build(deps): bump koa and @module-federation/enhanced in /shell-ui
Bumps koa to 3.0.1 and updates ancestor dependency @module-federation/enhanced. These dependencies need to be updated together.
Updates koa from 2.11.0 to 3.0.1
Release notes
Sourced from koa's releases.
v3.0.1
What's Changed
- fix(security): only allow same origin referer on response back https://github.com/koajs/koa/commit/422c551c63d00f24e2bbbdf492f262a5935bb1f0
- chore: adds initial doc text refresh; migration guide [CHORE-1870] by
@yowainwrightin koajs/koa#1877- build(deps-dev): bump formidable from 3.5.2 to 3.5.4 by
@dependabot[bot] in koajs/koa#1878- chore: removes done callbacks in tests [CHORE-1870] by
@yowainwrightin koajs/koa#1875- build(deps-dev): bump supertest from 7.1.0 to 7.1.1 by
@dependabot[bot] in koajs/koa#1879- build(deps): bump debug from 4.4.0 to 4.4.1 by
@dependabot[bot] in koajs/koa#1880- feat: replace debug module with pure node:util::debuglog by
@3imed-jaberiin koajs/koa#1885- feat: replace cache-content-type with mime-types directly by
@3imed-jaberiin koajs/koa#1886- build(deps): bump statuses from 2.0.1 to 2.0.2 by
@dependabot[bot] in koajs/koa#1888- build(deps-dev): bump supertest from 7.1.1 to 7.1.4 by
@dependabot[bot] in koajs/koa#1895- build(deps-dev): bump form-data from 4.0.3 to 4.0.4 by
@dependabot[bot] in koajs/koa#1894Full Changelog: https://github.com/koajs/koa/compare/v3.0.0...v3.0.1
v3.0.0
This is a major release.
Breaking
- Minimum node v18
- Removes
.redirect('back'), adds.back(fallback_url)@fl0wkoajs/koa#1115- For
.redirect(), don't render redirect values in anchor ref https://github.com/koajs/koa/commit/ff25eb4a7f2392df46481fe86355161067687312req.originshould display the origin header if it exists, not the current hostname koajs/koa#1008.originnow aligns with theOriginheader as used in CORS..body=<json>should not overwrite type if type already json koajs/koa#1120- Remove special ENOENT support koajs/koa#1861 - this is a big change and will require any file servers to adapt to this change for handling 404s / files not found
- Removes generator deprecation messages. Generators are no longer supported. Koa no longer asserts if generators are used. Set content-length: 0 if body is explicitly set to null
@ognjenjevremovic#1528 Remove obsolete createAsyncCtxStorageMiddleware koajs/koa#1817ctx.thrownow requires a format ofctx.throw(status, error, properties). See: https://www.npmjs.com/package/http-errorsNew
- Support custom streams
@KristapsRkoajs/koa#1825- Support WHATWG response bodies koajs/koa#1830
@kravorkid- Use asyncLocalStorage to get current context from app, e.g.:
const ctx = app.currentContext.Fixes
- Handle responses when socket is no longer writable
@titanism@azlondkoajs/koa#1593- fix: Do not response Content-Length if Transfer-Encoding is defined #1562
@charlyzeng- fix: Set body to 'null' if
ctx.type = 'json'andctx.body = null#1059@likegun- fix: can not get currentContext in error handler (#1758) (Gxkl <[email protected]>)
- Fix exports.defaults in package.json koajs/koa#1630
- Fix leaky handles in tests koajs/koa#1838
- Fix body null checks koajs/koa#1814
- Fix reformatting redirect URLs koajs/koa#1805 koajs/koa#1804
- Fix passing ctx in error handler koajs/koa#1758
... (truncated)
Changelog
Sourced from koa's changelog.
[!IMPORTANT] Moving forwards we are using the GitHub releases page at https://github.com/koajs/koa/releases in combination with np for publishing releases and their changelogs.
3.0.0-alpha.3 / 2025-02-11
fixes
- Avoid redos on host and protocol getter
3.0.0-alpha.2 / 2024-11-04
breaking changes
- Update
http-errorstov2.0.0#1486
ctx.thrownow requires a format ofctx.throw(status, error, properties). See: https://www.npmjs.com/package/http-errors- Remove
res.redirect('back'), addback()method toctx#1115- Replace node querystring with
URLSearchParams#1828- Remove obsolete
createAsyncCtxStorageMiddleware#1817features
- Add support for web WHATWG #1830
updates
fixes
- Fix
exports.defaultsinpackage.json#1630- Fix leaky handles in tests #1838
- Fix body null checks #1814
- Fix reformatting redirect URLs #1805 #1804
- Fix passing
ctxin error handler #1758migrations
- Migrate from
jestto the native node test runner #18453.0.0-alpha.1 / 2023-04-12
fixes
- [
e98b8d1] - fix: can not get currentContext in error handler (#1758) (Gxkl <[email protected]>)3.0.0-alpha.0 / 2023-01-02
Breaking Changes
... (truncated)
Commits
1ddb0483.0.1422c551Merge commit from fork6e51eb1build(deps-dev): bump form-data from 4.0.3 to 4.0.4 (#1894)d378e5cbuild(deps-dev): bump supertest from 7.1.1 to 7.1.4 (#1895)cb22d8dbuild(deps): bump statuses from 2.0.1 to 2.0.2 (#1888)0acad8ffeat: replace cache-content-type with mime-types directly (#1886)2f6e814feat: replace debug module with pure node:util::debuglog (#1885)8620cedbuild(deps): bump debug from 4.4.0 to 4.4.1 (#1880)dec1ffcbuild(deps-dev): bump supertest from 7.1.0 to 7.1.1 (#1879)9057541chore: removes done callbacks in tests [CHORE-1870] (#1875)- Additional commits viewable in compare view
Updates @module-federation/enhanced from 0.2.8 to 0.18.1
Release notes
Sourced from @module-federation/enhanced's releases.
v0.18.1
What's Changed
New Features 🎉
- feat: implement nodeModulesReconstructedLookup feature for PR7 by
@ScriptedAlchemyin module-federation/core#3913Bug Fixes 🐞
fix: Auto call
setGlobalFederationInstancewhen executecreateInstanceby@Nstttin module-federation/core#3975
- fix(bridge-react): Add loading in root component to avoid CLS problem by
@ArmenMesropyanOptimaxin module-federation/core#3973- fix(bridge-react): correct createRemoteComponent warning info by
@2heal1in module-federation/core#3983- fix(bridge-react): call preloadAssets after getting assets by
@2heal1in module-federation/core#3992- fix: collect rspack cached modules in manifest by
@2heal1in module-federation/core#3993- fix: example type issue by
@2heal1in module-federation/core#3979- fix(modern-js-plugin): set bridge.disableAlias true when installing
@module-federation/bridge-reactDocument 📖
- docs: remove unused constant by
@2heal1in module-federation/core#3982- docs: enhance Module Federation offline remote handling documentation by
@ScriptedAlchemyin module-federation/core#3932Other Changes
- chore(modern-js-plugin): re-export all bridge react by
@2heal1in module-federation/core#3984- chore: remove old website by
@ScriptedAlchemyin module-federation/core#3990- PR8: SharePlugin - Unified API by
@ScriptedAlchemyin module-federation/core#3914New Contributors
@ArmenMesropyanOptimaxmade their first contribution in module-federation/core#3973Full Changelog: https://github.com/module-federation/core/compare/v0.18.0...v0.18.1
v0.18.0
What's Changed
New Features 🎉
- feat(enhanced): add include/exclude filtering support for shared modules by
@ScriptedAlchemyin module-federation/core#3949- feat(dts-plugin): add
familyoption by@ogonkovin module-federation/core#3977Bug Fixes 🐞
- fix(dts-plugin): update koa to 2.16.2 to fix CVE-2025-8129 by
@ScriptedAlchemyin module-federation/core#3963- fix(runtime): support TypeScript moduleResolution NodeNext by
@danpeenin module-federation/core#3960- fix(rsbuild-plugin): add source.include in prod mode only by
@2heal1in module-federation/core#3971- fix(enhanced): add module factory for EntryDependency when entry is e… by
@xinyuehtxin module-federation/core#3953Document 📖
- docs: add createRemoteCompoent and createRemoteSSRComponent deprecated documentation by
@2heal1in module-federation/core#3978- docs: add architectural documentation in arch-doc directory by
@ScriptedAlchemyin module-federation/core#3955Other Changes
- chore(deps): bump undici from 5.28.5 to 7.13.0 by
@dependabot[bot] in module-federation/core#3966- chore(deps): bump brace-expansion from 1.1.11 to 1.1.12 by
@dependabot[bot] in module-federation/core#3836- chore: upgrade @babel/* packages to latest versions by
@ScriptedAlchemyin module-federation/core#3968- chore(deps-dev): bump pbkdf2 from 3.1.2 to 3.1.3 by
@dependabot[bot] in module-federation/core#3856- chore(deps-dev): bump form-data from 2.5.1 to 2.5.5 by
@dependabot[bot] in module-federation/core#3933- chore(deps): bump koa from 2.16.1 to 3.0.1 in /packages/dts-plugin by
@dependabot[bot] in module-federation/core#3956- Revert "feat: support NodeNext module resolution in packages" by
@danpeenin module-federation/core#3972
... (truncated)
Changelog
Sourced from @module-federation/enhanced's changelog.
0.18.1
Patch Changes
0bf3a3a: test: add comprehensive test coverage for request pattern filtering
- Add integration tests for request pattern filtering in provide-filters test case
- Add test cases verifying modules match/don't match request include filters
- Add unit tests for
extractPathAfterNodeModulesutility function- Add unit tests for
createLookupKeyForSharingutility function- Add test files for request filtering scenarios (components/Button.js, utils/helper.js, etc.)
This enhances test coverage to ensure request pattern filtering functionality works correctly and prevents regressions.
Updated dependencies [0bf3a3a]
Updated dependencies [9f16eac]
@module-federation/sdk@0.18.1@module-federation/manifest@0.18.1@module-federation/bridge-react-webpack-plugin@0.18.1@module-federation/cli@0.18.1@module-federation/data-prefetch@0.18.1@module-federation/dts-plugin@0.18.1@module-federation/managers@0.18.1@module-federation/rspack@0.18.1@module-federation/runtime-tools@0.18.1@module-federation/inject-external-runtime-core-plugin@0.18.1@module-federation/error-codes@0.18.10.18.0
Minor Changes
0ab51b8: fix(enhanced): add module factory for EntryDependency when entry is empty
- bind normalModuleFactory for EntryDependency when no moduleFactory is bound for EntryDependency
98a29c3: feat(enhanced): add include/exclude filtering for shared modules
- Add include/exclude filtering for both ConsumeSharedPlugin and ProvideSharedPlugin
- Support version-based filtering using semantic version ranges (e.g.,
include: { version: '^18.0.0' })- Support request pattern filtering with string and RegExp (e.g.,
include: { request: /^Button/ })- Add singleton warnings when filters are used to prevent multiple shared instances
- Enhanced type definitions and JSON schema validation for filtering options
Patch Changes
... (truncated)
Commits
5f18bc2chore: release v0.18.1436d1afPR8: SharePlugin - Unified API (#3914)0bf3a3afeat: implement nodeModulesReconstructedLookup feature for PR7 (#3913)ec27c71Release v0.18.0 (#3980)0ab51b8fix(enhanced): add module factory for EntryDependency when entry is e… (#3953)98a29c3feat(enhanced): add include/exclude filtering support for shared modules (#3949)05d5f9brelease v0.17.1 (#3950)8727aa3fix(enhanced): compilerInstance type should be string not enum (#3829)7000c1ffix: buildVersion now correctly reads from project's package.json (#3928)bc3bc10feat: enhance HoistContainerReferencesPlugin for better module hoisting (#3903)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by shawzhou, a new releaser for @module-federation/enhanced since your current version.
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.
Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
Hello dependabot[bot],
My role is to assist you with the merge of this
pull request. Please type @bert-e help to get information
on this process, or consult the user documentation.
Available options
| name | description | privileged | authored |
|---|---|---|---|
/after_pull_request |
Wait for the given pull request id to be merged before continuing with the current one. | ||
/bypass_author_approval |
Bypass the pull request author's approval | :star: | |
/bypass_build_status |
Bypass the build and test status | :star: | |
/bypass_commit_size |
Bypass the check on the size of the changeset TBA |
:star: | |
/bypass_incompatible_branch |
Bypass the check on the source branch prefix | :star: | |
/bypass_jira_check |
Bypass the Jira issue check | :star: | |
/bypass_peer_approval |
Bypass the pull request peers' approval | :star: | |
/bypass_leader_approval |
Bypass the pull request leaders' approval | :star: | |
/approve |
Instruct Bert-E that the author has approved the pull request. | :writing_hand: | |
/create_pull_requests |
Allow the creation of integration pull requests. | ||
/create_integration_branches |
Allow the creation of integration branches. | ||
/no_octopus |
Prevent Wall-E from doing any octopus merge and use multiple consecutive merge instead | ||
/unanimity |
Change review acceptance criteria from one reviewer at least to all reviewers |
||
/wait |
Instruct Bert-E not to run until further notice. |
Available commands
| name | description | privileged |
|---|---|---|
/help |
Print Bert-E's manual in the pull request. | |
/status |
Print Bert-E's current status in the pull request TBA |
|
/clear |
Remove all comments from Bert-E from the history TBA |
|
/retry |
Re-start a fresh build TBA |
|
/build |
Re-start a fresh build TBA |
|
/force_reset |
Delete integration branches & pull requests, and restart merge process from the beginning. | |
/reset |
Try to remove integration branches unless there are commits on them which do not appear on the source branch. |
Status report is not available.
The following options are set: bypass_author_approval, bypass_jira_check
Request integration branches
Waiting for integration branch creation to be requested by the user.
To request integration branches, please comment on this pull request with the following command:
/create_integration_branches
Alternatively, the /approve and /create_pull_requests commands will automatically
create the integration branches.
The following options are set: bypass_author_approval, bypass_jira_check
Branches have diverged
This pull request's source branch dependabot/npm_and_yarn/shell-ui/multi-6e26c585c1 has diverged from
development/131.0 by more than 50 commits.
To avoid any integration risks, please re-synchronize them using one of the following solutions:
- Merge
origin/development/131.0intodependabot/npm_and_yarn/shell-ui/multi-6e26c585c1 - Rebase
dependabot/npm_and_yarn/shell-ui/multi-6e26c585c1ontoorigin/development/131.0
Note: If you choose to rebase, you may have to ask me to rebuild
integration branches using the reset command.
The following options are set: bypass_author_approval, bypass_jira_check
Branches have diverged
This pull request's source branch dependabot/npm_and_yarn/shell-ui/multi-6e26c585c1 has diverged from
development/132.0 by more than 50 commits.
To avoid any integration risks, please re-synchronize them using one of the following solutions:
- Merge
origin/development/132.0intodependabot/npm_and_yarn/shell-ui/multi-6e26c585c1 - Rebase
dependabot/npm_and_yarn/shell-ui/multi-6e26c585c1ontoorigin/development/132.0
Note: If you choose to rebase, you may have to ask me to rebuild
integration branches using the reset command.
The following options are set: bypass_author_approval, bypass_jira_check