From 74ba4a5fba9337ace4771b655bad6e0aa492a052 Mon Sep 17 00:00:00 2001 From: Mridul Sharma Date: Tue, 23 Dec 2025 16:00:51 +0530 Subject: [PATCH 1/5] fix: fixed vulneribility --- .talismanrc | 14 -------------- package-lock.json | 18 +++++++++--------- 2 files changed, 9 insertions(+), 23 deletions(-) delete mode 100644 .talismanrc diff --git a/.talismanrc b/.talismanrc deleted file mode 100644 index 21465b1..0000000 --- a/.talismanrc +++ /dev/null @@ -1,14 +0,0 @@ -fileignoreconfig: -- filename: .env.example - checksum: d4a3abad2962917f0d24649c00a516303b496b17e81dd187987bd851a5555862 -- filename: tests/environment.test.ts - checksum: 84e1960765aff963f406d2e1a6560c275186980af6c97b8b7ce6cc0e34c5dac0 -- filename: package-lock.json - checksum: 2ce52e43a6dda25266085878ca8c4afe80adcb282a35aff8a9fe608eb9479fe3 -- filename: src/config.ts - checksum: 35f866d826cf8dc6cc78a79cf864a24889db28cbe673f3f70f61ff010af31c78 -- filename: README.md - checksum: 27505e36b66c5ea20978b97c900f856aaaef590cca7288c05d87933e15516d63 -- filename: src/controllers/index.ts - checksum: c7091843e1cc001269cda74cdc64a87de93165624564dea3c84bc0fac3942f2a -version: "1.0" \ No newline at end of file diff --git a/package-lock.json b/package-lock.json index 87f5e3c..b79a184 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1470,9 +1470,9 @@ } }, "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.14.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", - "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==", + "version": "3.14.2", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz", + "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==", "dev": true, "license": "MIT", "dependencies": { @@ -4869,9 +4869,9 @@ } }, "node_modules/glob": { - "version": "10.4.5", - "resolved": "https://registry.npmjs.org/glob/-/glob-10.4.5.tgz", - "integrity": "sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg==", + "version": "10.5.0", + "resolved": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz", + "integrity": "sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==", "license": "ISC", "dependencies": { "foreground-child": "^3.1.0", @@ -6087,9 +6087,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz", + "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==", "dev": true, "license": "MIT", "dependencies": { From 02d386e9f5777a1f314b6006ad1a894506a6d44f Mon Sep 17 00:00:00 2001 From: Mridul Sharma Date: Mon, 29 Dec 2025 23:23:53 +0530 Subject: [PATCH 2/5] fix: fixed vulneribility --- live-preview-shopify-utils-1.0.0.tgz | Bin 18762 -> 0 bytes package-lock.json | 33 +++++++++++------------ package.json | 4 +-- src/config.ts | 10 +++++++ src/controllers/githubSyncController.ts | 2 +- src/controllers/index.ts | 6 +++-- src/controllers/viewsHealthController.ts | 2 +- src/index.ts | 12 +++++++++ 8 files changed, 45 insertions(+), 24 deletions(-) delete mode 100644 live-preview-shopify-utils-1.0.0.tgz diff --git a/live-preview-shopify-utils-1.0.0.tgz b/live-preview-shopify-utils-1.0.0.tgz deleted file mode 100644 index b52c17d279532d7f57b32551ebb11921426243a1..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 18762 zcmV(J8&8?>$W>c{Ith96t8q$uN2!{FMFSgMU_6S0CQLFMQwOXZ_1B*Tf(0 zJ$Sgfw)XJhD%4wDyMOQAm+0>ea4@I zVKj=*qV!@nc^6I0O8AqXrpdXOMCW2FO#xKXsx9J7q|wi_IE{wQ_D0ci?(JxrMrUz! zzFa?M<*RiQP0r#pnT!E13wtr@UagaG8vi}ISO}l1Ee4&R##z9i#Ulr35Xh2_^;sh5 zZ93`;8^Q2N{Q9eCp62;9>-Tyv2!v1&N)RVaJq8{Q59K7v{~CqED9u{t)QFbEDVMjh*1Jt zJ1S$`T(q}uUP#QtZ>_^Sm*%AO!q0nW_jTfvi{t{22w0HOJ3QXx)ay}U) z;V=`S0HXiv>GulOaqpPs2f;i8#mRyRi9Dw1(msG@~Qf zLgM@sw1tzHg!v?a>7Ir02wAsiMZrnX5%EN1peIG?2+$%79+$NNWN$@s?Ac_1VoD6< z2;UULg6T+o3b;?00+V|UOVKv9F2GPY%Ym;$<0$RWoI2tt4JU(BU_#At7*CpjyGK%P zZzyRaae%rWvU}9~)Bu1nS-44Iea|AJPe2sP{YT=^6#FN{N`OO-d(;|uKMiUQzu<>? z58538_TXt?6PG(NuQj^p8Q6rG1@)U?{qZEy-%sEGB|Zf$x+6;PpCClIbtvHyw+jBUjMS_*V9 z1pTH{<{&LeL2YLROH>gJP5Q=e^8_#}o6isJF>Wy@u!bmF=TUPs0v!opL1SP+qlh$n z)Di^hZf$28lA*w!ehvWCSgnn1b^CM_g%dHG`cZS71+xiYO8#4xz7F)sRegOEFP{xk67kBc8Sxf}Jv; zu4Wl-R%YTp_P7N818QBEx&dH(gzk;}fb>UTRW;8oC z=Vxgox?-H1MREc}4!C-00s=3a9hK+77=k@HMkN@?6n5qisu7)fXQNr7nxarR8j1}xGqz90aBv_`U4vul~t z#_wpW%i*`ZLzRWKqg4PlJnaF|+kS)^ke!yWu;1arY3ifJGuNz^9*N0-QqZ!7Ad=%^ zG;NRAl9kgzX|BddI|_s|WDNlDo!4Tk8h|F~=sg%XxYKF+rHZ&}fK95E5i(V;ZQsm{ zCI#&j4Q$$}YA*S9I<^{v1qgIGn57v=-9Byg4q|>F|FB5S61?88(I|`R`#0o9F@a@! zD1RY>oP^_u0Lqo`hziJamqy=2#9ol6Op^01GUp3FW3jPkk<%3sXtB>XQIej7llT|l znZ`bmGSA|Lhb4E~Vo6)beR9$PJsX0uRvIhWq~s=vUISD~0&7p;A(}z5E=ta00@?>5 zU;+rnAT`31s1OH++wMJq=SZAQ52nlpUM=&nzV+SR_Y3 z0X3123+y4}38+O2QmHM|NgyS6$N)^H*fbnTW6JDEb0V5+cmzv0%Og44(G|M}reZd;eGDZT}>1XlKrV`Q8_~1HG_h=T6a)A~{rlnDPWq}4q zy*MHa3EdrWLFBe>2&3MOP?tCs=dd)OZ=a(%QKh4J%D!&W~kQcGY z;$cjqbR1_HEOzGTp=$7qYqo@7yJGV~%O0FY=%sKWdGrfxhDx<1ZrvGy0Ui*rE>>?k zg8^(%A%bC5Pr`&|74;1{q$<}j>VLQsVUI>SM#c?Wr)JSjrJMu|F0MvCwmt^q@|3B+ zdI;1QmuERzTS_G^5za=H3KmQKE3Q|*yn1nYF=M~_T#8dqXo2TcrEp&tY*}x zH8v>~16~AmUcJt?NhPJ$f`!)LJVUjhKgHcj{Oc-=%b4x>T@~?okZs|28Lb62$+lvL z&Ai~_?qECQ2rWc*NQ{QOpLoKA0;;6roQLTIrXNmFg8MkPZ~mmVc=Z)I*tZ#SKI{Wn zD0*ND2d##C6lSo3ATyO%COL130d(6)S(S+_8565vkb?+RnEW*6<{7j!{kl@Ah*B|% zkE6lG!0^&2|KT**9>UO2T|yo3P`M<#(j|EaEMYnd2T`lH_hZ=oyf}F%S#98Av71ED`8YN{o@(t~8d9z)A2c5>6M23v(nNMN$|YR0@e3;PUh37^lVUtf4K>=%k*6 z)&mhEC`hEJTKvl}IVvm-Ly2a6d3$o40P3XjyeSSvi+{%jRtF4+qA!{P4DI7^Hc~Cy z%?f4IP@&l!S`2y_cP7uyJ?>Cr!Qsv|SVy5mHDBuf<1v~)z@;?Cy4_(k1wvUnw7p(( zI_{1z;rs~zL3@cM_vFVWfO121z9f%5zBbO7+X@=+f zj1yR`cmft&oHs3ks@4xAgR4h7SP#-7oqsI&Ri8P8fuHi0aDy zHg8$PSB;~-~kJ#`HAk<$lJh@RtT**+j26cJ1j?bP+GIQ?C|y1%bl5 z19mrhw}$cYag?I|f%E4r)j}#PQEwYvC0(8#1_V^2^II)uc=V_`GHl=JnfC&)VARgL`iL&)UN;S8wBgK4JXNrRzW}B5VRTDy$s0^IepO>{Q+2 zK)(*gbH1Gpp=|g%O@^~Uj&;E57!9pL-BO+4OB(uZRN!sl^bMinh3OM!P@X|C+oM6_&t364 zjnB{uGJ>^{FJlkL0ogp!rQ~5IuRJj@oX{aK_Ct|?T^vH=KmzV95du!3lOuDX9+ekQ zw%fESz9KJthWf^(d*)j1r|2u5073y-zbL3xwt>daw^5!s>lVYDLNx!umMWuIApiwR zXjC31QHGuqG6B(sl60O4lnMnl3&*$&DOJ$aVTSh{Lt+Ezq&y&NK~P_d2e|RJ<-n>! z^F1?Db8&H7Q&k2;lxtKiKp~*3mr@FA)dL&kq$Xfj5<}W=GejY+SAN-%FF`Cu>_82m z4L@OR7vRwYVUCdKz_WLY856M#OcJhI(h=^e;v=%tzCC%s%Z$VY}lx}2KXA4VXb7)~1Hla14(iSY?Vc}(u7Yq6i z#8Y%{WOmQ&`UskJ1YR0T1&*I%WV^snJQkhig1c0TcLEAuAKnxY@WH91?gr@IWQQVhRNtmx<)7rA9yVe*IJru-FDXsi`UtQnHE$V+@2KV-LRg3J(s8HXap%|3 z6EI2JBCk)=dkw>%v4Mfw0Gc1PdTf8Vgg8sl=-2j%c*tTtN*DR=d#kt&Ga{28yUh``%bZOH51=e$Km9g=GOM89T^&-VYHbUWZ+#0b`$Ou!O zWF>soE~m6-t6UQ%Kl7kwxpwBXrJ*KS_|;;%v>$ufhC0-5fh{*1jW$;PaQpMG_hb2g z9XHu0@&7(peem!>`Tpm<^;`e%C(8fub)I!62?YqQ^zJ%0&yfYHh!~0`lz|u-h|w$u zOHbOKP?qBrY!q90c!JKeFju(;z-CA=!UwrB^@BPwKpoDC=*me*7fi^vMgZ|FdxU(S zt=eWLh8L4?49xK;It|a_B-K7#*+jW**yfyb%aZ+#Jyx2|19#9}==?E(E>FU7& z*1;GdjKDCfw-`!*Qa6AmZQW!Tr?Le_Q^-GC8dke-BJZHDaW*B?6$T%kNU;me?};dB z64hRxlJ8^16n{?(6SKOn!oggG8<+hus>es@nzf>gWw^sDUBNh&&k+}W(UeXG<2vFX z1XAe>d65{i0t7E#J=;3idigyaJU69M8(WtcC6T-iQ*?f0GWw(_Mtg67(WN9KAq*&ZModr9Pc;u#h#so1IdbYKqM(t3wLzjN=l$FD%kCV|bO0NK-mrdg76lhbz+L3=&Tn}0VETWYvfXP3v2Q17o zJud#^dVqMlNkG!Mc`ZPr@FJPz5)l7!O+e&bQFD`jT@RGvpbA*=w+Gz*ijk592`2(2 zQSIDdv`L@I6M4` zx_K;<&&WPGa`uNwvpxT+#}&-zG=@Ldr1Wey9$yG11}S?{=0>arnP;kvB7UU7;T_fF zRG_s?Q7{?LEGwqiY}O6E*aApM#U>ytSyPjj+NsV5k~_grp5HRne=6$bsnn6L?^5a3 zBtvdQaq&}9T+{Fz80>p=YQSo<7MTEIQ=SFszF7seo2W2}9?bMz04X+w^*5|`U)=n* zkhgVdFn`OEiOQyA4^QupWy0!Am;mo@JFi{_Oe(sc1rc=3*H~Y|9B`ZA>xjwmgbhPjH-h@yf~n)$!CN(XY|zRNkFlRURykq#{{J> zwkNRQvBJgT(Jt8Yjba1PeiyAFF*C`x1_{Qn& zWRfUJ72q;>y@Ccqa)lX7(;dDBL3L|GV0b|2Qm6-lRh9shrGrI)pvpDwui-KCnJM>{x`4yI*kL-xFF95u%^^n2uVr-)v1tf5jM>!SY9H)h*jT&CEFCuFPeBw zW3%ZU_TimN*>Ha6vH&;dy?5u*8iW5{g9Id@EVU1_@VH1-ctEJa4LOd6ap-J8+B{s~ z8~r6CurJntF?1xCP=AGZi9bIeEf&57tI8O&0SDGVD)@L=F3OG>1TQ1#E!18KAB+l1iYa%5tC%nRRJVsg1Jhujd02myKjiJ+*Id*srfZ} z-dtgNLMb>&GsQp1@_Q;3WEwMko#`Q2S}>MZn*&9aC)^2vFBuG+UrZ^k>``QWGv$9| zYA|;?HYA2pqJtm-#g`_Bn~xRlayp_KTZ6Few=}p*&`6VMt4(OzfnPGn=`05dymEX=ZUP zX_9?66GpXdW0RN>2PG+m0RpY?FT2WL)^f24N*?s#NwG9|ry{nS8RJ47Rsg$BhPW}q zjPk@q!?xckL9IA{;G@Pg$?}Ha%q@=^y#XMj7Y>IFA)OX#N6a6WRtU6PJz$q|zUpD& zqBgKVvXPVJJ@Ln|F8TjKR#x(TNkMKPj^%Csd z!v#4v2cOA%OSj&GG@-N@-g;~XM(@eUWA5B{E35_Lf6S6xra>Y$)+*q)-P-E`Ma|;P zY&^k3gR$WBGQ>`_c)j85 zJm##}3_S3x(a$su%qQ{>usmKBV+vn>ZsNGaj)6fZ|(gE|NT=NfBzx7+Y0Ws z@AODAZnBVk0_CjMs6+q^?gur>xw1u zf(qPdczs{M$*taqMXRfAA>Wo$NpBlXoJ6z3E&5<7H0bgirTL2Uz$-dU=qvy-9A>N8 zX;!8haprG>m>n?f`B(D6YQRJEkNj?L(bd85_Z z{H(JHG`IJ|d3XO$@JqiPwExsVzb8=aI10h?Zt$jvFcm#9T|O76>Vi(!(TzAwP!z=B zNHlSPO&Xez&g#To)kfurX{VmZtvU|hMVJ&>oQ#qq0E~w<#rDOcN1C3yk1No@`;|t) z2z?}aEk;BeF@amL0zvJbs}7bn2hq2`j&dsNdWwW-90A@Pw@INbK6}KhwJyCMPY6TR z9vNeREnZ25cFQv<2<+zTi<`6ls1lEb=W-n+C+-SPR~zA1JXT`sfwQ5IG@qV^6?&y3 z$@XA!`!GB;((7dowErqx7e4O%!+8M9ey2w%IX^RM6jpqr*{CjTHkvgp`wcID!Bh;e zOES9C2YZdVr-+M8Dw!C??;_NaB>wma5mY5;roW!axPk)`r&VWPB>}F7y0Hjrmlgb) zuD0_%G|4++I+~DI5j*k?dfF+4wpX=S;~q)UZRG# zo4lchzHBXYYEPQ?`}}#Dj9(jCpR4%%H5yF;J4L^k>{0DYH77dg_oZr6HC4ol%-_P% zrFa%KrSMR%1y^v}JX1kR*>n`=t!B{luog-QBBP`q3E2UjNIe;ie5}YwKts}vp}Bxd)RpY2D7M2BV`8Ua17FIc>VOLDr}es zx>4mqQiqU=PVh!h;Sv>5!8~9~pJ1q7E>CzF5pwOS(gmToiYF$Mug)1{2q;%5kQVy} zM2{3Y#3Av(DFF=$nZv;_$|tU#k}k1Ty~l* zvRdej7}b6WQ~UVPcA!u~9DUhFC^?n1o6UnUSN&9y7r$>TV^n!;jB5F=sA`Cn3zs>N z6)JvSQ2rdUQk!$Y)f|=AOxFUkbh6m`Q5c$~U8<~nQb~Q*8MdaCY}V1YB#p(Rr-ONi ziuglcf?%5ZE_`Ri<*3_(M)Iso4XaZ5q2eHSF0L)H0JyBS$wl#M< z*uQ$@4RrWX_Ug$=Aikmb;YCrLffJs_!B_Lc4|tfNW;TmwLfP4QG8AjBZFCBA)CLE# zU(YrnLtha-ShzSv-)8jAaDH{CM=8OApSCE_&4^0EnEjA1IZ+YOcR_{}fv2$}uBSd$Sv;OZXLSNF$L?yx9%S5^C+&Xu`?KEIa`Qc?ql~IT$2E zyjVry3i6WG*5qUqXQy}`lg8r^(=Kwd+)jn)n&Aa)2jJTs4e;$G#x1>*(>0Th^f3&| zO`c)g?#1{h8Nr`-@D0L>J_{LkpyreH#oqp+$~@GVE0=jl$G7gU$Onqℜv2b;lcw zV3*hnB0pBGWD1-FM`AUhZ&fX_C`aYiX`{YYwZd=!y9Ius+LWxBvCxU-QTD|s{VNO$-(YX}D1IP*EU z$2J&>kEsUpIy{Ld_FD+Xkg%vcEc#kY`1l^Hhs5!-OX2vf2G*15v^-1D=^f-wy+W_- zoqm;~Y6B`Bund?7EUH{`m2o}C7jqf3$Pl*t#HxOAghAgx4;#gUxKO9r(OeE9iScFK zjIK|s-k<{!j?Tl2%&?D+K-I$sevUxZJB!jZ9uBeR3o%ArKt5(QP=oO47Cexr`FpQc z5d?vwd~}R!L!P0LdNav=fDG(+n2t<0zG&fV333typ5c<M)Y0=(UX{}@ z+aWdXv(Jjt$tNL2$aAs|(!+9ILuoO76m8rm0D1NZ_{q;8kr3h^XN~Nk)ICq)1 zm&Usp5O=SQxU9Rub()VyH6fGq2CG_$j_$ttW)lLu{v9ish~5aVWs)FskKH&>3RH#+ zbi^)1-^T!v$pE%qzS?@ZTj|AFXe8_0=92WK;T8ybORKp1NoU{%(Sl*zVjfPf!1a}h zC$Xz;6X5-SdGoF#n(cWTxGPUX<`U;;aVpcHS9oTZ@w^UaDZc>j*>W<4d1dN%D63D) zzTnyezfTRUXfmDU&M|hGS|w#Uz7uZieP5#D$s;rF^m5LTr*HUgevlG-KoSIdG}d+* zz0g-3PFq~OlZIxOuRzPRDRo$wO$T9yF?1OoOFb4GJkf%`+CiSY1tLqIhIr4e9+{X& zzYfrglvmUb3WGGC}^HWq<*!JIeqgSO>@j7XbWf@5jgccOTQ+PYXxLjd06kcq&(f_sD`V zg-ZB)LJy9&{!(2YkWP24j<3@z1*#Oi4Wm&!#v}1k7aY){%NMX4V6X@@OaW+dwTpmK zDmf6p^eE(Gi9T0AHOabJnx({VBRIj@Ucw}J@$@L9pjh;I)zW_NFEIN`kvIH zz>w-DvA4Ppuqc?Zem8|nK|{3Ypn>H;OHNPB8i9M6cs+=5GKns5`RM%5b2Bv;;TZiP zo&#X#_Gz5G3}3dmcH4VRqj_gFSY0)42o|>k?_A1;q9@i?i3vWB-$%pNdV9%R#xhY# zF_n%=!}2{6hczwPt2_i&XH`Hy`b!a&WPffVEor!-Zyxh58X(xDg;=JCy~d#{oD87s<7-;5?*a!=aQ`~ozr zzGzNnV2Z{A$1eeNgZC1fUMm-O$K%LtbazpsVN5rv4~{OZmPd3Bx{CW7sQPFz;~9g|F-n}? zKVQ^)N-sk}qY0AyAReQQ4E<93m$UH^RGJj~N!4gCQdgoFW$Xlj;3@_9p*301>UfkS zsnv|W=yquAW}pf!rNTv2Q%m}2f`-T2H``B>@f7&hBqw=QKO_cnkW2;!B=|?`3SWfd z=>};EUo;IB;tT$Sg-v7lJ3#N0Pnjn`?-b^P0EO!8C=>trAOB0gV&dLfs}gOrg=!_l zUJwNE>wbWBTT2Pd*(CmX38=_4cA}gZy{C@k*tC!!whdMw;H7}SaueT5WzV&Z) zAY_%g`CtZ(C1wNF0L#UNfs-izYZMNFHObqv(qqTpq%u|1K&B;&(3KxehOLG?lIdbH z>PAPD6DE0Eh4ilB0o{6qRyB+0Z$6C=-bEK~ONl0GqFjaC68WaYUhzZ)x+Lk^hX1XK zLMP>B=4%&>YeWtF)*>!_c;~VT-}Bzty`F4-K+)yBJD1euyeA(qfDfwk`KFP4;gJK? zAf@>i^6Jq6=T3TrXYq$H7Mi`gjOIG~5Q;B^sT?5Ph8?0B$vGmn1_;qfsb&47IfaGwB^9{A$Fm+C(ua{e= zPj}u&u-08W374XPYtVo-jxsU8w`GapkcJ?&ibadR{PKS=0elDvc!|JI2HKh`EWxno z&m;?Fq+^9m_FdDNh<4$+zIwB!opNnnK>JKq!d0t=)L=5yi5x9B+Bgjv5Ef#Q&(mx> z-y7^~KjDB6Cg+CzKB)69=v=cyjK9K+W_o+fKK@Q9a;VLa#uX#OMA$h0f|Y#$MPHdt zm){cq>J)8KA}!RlDUn)VnG(N^hng6Pm{D3UBFU_vV)dd3eb4|l15MZ_W@(UH?_ufW zm01aDGbjiWu%*hg>ZWuXpNPVSxGDHCBF?v&wd`Uv2vxo!yasSWvsc*@d_8PptjJaf z6h|@M+Hpn)oA2}T3*VteE8e@r{J*VMOt_3U=?wccKE62MWQZ_;w(q0ub9pnF_PrM7<(;DbzXcPBKd|rp+Xhbkr$Al&z8?ZrSkMnOh*994D>D|NFoH`#;1# zEn@y>d6cjz+;28e#-v+kGuT_*-wYILElen4{U#Y+6k#Q@hGabwPx=<%unvkFN{y2=nN1t+d!00lJ#GMF*|(3&+SFG(F|R)IU@+=e-<_CB ztQ2s}q@Q|3l&Wg#-szL8%5OQ!Cld8FyNV|i3817dWB7{p)bOtQl45CCgf$R;L}Jzu zH-m9FZGjNRH+P714;yzbVd@P#@W_C3z*%r;xW>|#>!}N^hkJJ}ixF(9;HPGLzHi-1 zVH)7jGkv(@wKGK?88JF(rSsKVq;Bm#mXXQSm*wgIB zHlhw?Wg(U+q;QaH=G(YZ<{t6|w91WZbRc&CawYS0`$dvWNzTtsPDKQ&ycxG_y&-6` zGI!9()k+ibafwB2rz@{T8gSfMDNu3tErrRFi~)F`Nk4we1+W>U5#`hvL?E@Ty-kLW zhGMHUe0_SwdkI!=Dm%w32VNKhb7S%+qxpi#7#nRfFf2+%(JNMDd3m*2qVnT3 zbVWt3zx5!maAfQ^HUeD2-&okI?&HFGir7nKZo9MQRD+bFl&DOl=9%n)rf}ndSEKuqJldG<@Yd!q{J6@VKJeC|W?uFA&GOz+ZCuP>W(@8}U+Oxa$zPFzpCMevzw8|KCWIPL(N*IHloMjS4KP{ zwCJi3p(a>8;zfd!X^R!!-$IWyuhTBifF*JlaosCw%f=|)L>W|Ete^P@?o*)~jhj@~ zs9UK&l!tvqEn2rqu`NGQ}wGZ>7mF)c!#_TpR2>nduQ8qsFpbug+aUX`uc<1CHPP{ia3I7lOFV`|+?dhb|H z)oSbIq$A5Q(c_ZXvWId7!F60>p2t@eR+<_33^vz(WjnfPQ_5mjHAZ=~DF;bm{O>fb;$V_cczR>0_DJ+df~w2`f=d z;jg)$AjG?UvQMW~nb)3>ae#xN1MJ6W9G;LAuVlRQs#oGvEQB4l?E$)}VSe^G{5>%~3qD(^-B9;a16~D|&s5nfN^C*5WW3;w&mD@iQz9ii}76 z=P9U}H7WaiIbr91I=!T)p!-7i(&1+Wi+ zBs<6}c|SH*ZU8G5E-r6i)Q8e8-76aJi%mQ_nIGQBfQ87yGrVaWZckXjZ?PpXB_HE* z(B$ceUUHAs;4=~m64(sxfEA#p2!AvXSa*<(rj30{akET4WFrkwO&k+tk9!I37)`B) z`c7#hK(ptd(cU)>(*t>m5ZnpmIRb*vD=;@Al#2)_wH%Zon-ZWQLS--zFTh+!X%)@P zAgu~RZmC!;Qtvw|R_Tg{oc#v2j%SvD>7PwA*1(R`Qeji2uQG60Da}>{T7BTz^cpVj z9N>R<7i|@_0wmd;dV2_Szb(9qMN9@r>24qKlzSBS>F1U%MXZZVE z1Yt!iLNSN2!`O`uIJ6XYD6@Ox^-}dDkghAQXK<5ZhD+ARF8FbXavLKh7EzjFH-|cv zg~eO7SQ+-6Jg%e_;iodgo^M#UJl^s^Wr{q++OZoS%dZXTqK+7p&R$V+4sy>8J|h&s z%miqJ=2wp3pQ6+?GNsbTw%RhK5+eamx$HCJy#Qse>HuB2fEGe{cN)h_ds;)-#}g)b zwj$I?h~&5cM|X#TulBGy3>KVPv~`ebOCeZ!8S>6_3raY@OF58HgNo){qoOQ}{e zU5r(oNmOnNR zC{m`^h69aqMF226cZ6=JO*Q1J=P3rm55KpN$0rAJSb!x7#Iyp;c22@kU`e_+GkuMZ zFWH>KZYr0rZ!Du_q*@tYOC0P5AuA`yQu+NXOjm&PvQG=B9#|!iy&Xzl4$|p$is{7S zvuM9{8kZlRQ`gpG^=_R`-bJ|`jS2P*3afDWI8K|TNa9~~EyAJQ;}y4} z3eRwaCqI?qy=CEwRXLW@cb1s)h9#`J$BC%i)KF?jI6S{Vp|z=>ls!~Y*>tqJwqL$B zLt3u;be!$JHlD_`NALH`TTu2jce~YYw_4p+ zt2{ygvQTaq8>l7teEnTXOLPysuAm0iHeIZ4T`sk8OB;1Lo3YArTz2ys>(X`>rc(F1 z)aP|oXqQvBSIzfexfkZhaVZ93xngIwDU$H8AHvqXEt3mqSH-eEt7$p?W0sv65KAP=Q-@7Ivn(iG+n`RY_w zJII<9GNaDzWhx4G=>EFLueG7MpHo>!4!CEDQ1LBCM3vXR)bletK@YWLI#5nc{#Y^y z3OHLvl#Ua_$V~%JT(&H6Q`=Y=H(_tA_{;>u(t6`e$c%J1%&21CXhvB`_;B-S^QP=4 zBlh=qXfTmPRnY<#yO=Ee6D6> zr#s-q;XG@7Co`y?Y@3&sFWk{=51wS5t?WlAri4y*brvi#PDOd0$3pB_*cEak*l_~?xk zJaM0%$FfvQ4-2604)LwnF=f0R46^^b+(;M}YN}tA>4WvoE4J|B9D`Utlsq|q+ctvdxo4>4h3@lFN?%P;f(&$po1%#L~o2YHm`*};K)3JCxD zkoSOU-~UH8)mzJs~UJ#iziI zGgOfEw;6 zE|OV}k6VI%0=-{|b1(qK3^po4l1TtKPaJ}Kk)R@qix6bfi&vAD?52Z{Fr75p0oL7C zud~rpJ*^hAdSp;Okes@@0w@WWg6sMTaf0T>w0M)Ve>;p9Jx0L2k!6LEb1 z)HjB-rB6m9L|17_#N+3MWs`P$FK(Ywr#8YK&7X%H!wgL{4(7+ zRaJ);j{Z73dP)y!i5M7kdMqF3b%qk>Eqr})2J#ypRhp6siWDRtljHZL>3Mt1aF|9v z&tiOGj-`VKpp~%$dw=9{wuUo$_7Z8cOG3C=epNm>pG2vuM1OcHrLa#_9sJ#?;zW{w zG{oC;Jg@)F6EG@K0N=-#T!mL_GGhfd`+ z^sF8~=N^s(gXRVNy{{i_X&Nt78b)W)D4AYmiA^-N3IHF1Mt+6;zdkaX*G1wI*kgaa z$N)$TIKnsC!vQ{13Y^Hn>5Z_Flhf(J+WNiw4<3H`=fA9mM+4X|U;pvW=S$(S3oVzx zi5#oAFM*a`xvMJba(j)g~~sDkL!@a?{M0?*2P*l1E*5%9Ex zsjII!f?;chK;nl)Pe9n*|dX;o~=?@BK8x94Vjx9^>^`diq*D*@&-V14oym>LGtH0r> z)jK|6ZjU>QPbNe#f?oKc5tlRjc^6ORxqjV+4~VhnBnO2x%=v zr>vPus>|xBQySuXn%C<}zi0y%O;eX4ScR8YB``4u+xZ?!$~U;N)6Zht=F`_C_8 zFfE3k+W&KZ{ej2-bNl}Dr}h8v+83^l5&ij7rk{eo6!bhe*W04E%zcg#&4VRGuaf}Z zgUd$1WxGIls0wr^(fhnRLZDxh5CkC8yvvn(lcYPFptq!Z7E0-WHz-ENST+_pAI!?q z@698uHsNLE9h`T)49O^IfZJplLjK9i}-L8JUEEPk$~JJ=F*sz>ZADOW}*F zzT%o*F)XJCqEyYSENh)<^aakqBa)LO?~A==(8J{7qY$`abH7eBFI-b=`2S@WxVkxF z4BKq|3|ec;!Q5gJ8As_!qob@MdE@Y8$f~u7&W_ z!iSIuOu+m|<6(irta{B}RZt5dq;9cQLkmUKgaTuI<}9eT5vOUCMd=yZM5ob&l8nnK z45P{7AzY7IRcjdkcsD$G6Q7*svMEKGU!m=b=(wtBy_*I%3Ll49u9**{Yi3xm>$qxH zZ@%9V@p|!DW*ns{>@Q^o%6%cp(t}UbA|gY7SfE32E~sUMbmfAdMPdx*&xPO=kM%Z| z#2i=60%~|wBkvd^igMYhjBk;~`{)9?mk|S%gqG5y6~%eF91_^-S@dKwd=r7*m$sUh zm#}@~K_q^aJfBqiBT#jK=zXWAwMc-G4(bljZ**-q4j!(+~0ZT*d#h`sM0F*Z*_x{`$jP|IerR z!841CX|zM`7MUZ6*e?qT5PPO0eZ`F5p$gK`F5N&(LDFqV&Libw*71t+zJbv?D84)O zt24Wrtt)CduHJ`;r+mL74Izlv9INMdg^@$!&3WS{!4L;H%(*p`~Tkh zm-pTMzxLq4{oDQjDSlAuH_+s7^aVxLc4bs;H{-O!-B})wGKz?8fH9tdfreGr0#Ii8 z>rgstWyxEpALsfMDI;zolNbx^LdY(PDj_ytVCefrD9m^G+Zg0Fej^#Bc#E!{Ic38j zm!*pFAXwIW} zLcbWW(6^4T*vl>gf(QTRMGZC{u@0B|V&yGfMcKT{Ex=_{V$Q;n2n$XB}3xn`{H9W=A>IIM|plyc3q3AwA zOcy|tEH|2ACA_Ag8qn|EE}Ai_#V|Tk%LypJaQ{ZJ`tPEP^CTVO^6znNxqCFG_0Ce? zX0%a2QXw45j?}YP(?wd^8!vkwI=>CxbkB7w5fH(#MbM zYXSV9>MVR8Cq&6Vt_6RQJC}C|G~j~!!P=jLdwRrt0K{!p1N?tgMv=2o7Z63I_k#6x z4Kf^#yT8O!Dp?I4Ktqiuz~M9h@Xdf@9{yi~FEvm;6Y9CJA2{X11Y{#E(~l3$*~?;Q zwqFM8ZjGM`?EM9YzU~x{5)8P}?bjYU6>!^e`&BHz|7W}0I@FQ}VAIj;g!$W#0MMPX z)qxCaDSPzy%17+Z>%BJvyBFDvugV1OI6|K4mpdG_5_Fdlw{KI-+q z2Va)&f2=-u@ZeVe`xHNa6faOCdo49GrKX`0m#wTk5i_aHNjh0lm*e2EX_}nHpdE@( zpz~=I<;g_E@)VOGjl)TJf_^DKNDfcTC}xnuvnVj@gpWspm6bpKQP8RAXhdIDRt^sj zkAQ=%pc)W!iKy0Uu{r^Ho59@hw?7K7sNw-1`4c$JqE?JpiL*#zOb)zbev>g|I+UWS ze;r&QC6jC+|7sRboPbr1=P3Lcy{LG_V|x{j3_jS)j_t3 zT4T_=2o?+xO(Ewotlm*1Z`*-AjC$b3`6*tVi6`PBnWZ>3P?F3kBMjBU;vw*D8N1D+ zN7gi;oKActvHVey;dD=KRG;dYJ9$B|e)(cb0CMy$LFXr$5^Xenq@Qi%*@qyma(RJ8ORU6~SV zePcw!8QqwQ6=|1g`HF-~mnV&xVdo!8sdC`!=D_Kqkvndqi$Lwph%wtT2PNS?N4oG3 z#fo)zw{W4G(21mUNTqZVwdi79FHd@u8L=apXiB5!TQR=plEtp9bj41wr=bK~HIXJm1ws^VF=ry(p z6v(|(#zwJypppz9Dvl}SDVGiDX)=aBPGK@AT*%TKU|fM@`QjPhNkJQWWo0c8Pcb}| zxSZ~MWj#=mMwkXzA5~K&bl_J*?#Pmrdx7{ad>1jY2B+cVB%)gw*uf!Kq=#Vb;}IA3 zaz7B?ps`GalAZXvD6DGL$%8<=fo~MI>1%)msxHo%mxz}A&;ocUx;%u;9D|tA>5*Ps z)ehle6X={95PGv&oJS^Tv_i1j3;37o4bXkTP`7sQvss;ucWm&Sek(P3Ev*rn%ahmJ zqDaca9J;)lnL{J_i@_+&GS*OHb=NU-q?+6Tq+$R(-tmmCGF#a6$k+B^zfM>J9G4*s zJe(Jyxa``Y?!$_$k2@a*##tOX@={Fk0RdOC8=j@9y0dahEl0bPJW0d>BZ=N)ujP=HwhU);aHy|;pmnbbW2U1gFc>#qY$q(CaPD|8;3BHQ4$U@F9)9c#2JMhhi73- zH&m(h*K{$FudPYMJhiS+%ai{BhZvzEgD4YZ9d{U69h#&-tGGk{Ea(2Z*%43fHO>v^ z8XjfI2yc7xY{~s$TPH>gH4Sn|Xk?I-Jt`BN{v$qCXc5OS!wjqRT&Aw?soMASS_T4u zW5$DbUzx-L)+NrmDSlPg8u2%>`0*E>X7h2!n4X6L<5kwjxA**h8~%UOjDNZNe-F#? zU+Zi4ZvFqiyZe7$cVl2{4R#B1_*ls->B|xSl)f5LyF44I{})~qN_OS*qp;YMMjKee-MjFNXZ}xeW$jdmUDjmMv?5x#N>oNJ(+4Rl1E;%(GK1s_+tz1ym)f-24 zb=H&hh=$gPOYTF(TS^0GCnR1+V8&|t5?nN*jjt+5Ucdd!siZ7_mNA|Rl=Jw7$ze{V zpWMQb)JFx!t`K8O*xvxeJuGr~%lUpxM}&j0r?l-b-=GROmYI~xL|5djws3|Akd!Qz zGgy1@hy0k|wFVa9hfa_PHjmsXCQF437;iCQ1qHNx^qSWSrzA}&r@ot`n?lI(gBTat zge~~*^E9MNTlkx~UJF(@RMTeeHgu-Xt6i15+dz5W)Ox`DF_e#vg4ySJ@9lTwD;$a_ zriN+Mago*c=|!bf-*2Kpk`BL8FcdX)G-~?lW0~mo_8)s0jLZXFT>BXps+UW9Zen@y zl)qFrG151K7SlbV`1gT9w>}b*gkvo)7c1_n)HbLQdTimF-E(}?Cz)wH1! z@|(mVzx~G4aZQpaP1+>|J!{WX37>)pmRf2(rb_W+;vPpUXh~{BP$5rD*^`yfTf4d@ z_w`(ZvH7pTargGyUNml)I^}QZ?D{Q_8hrVmKC%CQ?MsjU|KV-^@8666$K%#0`$d@Z z$n+tOvjNjN6rW&w@Gt6F%0UR56pD|MWE6!Hc@y5w<>3}v*+%?@--l_89{f_VndqaU z3=?_yie6C;@5+{3>}y<&fx^48gO>Vi%K0%>$OoR0=tNazTdgF~s%^}Yb+}^k-6F_j zSlw6kK|wjEKvL&ZGOWQ{2mJ5w{MVcR?*qiag7^<$_oe)Q>$mqmKk51J<@|Op-tPap z{GXqA|KI9=xBLJ0=M(RL`!Mvz48TS4U-#Ba_TR(X`+uL*{=0HQm*Vu*PVCZG4|Ue3 zcd=Vn_|v_x7A1SJA=fxzz0j9Q{ZiF~9@7HQo ({ + statusCode: 429, + error: 'Too Many Requests', + message: 'Rate limit exceeded. Please try again later.', + }), +}); + // Register Swagger server.register(swagger, { swagger: { From e95e9368cd133741d0f7eb84410f2a54eba77b92 Mon Sep 17 00:00:00 2001 From: Mridul Sharma Date: Mon, 29 Dec 2025 23:27:24 +0530 Subject: [PATCH 3/5] fix: removed unused comments --- src/controllers/index.ts | 6 ------ 1 file changed, 6 deletions(-) diff --git a/src/controllers/index.ts b/src/controllers/index.ts index e3d7b85..9fce7f7 100644 --- a/src/controllers/index.ts +++ b/src/controllers/index.ts @@ -48,14 +48,8 @@ const engine = livePreviewShopify.getLiquidEngine(); export const getPreviewDataHandler = async (req: FastifyRequest<{ Body: PreviewDataRequestBody }>, res: FastifyReply) => { const { live_preview, ctUid, entryUid, locale, theme_variable } = req.body; const { liquid_path } = theme_variable; - - console.log("🚀 ~ getPreviewDataHandler ~ live_preview:", live_preview) - console.log("🚀 ~ getPreviewDataHandler ~ ctUid:", ctUid) - console.log("🚀 ~ getPreviewDataHandler ~ entryUid:", entryUid) - console.log("🚀 ~ getPreviewDataHandler ~ theme_variable:", theme_variable) const entryData: { schema: FieldSchema, entry: Entry } = await livePreviewShopify.fetchData(ctUid, entryUid, live_preview, locale) as { schema: FieldSchema, entry: Entry }; - console.log("🚀 ~ getPreviewDataHandler ~ entryData:", entryData) let shopifyData = { ...theme_variable?.payload }; const keyBasedCt = livePreviewShopify.createContentTypeKeyBased([entryData.schema]); From c6969d2c08667a7b66e43edf1db1f150a5ddf934 Mon Sep 17 00:00:00 2001 From: Mridul Sharma Date: Wed, 7 Jan 2026 17:49:37 +0530 Subject: [PATCH 4/5] fix: vulneribilites fixes --- package-lock.json | 142 ++++++++++++++++++++++++++++++++-------------- package.json | 2 +- 2 files changed, 101 insertions(+), 43 deletions(-) diff --git a/package-lock.json b/package-lock.json index e759b87..14de024 100644 --- a/package-lock.json +++ b/package-lock.json @@ -8,7 +8,7 @@ "name": "shopify-live-preview-middleware", "version": "1.1.0", "dependencies": { - "@contentstack/shopify-live-preview-sdk": "file:contentstack-shopify-live-preview-sdk-1.0.0.tgz", + "@contentstack/shopify-live-preview-sdk": "^1.1.0", "@fastify/cors": "^8.3.0", "@fastify/rate-limit": "^9.1.0", "@fastify/swagger": "^8.8.0", @@ -559,9 +559,9 @@ "license": "MIT" }, "node_modules/@contentstack/shopify-live-preview-sdk": { - "version": "1.0.0", - "resolved": "file:contentstack-shopify-live-preview-sdk-1.0.0.tgz", - "integrity": "sha512-D24KtUEn1nxMXE/IEtEpKlNrZc4eSRqNeDo/mFCEGDdGC+IhW4yXpCjUmh8zywGxz5JG6CqXcn39u/2wd0qbRQ==", + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/@contentstack/shopify-live-preview-sdk/-/shopify-live-preview-sdk-1.1.0.tgz", + "integrity": "sha512-VCPEGPY6QQeAYlgORBkju30RxhVLX1LnQ5VZBBp75TPAWLxQD9fCBUS3XXxAN1CoY4fLIX9EVFhaqURyi9gZpg==", "license": "MIT", "dependencies": { "@octokit/rest": "^21.1.1", @@ -3107,23 +3107,23 @@ "license": "Apache-2.0" }, "node_modules/body-parser": { - "version": "1.20.3", - "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.3.tgz", - "integrity": "sha512-7rAxByjUMqQ3/bHJy7D6OGXvx/MMc4IqBn/X0fcM1QUcAItpZrBEYhWGem+tzXH90c+G01ypMcYJBO9Y30203g==", + "version": "1.20.4", + "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.4.tgz", + "integrity": "sha512-ZTgYYLMOXY9qKU/57FAo8F+HA2dGX7bqGc71txDRC1rS4frdFI5R7NhluHxH6M0YItAP0sHB4uqAOcYKxO6uGA==", "license": "MIT", "dependencies": { - "bytes": "3.1.2", + "bytes": "~3.1.2", "content-type": "~1.0.5", "debug": "2.6.9", "depd": "2.0.0", - "destroy": "1.2.0", - "http-errors": "2.0.0", - "iconv-lite": "0.4.24", - "on-finished": "2.4.1", - "qs": "6.13.0", - "raw-body": "2.5.2", + "destroy": "~1.2.0", + "http-errors": "~2.0.1", + "iconv-lite": "~0.4.24", + "on-finished": "~2.4.1", + "qs": "~6.14.0", + "raw-body": "~2.5.3", "type-is": "~1.6.18", - "unpipe": "1.0.0" + "unpipe": "~1.0.0" }, "engines": { "node": ">= 0.8", @@ -3139,12 +3139,41 @@ "ms": "2.0.0" } }, + "node_modules/body-parser/node_modules/http-errors": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz", + "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==", + "license": "MIT", + "dependencies": { + "depd": "~2.0.0", + "inherits": "~2.0.4", + "setprototypeof": "~1.2.0", + "statuses": "~2.0.2", + "toidentifier": "~1.0.1" + }, + "engines": { + "node": ">= 0.8" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/express" + } + }, "node_modules/body-parser/node_modules/ms": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", "license": "MIT" }, + "node_modules/body-parser/node_modules/statuses": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz", + "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, "node_modules/brace-expansion": { "version": "2.0.2", "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz", @@ -4244,39 +4273,39 @@ } }, "node_modules/express": { - "version": "4.21.2", - "resolved": "https://registry.npmjs.org/express/-/express-4.21.2.tgz", - "integrity": "sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==", + "version": "4.22.1", + "resolved": "https://registry.npmjs.org/express/-/express-4.22.1.tgz", + "integrity": "sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g==", "license": "MIT", "dependencies": { "accepts": "~1.3.8", "array-flatten": "1.1.1", - "body-parser": "1.20.3", - "content-disposition": "0.5.4", + "body-parser": "~1.20.3", + "content-disposition": "~0.5.4", "content-type": "~1.0.4", - "cookie": "0.7.1", - "cookie-signature": "1.0.6", + "cookie": "~0.7.1", + "cookie-signature": "~1.0.6", "debug": "2.6.9", "depd": "2.0.0", "encodeurl": "~2.0.0", "escape-html": "~1.0.3", "etag": "~1.8.1", - "finalhandler": "1.3.1", - "fresh": "0.5.2", - "http-errors": "2.0.0", + "finalhandler": "~1.3.1", + "fresh": "~0.5.2", + "http-errors": "~2.0.0", "merge-descriptors": "1.0.3", "methods": "~1.1.2", - "on-finished": "2.4.1", + "on-finished": "~2.4.1", "parseurl": "~1.3.3", - "path-to-regexp": "0.1.12", + "path-to-regexp": "~0.1.12", "proxy-addr": "~2.0.7", - "qs": "6.13.0", + "qs": "~6.14.0", "range-parser": "~1.2.1", "safe-buffer": "5.2.1", - "send": "0.19.0", - "serve-static": "1.16.2", + "send": "~0.19.0", + "serve-static": "~1.16.2", "setprototypeof": "1.2.0", - "statuses": "2.0.1", + "statuses": "~2.0.1", "type-is": "~1.6.18", "utils-merge": "1.0.1", "vary": "~1.1.2" @@ -7169,12 +7198,12 @@ "license": "MIT" }, "node_modules/qs": { - "version": "6.13.0", - "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz", - "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==", + "version": "6.14.1", + "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz", + "integrity": "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ==", "license": "BSD-3-Clause", "dependencies": { - "side-channel": "^1.0.6" + "side-channel": "^1.1.0" }, "engines": { "node": ">=0.6" @@ -7220,16 +7249,45 @@ } }, "node_modules/raw-body": { - "version": "2.5.2", - "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.2.tgz", - "integrity": "sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==", + "version": "2.5.3", + "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz", + "integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==", "license": "MIT", "dependencies": { - "bytes": "3.1.2", - "http-errors": "2.0.0", - "iconv-lite": "0.4.24", - "unpipe": "1.0.0" + "bytes": "~3.1.2", + "http-errors": "~2.0.1", + "iconv-lite": "~0.4.24", + "unpipe": "~1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/raw-body/node_modules/http-errors": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz", + "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==", + "license": "MIT", + "dependencies": { + "depd": "~2.0.0", + "inherits": "~2.0.4", + "setprototypeof": "~1.2.0", + "statuses": "~2.0.2", + "toidentifier": "~1.0.1" + }, + "engines": { + "node": ">= 0.8" }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/express" + } + }, + "node_modules/raw-body/node_modules/statuses": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz", + "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==", + "license": "MIT", "engines": { "node": ">= 0.8" } diff --git a/package.json b/package.json index 9edc65c..fb1a06c 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "format": "prettier --write \"src/**/*.ts\"" }, "dependencies": { - "@contentstack/shopify-live-preview-sdk": "file:contentstack-shopify-live-preview-sdk-1.0.0.tgz", + "@contentstack/shopify-live-preview-sdk": "^1.1.0", "@fastify/cors": "^8.3.0", "@fastify/rate-limit": "^9.1.0", "@fastify/swagger": "^8.8.0", From 55d5965feb3f8aef778d028a2493d0dffc9c84d7 Mon Sep 17 00:00:00 2001 From: Mridul Sharma Date: Wed, 7 Jan 2026 18:02:36 +0530 Subject: [PATCH 5/5] chore: updated license year --- LICENSE | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/LICENSE b/LICENSE index 9dea702..ecd01a2 100644 --- a/LICENSE +++ b/LICENSE @@ -1,6 +1,6 @@ MIT License -Copyright (c) 2021-2025 Contentstack +Copyright (c) 2021-2026 Contentstack Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal