Skip to content

chore(deps): bump @comapeo/map-server - #262

Merged
gmaclennan merged 3 commits into
mainfrom
deps/comapeo-map-server-33770038968
Sep 3, 2026
Merged

chore(deps): bump @comapeo/map-server#262
gmaclennan merged 3 commits into
mainfrom
deps/comapeo-map-server-33770038968

Conversation

@awana-pr-bot

@awana-pr-bot awana-pr-bot Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

Automated bump of @comapeo/map-server triggered by its release.

@github-actions github-actions Bot added the dependencies Dependency update (changelog) label Sep 3, 2026
@gmaclennan
gmaclennan enabled auto-merge September 3, 2026 15:00
@socket-security

socket-security Bot commented Sep 3, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​comapeo/​map-server@​2.0.1 ⏵ 3.0.176 +11009997 +2100

View full report

@gmaclennan
gmaclennan added this pull request to the merge queue Sep 3, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Sep 3, 2026
@gmaclennan
gmaclennan added this pull request to the merge queue Sep 3, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Sep 3, 2026
typebox 1.3.25 moved the IDNA code from a single `_idna.mjs` into an
`idna/` directory with the regexes hoisted into a `pattern` module, so the
1.3.8 patch matched nothing. patch-package exits 0 on a failed patch outside
CI, so this went unnoticed and typebox was installed unpatched.

That matters because `typebox/compile`, which `@comapeo/map-server` imports,
statically pulls in the IDN format modules, and a `\p{...}` escape is a
parse-time SyntaxError on a V8 built `--with-intl=none`.

Where the old patch stubbed the affected predicates to `false`, this one
applies a single policy: without Unicode tables, treat every non-ASCII code
point as an ordinary letter. `\p{ASCII}` becomes an exact character range,
`\p{L}` becomes ASCII letters plus everything above U+007F, and the mark and
script tests become `(?!)`. Keeping non-ASCII permitted is what stops `xn--`
labels being rejected, since IsPunyLabel validates the decoded U-label.

Diffing all 21 format guards against pristine over 810 ASCII and punycode
inputs gives no input rejected that upstream accepts, and four accepted that
upstream rejects (punycode labels decoding to non-letter symbols). Real
internationalized names validate identically; `ドメイン・名前.example` is the one
stricter case, as the Japanese middle dot rule needs script tables.
Conflicts in the backend manifest and lockfile. main replaced @mapeo/crypto
1.1.0 with @comapeo/crypto 2.0.0 and bumped @comapeo/core to 7.5.0 for the
master-key cache; this branch bumped @comapeo/map-server to 3.0.1. Took
main's dependency set and kept map-server 3.0.1, then regenerated the
lockfile from main's rather than resolving it by hand.
@gmaclennan
gmaclennan added this pull request to the merge queue Sep 3, 2026
Merged via the queue into main with commit be31734 Sep 3, 2026
24 checks passed
@gmaclennan
gmaclennan deleted the deps/comapeo-map-server-33770038968 branch September 3, 2026 16:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency update (changelog)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant