Commit graph

1393 commits

Author SHA1 Message Date
Miodec
96e30b141e chore: bump oxc packages 2025-12-19 09:56:37 +01:00
Christian Fehmer
3f21023fc1
chore: update vitest/testcontainer versions, try to fix container teardown on macos (@fehmer) (#7248)
Co-authored-by: Miodec <jack@monkeytype.com>
2025-12-16 18:11:55 +01:00
Jack
a067a32b7a
chore: move main linting to oxlint (@miodec) (#7144)
- main linting is now done by oxlint. eslint remains for linting json
files in the frontend (until oxlint adds support)
 - move type checking to the lint step (with --type-check)
this improves performance by removing a duplicated typescript parse task
(instead of parsing for linting then again for type checking, it parses
once for both)
- add a `lint-fast` npm script to get some fast fail behavior. it simply
lints with no type information
- oxc plugins are still in preview, so the custom plugin that checks for
`__testing` usage outside of tests runs outside the main linting job
until performance is improved
- fixes some type issues (and config issues) that were not visible due
to a missing type check on some files. now type checking will run on
every file that is linted
 - split up oxc config for easier management

waiting https://github.com/oxc-project/tsgolint/pull/494

seeing around 3x improvement in type aware linting
2025-12-15 22:16:16 +01:00
Jack
660668c530
chore: use oxfmt for formatting (@miodec) (#7187)
8 times faster formatting,
calls prettier internally for unsupported files

waiting on https://github.com/oxc-project/oxc/issues/16637
https://github.com/oxc-project/oxc/issues/16598
https://github.com/oxc-project/oxc/issues/16621

---------

Co-authored-by: Christian Fehmer <cfe@sexy-developer.com>
2025-12-15 16:53:50 +01:00
Miodec
2ee582a597 chore: configure eslint/curly rule 2025-12-09 22:41:45 +01:00
Jack
b5a03e0040
chore(linting): enable prefer-nullish-coalescing (@miodec) (#7209) 2025-12-09 20:37:04 +01:00
Christian Fehmer
445be88754
ci: allow dependabot node version (@fehmer) (#7184) 2025-12-03 16:52:38 +01:00
dependabot[bot]
6cfb880908
build(deps): bump express from 5.1.0 to 5.2.0 in /backend (#7175)
Bumps [express](https://github.com/expressjs/express) from 5.1.0 to
5.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/express/releases">express's
releases</a>.</em></p>
<blockquote>
<h2>v5.2.0</h2>
<h2>Important: Security</h2>
<ul>
<li>Security fix for <a
href="https://www.cve.org/CVERecord?id=CVE-2024-51999">CVE-2024-51999</a>
(<a
href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6">GHSA-pj86-cfqh-vqx6</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump github/codeql-action from 3.28.11 to 3.28.13 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6429">expressjs/express#6429</a></li>
<li>Refactor: simplify <code>acceptsLanguages</code> implementation
using spread operator by <a
href="https://github.com/Ayoub-Mabrouk"><code>@​Ayoub-Mabrouk</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6137">expressjs/express#6137</a></li>
<li>increased code coverage of utils.js file by <a
href="https://github.com/ashish3011"><code>@​ashish3011</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6386">expressjs/express#6386</a></li>
<li>chore: remove duplicate word by <a
href="https://github.com/dufucun"><code>@​dufucun</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6456">expressjs/express#6456</a></li>
<li>build(deps): bump github/codeql-action from 3.28.13 to 3.28.16 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6498">expressjs/express#6498</a></li>
<li>build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6497">expressjs/express#6497</a></li>
<li>build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6496">expressjs/express#6496</a></li>
<li>ci: add node.js 24 to test matrix by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6504">expressjs/express#6504</a></li>
<li>ci: update codeql config by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6488">expressjs/express#6488</a></li>
<li>chore: wider range for query test skip by <a
href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6512">expressjs/express#6512</a></li>
<li>chore: fix typos in test by <a
href="https://github.com/noritaka1166"><code>@​noritaka1166</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6535">expressjs/express#6535</a></li>
<li>ci: disable credential persistence for checkout actions by <a
href="https://github.com/mertssmnoglu"><code>@​mertssmnoglu</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6522">expressjs/express#6522</a></li>
<li>ci: allow manual triggering of workflow by <a
href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6515">expressjs/express#6515</a></li>
<li>test: add coverage for app.listen() variants by <a
href="https://github.com/kgarg1"><code>@​kgarg1</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6476">expressjs/express#6476</a></li>
<li>docs: move documentation and charters to the discussions and .github
… by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6427">expressjs/express#6427</a></li>
<li>build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6549">expressjs/express#6549</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6548">expressjs/express#6548</a></li>
<li>chore: enforce explicit <code>Buffer</code> import and add lint rule
by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6525">expressjs/express#6525</a></li>
<li>chore: use node protocol for querystring by <a
href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6520">expressjs/express#6520</a></li>
<li>chore: fix typo by <a
href="https://github.com/mountdisk"><code>@​mountdisk</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6609">expressjs/express#6609</a></li>
<li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6618">expressjs/express#6618</a></li>
<li>add deprecation warnings for redirect arguments undefined by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6405">expressjs/express#6405</a></li>
<li>ci: run CI when the markdown changes by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6632">expressjs/express#6632</a></li>
<li>doc: fix CONTRIBUTING link by <a
href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6653">expressjs/express#6653</a></li>
<li>doc: update contributing guidelines and code of conduct links by <a
href="https://github.com/ShubhamOulkar"><code>@​ShubhamOulkar</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6601">expressjs/express#6601</a></li>
<li>build(deps-dev): bump morgan from 1.10.0 to 1.10.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6679">expressjs/express#6679</a></li>
<li>build(deps-dev): bump cookie-session from 2.1.0 to 2.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6678">expressjs/express#6678</a></li>
<li>lint: add --fix flag to automatic fix linting issue by <a
href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6644">expressjs/express#6644</a></li>
<li>chore: ignore yarn.lock file and update example by <a
href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6588">expressjs/express#6588</a></li>
<li>lib: use req.socket over deprecated req.connection by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6705">expressjs/express#6705</a></li>
<li>doc: update express app example by <a
href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6718">expressjs/express#6718</a></li>
<li>build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6675">expressjs/express#6675</a></li>
<li>Remove history.md from being packaged on publish by <a
href="https://github.com/sheplu"><code>@​sheplu</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6780">expressjs/express#6780</a></li>
<li>build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6797">expressjs/express#6797</a></li>
<li>build(deps): bump github/codeql-action from 3.29.7 to 3.30.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6796">expressjs/express#6796</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6795">expressjs/express#6795</a></li>
<li>build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6794">expressjs/express#6794</a></li>
<li>build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6793">expressjs/express#6793</a></li>
<li>ci: add node.js 25 to test matrix by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6843">expressjs/express#6843</a></li>
<li>build(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6871">expressjs/express#6871</a></li>
<li>build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6870">expressjs/express#6870</a></li>
<li>build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6869">expressjs/express#6869</a></li>
<li>build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/express/pull/6868">expressjs/express#6868</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/express/blob/master/History.md">express's
changelog</a>.</em></p>
<blockquote>
<h1>5.2.0 / 2025-12-01</h1>
<ul>
<li>Security fix for <a
href="https://www.cve.org/CVERecord?id=CVE-2024-51999">CVE-2024-51999</a>
(<a
href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6">GHSA-pj86-cfqh-vqx6</a>)</li>
<li>deps: <code>body-parser@^2.2.1</code></li>
<li>A deprecation warning was added when using <code>res.redirect</code>
with undefined arguments, Express now emits a warning to help detect
calls that pass undefined as the status or URL and make them easier to
fix.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4007ad103b"><code>4007ad1</code></a>
Release: 5.2.0 (<a
href="https://redirect.github.com/expressjs/express/issues/6920">#6920</a>)</li>
<li><a
href="2f64f68c37"><code>2f64f68</code></a>
sec: security patch for CVE-2024-51999</li>
<li><a
href="ed0ba3f1dc"><code>ed0ba3f</code></a>
build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (<a
href="https://redirect.github.com/expressjs/express/issues/6928">#6928</a>)</li>
<li><a
href="8eace4603c"><code>8eace46</code></a>
build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (<a
href="https://redirect.github.com/expressjs/express/issues/6929">#6929</a>)</li>
<li><a
href="30bae81027"><code>30bae81</code></a>
build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 (<a
href="https://redirect.github.com/expressjs/express/issues/6930">#6930</a>)</li>
<li><a
href="758d4355d4"><code>758d435</code></a>
deps: body-parser@^2.2.1 (<a
href="https://redirect.github.com/expressjs/express/issues/6922">#6922</a>)</li>
<li><a
href="77bcd5274a"><code>77bcd52</code></a>
docs: update emeritus triagers (<a
href="https://redirect.github.com/expressjs/express/issues/6890">#6890</a>)</li>
<li><a
href="f33caf1f89"><code>f33caf1</code></a>
Nominate to <a
href="https://github.com/efekrskl"><code>@​efekrskl</code></a> for
triage team (<a
href="https://redirect.github.com/expressjs/express/issues/6888">#6888</a>)</li>
<li><a
href="54af593b73"><code>54af593</code></a>
refactor: use cached slice in app.listen (<a
href="https://redirect.github.com/expressjs/express/issues/6897">#6897</a>)</li>
<li><a
href="2551a7d8af"><code>2551a7d</code></a>
docs: switch badges from badgen.net to shields.io (<a
href="https://redirect.github.com/expressjs/express/issues/6900">#6900</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/expressjs/express/compare/v5.1.0...v5.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=express&package-manager=npm_and_yarn&previous-version=5.1.0&new-version=5.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/monkeytypegame/monkeytype/network/alerts).

</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Miodec <jack@monkeytype.com>
2025-12-03 16:47:36 +01:00
dependabot[bot]
71c0f43d96
build(deps): bump nodemailer from 7.0.7 to 7.0.11 in /backend (#7176)
Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 7.0.7
to 7.0.11.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodemailer/nodemailer/releases">nodemailer's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.11</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.10...v7.0.11">7.0.11</a>
(2025-11-26)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>prevent stack overflow DoS in addressparser with deeply nested
groups (<a
href="b61b9c0cfd">b61b9c0</a>)</li>
</ul>
<h2>v7.0.10</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.9...v7.0.10">7.0.10</a>
(2025-10-23)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>Increase data URI size limit from 100KB to 50MB and preserve content
type (<a
href="28dbf3fe12">28dbf3f</a>)</li>
</ul>
<h2>v7.0.9</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.8...v7.0.9">7.0.9</a>
(2025-10-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>release:</strong> Trying to fix release proecess by
upgrading Node version in runner (<a
href="579fce4683">579fce4</a>)</li>
</ul>
<h2>v7.0.8</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.7...v7.0.8">7.0.8</a>
(2025-10-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>addressparser:</strong> flatten nested groups per RFC 5322
(<a
href="8f8a77c67f">8f8a77c</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md">nodemailer's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.10...v7.0.11">7.0.11</a>
(2025-11-26)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>prevent stack overflow DoS in addressparser with deeply nested
groups (<a
href="b61b9c0cfd">b61b9c0</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.9...v7.0.10">7.0.10</a>
(2025-10-23)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>Increase data URI size limit from 100KB to 50MB and preserve content
type (<a
href="28dbf3fe12">28dbf3f</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.8...v7.0.9">7.0.9</a>
(2025-10-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>release:</strong> Trying to fix release proecess by
upgrading Node version in runner (<a
href="579fce4683">579fce4</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.7...v7.0.8">7.0.8</a>
(2025-10-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>addressparser:</strong> flatten nested groups per RFC 5322
(<a
href="8f8a77c67f">8f8a77c</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3d17dbec49"><code>3d17dbe</code></a>
chore(master): release 7.0.11 (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1783">#1783</a>)</li>
<li><a
href="15879f8bd5"><code>15879f8</code></a>
Bumped dev dependencies</li>
<li><a
href="b61b9c0cfd"><code>b61b9c0</code></a>
fix: prevent stack overflow DoS in addressparser with deeply nested
groups</li>
<li><a
href="4175e4baf9"><code>4175e4b</code></a>
chore(master): release 7.0.10 (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1776">#1776</a>)</li>
<li><a
href="d882ccfe8d"><code>d882ccf</code></a>
Merge branch 'master' of github.com:nodemailer/nodemailer</li>
<li><a
href="1d7e4f786b"><code>1d7e4f7</code></a>
Bumped deps</li>
<li><a
href="10bd871656"><code>10bd871</code></a>
chore: correct typo in variable name (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1773">#1773</a>)</li>
<li><a
href="28dbf3fe12"><code>28dbf3f</code></a>
fix: Increase data URI size limit from 100KB to 50MB and preserve
content type</li>
<li><a
href="92ae1c49e3"><code>92ae1c4</code></a>
chore(master): release 7.0.9 (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1769">#1769</a>)</li>
<li><a
href="c675d9e7e5"><code>c675d9e</code></a>
Merge branch 'master' of github.com:nodemailer/nodemailer</li>
<li>Additional commits viewable in <a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.7...v7.0.11">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a
href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
Actions), a new releaser for nodemailer since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nodemailer&package-manager=npm_and_yarn&previous-version=7.0.7&new-version=7.0.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/monkeytypegame/monkeytype/network/alerts).

</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Miodec <jack@monkeytype.com>
2025-12-03 16:35:59 +01:00
Miodec
5f305735de chore: upgrade to prettier 3.7 2025-11-27 12:48:53 +01:00
Jack
f910c8a567
chore: prettier upgrade (@miodec) (#7159) 2025-11-27 00:20:09 +01:00
Miodec
3dfea100d1 chore: upgrade typescript
also disables declaration file generation since we dont use them anyway
2025-11-24 13:33:49 +01:00
Miodec
2107c87fdb chore: upgrade oxlint
also enables prefer-includes
2025-11-20 12:22:58 +01:00
Christian Fehmer
1009791915
refactor: remove lodash from backend (@fehmer) (#6953) 2025-11-17 12:51:40 +01:00
Christian Fehmer
949e2baa48
perf: optimize friend queries (@fehmer) (#7080)
Combine two queries (first get all friend UIDs, then call leaderboard)
into one query to reduce db roundtrips.

Use the same approach for the friends list in user dal.

Note: when updating mongodb to 6+ we could use unionWith in case we
don't need the metadata (lb use-case)
2025-11-13 15:31:55 +01:00
Christian Fehmer
8ee7e94d46
fix(leaderboards): show correct rank in friends weekly leaderboard (@fehmer) (#7104) 2025-11-12 15:33:32 +01:00
Christian Fehmer
d74051e878
feat(leaderboard): add friends filter to daily/weekly leaderboard (@fehmer) (#7084) 2025-11-12 14:41:22 +01:00
Christian Fehmer
8db1140040
chore: update vitest to 4.0.8 (@fehmer) (#7096) 2025-11-12 12:42:30 +01:00
Christian Fehmer
9d64a57daf
feat(leaderboard): add friends filter to all-time leaderboard (@fehmer) (#7061) 2025-10-31 18:57:42 +01:00
Miodec
c0191da004 chore: bump node version 2025-10-31 14:18:59 +01:00
Miodec
586a19ad3e chore: upgrade oxlint 2025-10-31 14:18:59 +01:00
Christian Fehmer
d885e70232
feat: add friend requests and list (@fehmer) (#6658)
make some friends on monkeytype

---------

Co-authored-by: Miodec <jack@monkeytype.com>
2025-10-28 12:36:16 +01:00
Jack
7e6a73aac2
chore: upgrade to vite 7 (@miodec) (#7051) 2025-10-27 17:17:21 +01:00
Christian Fehmer
cd8ebd1430
chore: update nodejs to 24.10.0 (@fehmer) (#7035) 2025-10-27 13:38:37 +01:00
Christian Fehmer
4268572be4
build: fix scope of dependency @monkeytype/schemas (@fehmer) (#7033) 2025-10-21 13:05:07 +02:00
dependabot[bot]
4e5ba24a3e
build(deps): bump nodemailer from 6.9.14 to 7.0.7 in /backend (#7011)
Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 6.9.14
to 7.0.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodemailer/nodemailer/releases">nodemailer's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.7</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.6...v7.0.7">7.0.7</a>
(2025-10-05)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>addressparser:</strong> Fixed addressparser handling of
quoted nested email addresses (<a
href="1150d99fba">1150d99</a>)</li>
<li><strong>dns:</strong> add memory leak prevention for DNS cache (<a
href="0240d6795d">0240d67</a>)</li>
<li><strong>linter:</strong> Updated eslint and created prettier
formatting task (<a
href="df13b7487e">df13b74</a>)</li>
<li>refresh expired DNS cache on error (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1759">#1759</a>)
(<a
href="ea0fc5a663">ea0fc5a</a>)</li>
<li>resolve linter errors in DNS cache tests (<a
href="3b8982c1f2">3b8982c</a>)</li>
</ul>
<h2>v7.0.6</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.5...v7.0.6">7.0.6</a>
(2025-08-27)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>encoder:</strong> avoid silent data loss by properly
flushing trailing base64 (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1747">#1747</a>)
(<a
href="01ae76f2cf">01ae76f</a>)</li>
<li>handle multiple XOAUTH2 token requests correctly (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1754">#1754</a>)
(<a
href="dbe0028635">dbe0028</a>)</li>
<li>ReDoS vulnerability in parseDataURI and _processDataUrl (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1755">#1755</a>)
(<a
href="90b3e24d23">90b3e24</a>)</li>
</ul>
<h2>v7.0.5</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.4...v7.0.5">7.0.5</a>
(2025-07-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>updated well known delivery service list (<a
href="fa2724b337">fa2724b</a>)</li>
</ul>
<h2>v7.0.4</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.3...v7.0.4">7.0.4</a>
(2025-06-29)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>pools:</strong> Emit 'clear' once transporter is idle and
all connections are closed (<a
href="839e28634c">839e286</a>)</li>
<li><strong>smtp-connection:</strong> jsdoc public annotation for socket
(<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1741">#1741</a>)
(<a
href="c45c84fe9b">c45c84f</a>)</li>
<li><strong>well-known-services:</strong> Added AliyunQiye (<a
href="bb9e6daffb">bb9e6da</a>)</li>
</ul>
<h2>v7.0.3</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.2...v7.0.3">7.0.3</a>
(2025-05-08)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>attachments:</strong> Set the default transfer encoding for
message/rfc822 attachments as '7bit' (<a
href="007d5f3f40">007d5f3</a>)</li>
</ul>
<h2>v7.0.2</h2>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.1...v7.0.2">7.0.2</a>
(2025-05-04)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md">nodemailer's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.6...v7.0.7">7.0.7</a>
(2025-10-05)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>addressparser:</strong> Fixed addressparser handling of
quoted nested email addresses (<a
href="1150d99fba">1150d99</a>)</li>
<li><strong>dns:</strong> add memory leak prevention for DNS cache (<a
href="0240d6795d">0240d67</a>)</li>
<li><strong>linter:</strong> Updated eslint and created prettier
formatting task (<a
href="df13b7487e">df13b74</a>)</li>
<li>refresh expired DNS cache on error (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1759">#1759</a>)
(<a
href="ea0fc5a663">ea0fc5a</a>)</li>
<li>resolve linter errors in DNS cache tests (<a
href="3b8982c1f2">3b8982c</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.5...v7.0.6">7.0.6</a>
(2025-08-27)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>encoder:</strong> avoid silent data loss by properly
flushing trailing base64 (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1747">#1747</a>)
(<a
href="01ae76f2cf">01ae76f</a>)</li>
<li>handle multiple XOAUTH2 token requests correctly (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1754">#1754</a>)
(<a
href="dbe0028635">dbe0028</a>)</li>
<li>ReDoS vulnerability in parseDataURI and _processDataUrl (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1755">#1755</a>)
(<a
href="90b3e24d23">90b3e24</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.4...v7.0.5">7.0.5</a>
(2025-07-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>updated well known delivery service list (<a
href="fa2724b337">fa2724b</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.3...v7.0.4">7.0.4</a>
(2025-06-29)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>pools:</strong> Emit 'clear' once transporter is idle and
all connections are closed (<a
href="839e28634c">839e286</a>)</li>
<li><strong>smtp-connection:</strong> jsdoc public annotation for socket
(<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1741">#1741</a>)
(<a
href="c45c84fe9b">c45c84f</a>)</li>
<li><strong>well-known-services:</strong> Added AliyunQiye (<a
href="bb9e6daffb">bb9e6da</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.2...v7.0.3">7.0.3</a>
(2025-05-08)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>attachments:</strong> Set the default transfer encoding for
message/rfc822 attachments as '7bit' (<a
href="007d5f3f40">007d5f3</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.1...v7.0.2">7.0.2</a>
(2025-05-04)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>ses:</strong> Fixed structured from header (<a
href="faa9a5eafa">faa9a5e</a>)</li>
</ul>
<h2><a
href="https://github.com/nodemailer/nodemailer/compare/v7.0.0...v7.0.1">7.0.1</a>
(2025-05-04)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>ses:</strong> Use formatted FromEmailAddress for SES emails
(<a
href="821cd09002">821cd09</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9357a71233"><code>9357a71</code></a>
chore(master): release 7.0.7 [skip-ci] (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1761">#1761</a>)</li>
<li><a
href="df13b7487e"><code>df13b74</code></a>
fix(linter): Updated eslint and created prettier formatting task</li>
<li><a
href="62629a0674"><code>62629a0</code></a>
Updated tests for addressparser</li>
<li><a
href="1150d99fba"><code>1150d99</code></a>
fix(addressparser): Fixed addressparser handling of quoted nested email
addre...</li>
<li><a
href="3b8982c1f2"><code>3b8982c</code></a>
fix: resolve linter errors in DNS cache tests</li>
<li><a
href="0240d6795d"><code>0240d67</code></a>
fix(dns): add memory leak prevention for DNS cache</li>
<li><a
href="ea0fc5a663"><code>ea0fc5a</code></a>
fix: refresh expired DNS cache on error (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1759">#1759</a>)</li>
<li><a
href="430ca75aa8"><code>430ca75</code></a>
chore(master): release 7.0.6 [skip-ci] (<a
href="https://redirect.github.com/nodemailer/nodemailer/issues/1753">#1753</a>)</li>
<li><a
href="e3e700c4c4"><code>e3e700c</code></a>
Bumped deps</li>
<li><a
href="f322c380ae"><code>f322c38</code></a>
replaced escaped single quotes with unescaped ones</li>
<li>Additional commits viewable in <a
href="https://github.com/nodemailer/nodemailer/compare/v6.9.14...v7.0.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nodemailer&package-manager=npm_and_yarn&previous-version=6.9.14&new-version=7.0.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/monkeytypegame/monkeytype/network/alerts).

</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christian Fehmer <cfe@sexy-developer.com>
2025-10-15 10:42:46 +02:00
Christian Fehmer
85671a32b2
chore: update version of supertest (@fehmer) (#6839) 2025-10-15 10:34:47 +02:00
Miodec
a33b464511 chore: change oxlint config to jsonc
also disable one rule
2025-09-11 22:04:48 +02:00
Miodec
1fa473744a chore: bump oxlint 2025-09-11 22:04:48 +02:00
Christian Fehmer
f9a9463534
test: fix presets test using fixed uids (@fehmer) (#6947) 2025-09-10 11:42:29 +02:00
Jack
8627235bef
feat(result): rename raw to burst, add raw line to result graph, add ability to hide chart data (@miodec) (#6907) 2025-09-02 11:06:15 +02:00
Jack
7487e53c67
refactor: result migration and tests cleanup (@miodec) (#6929)
move all legacy test value migration into a central place, update the
tests to only check if that was called, test replaceLegacyValues
2025-09-01 17:39:24 +02:00
Christian Fehmer
01f981cd0a
test: refactor controller tests (@fehmer) (#6925) 2025-09-01 11:53:05 +02:00
Christian Fehmer
d9887cf37c
refactor: use findOne instead of limit(1) (@fehmer) (#6924) 2025-09-01 11:52:16 +02:00
Miodec
c8cf1eae54 refactor: optimise fetching last result timestamp when adding a result 2025-08-28 16:19:26 +02:00
Jack
e4c0c28150
chore: bump eslint typescript plugin (@miodec) (#6915) 2025-08-26 22:12:27 +02:00
Miodec
b54052913c chore: bump oxlint version 2025-08-26 17:41:51 +02:00
Miodec
2a6bfbeefb chore: log high wpm results 2025-08-20 11:57:19 +02:00
Miodec
057fdf3fed chore: bump oxlint version 2025-08-18 15:38:13 +02:00
Christian Fehmer
c5d43dd673
feat(profile): optionally include test activity on users public profile (@fehmer) (#6824)
Co-authored-by: Miodec <jack@monkeytype.com>
2025-08-15 14:31:58 +02:00
Christian Fehmer
119649bc9e
test: don't use globals for vitest (@fehmer) (#6871)
- **test: support to run/watch all tests in vscode (@fehmer)**
- **packages/contracts**
- **move schema tests to schema package**
- **packages/funbox**
- **packages/utils**
- **frontend**
- **backend**

---------

Co-authored-by: Miodec <jack@monkeytype.com>
2025-08-14 11:25:44 +02:00
Christian Fehmer
7a91b4e08b
chore: update redocly to 2.0.5 (@fehmer) (#6874) 2025-08-14 11:14:33 +02:00
Christian Fehmer
3447907d09
test: support to run/watch all tests in vscode (@fehmer) (#6868) 2025-08-13 11:14:21 +02:00
Miodec
5183caf91e chore: upgrade oxlint 2025-08-10 15:08:46 +02:00
Christian Fehmer
f9b22ade56
chore: remove unused dependencies (@fehmer) (#6841)
- **remove chokidar**
- **remove path, node-fetch, ioredis-mock**
- **remove nodemon**
2025-08-07 15:02:19 +02:00
Christian Fehmer
bec5606c7a
chore: move knip to project root (@fehmer) (#6842) 2025-08-07 15:00:43 +02:00
Christian Fehmer
cd99d5af16
test: add WeeklyXpLeaderboards integration tests (@fehmer) (#6843) 2025-08-07 14:48:14 +02:00
Christian Fehmer
c8a91ede52
test: fix flaky user tests (@fehmer) (#6837) 2025-08-07 14:47:35 +02:00
Christian Fehmer
01ed9322ec
test: update to vitest3 (@fehmer) (#6811)
- **test: use mongodb testcontainer (@fehmer)**
- **don't run integration tests in parallel**
- **fix premium test**
- **refactor, cleanup**
- **refactor, cleanup**
- **test: add integration tests for daily leaderboards (@fehmer)**
- **trigger**
- **trigger**
- **test: update to vitest3 (@fehmer)**
2025-08-04 15:55:10 +02:00
Christian Fehmer
9c41fd5d04
test: add unit tests for daily leaderboards (@fehmer) (#6802)
- **refactor existing test to use it.for**
- **use testcontainers**
2025-08-04 15:28:55 +02:00