diff --git a/CHANGELOG.md b/CHANGELOG.md index 8a6bc59104..48fcd508c7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,14 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- **authentication-oauth:** Fix OAuth Callback Account Takeover ([#3663](https://github.com/feathersjs/feathers/issues/3663)) ([d6b0b5c](https://github.com/feathersjs/feathers/commit/d6b0b5cfbaf6f86a63662027c25616c28e54ede1)) +- **mongodb:** Ensure arbitrary objects can't be passed as MongoDB ids ([#3664](https://github.com/feathersjs/feathers/issues/3664)) ([163e664](https://github.com/feathersjs/feathers/commit/163e664f231a57041034c852b80525fc5c8cf68d)) +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) ### Bug Fixes diff --git a/lerna.json b/lerna.json index 946c9df159..23b55be8fc 100644 --- a/lerna.json +++ b/lerna.json @@ -1,7 +1,7 @@ { "ci": false, "packages": ["packages/*"], - "version": "5.0.41", + "version": "5.0.42", "command": { "bootstrap": { "hoist": true diff --git a/package-lock.json b/package-lock.json index bacd29a344..e4340a9a52 100644 --- a/package-lock.json +++ b/package-lock.json @@ -6136,9 +6136,9 @@ "license": "MIT" }, "node_modules/@types/lodash": { - "version": "4.17.23", - "resolved": "https://registry.npmjs.org/@types/lodash/-/lodash-4.17.23.tgz", - "integrity": "sha512-RDvF6wTulMPjrNdCoYRC8gNR880JNGT8uB+REUpC2Ns4pRqQJhGz90wh7rgdXDPpCczF3VGktDuFGVnz8zP7HA==", + "version": "4.17.24", + "resolved": "https://registry.npmjs.org/@types/lodash/-/lodash-4.17.24.tgz", + "integrity": "sha512-gIW7lQLZbue7lRSWEFql49QJJWThrTFFeIMJdp3eH4tKoxm1OvEPg02rm4wCCSHS0cL3/Fizimb35b7k8atwsQ==", "license": "MIT" }, "node_modules/@types/lodash-es": { @@ -6227,9 +6227,9 @@ "license": "MIT" }, "node_modules/@types/node": { - "version": "25.3.0", - "resolved": "https://registry.npmjs.org/@types/node/-/node-25.3.0.tgz", - "integrity": "sha512-4K3bqJpXpqfg2XKGK9bpDTc6xO/xoUP/RBWS7AtRMug6zZFaRekiLzjVtAoZMquxoAbzBvy5nxQ7veS5eYzf8A==", + "version": "25.3.3", + "resolved": "https://registry.npmjs.org/@types/node/-/node-25.3.3.tgz", + "integrity": "sha512-DpzbrH7wIcBaJibpKo9nnSQL0MTRdnWttGyE5haGwK86xgMOkFLp7vEyfQPGLOJh5wNYiJ3V9PmUMDhV9u8kkQ==", "license": "MIT", "dependencies": { "undici-types": "~7.18.0" @@ -8373,9 +8373,9 @@ } }, "node_modules/axios": { - "version": "1.13.5", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.5.tgz", - "integrity": "sha512-cz4ur7Vb0xS4/KUN0tPWe44eqxrIu31me+fbang3ijiNscE129POzipJJA6zniq2C/Z6sJCjMimjS8Lc/GAs8Q==", + "version": "1.13.6", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.6.tgz", + "integrity": "sha512-ChTCHMouEe2kn713WHbQGcuYrr6fXTBiu460OTwWrWob16g1bXn4vtz07Ope7ewMozJAnEquLk5lWQWtBig9DQ==", "license": "MIT", "dependencies": { "follow-redirects": "^1.15.11", @@ -9654,9 +9654,9 @@ "license": "MIT" }, "node_modules/config": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/config/-/config-4.3.0.tgz", - "integrity": "sha512-nY/JbYPBxOCTC+Kj9dUf21t49VxwsL6GXRsAxlTY9N6MBTx/6TBQgT2t5PsAY+XUCMCNudARJPevUZeN3NhyHQ==", + "version": "4.4.1", + "resolved": "https://registry.npmjs.org/config/-/config-4.4.1.tgz", + "integrity": "sha512-XfN4Q4+wBKkGtgMyQ+5ayjepdb0MrdiGKfBr0G1PTLx9rnqsX+Xiw03LEUtSALZU0UVfcFp6+xYV0NL8HLF94g==", "license": "MIT", "dependencies": { "json5": "^2.2.3" @@ -11015,9 +11015,9 @@ } }, "node_modules/enhanced-resolve": { - "version": "5.19.0", - "resolved": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.19.0.tgz", - "integrity": "sha512-phv3E1Xl4tQOShqSte26C7Fl84EwUdZsyOuSSk9qtAGyyQs2s3jJzComh+Abf4g187lUUAvH+H26omrqia2aGg==", + "version": "5.20.0", + "resolved": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.20.0.tgz", + "integrity": "sha512-/ce7+jQ1PQ6rVXwe+jKEg5hW5ciicHwIQUagZkp6IufBoY3YDgdTTY1azVs0qoRgVmvsNB+rbjLJxDAeHHtwsQ==", "dev": true, "license": "MIT", "dependencies": { @@ -15098,13 +15098,13 @@ } }, "node_modules/koa": { - "version": "3.1.1", - "resolved": "https://registry.npmjs.org/koa/-/koa-3.1.1.tgz", - "integrity": "sha512-KDDuvpfqSK0ZKEO2gCPedNjl5wYpfj+HNiuVRlbhd1A88S3M0ySkdf2V/EJ4NWt5dwh5PXCdcenrKK2IQJAxsg==", + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/koa/-/koa-3.1.2.tgz", + "integrity": "sha512-2LOQnFKu3m0VxpE+5sb5+BRTSKrXmNxGgxVRiKwD9s5KQB1zID/FRXhtzeV7RT1L2GVpdEEAfVuclFOMGl1ikA==", "license": "MIT", "dependencies": { "accepts": "^1.3.8", - "content-disposition": "~0.5.4", + "content-disposition": "~1.0.1", "content-type": "^1.0.5", "cookies": "~0.9.1", "delegates": "^1.0.0", @@ -15253,6 +15253,19 @@ "ms": "^2.1.1" } }, + "node_modules/koa/node_modules/content-disposition": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.0.1.tgz", + "integrity": "sha512-oIXISMynqSqm241k6kcQ5UwttDILMK4BiurCfGEREw6+X9jkkpEe5T9FZaApyLGGOnFuyMWZpdolTXMtvEJ08Q==", + "license": "MIT", + "engines": { + "node": ">=18" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/express" + } + }, "node_modules/koa/node_modules/media-typer": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-1.1.0.tgz", @@ -19500,15 +19513,15 @@ "license": "MIT" }, "node_modules/pg": { - "version": "8.18.0", - "resolved": "https://registry.npmjs.org/pg/-/pg-8.18.0.tgz", - "integrity": "sha512-xqrUDL1b9MbkydY/s+VZ6v+xiMUmOUk7SS9d/1kpyQxoJ6U9AO1oIJyUWVZojbfe5Cc/oluutcgFG4L9RDP1iQ==", + "version": "8.19.0", + "resolved": "https://registry.npmjs.org/pg/-/pg-8.19.0.tgz", + "integrity": "sha512-QIcLGi508BAHkQ3pJNptsFz5WQMlpGbuBGBaIaXsWK8mel2kQ/rThYI+DbgjUvZrIr7MiuEuc9LcChJoEZK1xQ==", "dev": true, "license": "MIT", "dependencies": { "pg-connection-string": "^2.11.0", - "pg-pool": "^3.11.0", - "pg-protocol": "^1.11.0", + "pg-pool": "^3.12.0", + "pg-protocol": "^1.12.0", "pg-types": "2.2.0", "pgpass": "1.0.5" }, @@ -19553,9 +19566,9 @@ } }, "node_modules/pg-pool": { - "version": "3.11.0", - "resolved": "https://registry.npmjs.org/pg-pool/-/pg-pool-3.11.0.tgz", - "integrity": "sha512-MJYfvHwtGp870aeusDh+hg9apvOe2zmpZJpyt+BMtzUWlVqbhFmMK6bOBXLBUPd7iRtIF9fZplDc7KrPN3PN7w==", + "version": "3.12.0", + "resolved": "https://registry.npmjs.org/pg-pool/-/pg-pool-3.12.0.tgz", + "integrity": "sha512-eIJ0DES8BLaziFHW7VgJEBPi5hg3Nyng5iKpYtj3wbcAUV9A1wLgWiY7ajf/f/oO1wfxt83phXPY8Emztg7ITg==", "dev": true, "license": "MIT", "peerDependencies": { @@ -19563,9 +19576,9 @@ } }, "node_modules/pg-protocol": { - "version": "1.11.0", - "resolved": "https://registry.npmjs.org/pg-protocol/-/pg-protocol-1.11.0.tgz", - "integrity": "sha512-pfsxk2M9M3BuGgDOfuy37VNRRX3jmKgMjcvAcWqNDpZSf4cUmv8HSOl5ViRQFsfARFn0KuUQTgLxVMbNq5NW3g==", + "version": "1.12.0", + "resolved": "https://registry.npmjs.org/pg-protocol/-/pg-protocol-1.12.0.tgz", + "integrity": "sha512-uOANXNRACNdElMXJ0tPz6RBM0XQ61nONGAwlt8da5zs/iUOOCLBQOHSXnrC6fMsvtjxbOJrZZl5IScGv+7mpbg==", "dev": true, "license": "MIT" }, @@ -23507,16 +23520,15 @@ } }, "node_modules/terser-webpack-plugin": { - "version": "5.3.16", - "resolved": "https://registry.npmjs.org/terser-webpack-plugin/-/terser-webpack-plugin-5.3.16.tgz", - "integrity": "sha512-h9oBFCWrq78NyWWVcSwZarJkZ01c2AyGrzs1crmHZO3QUg9D61Wu4NPjBy69n7JqylFF5y+CsUZYmYEIZ3mR+Q==", + "version": "5.3.17", + "resolved": "https://registry.npmjs.org/terser-webpack-plugin/-/terser-webpack-plugin-5.3.17.tgz", + "integrity": "sha512-YR7PtUp6GMU91BgSJmlaX/rS2lGDbAF7D+Wtq7hRO+MiljNmodYvqslzCFiYVAgW+Qoaaia/QUIP4lGXufjdZw==", "dev": true, "license": "MIT", "dependencies": { "@jridgewell/trace-mapping": "^0.3.25", "jest-worker": "^27.4.5", "schema-utils": "^4.3.0", - "serialize-javascript": "^6.0.2", "terser": "^5.31.1" }, "engines": { @@ -25977,9 +25989,9 @@ "license": "BSD-2-Clause" }, "node_modules/webpack": { - "version": "5.105.2", - "resolved": "https://registry.npmjs.org/webpack/-/webpack-5.105.2.tgz", - "integrity": "sha512-dRXm0a2qcHPUBEzVk8uph0xWSjV/xZxenQQbLwnwP7caQCYpqG1qddwlyEkIDkYn0K8tvmcrZ+bOrzoQ3HxCDw==", + "version": "5.105.4", + "resolved": "https://registry.npmjs.org/webpack/-/webpack-5.105.4.tgz", + "integrity": "sha512-jTywjboN9aHxFlToqb0K0Zs9SbBoW4zRUlGzI2tYNxVYcEi/IPpn+Xi4ye5jTLvX2YeLuic/IvxNot+Q1jMoOw==", "dev": true, "license": "MIT", "dependencies": { @@ -25989,11 +26001,11 @@ "@webassemblyjs/ast": "^1.14.1", "@webassemblyjs/wasm-edit": "^1.14.1", "@webassemblyjs/wasm-parser": "^1.14.1", - "acorn": "^8.15.0", + "acorn": "^8.16.0", "acorn-import-phases": "^1.0.3", "browserslist": "^4.28.1", "chrome-trace-event": "^1.0.2", - "enhanced-resolve": "^5.19.0", + "enhanced-resolve": "^5.20.0", "es-module-lexer": "^2.0.0", "eslint-scope": "5.1.1", "events": "^3.2.0", @@ -26005,9 +26017,9 @@ "neo-async": "^2.6.2", "schema-utils": "^4.3.3", "tapable": "^2.3.0", - "terser-webpack-plugin": "^5.3.16", + "terser-webpack-plugin": "^5.3.17", "watchpack": "^2.5.1", - "webpack-sources": "^3.3.3" + "webpack-sources": "^3.3.4" }, "bin": { "webpack": "bin/webpack.js" @@ -27395,17 +27407,17 @@ }, "packages/adapter-commons": { "name": "@feathersjs/adapter-commons", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41" + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42" }, "devDependencies": { "@types/mocha": "^10.0.10", "@types/mongodb": "^4.0.6", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "mongodb": "^6.19.0", "shx": "^0.4.0", @@ -27422,11 +27434,11 @@ }, "packages/adapter-tests": { "name": "@feathersjs/adapter-tests", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "devDependencies": { "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", @@ -27442,15 +27454,15 @@ }, "packages/authentication": { "name": "@feathersjs/authentication", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", "@feathersjs/hooks": "^0.9.0", - "@feathersjs/schema": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41", + "@feathersjs/schema": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42", "@types/jsonwebtoken": "^9.0.10", "jsonwebtoken": "^9.0.3", "lodash": "^4.17.23", @@ -27458,10 +27470,10 @@ "uuid": "^11.1.0" }, "devDependencies": { - "@feathersjs/memory": "^5.0.41", - "@types/lodash": "^4.17.23", + "@feathersjs/memory": "^5.0.42", + "@types/lodash": "^4.17.24", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "@types/uuid": "^10.0.0", "mocha": "^11.7.5", "shx": "^0.4.0", @@ -27478,24 +27490,24 @@ }, "packages/authentication-client": { "name": "@feathersjs/authentication-client", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41" + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42" }, "devDependencies": { - "@feathersjs/authentication-local": "^5.0.41", - "@feathersjs/express": "^5.0.41", - "@feathersjs/memory": "^5.0.41", - "@feathersjs/rest-client": "^5.0.41", - "@feathersjs/socketio": "^5.0.41", - "@feathersjs/socketio-client": "^5.0.41", + "@feathersjs/authentication-local": "^5.0.42", + "@feathersjs/express": "^5.0.42", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/rest-client": "^5.0.42", + "@feathersjs/socketio": "^5.0.42", + "@feathersjs/socketio-client": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", - "axios": "^1.13.5", + "@types/node": "^25.3.3", + "axios": "^1.13.6", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", @@ -27511,23 +27523,23 @@ }, "packages/authentication-local": { "name": "@feathersjs/authentication-local", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", "bcryptjs": "^3.0.3", "lodash": "^4.17.23" }, "devDependencies": { - "@feathersjs/memory": "^5.0.41", - "@feathersjs/schema": "^5.0.41", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/schema": "^5.0.42", "@types/bcryptjs": "^2.4.6", - "@types/lodash": "^4.17.23", + "@types/lodash": "^4.17.24", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", @@ -27543,30 +27555,30 @@ }, "packages/authentication-oauth": { "name": "@feathersjs/authentication-oauth", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/express": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/koa": "^5.0.41", - "@feathersjs/schema": "^5.0.41", + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/express": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/koa": "^5.0.42", + "@feathersjs/schema": "^5.0.42", "cookie-session": "^2.1.1", "grant": "^5.4.24", "koa-session": "^7.0.2", "qs": "^6.15.0" }, "devDependencies": { - "@feathersjs/memory": "^5.0.41", + "@feathersjs/memory": "^5.0.42", "@types/cookie-session": "^2.0.49", "@types/express": "^4.17.21", "@types/koa-session": "^6.4.5", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "@types/tough-cookie": "^4.0.5", - "axios": "^1.13.5", + "axios": "^1.13.6", "mocha": "^11.7.5", "shx": "^0.4.0", "tough-cookie": "^6.0.0", @@ -27596,10 +27608,10 @@ }, "packages/cli": { "name": "@feathersjs/cli", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/generators": "^5.0.41", + "@feathersjs/generators": "^5.0.42", "chalk": "^5.6.2", "commander": "^13.1.0" }, @@ -27607,27 +27619,27 @@ "feathers": "bin/feathers.js" }, "devDependencies": { - "@feathersjs/adapter-commons": "^5.0.41", - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/authentication-client": "^5.0.41", - "@feathersjs/authentication-local": "^5.0.41", - "@feathersjs/authentication-oauth": "^5.0.41", - "@feathersjs/configuration": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/express": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/knex": "^5.0.41", - "@feathersjs/koa": "^5.0.41", - "@feathersjs/mongodb": "^5.0.41", - "@feathersjs/rest-client": "^5.0.41", - "@feathersjs/schema": "^5.0.41", - "@feathersjs/socketio": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41", - "@feathersjs/typebox": "^5.0.41", + "@feathersjs/adapter-commons": "^5.0.42", + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/authentication-client": "^5.0.42", + "@feathersjs/authentication-local": "^5.0.42", + "@feathersjs/authentication-oauth": "^5.0.42", + "@feathersjs/configuration": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/express": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/knex": "^5.0.42", + "@feathersjs/koa": "^5.0.42", + "@feathersjs/mongodb": "^5.0.42", + "@feathersjs/rest-client": "^5.0.42", + "@feathersjs/schema": "^5.0.42", + "@feathersjs/socketio": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42", + "@feathersjs/typebox": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "@types/prettier": "^2.7.3", - "axios": "^1.13.5", + "axios": "^1.13.6", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", @@ -27653,22 +27665,22 @@ }, "packages/client": { "name": "@feathersjs/client", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/authentication-client": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/rest-client": "^5.0.41", - "@feathersjs/socketio-client": "^5.0.41" + "@feathersjs/authentication-client": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/rest-client": "^5.0.42", + "@feathersjs/socketio-client": "^5.0.42" }, "devDependencies": { "@babel/core": "^7.29.0", "@babel/preset-env": "^7.29.0", - "@feathersjs/express": "^5.0.41", - "@feathersjs/memory": "^5.0.41", - "@feathersjs/socketio": "^5.0.41", - "@feathersjs/tests": "^5.0.41", + "@feathersjs/express": "^5.0.42", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/socketio": "^5.0.42", + "@feathersjs/tests": "^5.0.42", "babel-loader": "^10.0.0", "mocha": "^11.7.5", "node-fetch": "^2.6.1", @@ -27677,7 +27689,7 @@ "superagent": "^10.3.0", "ts-loader": "^9.5.4", "typescript": "^5.9.3", - "webpack": "^5.105.2", + "webpack": "^5.105.4", "webpack-cli": "^6.0.1", "webpack-merge": "^6.0.1" }, @@ -27691,11 +27703,11 @@ }, "packages/commons": { "name": "@feathersjs/commons", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "devDependencies": { "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", @@ -27711,18 +27723,18 @@ }, "packages/configuration": { "name": "@feathersjs/configuration", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/schema": "^5.0.41", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/schema": "^5.0.42", "@types/config": "^3.3.5", - "config": "^4.3.0" + "config": "^4.4.1" }, "devDependencies": { "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", @@ -27737,10 +27749,10 @@ } }, "packages/create-feathers": { - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/cli": "^5.0.41" + "@feathersjs/cli": "^5.0.42" }, "bin": { "create-feathers": "bin/create-feathers.js" @@ -27755,12 +27767,12 @@ }, "packages/errors": { "name": "@feathersjs/errors", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "devDependencies": { - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/feathers": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", @@ -27772,14 +27784,14 @@ }, "packages/express": { "name": "@feathersjs/express", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41", + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42", "@types/compression": "^1.8.1", "@types/cors": "^2.8.19", "@types/express": "^4.17.21", @@ -27789,12 +27801,12 @@ "express": "^4.21.2" }, "devDependencies": { - "@feathersjs/authentication-local": "^5.0.41", - "@feathersjs/tests": "^5.0.41", - "@types/lodash": "^4.17.23", + "@feathersjs/authentication-local": "^5.0.42", + "@feathersjs/tests": "^5.0.42", + "@types/lodash": "^4.17.24", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", - "axios": "^1.13.5", + "@types/node": "^25.3.3", + "axios": "^1.13.6", "lodash": "^4.17.23", "mocha": "^11.7.5", "shx": "^0.4.0", @@ -27811,16 +27823,16 @@ }, "packages/feathers": { "name": "@feathersjs/feathers", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/commons": "^5.0.41", + "@feathersjs/commons": "^5.0.42", "@feathersjs/hooks": "^0.9.0", "events": "^3.3.0" }, "devDependencies": { "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", @@ -27836,7 +27848,7 @@ }, "packages/generators": { "name": "@feathersjs/generators", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { "@featherscloud/pinion": "^0.5.5", @@ -27846,33 +27858,33 @@ "typescript": "^5.9.3" }, "devDependencies": { - "@feathersjs/adapter-commons": "^5.0.41", - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/authentication-client": "^5.0.41", - "@feathersjs/authentication-local": "^5.0.41", - "@feathersjs/authentication-oauth": "^5.0.41", - "@feathersjs/configuration": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/express": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/knex": "^5.0.41", - "@feathersjs/koa": "^5.0.41", - "@feathersjs/mongodb": "^5.0.41", - "@feathersjs/rest-client": "^5.0.41", - "@feathersjs/schema": "^5.0.41", - "@feathersjs/socketio": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41", - "@feathersjs/typebox": "^5.0.41", + "@feathersjs/adapter-commons": "^5.0.42", + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/authentication-client": "^5.0.42", + "@feathersjs/authentication-local": "^5.0.42", + "@feathersjs/authentication-oauth": "^5.0.42", + "@feathersjs/configuration": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/express": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/knex": "^5.0.42", + "@feathersjs/koa": "^5.0.42", + "@feathersjs/mongodb": "^5.0.42", + "@feathersjs/rest-client": "^5.0.42", + "@feathersjs/schema": "^5.0.42", + "@feathersjs/socketio": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42", + "@feathersjs/typebox": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "@types/prettier": "^2.7.3", - "axios": "^1.13.5", + "axios": "^1.13.6", "knex": "^3.1.0", "mocha": "^11.7.5", "mongodb": "^6.19.0", "mssql": "^12.2.0", "mysql": "^2.18.1", - "pg": "^8.18.0", + "pg": "^8.19.0", "shx": "^0.4.0", "sqlite3": "^5.1.7", "tsx": "^4.21.0", @@ -27889,22 +27901,22 @@ }, "packages/knex": { "name": "@feathersjs/knex", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/adapter-commons": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41" + "@feathersjs/adapter-commons": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42" }, "devDependencies": { - "@feathersjs/adapter-tests": "^5.0.41", - "@feathersjs/schema": "^5.0.41", + "@feathersjs/adapter-tests": "^5.0.42", + "@feathersjs/schema": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "knex": "^3.1.0", "mocha": "^11.7.5", - "pg": "^8.18.0", + "pg": "^8.19.0", "shx": "^0.4.0", "sqlite3": "^5.1.7", "typescript": "^5.9.3" @@ -27922,33 +27934,33 @@ }, "packages/koa": { "name": "@feathersjs/koa", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41", + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42", "@koa/cors": "^5.0.0", "@types/koa": "^3.0.1", "@types/koa__cors": "^5.0.1", "@types/koa-qs": "^2.0.5", "@types/koa-static": "^4.0.4", - "koa": "^3.1.1", + "koa": "^3.1.2", "koa-body": "^7.0.1", "koa-compose": "^4.1.0", "koa-qs": "^3.0.0", "koa-static": "^5.0.0" }, "devDependencies": { - "@feathersjs/authentication-local": "^5.0.41", - "@feathersjs/memory": "^5.0.41", - "@feathersjs/tests": "^5.0.41", + "@feathersjs/authentication-local": "^5.0.42", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/tests": "^5.0.42", "@types/koa-compose": "^3.2.9", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", - "axios": "^1.13.5", + "@types/node": "^25.3.3", + "axios": "^1.13.6", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", @@ -27960,18 +27972,18 @@ }, "packages/memory": { "name": "@feathersjs/memory", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/adapter-commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", + "@feathersjs/adapter-commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", "sift": "^17.1.3" }, "devDependencies": { - "@feathersjs/adapter-tests": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/adapter-tests": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", @@ -27983,19 +27995,19 @@ }, "packages/mongodb": { "name": "@feathersjs/mongodb", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/adapter-commons": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41" + "@feathersjs/adapter-commons": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42" }, "devDependencies": { - "@feathersjs/adapter-tests": "^5.0.41", - "@feathersjs/schema": "^5.0.41", + "@feathersjs/adapter-tests": "^5.0.42", + "@feathersjs/schema": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "mongodb-memory-server": "^11.0.1", "shx": "^0.4.0", @@ -28014,24 +28026,24 @@ }, "packages/rest-client": { "name": "@feathersjs/rest-client", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", "@types/superagent": "^8.1.9", "qs": "^6.15.0" }, "devDependencies": { - "@feathersjs/express": "^5.0.41", - "@feathersjs/memory": "^5.0.41", - "@feathersjs/tests": "^5.0.41", + "@feathersjs/express": "^5.0.42", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/tests": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "@types/node-fetch": "^2.6.13", "@types/qs": "^6.14.0", - "axios": "^1.13.5", + "axios": "^1.13.6", "mocha": "^11.7.5", "node-fetch": "^2.6.1", "rxjs": "^7.8.2", @@ -28050,23 +28062,23 @@ }, "packages/schema": { "name": "@feathersjs/schema", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/adapter-commons": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/adapter-commons": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", "@feathersjs/hooks": "^0.9.0", "@types/json-schema": "^7.0.15", - "ajv": "^8.17.1", + "ajv": "^8.18.0", "ajv-formats": "^3.0.1", "json-schema-to-ts": "^3.1.1" }, "devDependencies": { - "@feathersjs/memory": "^5.0.41", + "@feathersjs/memory": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "ajv-formats": "^3.0.1", "mocha": "^11.7.5", "shx": "^0.4.0", @@ -28107,20 +28119,20 @@ }, "packages/socketio": { "name": "@feathersjs/socketio", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42", "socket.io": "^4.8.3" }, "devDependencies": { - "@feathersjs/express": "^5.0.41", - "@feathersjs/memory": "^5.0.41", - "@feathersjs/tests": "^5.0.41", + "@feathersjs/express": "^5.0.42", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/tests": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "lodash": "^4.17.23", "mocha": "^11.7.5", "shx": "^0.4.0", @@ -28137,19 +28149,19 @@ }, "packages/socketio-client": { "name": "@feathersjs/socketio-client", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41" + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42" }, "devDependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/memory": "^5.0.41", - "@feathersjs/socketio": "^5.0.41", - "@feathersjs/tests": "^5.0.41", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/socketio": "^5.0.42", + "@feathersjs/tests": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "socket.io-client": "^4.8.3", @@ -28166,17 +28178,17 @@ }, "packages/tests": { "name": "@feathersjs/tests", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@types/lodash": "^4.17.23", - "axios": "^1.13.5", + "@types/lodash": "^4.17.24", + "axios": "^1.13.6", "lodash": "^4.17.23" }, "devDependencies": { - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/feathers": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", @@ -28192,20 +28204,20 @@ }, "packages/transport-commons": { "name": "@feathersjs/transport-commons", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", "encodeurl": "^2.0.0", "lodash": "^4.17.23" }, "devDependencies": { "@types/encodeurl": "^1.0.3", - "@types/lodash": "^4.17.23", + "@types/lodash": "^4.17.24", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", @@ -28221,15 +28233,15 @@ }, "packages/typebox": { "name": "@feathersjs/typebox", - "version": "5.0.41", + "version": "5.0.42", "license": "MIT", "dependencies": { - "@feathersjs/schema": "^5.0.41", + "@feathersjs/schema": "^5.0.42", "@sinclair/typebox": "^0.25.0" }, "devDependencies": { "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "typescript": "^5.9.3" diff --git a/packages/adapter-commons/CHANGELOG.md b/packages/adapter-commons/CHANGELOG.md index 486c91fc28..f5b0e8fde1 100644 --- a/packages/adapter-commons/CHANGELOG.md +++ b/packages/adapter-commons/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/adapter-commons diff --git a/packages/adapter-commons/package.json b/packages/adapter-commons/package.json index 5a4b1aa310..2aa4769432 100644 --- a/packages/adapter-commons/package.json +++ b/packages/adapter-commons/package.json @@ -1,6 +1,6 @@ { "name": "@feathersjs/adapter-commons", - "version": "5.0.41", + "version": "5.0.42", "description": "Shared database adapter utility functions", "homepage": "https://feathersjs.com", "keywords": [ @@ -50,14 +50,14 @@ "access": "public" }, "dependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41" + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42" }, "devDependencies": { "@types/mocha": "^10.0.10", "@types/mongodb": "^4.0.6", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "mongodb": "^6.19.0", "shx": "^0.4.0", diff --git a/packages/adapter-tests/CHANGELOG.md b/packages/adapter-tests/CHANGELOG.md index 07c43ef35d..0fd8f2f272 100644 --- a/packages/adapter-tests/CHANGELOG.md +++ b/packages/adapter-tests/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/adapter-tests diff --git a/packages/adapter-tests/package.json b/packages/adapter-tests/package.json index ee9db61430..ff73ebb93f 100644 --- a/packages/adapter-tests/package.json +++ b/packages/adapter-tests/package.json @@ -1,6 +1,6 @@ { "name": "@feathersjs/adapter-tests", - "version": "5.0.41", + "version": "5.0.42", "description": "Feathers shared database adapter test suite", "homepage": "https://feathersjs.com", "keywords": [ @@ -51,7 +51,7 @@ }, "devDependencies": { "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", diff --git a/packages/authentication-client/CHANGELOG.md b/packages/authentication-client/CHANGELOG.md index a5c99e3678..339204b722 100644 --- a/packages/authentication-client/CHANGELOG.md +++ b/packages/authentication-client/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/authentication-client diff --git a/packages/authentication-client/package.json b/packages/authentication-client/package.json index a415295228..f9247320a4 100644 --- a/packages/authentication-client/package.json +++ b/packages/authentication-client/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/authentication-client", "description": "The authentication plugin for feathers-client", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -53,21 +53,21 @@ "access": "public" }, "dependencies": { - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41" + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42" }, "devDependencies": { - "@feathersjs/authentication-local": "^5.0.41", - "@feathersjs/express": "^5.0.41", - "@feathersjs/memory": "^5.0.41", - "@feathersjs/rest-client": "^5.0.41", - "@feathersjs/socketio": "^5.0.41", - "@feathersjs/socketio-client": "^5.0.41", + "@feathersjs/authentication-local": "^5.0.42", + "@feathersjs/express": "^5.0.42", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/rest-client": "^5.0.42", + "@feathersjs/socketio": "^5.0.42", + "@feathersjs/socketio-client": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", - "axios": "^1.13.5", + "@types/node": "^25.3.3", + "axios": "^1.13.6", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", diff --git a/packages/authentication-local/CHANGELOG.md b/packages/authentication-local/CHANGELOG.md index 5b96524e03..5813e4bb2e 100644 --- a/packages/authentication-local/CHANGELOG.md +++ b/packages/authentication-local/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/authentication-local diff --git a/packages/authentication-local/package.json b/packages/authentication-local/package.json index d54f2d89e9..62570b1b03 100644 --- a/packages/authentication-local/package.json +++ b/packages/authentication-local/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/authentication-local", "description": "Local authentication strategy for @feathers/authentication", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -53,20 +53,20 @@ "access": "public" }, "dependencies": { - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", "bcryptjs": "^3.0.3", "lodash": "^4.17.23" }, "devDependencies": { - "@feathersjs/memory": "^5.0.41", - "@feathersjs/schema": "^5.0.41", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/schema": "^5.0.42", "@types/bcryptjs": "^2.4.6", - "@types/lodash": "^4.17.23", + "@types/lodash": "^4.17.24", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", diff --git a/packages/authentication-oauth/CHANGELOG.md b/packages/authentication-oauth/CHANGELOG.md index 95053bffe1..743fc5672b 100644 --- a/packages/authentication-oauth/CHANGELOG.md +++ b/packages/authentication-oauth/CHANGELOG.md @@ -3,6 +3,13 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- **authentication-oauth:** Fix OAuth Callback Account Takeover ([#3663](https://github.com/feathersjs/feathers/issues/3663)) ([d6b0b5c](https://github.com/feathersjs/feathers/commit/d6b0b5cfbaf6f86a63662027c25616c28e54ede1)) +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/authentication-oauth diff --git a/packages/authentication-oauth/package.json b/packages/authentication-oauth/package.json index 66306b93ee..e721ffcfad 100644 --- a/packages/authentication-oauth/package.json +++ b/packages/authentication-oauth/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/authentication-oauth", "description": "oAuth 1 and 2 authentication for Feathers. Powered by Grant.", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -54,27 +54,27 @@ "access": "public" }, "dependencies": { - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/express": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/koa": "^5.0.41", - "@feathersjs/schema": "^5.0.41", + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/express": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/koa": "^5.0.42", + "@feathersjs/schema": "^5.0.42", "cookie-session": "^2.1.1", "grant": "^5.4.24", "koa-session": "^7.0.2", "qs": "^6.15.0" }, "devDependencies": { - "@feathersjs/memory": "^5.0.41", + "@feathersjs/memory": "^5.0.42", "@types/cookie-session": "^2.0.49", "@types/express": "^4.17.21", "@types/koa-session": "^6.4.5", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "@types/tough-cookie": "^4.0.5", - "axios": "^1.13.5", + "axios": "^1.13.6", "mocha": "^11.7.5", "shx": "^0.4.0", "tough-cookie": "^6.0.0", diff --git a/packages/authentication-oauth/src/service.ts b/packages/authentication-oauth/src/service.ts index e4a647f365..606184a49f 100644 --- a/packages/authentication-oauth/src/service.ts +++ b/packages/authentication-oauth/src/service.ts @@ -1,6 +1,6 @@ import { createDebug } from '@feathersjs/commons' import { HookContext, NextFunction, Params } from '@feathersjs/feathers' -import { FeathersError, GeneralError } from '@feathersjs/errors' +import { FeathersError, GeneralError, NotAuthenticated } from '@feathersjs/errors' // eslint-disable-next-line @typescript-eslint/ban-ts-comment //@ts-ignore import Grant from 'grant/lib/grant' @@ -115,7 +115,13 @@ export class OAuthService { redirect } - const payload = grant?.response || result?.session?.response || result?.state?.response || params.query + const payload = grant?.response || result?.session?.response || result?.state?.response + + if (!payload) { + throw new NotAuthenticated( + 'No valid oAuth response. You must initiate the oAuth flow from the authorize endpoint.' + ) + } const authentication = { strategy: name, ...payload diff --git a/packages/authentication-oauth/test/service.test.ts b/packages/authentication-oauth/test/service.test.ts index 0ac5eb4234..4ffcf592cf 100644 --- a/packages/authentication-oauth/test/service.test.ts +++ b/packages/authentication-oauth/test/service.test.ts @@ -90,6 +90,69 @@ describe('@feathersjs/authentication-oauth service security', () => { }) }) +describe('Account Takeover via OAuth Callback Query Parameter Forgery', () => { + const port = 9781 + const req = axios.create({ + withCredentials: true, + maxRedirects: 0 + }) + let app: Awaited> + + const fetchResponse = async (url: string, headers?: Record): Promise => { + try { + return await req.get(url, { headers }) + } catch (error: any) { + return error.response + } + } + + before(async () => { + app = await expressFixture(port, 5118) + // Create an existing user to demonstrate account takeover + await app.service('users').create({ email: 'admin@example.com' }) + }) + + after(async () => { + await app.teardown() + }) + + it('should not authenticate when calling callback directly with forged query parameters', async () => { + const host = `http://localhost:${port}` + // Attack: directly hit the callback endpoint with a forged profile in query params + // Without a valid OAuth session, Grant returns no response, so the payload + // falls back to params.query which the attacker controls + const attackUrl = `${host}/oauth/github/callback?profile[foo]=bar&code=fake&state=fake` + + const response = await fetchResponse(attackUrl) + + // The forged request must NOT return a valid access token. + // Currently the vulnerable code falls back to params.query as the auth payload, + // allowing the attacker to forge authentication and receive a JWT. + const hasAccessToken = + response.data?.accessToken || + (response.headers.location && response.headers.location.includes('access_token')) + + assert.ok(!hasAccessToken, `Forged callback request should not return an access token but got one`) + }) + + it('should not authenticate when callback is called with a targeted profile id', async () => { + const host = `http://localhost:${port}` + // Attack: forge a specific profile ID to target a known user + const attackUrl = `${host}/oauth/github/callback?profile[id]=12345&code=fake&state=fake` + + const response = await fetchResponse(attackUrl) + + const hasAccessToken = + response.data?.accessToken || + (response.headers.location && response.headers.location.includes('access_token')) + + assert.ok( + !hasAccessToken, + `Forged callback request with targeted profile ID should not return an access token` + ) + }) +}) + describe('@feathersjs/authentication-oauth service', () => { const port = 9778 const req = axios.create({ diff --git a/packages/authentication/CHANGELOG.md b/packages/authentication/CHANGELOG.md index 721bcfe0f2..a1047d8c9f 100644 --- a/packages/authentication/CHANGELOG.md +++ b/packages/authentication/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/authentication diff --git a/packages/authentication/package.json b/packages/authentication/package.json index 2c8f2f05a8..6d4fc02d73 100644 --- a/packages/authentication/package.json +++ b/packages/authentication/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/authentication", "description": "Add Authentication to your FeathersJS app.", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -53,12 +53,12 @@ "access": "public" }, "dependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", "@feathersjs/hooks": "^0.9.0", - "@feathersjs/schema": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41", + "@feathersjs/schema": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42", "@types/jsonwebtoken": "^9.0.10", "jsonwebtoken": "^9.0.3", "lodash": "^4.17.23", @@ -66,10 +66,10 @@ "uuid": "^11.1.0" }, "devDependencies": { - "@feathersjs/memory": "^5.0.41", - "@types/lodash": "^4.17.23", + "@feathersjs/memory": "^5.0.42", + "@types/lodash": "^4.17.24", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "@types/uuid": "^10.0.0", "mocha": "^11.7.5", "shx": "^0.4.0", diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md index ae5aa40cc5..18ca673811 100644 --- a/packages/cli/CHANGELOG.md +++ b/packages/cli/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/cli diff --git a/packages/cli/package.json b/packages/cli/package.json index 8cfdf737cd..68ac6b87f0 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/cli", "description": "The command line interface for creating Feathers applications", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/index.js", "type": "module", @@ -53,32 +53,32 @@ "access": "public" }, "dependencies": { - "@feathersjs/generators": "^5.0.41", + "@feathersjs/generators": "^5.0.42", "chalk": "^5.6.2", "commander": "^13.1.0" }, "devDependencies": { - "@feathersjs/adapter-commons": "^5.0.41", - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/authentication-client": "^5.0.41", - "@feathersjs/authentication-local": "^5.0.41", - "@feathersjs/authentication-oauth": "^5.0.41", - "@feathersjs/configuration": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/express": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/knex": "^5.0.41", - "@feathersjs/koa": "^5.0.41", - "@feathersjs/mongodb": "^5.0.41", - "@feathersjs/rest-client": "^5.0.41", - "@feathersjs/schema": "^5.0.41", - "@feathersjs/socketio": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41", - "@feathersjs/typebox": "^5.0.41", + "@feathersjs/adapter-commons": "^5.0.42", + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/authentication-client": "^5.0.42", + "@feathersjs/authentication-local": "^5.0.42", + "@feathersjs/authentication-oauth": "^5.0.42", + "@feathersjs/configuration": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/express": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/knex": "^5.0.42", + "@feathersjs/koa": "^5.0.42", + "@feathersjs/mongodb": "^5.0.42", + "@feathersjs/rest-client": "^5.0.42", + "@feathersjs/schema": "^5.0.42", + "@feathersjs/socketio": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42", + "@feathersjs/typebox": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "@types/prettier": "^2.7.3", - "axios": "^1.13.5", + "axios": "^1.13.6", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", diff --git a/packages/client/CHANGELOG.md b/packages/client/CHANGELOG.md index 1280ede317..ac2b106243 100644 --- a/packages/client/CHANGELOG.md +++ b/packages/client/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/client diff --git a/packages/client/package.json b/packages/client/package.json index d2939fa3f9..702bd5030d 100644 --- a/packages/client/package.json +++ b/packages/client/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/client", "description": "A module that consolidates Feathers client modules for REST (jQuery, Request, Superagent) and Websocket (Socket.io, Primus) connections", - "version": "5.0.41", + "version": "5.0.42", "repository": { "type": "git", "url": "https://github.com/feathersjs/feathers.git", @@ -49,19 +49,19 @@ "IE 11" ], "dependencies": { - "@feathersjs/authentication-client": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/rest-client": "^5.0.41", - "@feathersjs/socketio-client": "^5.0.41" + "@feathersjs/authentication-client": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/rest-client": "^5.0.42", + "@feathersjs/socketio-client": "^5.0.42" }, "devDependencies": { "@babel/core": "^7.29.0", "@babel/preset-env": "^7.29.0", - "@feathersjs/express": "^5.0.41", - "@feathersjs/memory": "^5.0.41", - "@feathersjs/socketio": "^5.0.41", - "@feathersjs/tests": "^5.0.41", + "@feathersjs/express": "^5.0.42", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/socketio": "^5.0.42", + "@feathersjs/tests": "^5.0.42", "babel-loader": "^10.0.0", "mocha": "^11.7.5", "node-fetch": "^2.6.1", @@ -70,7 +70,7 @@ "superagent": "^10.3.0", "ts-loader": "^9.5.4", "typescript": "^5.9.3", - "webpack": "^5.105.2", + "webpack": "^5.105.4", "webpack-cli": "^6.0.1", "webpack-merge": "^6.0.1" }, diff --git a/packages/commons/CHANGELOG.md b/packages/commons/CHANGELOG.md index c724ad8e14..6e352797fa 100644 --- a/packages/commons/CHANGELOG.md +++ b/packages/commons/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/commons diff --git a/packages/commons/package.json b/packages/commons/package.json index 0504ee4a47..5e4923a31b 100644 --- a/packages/commons/package.json +++ b/packages/commons/package.json @@ -1,6 +1,6 @@ { "name": "@feathersjs/commons", - "version": "5.0.41", + "version": "5.0.42", "description": "Shared Feathers utility functions", "homepage": "https://feathersjs.com", "keywords": [ @@ -53,7 +53,7 @@ }, "devDependencies": { "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", diff --git a/packages/configuration/CHANGELOG.md b/packages/configuration/CHANGELOG.md index 88c74f5c72..b5f0dcafe7 100644 --- a/packages/configuration/CHANGELOG.md +++ b/packages/configuration/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/configuration diff --git a/packages/configuration/package.json b/packages/configuration/package.json index f434d97054..03e78a3378 100644 --- a/packages/configuration/package.json +++ b/packages/configuration/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/configuration", "description": "A small configuration module for your Feathers application.", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -58,15 +58,15 @@ "access": "public" }, "dependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/schema": "^5.0.41", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/schema": "^5.0.42", "@types/config": "^3.3.5", - "config": "^4.3.0" + "config": "^4.4.1" }, "devDependencies": { "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", diff --git a/packages/configuration/src/index.ts b/packages/configuration/src/index.ts index a34606d679..d3d98e0806 100644 --- a/packages/configuration/src/index.ts +++ b/packages/configuration/src/index.ts @@ -5,7 +5,7 @@ import config from 'config' const debug = createDebug('@feathersjs/configuration') -export = function init(schema?: Schema | Validator) { +export = function init(schema?: Schema | Validator): (app?: Application) => Record { const validator: Validator = typeof schema === 'function' ? schema : schema?.validate.bind(schema) return (app?: Application) => { diff --git a/packages/create-feathers/CHANGELOG.md b/packages/create-feathers/CHANGELOG.md index ed3fee312e..3d88bd40de 100644 --- a/packages/create-feathers/CHANGELOG.md +++ b/packages/create-feathers/CHANGELOG.md @@ -3,6 +3,10 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +**Note:** Version bump only for package create-feathers + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package create-feathers diff --git a/packages/create-feathers/package.json b/packages/create-feathers/package.json index 72102bb9da..f380fc3825 100644 --- a/packages/create-feathers/package.json +++ b/packages/create-feathers/package.json @@ -1,7 +1,7 @@ { "name": "create-feathers", "description": "Create a new Feathers application", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "bin": { "create-feathers": "./bin/create-feathers.js" @@ -48,7 +48,7 @@ "access": "public" }, "dependencies": { - "@feathersjs/cli": "^5.0.41" + "@feathersjs/cli": "^5.0.42" }, "gitHead": "90caf635aec850550b9d37bea2762af959d9e8d5" } diff --git a/packages/errors/CHANGELOG.md b/packages/errors/CHANGELOG.md index 4efa0620b3..6ffbef8071 100644 --- a/packages/errors/CHANGELOG.md +++ b/packages/errors/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/errors diff --git a/packages/errors/package.json b/packages/errors/package.json index 0deeb58216..071bfb14b2 100644 --- a/packages/errors/package.json +++ b/packages/errors/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/errors", "description": "Common error types for Feathers apps", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -49,9 +49,9 @@ "*.js" ], "devDependencies": { - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/feathers": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", diff --git a/packages/express/CHANGELOG.md b/packages/express/CHANGELOG.md index 44b4301656..abd7fd9881 100644 --- a/packages/express/CHANGELOG.md +++ b/packages/express/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/express diff --git a/packages/express/package.json b/packages/express/package.json index 78e9359890..c345a99d9d 100644 --- a/packages/express/package.json +++ b/packages/express/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/express", "description": "Feathers Express framework bindings and REST provider", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -52,11 +52,11 @@ "access": "public" }, "dependencies": { - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41", + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42", "@types/compression": "^1.8.1", "@types/cors": "^2.8.19", "@types/express": "^4.17.21", @@ -66,12 +66,12 @@ "express": "^4.21.2" }, "devDependencies": { - "@feathersjs/authentication-local": "^5.0.41", - "@feathersjs/tests": "^5.0.41", - "@types/lodash": "^4.17.23", + "@feathersjs/authentication-local": "^5.0.42", + "@feathersjs/tests": "^5.0.42", + "@types/lodash": "^4.17.24", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", - "axios": "^1.13.5", + "@types/node": "^25.3.3", + "axios": "^1.13.6", "lodash": "^4.17.23", "mocha": "^11.7.5", "shx": "^0.4.0", diff --git a/packages/feathers/CHANGELOG.md b/packages/feathers/CHANGELOG.md index 8748e2a991..e91a030a96 100644 --- a/packages/feathers/CHANGELOG.md +++ b/packages/feathers/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/feathers diff --git a/packages/feathers/package.json b/packages/feathers/package.json index 5b48909c2a..e954ef7e55 100644 --- a/packages/feathers/package.json +++ b/packages/feathers/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/feathers", "description": "A framework for real-time applications and REST API with JavaScript and TypeScript", - "version": "5.0.41", + "version": "5.0.42", "homepage": "http://feathersjs.com", "repository": { "type": "git", @@ -58,13 +58,13 @@ "access": "public" }, "dependencies": { - "@feathersjs/commons": "^5.0.41", + "@feathersjs/commons": "^5.0.42", "@feathersjs/hooks": "^0.9.0", "events": "^3.3.0" }, "devDependencies": { "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", diff --git a/packages/generators/CHANGELOG.md b/packages/generators/CHANGELOG.md index 49b6d6051a..f25db4cfcb 100644 --- a/packages/generators/CHANGELOG.md +++ b/packages/generators/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/generators diff --git a/packages/generators/package.json b/packages/generators/package.json index 07fc271f9d..11b6b0ed55 100644 --- a/packages/generators/package.json +++ b/packages/generators/package.json @@ -1,6 +1,6 @@ { "name": "@feathersjs/generators", - "version": "5.0.41", + "version": "5.0.42", "description": "Feathers CLI core generators, powered by Pinion", "homepage": "https://feathersjs.com", "keywords": [ @@ -59,33 +59,33 @@ "typescript": "^5.9.3" }, "devDependencies": { - "@feathersjs/adapter-commons": "^5.0.41", - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/authentication-client": "^5.0.41", - "@feathersjs/authentication-local": "^5.0.41", - "@feathersjs/authentication-oauth": "^5.0.41", - "@feathersjs/configuration": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/express": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/knex": "^5.0.41", - "@feathersjs/koa": "^5.0.41", - "@feathersjs/mongodb": "^5.0.41", - "@feathersjs/rest-client": "^5.0.41", - "@feathersjs/schema": "^5.0.41", - "@feathersjs/socketio": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41", - "@feathersjs/typebox": "^5.0.41", + "@feathersjs/adapter-commons": "^5.0.42", + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/authentication-client": "^5.0.42", + "@feathersjs/authentication-local": "^5.0.42", + "@feathersjs/authentication-oauth": "^5.0.42", + "@feathersjs/configuration": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/express": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/knex": "^5.0.42", + "@feathersjs/koa": "^5.0.42", + "@feathersjs/mongodb": "^5.0.42", + "@feathersjs/rest-client": "^5.0.42", + "@feathersjs/schema": "^5.0.42", + "@feathersjs/socketio": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42", + "@feathersjs/typebox": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "@types/prettier": "^2.7.3", - "axios": "^1.13.5", + "axios": "^1.13.6", "knex": "^3.1.0", "mocha": "^11.7.5", "mongodb": "^6.19.0", "mssql": "^12.2.0", "mysql": "^2.18.1", - "pg": "^8.18.0", + "pg": "^8.19.0", "shx": "^0.4.0", "sqlite3": "^5.1.7", "tsx": "^4.21.0", diff --git a/packages/knex/CHANGELOG.md b/packages/knex/CHANGELOG.md index d6df1f3f08..c35933d941 100644 --- a/packages/knex/CHANGELOG.md +++ b/packages/knex/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/knex diff --git a/packages/knex/package.json b/packages/knex/package.json index ae07f3a0e9..5d0d5f7e10 100644 --- a/packages/knex/package.json +++ b/packages/knex/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/knex", "description": "Feathers SQL service adapter using KnexJS", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "keywords": [ @@ -51,22 +51,22 @@ "access": "public" }, "dependencies": { - "@feathersjs/adapter-commons": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41" + "@feathersjs/adapter-commons": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42" }, "peerDependencies": { "knex": ">=3.1.0" }, "devDependencies": { - "@feathersjs/adapter-tests": "^5.0.41", - "@feathersjs/schema": "^5.0.41", + "@feathersjs/adapter-tests": "^5.0.42", + "@feathersjs/schema": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "knex": "^3.1.0", "mocha": "^11.7.5", - "pg": "^8.18.0", + "pg": "^8.19.0", "shx": "^0.4.0", "sqlite3": "^5.1.7", "typescript": "^5.9.3" diff --git a/packages/koa/CHANGELOG.md b/packages/koa/CHANGELOG.md index ac6e9da610..22555e9ca5 100644 --- a/packages/koa/CHANGELOG.md +++ b/packages/koa/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/koa diff --git a/packages/koa/package.json b/packages/koa/package.json index 23c7cfc817..fdd22a5307 100644 --- a/packages/koa/package.json +++ b/packages/koa/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/koa", "description": "Feathers KoaJS framework bindings and REST provider", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -49,30 +49,30 @@ "access": "public" }, "dependencies": { - "@feathersjs/authentication": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41", + "@feathersjs/authentication": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42", "@koa/cors": "^5.0.0", "@types/koa": "^3.0.1", "@types/koa-qs": "^2.0.5", "@types/koa-static": "^4.0.4", "@types/koa__cors": "^5.0.1", - "koa": "^3.1.1", + "koa": "^3.1.2", "koa-body": "^7.0.1", "koa-compose": "^4.1.0", "koa-qs": "^3.0.0", "koa-static": "^5.0.0" }, "devDependencies": { - "@feathersjs/authentication-local": "^5.0.41", - "@feathersjs/memory": "^5.0.41", - "@feathersjs/tests": "^5.0.41", + "@feathersjs/authentication-local": "^5.0.42", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/tests": "^5.0.42", "@types/koa-compose": "^3.2.9", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", - "axios": "^1.13.5", + "@types/node": "^25.3.3", + "axios": "^1.13.6", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", diff --git a/packages/memory/CHANGELOG.md b/packages/memory/CHANGELOG.md index 83503e3085..fb20f3030d 100644 --- a/packages/memory/CHANGELOG.md +++ b/packages/memory/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/memory diff --git a/packages/memory/package.json b/packages/memory/package.json index 44f23f2129..8e152015dc 100644 --- a/packages/memory/package.json +++ b/packages/memory/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/memory", "description": "An in memory service store", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://github.com/feathersjs/feathers", "main": "lib/", "types": "lib/", @@ -49,15 +49,15 @@ "lib": "lib" }, "dependencies": { - "@feathersjs/adapter-commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", + "@feathersjs/adapter-commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", "sift": "^17.1.3" }, "devDependencies": { - "@feathersjs/adapter-tests": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/adapter-tests": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", diff --git a/packages/mongodb/CHANGELOG.md b/packages/mongodb/CHANGELOG.md index 76cdeff721..8c1ba44138 100644 --- a/packages/mongodb/CHANGELOG.md +++ b/packages/mongodb/CHANGELOG.md @@ -3,6 +3,13 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- **mongodb:** Ensure arbitrary objects can't be passed as MongoDB ids ([#3664](https://github.com/feathersjs/feathers/issues/3664)) ([163e664](https://github.com/feathersjs/feathers/commit/163e664f231a57041034c852b80525fc5c8cf68d)) +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/mongodb diff --git a/packages/mongodb/package.json b/packages/mongodb/package.json index 4ce69fb147..a312967b9e 100644 --- a/packages/mongodb/package.json +++ b/packages/mongodb/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/mongodb", "description": "Feathers MongoDB service adapter", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "keywords": [ @@ -51,19 +51,19 @@ "access": "public" }, "dependencies": { - "@feathersjs/adapter-commons": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41" + "@feathersjs/adapter-commons": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42" }, "peerDependencies": { "mongodb": "^6.19.0" }, "devDependencies": { - "@feathersjs/adapter-tests": "^5.0.41", - "@feathersjs/schema": "^5.0.41", + "@feathersjs/adapter-tests": "^5.0.42", + "@feathersjs/schema": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "mongodb-memory-server": "^11.0.1", "shx": "^0.4.0", diff --git a/packages/mongodb/src/adapter.ts b/packages/mongodb/src/adapter.ts index ddce4075bc..eec0ba869a 100644 --- a/packages/mongodb/src/adapter.ts +++ b/packages/mongodb/src/adapter.ts @@ -86,6 +86,9 @@ export class MongoDbAdapter< const { $select, $sort, $limit: _limit, $skip = 0, ...query } = (params.query || {}) as AdapterQuery const $limit = getLimit(_limit, options.paginate) if (id !== null) { + if (typeof id !== 'string' && typeof id !== 'number' && !(id instanceof ObjectId)) { + throw new BadRequest(`Invalid id '${JSON.stringify(id)}'`) + } query.$and = (query.$and || []).concat({ [this.id]: this.getObjectId(id) }) diff --git a/packages/mongodb/test/index.test.ts b/packages/mongodb/test/index.test.ts index 5d3d2f6fc5..e9f01ab1e7 100644 --- a/packages/mongodb/test/index.test.ts +++ b/packages/mongodb/test/index.test.ts @@ -839,6 +839,50 @@ describe('Feathers MongoDB Service', () => { }) }) + describe('NoSQL injection via object id', () => { + let target: Person + + beforeEach(async () => { + target = await app.service('people').create({ name: 'Target' }) + }) + + afterEach(async () => { + try { + await app.service('people').remove(target._id) + } catch (e: unknown) {} + }) + + it('rejects object as id in get', async () => { + await assert.rejects(() => app.service('people').get({ $ne: null } as any), { + name: 'BadRequest' + }) + }) + + it('rejects object as id in remove', async () => { + await assert.rejects(() => app.service('people').remove({ $ne: null } as any), { + name: 'BadRequest' + }) + }) + + it('rejects object as id in update', async () => { + await assert.rejects(() => app.service('people').update({ $ne: null } as any, { name: 'Hacked' }), { + name: 'BadRequest' + }) + }) + + it('rejects object as id in patch', async () => { + await assert.rejects(() => app.service('people').patch({ $ne: null } as any, { name: 'Hacked' }), { + name: 'BadRequest' + }) + }) + + it('rejects regex operator as id', async () => { + await assert.rejects(() => app.service('people').get({ $regex: '^' } as any), { + name: 'BadRequest' + }) + }) + }) + testSuite(app, errors, 'people', '_id') testSuite(app, errors, 'people-customid', 'customid') }) diff --git a/packages/rest-client/CHANGELOG.md b/packages/rest-client/CHANGELOG.md index e561873686..52a0e41ac6 100644 --- a/packages/rest-client/CHANGELOG.md +++ b/packages/rest-client/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) ### Bug Fixes diff --git a/packages/rest-client/package.json b/packages/rest-client/package.json index 1bf97a5a0b..0328222bdb 100644 --- a/packages/rest-client/package.json +++ b/packages/rest-client/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/rest-client", "description": "REST client services for different Ajax libraries", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -53,21 +53,21 @@ "access": "public" }, "dependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", "@types/superagent": "^8.1.9", "qs": "^6.15.0" }, "devDependencies": { - "@feathersjs/express": "^5.0.41", - "@feathersjs/memory": "^5.0.41", - "@feathersjs/tests": "^5.0.41", + "@feathersjs/express": "^5.0.42", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/tests": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "@types/node-fetch": "^2.6.13", "@types/qs": "^6.14.0", - "axios": "^1.13.5", + "axios": "^1.13.6", "mocha": "^11.7.5", "node-fetch": "^2.6.1", "rxjs": "^7.8.2", diff --git a/packages/schema/CHANGELOG.md b/packages/schema/CHANGELOG.md index 68d2f0227f..1264e51864 100644 --- a/packages/schema/CHANGELOG.md +++ b/packages/schema/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/schema diff --git a/packages/schema/package.json b/packages/schema/package.json index 7ae0c72e8b..4d277ea696 100644 --- a/packages/schema/package.json +++ b/packages/schema/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/schema", "description": "A common data schema definition format", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -54,20 +54,20 @@ "access": "public" }, "dependencies": { - "@feathersjs/adapter-commons": "^5.0.41", - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/adapter-commons": "^5.0.42", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", "@feathersjs/hooks": "^0.9.0", "@types/json-schema": "^7.0.15", - "ajv": "^8.17.1", + "ajv": "^8.18.0", "ajv-formats": "^3.0.1", "json-schema-to-ts": "^3.1.1" }, "devDependencies": { - "@feathersjs/memory": "^5.0.41", + "@feathersjs/memory": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "ajv-formats": "^3.0.1", "mocha": "^11.7.5", "shx": "^0.4.0", diff --git a/packages/socketio-client/CHANGELOG.md b/packages/socketio-client/CHANGELOG.md index 59024c7744..bd617ed8dd 100644 --- a/packages/socketio-client/CHANGELOG.md +++ b/packages/socketio-client/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/socketio-client diff --git a/packages/socketio-client/package.json b/packages/socketio-client/package.json index d0f54f1c20..dfbfb76668 100644 --- a/packages/socketio-client/package.json +++ b/packages/socketio-client/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/socketio-client", "description": "The client for Socket.io through feathers-socketio", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -54,16 +54,16 @@ "access": "public" }, "dependencies": { - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41" + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42" }, "devDependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/memory": "^5.0.41", - "@feathersjs/socketio": "^5.0.41", - "@feathersjs/tests": "^5.0.41", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/socketio": "^5.0.42", + "@feathersjs/tests": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "socket.io-client": "^4.8.3", diff --git a/packages/socketio/CHANGELOG.md b/packages/socketio/CHANGELOG.md index da4de18d4e..f02f579ace 100644 --- a/packages/socketio/CHANGELOG.md +++ b/packages/socketio/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/socketio diff --git a/packages/socketio/package.json b/packages/socketio/package.json index 39e733eac4..8e6c59d1c3 100644 --- a/packages/socketio/package.json +++ b/packages/socketio/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/socketio", "description": "The Feathers Socket.io real-time API provider", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -53,17 +53,17 @@ "access": "public" }, "dependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", - "@feathersjs/transport-commons": "^5.0.41", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", + "@feathersjs/transport-commons": "^5.0.42", "socket.io": "^4.8.3" }, "devDependencies": { - "@feathersjs/express": "^5.0.41", - "@feathersjs/memory": "^5.0.41", - "@feathersjs/tests": "^5.0.41", + "@feathersjs/express": "^5.0.42", + "@feathersjs/memory": "^5.0.42", + "@feathersjs/tests": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "lodash": "^4.17.23", "mocha": "^11.7.5", "shx": "^0.4.0", diff --git a/packages/tests/CHANGELOG.md b/packages/tests/CHANGELOG.md index b096b64b48..ecf4e15174 100644 --- a/packages/tests/CHANGELOG.md +++ b/packages/tests/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/tests diff --git a/packages/tests/package.json b/packages/tests/package.json index ec7a664503..5e6a348a6c 100644 --- a/packages/tests/package.json +++ b/packages/tests/package.json @@ -2,7 +2,7 @@ "name": "@feathersjs/tests", "private": true, "description": "Feathers core module common tests", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -44,14 +44,14 @@ "access": "public" }, "dependencies": { - "@types/lodash": "^4.17.23", - "axios": "^1.13.5", + "@types/lodash": "^4.17.24", + "axios": "^1.13.6", "lodash": "^4.17.23" }, "devDependencies": { - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/feathers": "^5.0.42", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", diff --git a/packages/transport-commons/CHANGELOG.md b/packages/transport-commons/CHANGELOG.md index 4ce1d8b35a..42dec14d89 100644 --- a/packages/transport-commons/CHANGELOG.md +++ b/packages/transport-commons/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) ### Bug Fixes diff --git a/packages/transport-commons/package.json b/packages/transport-commons/package.json index 67a0b17dd0..ace2d68eb3 100644 --- a/packages/transport-commons/package.json +++ b/packages/transport-commons/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/transport-commons", "description": "Shared functionality for websocket providers", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -54,17 +54,17 @@ "*.js" ], "dependencies": { - "@feathersjs/commons": "^5.0.41", - "@feathersjs/errors": "^5.0.41", - "@feathersjs/feathers": "^5.0.41", + "@feathersjs/commons": "^5.0.42", + "@feathersjs/errors": "^5.0.42", + "@feathersjs/feathers": "^5.0.42", "encodeurl": "^2.0.0", "lodash": "^4.17.23" }, "devDependencies": { "@types/encodeurl": "^1.0.3", - "@types/lodash": "^4.17.23", + "@types/lodash": "^4.17.24", "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "ts-node": "^10.9.2", diff --git a/packages/typebox/CHANGELOG.md b/packages/typebox/CHANGELOG.md index d106e24175..1edb442df1 100644 --- a/packages/typebox/CHANGELOG.md +++ b/packages/typebox/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. +## [5.0.42](https://github.com/feathersjs/feathers/compare/v5.0.41...v5.0.42) (2026-03-04) + +### Bug Fixes + +- Update dependencies ([#3666](https://github.com/feathersjs/feathers/issues/3666)) ([477bf45](https://github.com/feathersjs/feathers/commit/477bf45f9c9dbde77a14a07828aa02300de23ae7)) + ## [5.0.41](https://github.com/feathersjs/feathers/compare/v5.0.40...v5.0.41) (2026-02-19) **Note:** Version bump only for package @feathersjs/typebox diff --git a/packages/typebox/package.json b/packages/typebox/package.json index 93937e2d88..98b57aa048 100644 --- a/packages/typebox/package.json +++ b/packages/typebox/package.json @@ -1,7 +1,7 @@ { "name": "@feathersjs/typebox", "description": "TypeBox integration for @feathersjs/schema", - "version": "5.0.41", + "version": "5.0.42", "homepage": "https://feathersjs.com", "main": "lib/", "types": "lib/", @@ -54,12 +54,12 @@ "access": "public" }, "dependencies": { - "@feathersjs/schema": "^5.0.41", + "@feathersjs/schema": "^5.0.42", "@sinclair/typebox": "^0.25.0" }, "devDependencies": { "@types/mocha": "^10.0.10", - "@types/node": "^25.3.0", + "@types/node": "^25.3.3", "mocha": "^11.7.5", "shx": "^0.4.0", "typescript": "^5.9.3"