chore: Configure Renovate (#7)

[1.0.0] - 2026-02-17

Changed

  • kestrel is now a tak server (#6)

[0.4.0] - 2026-02-15

Changed

  • new nav system (#5)

[0.3.0] - 2026-02-14

Changed

  • heavily simplify server and app content. unify styling (#4)

[0.2.0] - 2026-02-12

Changed

  • add a new release system (#3)

Changelog

All notable changes to this project will be documented in this file.

Reference in New Issue View Git Blame Copy Permalink