-
fix: security hardening, Prisma singleton, tsconfig cleanup
released this
2026-04-20 19:52:47 +02:00 | 64 commits to main since this release- tsconfig: remove deprecated downlevelIteration (es2017 has native iterators),
change moduleResolution from node to bundler - auth: set allowDangerousEmailAccountLinking=false on all OAuth providers,
restrict debug mode to development only - prisma: replace new PrismaClient() with singleton import in 10 API routes
to prevent connection pool exhaustion - goal API: validate user-supplied quote URLs to block SSRF (private IPs,
non-http(s) schemes) - email: guard DEV verification/reset link console.logs behind NODE_ENV check
v1.98.0
Downloads
- tsconfig: remove deprecated downlevelIteration (es2017 has native iterators),