diff --git a/CHANGELOG.md b/CHANGELOG.md index 9c6262fe..1367c757 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,11 @@ +# 1.1.24 - 31 Oct 2024 +Security: +- [#891](https://github.com/elysiajs/elysia/pull/891) Upgrade Cookie to 0.7.x to fix CVE-2024-47764 + +Bug fix: +- [#885](https://github.com/elysiajs/elysia/pull/885) unwrap transform errors +- [#903](https://github.com/elysiajs/elysia/pull/903) typebox object schemas without properties key + # 1.1.23 - 22 Oct 2024 Bug fix: - Handle object with `.then` even if it's not promise (looking at you, Drizzle) diff --git a/bun.lockb b/bun.lockb index 21c57f9b..e2b98afd 100755 Binary files a/bun.lockb and b/bun.lockb differ diff --git a/package.json b/package.json index 57ae838b..01f143a0 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "elysia", "description": "Ergonomic Framework for Human", - "version": "1.1.23", + "version": "1.1.24", "author": { "name": "saltyAom", "url": "https://github.com/SaltyAom", @@ -104,14 +104,14 @@ }, "dependencies": { "@sinclair/typebox": "0.32.34", - "cookie": "^0.7.0", + "cookie": "^1.0.1", "fast-decode-uri-component": "^1.0.1", "openapi-types": "^12.1.3" }, "devDependencies": { "@types/benchmark": "^2.1.5", "@types/bun": "^1.1.2", - "@types/cookie": "^0.6.0", + "@types/cookie": "^1.0.0", "@typescript-eslint/eslint-plugin": "^6.17.0", "@typescript-eslint/parser": "^6.17.0", "benchmark": "^2.1.4",