node

node copied to clipboard

Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.18.11 to 7.23.2. Release notes Sourced from @​babel/traverse's releases. v7.23.2 (2023-10-11) NOTE: This release also re-publishes @babel/core, even if it does not appear in the linked release...

dependabot[bot]

Capture `${...}` pattern less strict to throw explicitly

2

In the hydrate config step, we use `src/utils/substitute-with-env.ts` to substitute string patterns like `${}` with `process.env[]` in case it's not nil. We can improve the user experience here and catch...

mohoff

Create CONTRIBUTING.md to help open source devs onboard

2

Create a CONTRIBUTING.md file, It will help attract open-source devs and also give people a good idea of our values. [Reasoning](https://mozillascience.github.io/working-open-workshop/contributing/) [Example](https://gist.github.com/PurpleBooth/b24679402957c63ec426)

PaddyMc

Strong-config ignores properties which name is just `secret`

1

With the following configuration file: **config/development.yml** ```yaml server: host: 127.0.0.1 port: 3000 jwt: secret: VKQEl9vxXDFxtfrmSaYGAcBDvh9Kr1jm ``` I expect to be encrypted to: ```yaml server: host: 127.0.0.1 port: 3000 jwt: secret:...

leosuncin

With the following files:: **config/base.yml** ```yaml logger: true server: host: 0.0.0.0 port: 4200 ``` **config/production.yml** ```yaml jwt: jwtSecret: ENC[AES256_GCM,data:TTQroa9FcjVxIDp+49lbGZTiez6iy1QQf2KtUNCsyVcIg63nQN7dQujhzk5hR1CyGHjzCpzaWyeVoV46/mAi4g==,iv:mgYTGnpJTro0nyvaVP7gHPvga6/6F1ZZp9NdExrHTJc=,tag:gW5fLHwrScAzhtiTB84CJQ==,type:str] sops: # SOPS encryption... ``` **config/schema.json** ```json { "$schema": "http://json-schema.org/draft-07/schema#", "type":...

leosuncin

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1. Changelog Sourced from js-yaml's changelog. [4.1.1] - 2025-11-12 Security Fix prototype pollution issue in yaml merge (<<) operator. Commits cc482e7 4.1.1 released 50968b8 dist...

dependabot[bot]

I will no longer maintain this package. Sadly, I just don't have enough free time to dedicate to strong-config. The number of npm downloads is fairly low so I don't...

chapati23