hyperdx/packages/api/package.json

101 lines
3.8 KiB
JSON
Raw Normal View History

2023-09-13 03:08:05 +00:00
{
"name": "@hyperdx/api",
"version": "2.21.0",
2023-09-13 03:08:05 +00:00
"license": "MIT",
"private": true,
"engines": {
"node": ">=22.16.0"
2023-09-13 03:08:05 +00:00
},
"dependencies": {
"@ai-sdk/anthropic": "^3.0.58",
"@esm2cjs/p-queue": "^7.3.0",
"@hyperdx/common-utils": "^0.16.0",
migration: migrate to Pino (logger) (#1269) Summary Migrates the HyperDX API and related services from Winston to Pino for standardized, faster, and more structured logging with improved OpenTelemetry integration. Changes Core Migration - Replaced Winston with Pino across all logging infrastructure - Upgraded @hyperdx/node-opentelemetry from v0.8.2 to v0.9.0 to support Pino transport - Removed deprecated dependencies: - winston and express-winston - @opentelemetry/host-metrics and @opentelemetry/sdk-metrics (consolidated into newer OTel SDK) - Added new dependencies: - pino and pino-http for core logging - pino-pretty for development console output Logger Configuration (packages/api/src/utils/logger.ts) Production: - Outputs stringified JSON to stdout via pino/file transport - Maintains HyperDX transport integration when API key is configured - Includes full OpenTelemetry trace context (trace_id, span_id, trace_flags) <img width="830" height="184" alt="Screenshot 2025-10-14 at 4 31 36 PM" src="https://github.com/user-attachments/assets/82e60919-5c4d-4688-a6f5-d54632aef749" /> Development: - Uses pino-pretty for human-readable, colorized console output - Hides verbose fields from console: pid, hostname, trace_id, span_id, trace_flags - HTTP request/response objects excluded from logs via custom serializers <img width="825" height="350" alt="image" src="https://github.com/user-attachments/assets/64b293d8-bc95-4715-931a-dbf73483d247" /> HTTP Logging: - Replaced express-winston with pino-http - Custom log levels based on HTTP status codes (warn for 4xx, error for 5xx+) - Simplified log messages: HTTP {method} {url} Error Logging Updates Updated error logging patterns throughout the codebase to follow Pino's structured logging conventions: // Before (Winston) logger.error('Error message:', error); // After (Pino) logger.error({ err: error }, 'Error message'); Ref: HDX-2588 This PR should also address issue: https://github.com/hyperdxio/hyperdx/issues/1035
2025-10-15 17:15:46 +00:00
"@hyperdx/node-opentelemetry": "^0.9.0",
"@hyperdx/passport-local-mongoose": "^9.0.1",
"@opentelemetry/api": "^1.8.0",
"@opentelemetry/host-metrics": "^0.35.5",
"@opentelemetry/sdk-metrics": "^1.30.1",
"@slack/webhook": "^7.0.0",
"@types/node": "^22.15.18",
"ai": "^6.0.116",
"aws4": "^1.13.2",
2025-10-07 18:47:10 +00:00
"chrono-node": "^2.9.0",
2023-09-13 03:08:05 +00:00
"compression": "^1.7.4",
"concurrently": "^9.1.2",
2023-09-13 03:08:05 +00:00
"connect-mongo": "^4.6.0",
"cors": "^2.8.5",
"cron": "^4.3.1",
2023-09-13 03:08:05 +00:00
"date-fns": "^2.28.0",
chore(deps): bump express from 4.18.2 to 4.19.2 (#352) Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2. e notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/releases">express's releases</a>.</em></p> <blockquote> <h2>4.19.2</h2> <h2>What's Changed</h2> <ul> <li><a href="https://github.com/expressjs/express/commit/0b746953c4bd8e377123527db11f9cd866e39f94">Improved fix for open redirect allow list bypass</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/4.19.1...4.19.2">https://github.com/expressjs/express/compare/4.19.1...4.19.2</a></p> <h2>4.19.1</h2> <h2>What's Changed</h2> <ul> <li>Fix ci after location patch by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5552">expressjs/express#5552</a></li> <li>fixed un-edited version in history.md for 4.19.0 by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5556">expressjs/express#5556</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/4.19.0...4.19.1">https://github.com/expressjs/express/compare/4.19.0...4.19.1</a></p> <h2>4.19.0</h2> <h2>What's Changed</h2> <ul> <li>fix typo in release date by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5527">expressjs/express#5527</a></li> <li>docs: nominating <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> to be project captian by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5511">expressjs/express#5511</a></li> <li>docs: loosen TC activity rules by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5510">expressjs/express#5510</a></li> <li>Add note on how to update docs for new release by <a href="https://github.com/crandmck"><code>@​crandmck</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5541">expressjs/express#5541</a></li> <li><a href="https://redirect.github.com/expressjs/express/pull/5551/commits/660ccf5fa33dd0baab069e5c8ddd9ffe7d8bbff1">Prevent open redirect allow list bypass due to encodeurl</a></li> <li>Release 4.19.0 by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5551">expressjs/express#5551</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/crandmck"><code>@​crandmck</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/express/pull/5541">expressjs/express#5541</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/4.18.3...4.19.0">https://github.com/expressjs/express/compare/4.18.3...4.19.0</a></p> <h2>4.18.3</h2> <h2>Main Changes</h2> <ul> <li>Fix routing requests without method</li> <li>deps: body-parser@1.20.2 <ul> <li>Fix strict json error message on Node.js 19+</li> <li>deps: content-type@~1.0.5</li> <li>deps: raw-body@2.5.2</li> </ul> </li> </ul> <h2>Other Changes</h2> <ul> <li>Use https: protocol instead of deprecated git: protocol by <a href="https://github.com/vcsjones"><code>@​vcsjones</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5032">expressjs/express#5032</a></li> <li>build: Node.js@16.18 and Node.js@18.12 by <a href="https://github.com/abenhamdine"><code>@​abenhamdine</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5034">expressjs/express#5034</a></li> <li>ci: update actions/checkout to v3 by <a href="https://github.com/armujahid"><code>@​armujahid</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5027">expressjs/express#5027</a></li> <li>test: remove unused function arguments in params by <a href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5124">expressjs/express#5124</a></li> <li>Remove unused originalIndex from acceptParams by <a href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5119">expressjs/express#5119</a></li> <li>Fixed typos by <a href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5117">expressjs/express#5117</a></li> <li>examples: remove unused params by <a href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5113">expressjs/express#5113</a></li> <li>fix: parameter str is not described in JSDoc by <a href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5130">expressjs/express#5130</a></li> <li>fix: typos in History.md by <a href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5131">expressjs/express#5131</a></li> <li>build : add Node.js@19.7 by <a href="https://github.com/abenhamdine"><code>@​abenhamdine</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5028">expressjs/express#5028</a></li> <li>test: remove unused function arguments in params by <a href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5137">expressjs/express#5137</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/blob/master/History.md">express's changelog</a>.</em></p> <blockquote> <h1>4.19.2 / 2024-03-25</h1> <ul> <li>Improved fix for open redirect allow list bypass</li> </ul> <h1>4.19.1 / 2024-03-20</h1> <ul> <li>Allow passing non-strings to res.location with new encoding handling checks</li> </ul> <h1>4.19.0 / 2024-03-20</h1> <ul> <li>Prevent open redirect allow list bypass due to encodeurl</li> <li>deps: cookie@0.6.0</li> </ul> <h1>4.18.3 / 2024-02-29</h1> <ul> <li>Fix routing requests without method</li> <li>deps: body-parser@1.20.2 <ul> <li>Fix strict json error message on Node.js 19+</li> <li>deps: content-type@~1.0.5</li> <li>deps: raw-body@2.5.2</li> </ul> </li> <li>deps: cookie@0.6.0 <ul> <li>Add <code>partitioned</code> option</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/express/commit/04bc62787be974874bc1467b23606c36bc9779ba"><code>04bc627</code></a> 4.19.2</li> <li><a href="https://github.com/expressjs/express/commit/da4d763ff6ba9df6dbd8f1f0b1d05412dda934d5"><code>da4d763</code></a> Improved fix for open redirect allow list bypass</li> <li><a href="https://github.com/expressjs/express/commit/4f0f6cc67d531431c096ea006c2191b92931bbc3"><code>4f0f6cc</code></a> 4.19.1</li> <li><a href="https://github.com/expressjs/express/commit/a003cfab034fbadb1c78ae337ee8ab389adda217"><code>a003cfa</code></a> Allow passing non-strings to res.location with new encoding handling checks f...</li> <li><a href="https://github.com/expressjs/express/commit/a1fa90fcea7d8e844e1c9938ad095d62669c3abd"><code>a1fa90f</code></a> fixed un-edited version in history.md for 4.19.0</li> <li><a href="https://github.com/expressjs/express/commit/11f2b1db227fd42c2508c427032c1ec671b306be"><code>11f2b1d</code></a> build: fix build due to inconsistent supertest behavior in older versions</li> <li><a href="https://github.com/expressjs/express/commit/084e36506a18774f85206a65d8da04dc1107fc1b"><code>084e365</code></a> 4.19.0</li> <li><a href="https://github.com/expressjs/express/commit/0867302ddbde0e9463d0564fea5861feb708c2dd"><code>0867302</code></a> Prevent open redirect allow list bypass due to encodeurl</li> <li><a href="https://github.com/expressjs/express/commit/567c9c665d0de4c344b8e160146050770233783c"><code>567c9c6</code></a> Add note on how to update docs for new release (<a href="https://redirect.github.com/expressjs/express/issues/5541">#5541</a>)</li> <li><a href="https://github.com/expressjs/express/commit/69a4cf2819c4449ec6ea45649691fb43a528d5d1"><code>69a4cf2</code></a> deps: cookie@0.6.0</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/express/compare/4.18.2...4.19.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~wesleytodd">wesleytodd</a>, a new releaser for express since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=express&package-manager=npm_and_yarn&previous-version=4.18.2&new-version=4.19.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hyperdxio/hyperdx/network/alerts). </details>
2024-03-29 01:26:44 +00:00
"express": "^4.19.2",
2023-09-13 03:08:05 +00:00
"express-rate-limit": "^6.7.1",
"express-session": "^1.17.3",
"handlebars": "^4.7.8",
"http-graceful-shutdown": "^3.1.13",
build(deps): bump http-proxy-middleware from 3.0.3 to 3.0.5 (#879) Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) from 3.0.3 to 3.0.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/chimurai/http-proxy-middleware/releases">http-proxy-middleware's releases</a>.</em></p> <blockquote> <h2>v3.0.5</h2> <h2>What's Changed</h2> <ul> <li>fix(fixRequestBody): check readableLength by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1096">chimurai/http-proxy-middleware#1096</a></li> <li>chore(package): v3.0.5 by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1098">chimurai/http-proxy-middleware#1098</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/chimurai/http-proxy-middleware/compare/v3.0.4...v3.0.5">https://github.com/chimurai/http-proxy-middleware/compare/v3.0.4...v3.0.5</a></p> <h2>v3.0.4</h2> <h2>What's Changed</h2> <ul> <li>chore(package): bump dev dependencies by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1045">chimurai/http-proxy-middleware#1045</a></li> <li>chore(package): update yarn.lock by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1046">chimurai/http-proxy-middleware#1046</a></li> <li>docs(readme): fix example code syntax error by <a href="https://github.com/17hz"><code>@​17hz</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1014">chimurai/http-proxy-middleware#1014</a></li> <li>chore(package): bump express to v4.21.1 by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1047">chimurai/http-proxy-middleware#1047</a></li> <li>chore(examples): update yarn.lock by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1048">chimurai/http-proxy-middleware#1048</a></li> <li>chore(package): bump dev deps by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1059">chimurai/http-proxy-middleware#1059</a></li> <li>chore(package): bump dev dependencies by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1060">chimurai/http-proxy-middleware#1060</a></li> <li>chore(package): bump dev dependencies by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1074">chimurai/http-proxy-middleware#1074</a></li> <li>ci(github-actions): pipeline improvements by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1082">chimurai/http-proxy-middleware#1082</a></li> <li>feat(types): export Plugin type by <a href="https://github.com/oktapodia"><code>@​oktapodia</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1071">chimurai/http-proxy-middleware#1071</a></li> <li>fix(fixRequestBody): support multipart/form-data by <a href="https://github.com/JS-mark"><code>@​JS-mark</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/896">chimurai/http-proxy-middleware#896</a></li> <li>chore(package.json): bump dev deps by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1083">chimurai/http-proxy-middleware#1083</a></li> <li>ci(package): patch http-proxy by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1084">chimurai/http-proxy-middleware#1084</a></li> <li>ci(pkg-pr-new): publish package for testing purposes by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1085">chimurai/http-proxy-middleware#1085</a></li> <li>build(patch-package): run patch-package in 'development' only by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1086">chimurai/http-proxy-middleware#1086</a></li> <li>chore(examples): update next deps by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1087">chimurai/http-proxy-middleware#1087</a></li> <li>ci(github-actions): update spellcheck config by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1088">chimurai/http-proxy-middleware#1088</a></li> <li>fix(websocket): handle errors in handleUpgrade by <a href="https://github.com/nwalters512"><code>@​nwalters512</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/823">chimurai/http-proxy-middleware#823</a></li> <li>fix(fixRequestBody): prevent multiple .write() calls by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1089">chimurai/http-proxy-middleware#1089</a></li> <li>fix(fixRequestBody): handle invalid request by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1092">chimurai/http-proxy-middleware#1092</a></li> <li>docs(CHANGELOG): update changelog by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1093">chimurai/http-proxy-middleware#1093</a></li> <li>chore(package): v3.0.4 by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1095">chimurai/http-proxy-middleware#1095</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/17hz"><code>@​17hz</code></a> made their first contribution in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1014">chimurai/http-proxy-middleware#1014</a></li> <li><a href="https://github.com/oktapodia"><code>@​oktapodia</code></a> made their first contribution in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1071">chimurai/http-proxy-middleware#1071</a></li> <li><a href="https://github.com/JS-mark"><code>@​JS-mark</code></a> made their first contribution in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/896">chimurai/http-proxy-middleware#896</a></li> <li><a href="https://github.com/nwalters512"><code>@​nwalters512</code></a> made their first contribution in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/823">chimurai/http-proxy-middleware#823</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/chimurai/http-proxy-middleware/compare/v3.0.3...v3.0.4">https://github.com/chimurai/http-proxy-middleware/compare/v3.0.3...v3.0.4</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/chimurai/http-proxy-middleware/blob/master/CHANGELOG.md">http-proxy-middleware's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/chimurai/http-proxy-middleware/releases/tag/v3.0.5">v3.0.5</a></h2> <ul> <li>fix(fixRequestBody): check readableLength (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1096">#1096</a>)</li> </ul> <h2><a href="https://github.com/chimurai/http-proxy-middleware/releases/tag/v3.0.4">v3.0.4</a></h2> <ul> <li>fix(fixRequestBody): handle invalid request (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1092">#1092</a>)</li> <li>fix(fixRequestBody): prevent multiple .write() calls (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1089">#1089</a>)</li> <li>fix(websocket): handle errors in handleUpgrade (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/823">#823</a>)</li> <li>ci(package): patch http-proxy (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1084">#1084</a>)</li> <li>fix(fixRequestBody): support multipart/form-data (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/896">#896</a>)</li> <li>feat(types): export Plugin type (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1071">#1071</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/d3851ed0075298ea2477d4221809f5875781b66f"><code>d3851ed</code></a> chore(package): v3.0.5 (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1098">#1098</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/1bdccbeec243850f1d2bb50ea0ff2151e725d67e"><code>1bdccbe</code></a> fix(fixRequestBody): check readableLength (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1096">#1096</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/01934d33b157b2d49f7099a18ceec165e7502040"><code>01934d3</code></a> chore(package): v3.0.4 (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1095">#1095</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/3364c0ab41644187bdd9b9666c86922fd68e2dd0"><code>3364c0a</code></a> docs(CHANGELOG): update changelog (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1093">#1093</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/bd3c1243d0d9642748a1ab9df4f44917b68ad131"><code>bd3c124</code></a> fix(fixRequestBody): handle invalid request (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1092">#1092</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/020976044d113fc0bcbbaf995e91d05e2829a145"><code>0209760</code></a> fix(fixRequestBody): prevent multiple .write() calls (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1089">#1089</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/fd0f5682510f4636ae115896f475310229b9b6e7"><code>fd0f568</code></a> fix(websocket): handle errors in handleUpgrade (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/823">#823</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/e94087e8d072c0c54a6c3a6b050c590a92921482"><code>e94087e</code></a> ci(github-actions): update spellcheck config (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1088">#1088</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/397748a06d9d9cdb62c64f9b9148e4c1427d71e5"><code>397748a</code></a> chore(examples): update next deps (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1087">#1087</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/6fb6032f678243022cf2960abf26711775ed3720"><code>6fb6032</code></a> build(patch-package): run patch-package in 'development' only (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1086">#1086</a>)</li> <li>Additional commits viewable in <a href="https://github.com/chimurai/http-proxy-middleware/compare/v3.0.3...v3.0.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=http-proxy-middleware&package-manager=npm_and_yarn&previous-version=3.0.3&new-version=3.0.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hyperdxio/hyperdx/network/alerts). </details> Co-authored-by: Aaron Knudtson <87577305+knudtty@users.noreply.github.com>
2025-06-09 17:13:29 +00:00
"http-proxy-middleware": "^3.0.5",
2023-09-13 03:08:05 +00:00
"jsonwebtoken": "^9.0.0",
chore(deps): bump lodash from 4.17.21 to 4.17.23 (#1641) Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lodash/lodash/commit/dec55b7a3b382da075e2eac90089b4cd00a26cbb"><code>dec55b7</code></a> Bump main to v4.17.23 (<a href="https://redirect.github.com/lodash/lodash/issues/6088">#6088</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/19c9251b3631d7cf220b43bc757eb33f1084f117"><code>19c9251</code></a> fix: setCacheHas JSDoc return type should be boolean (<a href="https://redirect.github.com/lodash/lodash/issues/6071">#6071</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/b5e672995ae26929d111a6e94589f8d03fb8e578"><code>b5e6729</code></a> jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (<a href="https://redirect.github.com/lodash/lodash/issues/6062">#6062</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/edadd452146f7e4bad4ea684e955708931d84d81"><code>edadd45</code></a> Prevent prototype pollution on baseUnset function</li> <li><a href="https://github.com/lodash/lodash/commit/4879a7a7d0a4494b0e83c7fa21bcc9fc6e7f1a6d"><code>4879a7a</code></a> doc: fix autoLink function, conversion of source links (<a href="https://redirect.github.com/lodash/lodash/issues/6056">#6056</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/9648f692b0fc7c2f6a7a763d754377200126c2e8"><code>9648f69</code></a> chore: remove <code>yarn.lock</code> file (<a href="https://redirect.github.com/lodash/lodash/issues/6053">#6053</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/dfa407db0bf5b200f2c7a9e4f06830ceaf074be9"><code>dfa407d</code></a> ci: remove legacy configuration files (<a href="https://redirect.github.com/lodash/lodash/issues/6052">#6052</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/156e1965ae78b121a88f81178ab81632304e8d64"><code>156e196</code></a> feat: add renovate setup (<a href="https://redirect.github.com/lodash/lodash/issues/6039">#6039</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/933e1061b8c344d3fc742cdc400175d5ffc99bce"><code>933e106</code></a> ci: add pipeline for Bun (<a href="https://redirect.github.com/lodash/lodash/issues/6023">#6023</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/072a807ff7ad8ffc7c1d2c3097266e815d138e20"><code>072a807</code></a> docs: update links related to Open JS Foundation (<a href="https://redirect.github.com/lodash/lodash/issues/5968">#5968</a>)</li> <li>Additional commits viewable in <a href="https://github.com/lodash/lodash/compare/4.17.21...4.17.23">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lodash&package-manager=npm_and_yarn&previous-version=4.17.21&new-version=4.17.23)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hyperdxio/hyperdx/network/alerts). </details>
2026-02-24 18:59:44 +00:00
"lodash": "^4.17.23",
2023-09-13 03:08:05 +00:00
"minimist": "^1.2.7",
"mongodb": "^6.15.0",
"mongoose": "^6.13.8",
2023-09-13 03:08:05 +00:00
"ms": "^2.1.3",
build(deps): bump on-headers from 1.0.2 to 1.1.0 (#1006) [//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [on-headers](https://github.com/jshttp/on-headers) from 1.0.2 to 1.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jshttp/on-headers/releases">on-headers's releases</a>.</em></p> <blockquote> <h2>1.1.0</h2> <h2>Important</h2> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2025-7339">CVE-2025-7339</a> (<a href="https://github.com/jshttp/on-headers/security/advisories/GHSA-76c9-3jph-rj3q">GHSA-76c9-3jph-rj3q</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>Migrate CI pipeline to GitHub actions by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/jshttp/on-headers/pull/12">jshttp/on-headers#12</a></li> <li>fix README.md badges by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/jshttp/on-headers/pull/13">jshttp/on-headers#13</a></li> <li>add OSSF scorecard action by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/jshttp/on-headers/pull/14">jshttp/on-headers#14</a></li> <li>fix: use <code>ubuntu-latest</code> as ci runner by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/on-headers/pull/19">jshttp/on-headers#19</a></li> <li>ci: apply OSSF Scorecard security best practices by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/on-headers/pull/20">jshttp/on-headers#20</a></li> <li>👷 add upstream change detection by <a href="https://github.com/ctcpip"><code>@​ctcpip</code></a> in <a href="https://redirect.github.com/jshttp/on-headers/pull/31">jshttp/on-headers#31</a></li> <li>✨ add script to update known hashes by <a href="https://github.com/ctcpip"><code>@​ctcpip</code></a> in <a href="https://redirect.github.com/jshttp/on-headers/pull/32">jshttp/on-headers#32</a></li> <li>💚 update CI - add newer node versions by <a href="https://github.com/ctcpip"><code>@​ctcpip</code></a> in <a href="https://redirect.github.com/jshttp/on-headers/pull/33">jshttp/on-headers#33</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/carpasse"><code>@​carpasse</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/on-headers/pull/12">jshttp/on-headers#12</a></li> <li><a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/on-headers/pull/19">jshttp/on-headers#19</a></li> <li><a href="https://github.com/ctcpip"><code>@​ctcpip</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/on-headers/pull/31">jshttp/on-headers#31</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jshttp/on-headers/compare/v1.0.2...v1.1.0">https://github.com/jshttp/on-headers/compare/v1.0.2...v1.1.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jshttp/on-headers/blob/master/HISTORY.md">on-headers's changelog</a>.</em></p> <blockquote> <h1>1.1.0 / 2025-07-17</h1> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2025-7339">CVE-2025-7339</a> (<a href="https://github.com/jshttp/on-headers/security/advisories/GHSA-76c9-3jph-rj3q">GHSA-76c9-3jph-rj3q</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jshttp/on-headers/commit/4b017af88f5375bbdf3ad2ee732d2c122e4f52b0"><code>4b017af</code></a> 1.1.0</li> <li><a href="https://github.com/jshttp/on-headers/commit/b636f2d08e6c1e0a784b53a13cd61e05c09bb118"><code>b636f2d</code></a> ♻️ refactor header array code</li> <li><a href="https://github.com/jshttp/on-headers/commit/3e2c2d46c3e9592f6a1c3a3a1dbe622401f95d39"><code>3e2c2d4</code></a> ✨ ignore falsy header keys, matching node behavior</li> <li><a href="https://github.com/jshttp/on-headers/commit/172eb41b99a5a290b27a2c43fe602ca33aa1c8ce"><code>172eb41</code></a> ✨ support duplicate headers</li> <li><a href="https://github.com/jshttp/on-headers/commit/c6e384908c9c6127d18831d16ab0bd96e1231867"><code>c6e3849</code></a> 🔒️ fix array handling</li> <li><a href="https://github.com/jshttp/on-headers/commit/6893518341bb4e5363285df086b3158302d3b216"><code>6893518</code></a> 💚 update CI - add newer node versions</li> <li><a href="https://github.com/jshttp/on-headers/commit/56a345d82b51a0dcb8d09f061f87b1fd1dc4c01e"><code>56a345d</code></a> ✨ add script to update known hashes</li> <li><a href="https://github.com/jshttp/on-headers/commit/175ab217155d525371a5416ff059f895a3a532a6"><code>175ab21</code></a> 👷 add upstream change detection (<a href="https://redirect.github.com/jshttp/on-headers/issues/31">#31</a>)</li> <li><a href="https://github.com/jshttp/on-headers/commit/ce0b2c8fcd313d38d3534fb731050dc16e105bf6"><code>ce0b2c8</code></a> ci: apply OSSF Scorecard security best practices (<a href="https://redirect.github.com/jshttp/on-headers/issues/20">#20</a>)</li> <li><a href="https://github.com/jshttp/on-headers/commit/1a38c543e75cd06217b449531de10b1758e35299"><code>1a38c54</code></a> fix: use <code>ubuntu-latest</code> as ci runner (<a href="https://redirect.github.com/jshttp/on-headers/issues/19">#19</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jshttp/on-headers/compare/v1.0.2...v1.1.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~ulisesgascon">ulisesgascon</a>, a new releaser for on-headers since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=on-headers&package-manager=npm_and_yarn&previous-version=1.0.2&new-version=1.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hyperdxio/hyperdx/network/alerts). </details>
2025-09-08 15:49:09 +00:00
"on-headers": "^1.1.0",
chore(deps): bump passport from 0.5.3 to 0.6.0 (#305) Bumps [passport](https://github.com/jaredhanson/passport) from 0.5.3 to 0.6.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jaredhanson/passport/blob/master/CHANGELOG.md">passport's changelog</a>.</em></p> <blockquote> <h2>[0.6.0] - 2022-05-20</h2> <h3>Added</h3> <ul> <li><code>authenticate()</code>, <code>req#login</code>, and <code>req#logout</code> accept a <code>keepSessionInfo: true</code> option to keep session information after regenerating the session.</li> </ul> <h3>Changed</h3> <ul> <li><code>req#login()</code> and <code>req#logout()</code> regenerate the the session and clear session information by default.</li> <li><code>req#logout()</code> is now an asynchronous function and requires a callback function as the last argument.</li> </ul> <h3>Security</h3> <ul> <li>Improved robustness against session fixation attacks in cases where there is physical access to the same system or the application is susceptible to cross-site scripting (XSS).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jaredhanson/passport/commit/c33067bc5aa81a6dd827076d810bf788bb6acac7"><code>c33067b</code></a> 0.6.0</li> <li><a href="https://github.com/jaredhanson/passport/commit/3052bb4717673b88a27981f6bc91a1f585889e5c"><code>3052bb4</code></a> Update changelog.</li> <li><a href="https://github.com/jaredhanson/passport/commit/42630cbd1ffd44d146ff96f0a4be6f3c12f81d75"><code>42630cb</code></a> Merge pull request <a href="https://redirect.github.com/jaredhanson/passport/issues/900">#900</a> from jaredhanson/fix-fixation</li> <li><a href="https://github.com/jaredhanson/passport/commit/8dd79fe5f3f414435c4e0561fc925fb7ab6c8efb"><code>8dd79fe</code></a> Use utils-merge rather than Object.assign for compatibility.</li> <li><a href="https://github.com/jaredhanson/passport/commit/4f6bd5b254454d3f61c3236e8f1dd33472704fd3"><code>4f6bd5b</code></a> Change keepSessionData to keepSessionData.</li> <li><a href="https://github.com/jaredhanson/passport/commit/46756e56db671a822490f3d6c103a33a6691047d"><code>46756e5</code></a> Silence verbose logging.</li> <li><a href="https://github.com/jaredhanson/passport/commit/987b1918a2c5056531bbd325a2ff888a3595b2df"><code>987b191</code></a> Add tests.</li> <li><a href="https://github.com/jaredhanson/passport/commit/f8a175f1145c4efdffa7e4c511a642f608e11c0f"><code>f8a175f</code></a> Add tests.</li> <li><a href="https://github.com/jaredhanson/passport/commit/29a90d68dd5d4bc807bc658cfe49fba968b34d7d"><code>29a90d6</code></a> No need to guard callback existence.</li> <li><a href="https://github.com/jaredhanson/passport/commit/bfba8a1ab44b658f745e33e3484b389f0751cdc0"><code>bfba8a1</code></a> Add tests.</li> <li>Additional commits viewable in <a href="https://github.com/jaredhanson/passport/compare/v0.5.3...v0.6.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=passport&package-manager=npm_and_yarn&previous-version=0.5.3&new-version=0.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hyperdxio/hyperdx/network/alerts). </details> Co-authored-by: Warren <5959690+wrn14897@users.noreply.github.com>
2024-03-14 17:38:15 +00:00
"passport": "^0.6.0",
2023-09-13 03:08:05 +00:00
"passport-local": "^1.0.0",
migration: migrate to Pino (logger) (#1269) Summary Migrates the HyperDX API and related services from Winston to Pino for standardized, faster, and more structured logging with improved OpenTelemetry integration. Changes Core Migration - Replaced Winston with Pino across all logging infrastructure - Upgraded @hyperdx/node-opentelemetry from v0.8.2 to v0.9.0 to support Pino transport - Removed deprecated dependencies: - winston and express-winston - @opentelemetry/host-metrics and @opentelemetry/sdk-metrics (consolidated into newer OTel SDK) - Added new dependencies: - pino and pino-http for core logging - pino-pretty for development console output Logger Configuration (packages/api/src/utils/logger.ts) Production: - Outputs stringified JSON to stdout via pino/file transport - Maintains HyperDX transport integration when API key is configured - Includes full OpenTelemetry trace context (trace_id, span_id, trace_flags) <img width="830" height="184" alt="Screenshot 2025-10-14 at 4 31 36 PM" src="https://github.com/user-attachments/assets/82e60919-5c4d-4688-a6f5-d54632aef749" /> Development: - Uses pino-pretty for human-readable, colorized console output - Hides verbose fields from console: pid, hostname, trace_id, span_id, trace_flags - HTTP request/response objects excluded from logs via custom serializers <img width="825" height="350" alt="image" src="https://github.com/user-attachments/assets/64b293d8-bc95-4715-931a-dbf73483d247" /> HTTP Logging: - Replaced express-winston with pino-http - Custom log levels based on HTTP status codes (warn for 4xx, error for 5xx+) - Simplified log messages: HTTP {method} {url} Error Logging Updates Updated error logging patterns throughout the codebase to follow Pino's structured logging conventions: // Before (Winston) logger.error('Error message:', error); // After (Pino) logger.error({ err: error }, 'Error message'); Ref: HDX-2588 This PR should also address issue: https://github.com/hyperdxio/hyperdx/issues/1035
2025-10-15 17:15:46 +00:00
"pino": "^10.0.0",
"pino-http": "^11.0.0",
"promised-handlebars": "^2.0.1",
"protobufjs": "^7.5.2",
build(deps): bump semver from 5.7.1 to 7.7.3 (#1702) Bumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 7.7.3. Sourced from <a href="https://github.com/npm/node-semver/releases">semver's releases</a>.</em></p> <blockquote> <h2>v7.7.3</h2> <h2><a href="https://github.com/npm/node-semver/compare/v7.7.2...v7.7.3">7.7.3</a> (2025-10-06)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/e37e0ca0b5fc910d2b1948d25dbc83cc3a0921ea"><code>e37e0ca</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/813">#813</a> faster paths for compare (<a href="https://redirect.github.com/npm/node-semver/issues/813">#813</a>) (<a href="https://github.com/H4ad"><code>@​H4ad</code></a>)</li> <li><a href="https://github.com/npm/node-semver/commit/2471d7543e2e63d9d95358e2405e7e1cde926c36"><code>2471d75</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/811">#811</a> x-range build metadata support (i529015)</li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/8f05c87f56a4123259b8c6d9324f53eadb02e48f"><code>8f05c87</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/807">#807</a> bump <code>@​npmcli/template-oss</code> from 4.25.0 to 4.25.1 (<a href="https://redirect.github.com/npm/node-semver/issues/807">#807</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot], <a href="https://github.com/owlstronaut"><code>@​owlstronaut</code></a>)</li> </ul> <h2>v7.7.2</h2> <h2><a href="https://github.com/npm/node-semver/compare/v7.7.1...v7.7.2">7.7.2</a> (2025-05-12)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/fcafb61ed566ff8ccf24818dd94b76738f037aa4"><code>fcafb61</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/780">#780</a> add missing <code>'use strict'</code> directives (<a href="https://redirect.github.com/npm/node-semver/issues/780">#780</a>) (<a href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a>)</li> <li><a href="https://github.com/npm/node-semver/commit/c99f336fa3bdff465652f9041eab2127d2f52eb2"><code>c99f336</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/781">#781</a> prerelease identifier starting with digits (<a href="https://redirect.github.com/npm/node-semver/issues/781">#781</a>) (<a href="https://github.com/mbtools"><code>@​mbtools</code></a>)</li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/c760403b935d3ad35f83e9bbe5ebe1badef2fc71"><code>c760403</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/784">#784</a> template-oss-apply for workflow permissions (<a href="https://redirect.github.com/npm/node-semver/issues/784">#784</a>) (<a href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li> <li><a href="https://github.com/npm/node-semver/commit/2677f2a88334b0e728dbfe9ad9f5f57458437c87"><code>2677f2a</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/778">#778</a> bump <code>@​npmcli/template-oss</code> from 4.23.6 to 4.24.3 (<a href="https://redirect.github.com/npm/node-semver/issues/778">#778</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot], <a href="https://github.com/npm-cli-bot"><code>@​npm-cli-bot</code></a>)</li> </ul> <h2>v7.7.1</h2> <h2><a href="https://github.com/npm/node-semver/compare/v7.7.0...v7.7.1">7.7.1</a> (2025-02-03)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/af761c05bd53eef83b5e20f8b09360b0e70557dc"><code>af761c0</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/764">#764</a> inc: fully capture prerelease identifier (<a href="https://redirect.github.com/npm/node-semver/issues/764">#764</a>) (<a href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li> </ul> <h2>v7.7.0</h2> <h2><a href="https://github.com/npm/node-semver/compare/v7.6.3...v7.7.0">7.7.0</a> (2025-01-29)</h2> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/0864b3ce7932667013e0c7c5ec764777d4682883"><code>0864b3c</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/753">#753</a> add &quot;release&quot; inc type (<a href="https://redirect.github.com/npm/node-semver/issues/753">#753</a>) (<a href="https://github.com/mbtools"><code>@​mbtools</code></a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/d588e3782864b1cab2fe9f2452b848e8c7f609d1"><code>d588e37</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/755">#755</a> diff: fix prerelease to stable version diff logic (<a href="https://redirect.github.com/npm/node-semver/issues/755">#755</a>) (<a href="https://github.com/eminberkayd"><code>@​eminberkayd</code></a>, berkay.daglar)</li> <li><a href="https://github.com/npm/node-semver/commit/8a34bdecc783407f4e1a8a1ee1f67906b84a4b78"><code>8a34bde</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/754">#754</a> add identifier validation to <code>inc()</code> (<a href="https://redirect.github.com/npm/node-semver/issues/754">#754</a>) (<a href="https://github.com/mbtools"><code>@​mbtools</code></a>)</li> </ul> <h3>Documentation</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/67e54785a0f871361230f84323cbb631b9b6d834"><code>67e5478</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/756">#756</a> readme: added missing period for consistency (<a href="https://redirect.github.com/npm/node-semver/issues/756">#756</a>) (<a href="https://github.com/shaymolcho"><code>@​shaymolcho</code></a>)</li> <li><a href="https://github.com/npm/node-semver/commit/868d4bbe3d318c52544f38d5f9977a1103e924c2"><code>868d4bb</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/749">#749</a> clarify comment about obsolete prefixes (<a href="https://redirect.github.com/npm/node-semver/issues/749">#749</a>) (<a href="https://github.com/mbtools"><code>@​mbtools</code></a>, <a href="https://github.com/ljharb"><code>@​ljharb</code></a>)</li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/145c554b8c7b7ecfcb451153ad18bdb2f24ad10d"><code>145c554</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/741">#741</a> bump <code>@​npmcli/eslint-config</code> from 4.0.5 to 5.0.0 (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> <li><a href="https://github.com/npm/node-semver/commit/753e02b9d0cb3ac23e085dc33efcab3e08d61f2b"><code>753e02b</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/747">#747</a> bump <code>@​npmcli/template-oss</code> from 4.23.3 to 4.23.4 (<a href="https://redirect.github.com/npm/node-semver/issues/747">#747</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot], <a href="https://github.com/npm-cli-bot"><code>@​npm-cli-bot</code></a>)</li> <li><a href="https://github.com/npm/node-semver/commit/0b812d5fb5fbb208e89dc1250e2efafeaa549437"><code>0b812d5</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/744">#744</a> postinstall for dependabot template-oss PR (<a href="https://github.com/hashtagchris"><code>@​hashtagchris</code></a>)</li> </ul> <h2>v7.6.3</h2> <h2><a href="https://github.com/npm/node-semver/compare/v7.6.2...v7.6.3">7.6.3</a> (2024-07-16)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/73a3d79c4ec32d5dd62c9d5f64e5af7fbdad9ec0"><code>73a3d79</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/726">#726</a> optimize Range parsing and formatting (<a href="https://redirect.github.com/npm/node-semver/issues/726">#726</a>) (<a href="https://github.com/jviide"><code>@​jviide</code></a>)</li> </ul> <h3>Documentation</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/2975ece120e17660c9f1ef517de45c09ff821064"><code>2975ece</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/719">#719</a> fix extra backtick typo (<a href="https://redirect.github.com/npm/node-semver/issues/719">#719</a>) (<a href="https://github.com/stdavis"><code>@​stdavis</code></a>)</li> </ul> <h2>v7.6.2</h2> <h2><a href="https://github.com/npm/node-semver/compare/v7.6.1...v7.6.2">7.6.2</a> (2024-05-09)</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/node-semver/blob/main/CHANGELOG.md">semver's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/node-semver/compare/v7.7.2...v7.7.3">7.7.3</a> (2025-10-06)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/e37e0ca0b5fc910d2b1948d25dbc83cc3a0921ea"><code>e37e0ca</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/813">#813</a> faster paths for compare (<a href="https://redirect.github.com/npm/node-semver/issues/813">#813</a>) (<a href="https://github.com/H4ad"><code>@​H4ad</code></a>)</li> <li><a href="https://github.com/npm/node-semver/commit/2471d7543e2e63d9d95358e2405e7e1cde926c36"><code>2471d75</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/811">#811</a> x-range build metadata support (i529015)</li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/8f05c87f56a4123259b8c6d9324f53eadb02e48f"><code>8f05c87</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/807">#807</a> bump <code>@​npmcli/template-oss</code> from 4.25.0 to 4.25.1 (<a href="https://redirect.github.com/npm/node-semver/issues/807">#807</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot], <a href="https://github.com/owlstronaut"><code>@​owlstronaut</code></a>)</li> </ul> <h2><a href="https://github.com/npm/node-semver/compare/v7.7.1...v7.7.2">7.7.2</a> (2025-05-12)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/fcafb61ed566ff8ccf24818dd94b76738f037aa4"><code>fcafb61</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/780">#780</a> add missing <code>'use strict'</code> directives (<a href="https://redirect.github.com/npm/node-semver/issues/780">#780</a>) (<a href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a>)</li> <li><a href="https://github.com/npm/node-semver/commit/c99f336fa3bdff465652f9041eab2127d2f52eb2"><code>c99f336</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/781">#781</a> prerelease identifier starting with digits (<a href="https://redirect.github.com/npm/node-semver/issues/781">#781</a>) (<a href="https://github.com/mbtools"><code>@​mbtools</code></a>)</li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/c760403b935d3ad35f83e9bbe5ebe1badef2fc71"><code>c760403</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/784">#784</a> template-oss-apply for workflow permissions (<a href="https://redirect.github.com/npm/node-semver/issues/784">#784</a>) (<a href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li> <li><a href="https://github.com/npm/node-semver/commit/2677f2a88334b0e728dbfe9ad9f5f57458437c87"><code>2677f2a</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/778">#778</a> bump <code>@​npmcli/template-oss</code> from 4.23.6 to 4.24.3 (<a href="https://redirect.github.com/npm/node-semver/issues/778">#778</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot], <a href="https://github.com/npm-cli-bot"><code>@​npm-cli-bot</code></a>)</li> </ul> <h2><a href="https://github.com/npm/node-semver/compare/v7.7.0...v7.7.1">7.7.1</a> (2025-02-03)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/af761c05bd53eef83b5e20f8b09360b0e70557dc"><code>af761c0</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/764">#764</a> inc: fully capture prerelease identifier (<a href="https://redirect.github.com/npm/node-semver/issues/764">#764</a>) (<a href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li> </ul> <h2><a href="https://github.com/npm/node-semver/compare/v7.6.3...v7.7.0">7.7.0</a> (2025-01-29)</h2> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/0864b3ce7932667013e0c7c5ec764777d4682883"><code>0864b3c</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/753">#753</a> add &quot;release&quot; inc type (<a href="https://redirect.github.com/npm/node-semver/issues/753">#753</a>) (<a href="https://github.com/mbtools"><code>@​mbtools</code></a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/d588e3782864b1cab2fe9f2452b848e8c7f609d1"><code>d588e37</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/755">#755</a> diff: fix prerelease to stable version diff logic (<a href="https://redirect.github.com/npm/node-semver/issues/755">#755</a>) (<a href="https://github.com/eminberkayd"><code>@​eminberkayd</code></a>, berkay.daglar)</li> <li><a href="https://github.com/npm/node-semver/commit/8a34bdecc783407f4e1a8a1ee1f67906b84a4b78"><code>8a34bde</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/754">#754</a> add identifier validation to <code>inc()</code> (<a href="https://redirect.github.com/npm/node-semver/issues/754">#754</a>) (<a href="https://github.com/mbtools"><code>@​mbtools</code></a>)</li> </ul> <h3>Documentation</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/67e54785a0f871361230f84323cbb631b9b6d834"><code>67e5478</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/756">#756</a> readme: added missing period for consistency (<a href="https://redirect.github.com/npm/node-semver/issues/756">#756</a>) (<a href="https://github.com/shaymolcho"><code>@​shaymolcho</code></a>)</li> <li><a href="https://github.com/npm/node-semver/commit/868d4bbe3d318c52544f38d5f9977a1103e924c2"><code>868d4bb</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/749">#749</a> clarify comment about obsolete prefixes (<a href="https://redirect.github.com/npm/node-semver/issues/749">#749</a>) (<a href="https://github.com/mbtools"><code>@​mbtools</code></a>, <a href="https://github.com/ljharb"><code>@​ljharb</code></a>)</li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/145c554b8c7b7ecfcb451153ad18bdb2f24ad10d"><code>145c554</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/741">#741</a> bump <code>@​npmcli/eslint-config</code> from 4.0.5 to 5.0.0 (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> <li><a href="https://github.com/npm/node-semver/commit/753e02b9d0cb3ac23e085dc33efcab3e08d61f2b"><code>753e02b</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/747">#747</a> bump <code>@​npmcli/template-oss</code> from 4.23.3 to 4.23.4 (<a href="https://redirect.github.com/npm/node-semver/issues/747">#747</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot], <a href="https://github.com/npm-cli-bot"><code>@​npm-cli-bot</code></a>)</li> <li><a href="https://github.com/npm/node-semver/commit/0b812d5fb5fbb208e89dc1250e2efafeaa549437"><code>0b812d5</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/744">#744</a> postinstall for dependabot template-oss PR (<a href="https://github.com/hashtagchris"><code>@​hashtagchris</code></a>)</li> </ul> <h2><a href="https://github.com/npm/node-semver/compare/v7.6.2...v7.6.3">7.6.3</a> (2024-07-16)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/73a3d79c4ec32d5dd62c9d5f64e5af7fbdad9ec0"><code>73a3d79</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/726">#726</a> optimize Range parsing and formatting (<a href="https://redirect.github.com/npm/node-semver/issues/726">#726</a>) (<a href="https://github.com/jviide"><code>@​jviide</code></a>)</li> </ul> <h3>Documentation</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/2975ece120e17660c9f1ef517de45c09ff821064"><code>2975ece</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/719">#719</a> fix extra backtick typo (<a href="https://redirect.github.com/npm/node-semver/issues/719">#719</a>) (<a href="https://github.com/stdavis"><code>@​stdavis</code></a>)</li> </ul> <h2><a href="https://github.com/npm/node-semver/compare/v7.6.1...v7.6.2">7.6.2</a> (2024-05-09)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/6466ba9b540252db405fdd2a289dd4651495beea"><code>6466ba9</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/713">#713</a> lru: use map.delete() directly (<a href="https://redirect.github.com/npm/node-semver/issues/713">#713</a>) (<a href="https://github.com/negezor"><code>@​negezor</code></a>, <a href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li> </ul> <h2><a href="https://github.com/npm/node-semver/compare/v7.6.0...v7.6.1">7.6.1</a> (2024-05-04)</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/node-semver/commit/a25789b09b1192fa8414c35f2cd679ae2e1d5192"><code>a25789b</code></a> chore: release 7.7.3 (<a href="https://redirect.github.com/npm/node-semver/issues/812">#812</a>)</li> <li><a href="https://github.com/npm/node-semver/commit/e37e0ca0b5fc910d2b1948d25dbc83cc3a0921ea"><code>e37e0ca</code></a> fix: faster paths for compare (<a href="https://redirect.github.com/npm/node-semver/issues/813">#813</a>)</li> <li><a href="https://github.com/npm/node-semver/commit/2471d7543e2e63d9d95358e2405e7e1cde926c36"><code>2471d75</code></a> fix: x-range build metadata support</li> <li><a href="https://github.com/npm/node-semver/commit/8f05c87f56a4123259b8c6d9324f53eadb02e48f"><code>8f05c87</code></a> chore: bump <code>@​npmcli/template-oss</code> from 4.25.0 to 4.25.1 (<a href="https://redirect.github.com/npm/node-semver/issues/807">#807</a>)</li> <li><a href="https://github.com/npm/node-semver/commit/d17aebf8485edfe9dda982dab578c603d031e4ab"><code>d17aebf</code></a> chore: bump <code>@​npmcli/template-oss</code> from 4.24.4 to 4.25.0 (<a href="https://redirect.github.com/npm/node-semver/issues/797">#797</a>)</li> <li><a href="https://github.com/npm/node-semver/commit/3b03e3b4ecb28d609cd42a91c10da75ec1254976"><code>3b03e3b</code></a> chore: bump <code>@​npmcli/template-oss</code> from 4.24.3 to 4.24.4 (<a href="https://redirect.github.com/npm/node-semver/issues/790">#790</a>)</li> <li><a href="https://github.com/npm/node-semver/commit/281055e7716ef0415a8826972471331989ede58c"><code>281055e</code></a> chore: release 7.7.2 (<a href="https://redirect.github.com/npm/node-semver/issues/783">#783</a>)</li> <li><a href="https://github.com/npm/node-semver/commit/fcafb61ed566ff8ccf24818dd94b76738f037aa4"><code>fcafb61</code></a> fix: add missing <code>'use strict'</code> directives (<a href="https://redirect.github.com/npm/node-semver/issues/780">#780</a>)</li> <li><a href="https://github.com/npm/node-semver/commit/c760403b935d3ad35f83e9bbe5ebe1badef2fc71"><code>c760403</code></a> chore: template-oss-apply for workflow permissions (<a href="https://redirect.github.com/npm/node-semver/issues/784">#784</a>)</li> <li><a href="https://github.com/npm/node-semver/commit/c99f336fa3bdff465652f9041eab2127d2f52eb2"><code>c99f336</code></a> fix: prerelease identifier starting with digits (<a href="https://redirect.github.com/npm/node-semver/issues/781">#781</a>)</li> <li>Additional commits viewable in <a href="https://github.com/npm/node-semver/compare/v5.7.1...v7.7.3">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for semver since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=semver&package-manager=npm_and_yarn&previous-version=5.7.1&new-version=7.7.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hyperdxio/hyperdx/network/alerts). </details>
2026-03-02 17:47:44 +00:00
"semver": "^7.5.3",
2023-09-13 03:08:05 +00:00
"serialize-error": "^8.1.0",
"uuid": "^8.3.2",
2025-10-07 18:47:10 +00:00
"zod": "3.25",
2023-09-13 03:08:05 +00:00
"zod-express-middleware": "^1.4.0"
},
"devDependencies": {
"@stoplight/spectral-cli": "^6.15.0",
"@types/aws4": "^1",
2023-09-13 03:08:05 +00:00
"@types/compression": "^1.7.3",
"@types/cors": "^2.8.14",
"@types/express": "^4.17.13",
"@types/express-session": "^1.17.7",
"@types/jest": "^28.1.1",
"@types/lodash": "^4.14.198",
"@types/minimist": "^1.2.2",
"@types/ms": "^0.7.31",
"@types/passport-local": "^1.0.34",
"@types/semver": "^7.3.12",
"@types/supertest": "^2.0.12",
"@types/swagger-jsdoc": "^6",
2023-09-13 03:08:05 +00:00
"@types/uuid": "^8.3.4",
2025-02-27 08:07:47 +00:00
"jest": "^28.1.3",
"migrate-mongo": "^11.0.0",
2023-09-13 03:08:05 +00:00
"nodemon": "^2.0.20",
migration: migrate to Pino (logger) (#1269) Summary Migrates the HyperDX API and related services from Winston to Pino for standardized, faster, and more structured logging with improved OpenTelemetry integration. Changes Core Migration - Replaced Winston with Pino across all logging infrastructure - Upgraded @hyperdx/node-opentelemetry from v0.8.2 to v0.9.0 to support Pino transport - Removed deprecated dependencies: - winston and express-winston - @opentelemetry/host-metrics and @opentelemetry/sdk-metrics (consolidated into newer OTel SDK) - Added new dependencies: - pino and pino-http for core logging - pino-pretty for development console output Logger Configuration (packages/api/src/utils/logger.ts) Production: - Outputs stringified JSON to stdout via pino/file transport - Maintains HyperDX transport integration when API key is configured - Includes full OpenTelemetry trace context (trace_id, span_id, trace_flags) <img width="830" height="184" alt="Screenshot 2025-10-14 at 4 31 36 PM" src="https://github.com/user-attachments/assets/82e60919-5c4d-4688-a6f5-d54632aef749" /> Development: - Uses pino-pretty for human-readable, colorized console output - Hides verbose fields from console: pid, hostname, trace_id, span_id, trace_flags - HTTP request/response objects excluded from logs via custom serializers <img width="825" height="350" alt="image" src="https://github.com/user-attachments/assets/64b293d8-bc95-4715-931a-dbf73483d247" /> HTTP Logging: - Replaced express-winston with pino-http - Custom log levels based on HTTP status codes (warn for 4xx, error for 5xx+) - Simplified log messages: HTTP {method} {url} Error Logging Updates Updated error logging patterns throughout the codebase to follow Pino's structured logging conventions: // Before (Winston) logger.error('Error message:', error); // After (Pino) logger.error({ err: error }, 'Error message'); Ref: HDX-2588 This PR should also address issue: https://github.com/hyperdxio/hyperdx/issues/1035
2025-10-15 17:15:46 +00:00
"pino-pretty": "^13.1.1",
2023-09-13 03:08:05 +00:00
"rimraf": "^4.4.1",
"supertest": "^6.3.1",
"swagger-jsdoc": "^6.2.8",
"swagger-ui-express": "^5.0.1",
"ts-jest": "^29.4.5",
2023-09-13 03:08:05 +00:00
"ts-node": "^10.8.1",
"tsc-alias": "^1.8.8",
"tsconfig-paths": "^4.2.0",
"typescript": "^5.9.3"
2023-09-13 03:08:05 +00:00
},
"scripts": {
"start": "node ./build/index.js",
"dev": "DOTENV_CONFIG_PATH=.env.development nodemon --exec 'ts-node' --transpile-only -r tsconfig-paths/register -r dotenv-expand/config -r '@hyperdx/node-opentelemetry/build/src/tracing' ./src/index.ts",
"dev-task": "DOTENV_CONFIG_PATH=.env.development nodemon --exec 'ts-node' --transpile-only -r tsconfig-paths/register -r dotenv-expand/config -r '@hyperdx/node-opentelemetry/build/src/tracing' ./src/tasks/index.ts",
"build": "rimraf ./build && tsc && tsc-alias && cp -r ./src/opamp/proto ./build/opamp/",
2025-08-18 17:16:05 +00:00
"lint": "npx eslint --quiet . --ext .ts",
"lint:fix": "npx eslint . --ext .ts --fix",
"ci:lint": "yarn lint && yarn tsc --noEmit && yarn lint:openapi",
"ci:int": "DOTENV_CONFIG_PATH=.env.test DOTENV_CONFIG_OVERRIDE=true jest --runInBand --ci --forceExit --coverage",
"dev:int": "DOTENV_CONFIG_PATH=.env.test DOTENV_CONFIG_OVERRIDE=true jest --runInBand --forceExit --coverage",
"dev:migrate-db-create": "ts-node node_modules/.bin/migrate-mongo create -f migrate-mongo-config.ts",
"dev:migrate-db": "ts-node node_modules/.bin/migrate-mongo up -f migrate-mongo-config.ts",
"dev:migrate-ch-create": "migrate create -ext sql -dir ./migrations/ch -seq",
"dev:migrate-ch": "migrate -database 'clickhouse://localhost:9000?database=default&x-multi-statement=true' -path ./migrations/ch up",
"docgen": "ts-node scripts/generate-api-docs.ts",
"lint:openapi": "yarn docgen && spectral lint openapi.json"
2023-09-13 03:08:05 +00:00
}
}