fix: Run defaults in the trusted context.#1825
Merged
Merged
Conversation
joist-codegen
joist-core
joist-graphql-codegen
joist-graphql-resolver-utils
joist-knex
joist-migration-utils
joist-orm
joist-test-utils
joist-utils
commit: |
So they're not treated as user-driven writes.
stephenh
force-pushed
the
fix/trusted-defaults
branch
from
b23cc3d to
e2daad0
Compare
stephenh
added a commit
that referenced
this pull request
May 18, 2026
Includes since the last stable release: - fix: Do not use em.entityLimit for m2m rows. (#1773) - chore(deps): bump picomatch from 2.3.1 to 2.3.2 (#1769) - chore(deps): bump astro from 5.16.6 to 5.18.1 (#1771) - chore(deps): bump brace-expansion from 1.1.12 to 1.1.13 (#1777) - chore(deps): bump smol-toml from 1.5.2 to 1.6.1 (#1768) - chore(deps): bump fast-xml-parser from 4.5.4 to 4.5.5 (#1767) - fix: Fix lock file. (#1778) - fix: Add more limit checks. (#1775) - chore(deps): bump ajv from 8.17.1 to 8.18.0 (#1738) - chore(deps): bump defu from 6.1.4 to 6.1.6 (#1780) - chore(deps): bump lodash-es from 4.17.23 to 4.18.1 (#1779) - chore(deps): bump handlebars from 4.7.8 to 4.7.9 (#1772) - chore(deps): bump diff from 4.0.2 to 4.0.4 (#1709) - chore(deps): bump vite from 6.4.1 to 6.4.2 (#1782) - fix: Refactor ReactiveReference to state machine. (#1774) - fix: order m2m preload results by join-row id (#1784) - fix: Reactive hint subtype matching (#1785) - fix: stable m2m collection order across processes (#1786) - feat: Add hasAsyncQueryProperty for non-persisted queries. (#1781) - feat!: Rename hasAsyncProperty to hasProperty (#1789) - feat: Switch to using codemod version numbers. (#1791) - fix: Fix bug in AsyncProperty rename codemod. (#1794) - chore(deps): bump postcss from 8.5.3 to 8.5.10 (#1793) - fix: load hints should only be used for the correct subtypes (#1795) - fix: Run codemods against src/ by default. (#1796) - fix: avoid stack overflow in BatchLoader.loadAll on huge key arrays (#1798) - chore: Add test for o2o/em.load soft deletes. (#1801) - fix: Fix readonly m2m rules still firing. (#1800) - feat: Use EXISTS for multi-collection joins. (#1743) - fix: Fix deleted_at conditions throwing of fanout detection. (#1803) - fix: Rewrite sibling ORs into EXISTS. (#1804) - fix: Keep plugin-injected CTE joins. (#1805) - fix: Less aggressive OR rewriting. (#1806) - fix: Code cleanup. (#1807) - fix: Don't rewrite to EXISTS if used by GROUP BY. (#1808) - fix: Don't rewrite child.id.eq(null) into EXISTS. (#1809) - fix: Rewrite another joins. (#1810) - fix: Find alias usages in aggregate selects. (#1811) - fix: Fix another missing from. (#1812) - fix: Add optimizeJoinsToExists opt-out. (#1813) - fix: Maintain OUTER JOIN semantics with children. (#1814) - fix: Fix OR anti-joins in m2m tables. (#1815) - fix: Mark aliases used by the EXISTS correlation as used. (#1816) - fix: Rewrite ORs with mixed ordinary/collection aliases. (#1817) - fix: Fix reactions on updatedAt. (#1818) - feat: Add soft-delete resurrection. (#1802) - fix: Only resurrect inside findExistingIfUniqueBy. (#1821) - fix: Let upsert duplicates still fail. (#1822) - feat: Rename AsyncQueryProperty/ReactiveQueryField. (#1819) - feat: Add before/afterValidate hooks. (#1820) - docs: Add next badge. - fix: Fix row_to_json(alias) getting pruned. (#1824) - fix: Run defaults in the trusted context. (#1825) - docs: Bump astro. (#1828) - chore(deps): bump fast-uri from 3.0.6 to 3.1.2 (#1823) - fix: Fix ReactiveReferences not being recalculated. (#1830) - chore: Bump dependencies. (#1829) - chore(deps): bump devalue from 5.8.0 to 5.8.1 (#1831) - fix: Run docs md files through prettier. (#1832)
stephenh
pushed a commit
that referenced
this pull request
May 18, 2026
# [2.2.0](v2.1.0...v2.2.0) (2026-05-18) ### Bug Fixes * Add more limit checks. ([#1775](#1775)) ([86ce0bb](86ce0bb)) * Add optimizeJoinsToExists opt-out. ([#1813](#1813)) ([0305d3f](0305d3f)) * avoid stack overflow in BatchLoader.loadAll on huge key arrays ([#1798](#1798)) ([46fe4b0](46fe4b0)) * Code cleanup. ([#1807](#1807)) ([dd7aed3](dd7aed3)) * Do not use em.entityLimit for m2m rows. ([#1773](#1773)) ([467a448](467a448)) * Don't rewrite child.id.eq(null) into EXISTS. ([#1809](#1809)) ([0beced8](0beced8)) * Don't rewrite to EXISTS if used by GROUP BY. ([#1808](#1808)) ([90be2a2](90be2a2)) * Find alias usages in aggregate selects. ([#1811](#1811)) ([817296a](817296a)) * Fix another missing from. ([#1812](#1812)) ([404ef61](404ef61)) * Fix bug in AsyncProperty rename codemod. ([#1794](#1794)) ([7b2d7d7](7b2d7d7)) * Fix deleted_at conditions throwing of fanout detection. ([#1803](#1803)) ([76e2bc7](76e2bc7)) * Fix lock file. ([#1778](#1778)) ([c0a8389](c0a8389)) * Fix OR anti-joins in m2m tables. ([#1815](#1815)) ([03494bb](03494bb)) * Fix reactions on updatedAt. ([#1818](#1818)) ([d96ff03](d96ff03)) * Fix ReactiveReferences not being recalculated. ([#1830](#1830)) ([f79ae08](f79ae08)) * Fix readonly m2m rules still firing. ([#1800](#1800)) ([5cfffda](5cfffda)) * Fix row_to_json(alias) getting pruned. ([#1824](#1824)) ([5502f5e](5502f5e)) * Keep plugin-injected CTE joins. ([#1805](#1805)) ([1bfc119](1bfc119)) * Less aggressive OR rewriting. ([#1806](#1806)) ([56aaf1c](56aaf1c)) * Let upsert duplicates still fail. ([#1822](#1822)) ([d14d749](d14d749)) * load hints should only be used for the correct subtypes ([#1795](#1795)) ([78d422e](78d422e)) * Maintain OUTER JOIN semantics with children. ([#1814](#1814)) ([d496ddc](d496ddc)) * Mark aliases used by the EXISTS correlation as used. ([#1816](#1816)) ([f20fc07](f20fc07)) * Only resurrect inside findExistingIfUniqueBy. ([#1821](#1821)) ([a86c05d](a86c05d)) * order m2m preload results by join-row id ([#1784](#1784)) ([29892c6](29892c6)) * Reactive hint subtype matching ([#1785](#1785)) ([f282ae5](f282ae5)) * Refactor ReactiveReference to state machine. ([#1774](#1774)) ([77cbb1f](77cbb1f)) * Rewrite another joins. ([#1810](#1810)) ([ba3b99b](ba3b99b)) * Rewrite ORs with mixed ordinary/collection aliases. ([#1817](#1817)) ([272ac7a](272ac7a)) * Rewrite sibling ORs into EXISTS. ([#1804](#1804)) ([679c089](679c089)) * Run codemods against src/ by default. ([#1796](#1796)) ([3a96419](3a96419)) * Run defaults in the trusted context. ([#1825](#1825)) ([2bec9e6](2bec9e6)) * Run docs md files through prettier. ([#1832](#1832)) ([fd012d6](fd012d6)) * stable m2m collection order across processes ([#1786](#1786)) ([e1c4b5a](e1c4b5a)) ### Features * Add before/afterValidate hooks. ([#1820](#1820)) ([cf615e4](cf615e4)) * Add hasAsyncQueryProperty for non-persisted queries. ([#1781](#1781)) ([8eb5e8b](8eb5e8b)) * Add soft-delete resurrection. ([#1802](#1802)) ([24e71c5](24e71c5)) * Rename AsyncQueryProperty/ReactiveQueryField. ([#1819](#1819)) ([6b7279a](6b7279a)) * Switch to using codemod version numbers. ([#1791](#1791)) ([85b9c04](85b9c04)) * Use EXISTS for multi-collection joins. ([#1743](#1743)) ([c7cd8ce](c7cd8ce))
Collaborator
Author
|
🎉 This PR is included in version 2.2.0 🎉 The release is available on:
Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
So they're not treated as user-driven writes.