v1.9.0

@jaredwray/mockhttp@1.9.0 — 2026-08-19

Stable indexed response-format templates, plus security hardening and dependency refreshes.

Features

• add stable response format output via optional template index (#181)

  # Same index → byte-identical JSON. Omit the index for the previous random pick.
  curl http://localhost:3000/json/1
  curl http://localhost:3000/html/1
  curl http://localhost:3000/json/99
  # → 404 {"error":"Template index must be between 1 and 5"}

Bug Fixes

• clone JSON template per request to protect stable output (#181)

Internal

• assert trailing-slash index requests fail loudly with 404 (#181)
• land security docs through zizmor (#182)
• stage npm publishes instead of publishing live (#190)
• gate staged publishes on Aikido scan-release (#191)
• prefer tilde ranges for runtime deps (#192)
• record repository lockdown (#193)
• remove set-cookie-parser override (#194)
• remove @ungap/structured-clone override (#195)
• remove glob override (#196)
• upgrade @biomejs/biome 2.5.3 → 2.5.8 (#197)
• upgrade TypeScript 6.0.3 → 7.0.2, tsdown 0.22.2 → 0.22.14, tsx 4.23.0 → 4.23.12, @swc/core 1.15.43 → 1.15.47 (#198)
• upgrade package manager pnpm 11.20.0 → 11.21.0 (#200)
• upgrade fastify 5.10.0 → 5.11.3, @fastify/cookie, @fastify/rate-limit, @fastify/static, @fastify/swagger, @fastify/swagger-ui (#201)
• upgrade @scalar/api-reference 1.62.5 → 1.64.1 (#202)
• upgrade hookified 3.0.1 → 3.0.2 (#203)
• prefer caret ranges over tilde (#204)
• pin Docker Node.js runtime image to node:24.19.0-alpine3.24 (#205)

Contributors

• @jaredwray (15)

Full List of Changes

• feat: add stable response format output via optional template index by @jaredwray in #181
• mockhttp - chore: defense - land security docs through zizmor by @jaredwray in #182
• mockhttp - chore: defense - stage npm publishes instead of publishing live by @jaredwray in #190
• mockhttp - chore: defense - gate staged publishes on Aikido scan-release by @jaredwray in #191
• mockhttp - chore: defense - prefer tilde ranges for runtime deps by @jaredwray in #192
• mockhttp - chore: defense - record repository lockdown by @jaredwray in #193
• root - chore: remove set-cookie-parser override by @jaredwray in #194
• root - chore: remove @ungap/structured-clone override by @jaredwray in #195
• root - chore: remove glob override by @jaredwray in #196
• root - chore: upgrade code quality dependencies by @jaredwray in #197
• root - chore: upgrade TypeScript and build tooling by @jaredwray in #198
• root - chore: upgrade package manager by @jaredwray in #200
• root - chore: upgrade fastify dependencies by @jaredwray in #201
• root - chore: upgrade @scalar/api-reference by @jaredwray in #202
• root - chore: upgrade hookified by @jaredwray in #203
• root - chore: defense - prefer caret ranges over tilde by @jaredwray in #204
• root - chore: upgrade Docker Node.js runtime image by @jaredwray in #205

Full diff: v1.8.1...v1.9.0