v6.3.3

Patch Release

• Update crypto library, CryptoJS CVE & deprecation #9350 by @cannikin

  See https://community.redwoodjs.com/t/dbauth-security-release/5507.

• Conditionally guarantee cell success data #9037 by @pvenable

  The CellSuccessData type is typed as though all query fields are guaranteed. When there are multiple fields, this typing isn't accurate since there only needs to be one populated field to render Success. We can't know ahead of time that any particular field is guaranteed. This fix continues to guarantee CellSuccessData as before when there's only one field, but now the query data type will be left as-is when there's more than one. This brings the types more in-line with the actual runtime behavior of Cells.

• fix(fastify): Don't fallback to index html if requesting static assets #9272 by @dac09

  If requesting an asset (e.g. .js, .jpeg, .ico) that doesn't exist, the Redwood server's not found handler responded with the index.html file. This response is meant for routes that haven't been prerendered, and is an SPA fallback. Because the 200 response here can get cached, it can lead to problems. The change here makes the server return a 404 instead, mainly to prevent caching.

• fix(babel): Improved message for error relating to multiple files ending in Page.{js,jsx,ts,tsx} in page directories #9329 by @Josh-Walker-GM

  If you had multiple files ending in Page.{...} (like HomePage.tsx, useHomePage.tsx) in a web-side page directory (like web/src/pages/HomePage), the Router tried to import both files as HomePage, basically redeclaring a variable, resulting in a cryptic error. This PR improves the error message by telling you which files the Router tried to import.

• fix(cli): Tailwind setup updates scaffold.css when needed #9290 by @Josh-Walker-GM

  Redwood's scaffold generator detects if you have Tailwind CSS setup and changes the contents of scaffold.css accordingly. But if you generate a scaffold before setting up Tailwind, the yarn rw setup ui tailwind command wasn't smart enough to ask you if you wanted to update the scaffold.css file too. Now it prompts you for you preference.

• fix(babel): Fix opentelemetry api wrapping and allow it to be disabled #9298 by @Josh-Walker-GM

  Some projects fail to build when OpenTelemetry is enabled because the babel plugin which automatically wraps api side functions failed to handle some syntax cases. In those cases the transpiled syntax would be invalid javascript. This fix expands the syntax cases the plugin can handle, and reworks the error handling: we now bail out and do not modify the users source code rather than transpile into nonsense syntax.

• fix(server-file): prefix MODULE_NOT_FOUND with ERR_ #9372 by @jtoar

  The @redwoodjs/graphql-server package takes some cues from the presence of an experimental file, api/src/server.ts. If that file exists, @redwoodjs/graphql-server tries to import the @redwoodjs/realtime package. The import is wrapped in a try-catch because realtime is something you opt into. But there was a bug in the conditional in the try-catch block: if you require a module and it's not found, it'll throw MODULE_NOT_FOUND while await import throws ERR_MODULE_NOT_FOUND. We were checking for the wrong error code.

• Fix suggested code snippet #9288 by @pepicrft

  Redwood's auth setup commands include codeblocks you can copy-paste into your project's redwood.toml file for ease. This one was missing some trailing commas that added friction to copy-pasting.

• Cell generator: Fix formatting in template #9301 by @Tobbe

  A simple formatting fix for Cells so you don't get red squiggles out of the box.