Skip to content

Bump @profullstack/throttle to ^0.4.0 (5x headroom) - #65

Merged
ralyodio merged 1 commit into
mainfrom
throttle-0.4.0
Oct 28, 2026
Merged

ralyodio merged 1 commit into
mainfrom
throttle-0.4.0

Conversation

@ralyodio

Copy link
Copy Markdown
Collaborator

Rolls out @profullstack/throttle 0.4.0 (profullstack/throttle#7). Every configured limit gets 5x headroom in the package, except brute-force guards (credential: false rules and auth-looking paths). No site config numbers changed.

  • package.json: ^0.3.5 -> ^0.4.0, bun.lock resolves 0.4.0
  • tsc passes; no test asserts throttle numbers

🤖 Generated with Claude Code

0.4.0 multiplies every configured limit by 5 (headroom), except
brute-force guards (credential: false rules and auth paths). Users were
throttled for normal heavy use. Configured numbers are unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

13 finding(s)

HIGH/CRITICAL: 1 | MEDIUM: 12

Severity Rule Location
HIGH js-ssrf-outbound-request src/lib/edgeProxy.ts:69
MEDIUM js-unescaped-html-sink src/components/JsonLd.tsx:13
MEDIUM js-unescaped-html-sink src/components/PitFooter.tsx:17
MEDIUM redos-nested-quantifier src/lib/emailMarkdown.ts:43
MEDIUM redos-nested-quantifier src/lib/emailMarkdown.ts:302
MEDIUM js-unescaped-html-sink src/views/Admin.tsx:1811
MEDIUM js-unescaped-html-sink src/views/BlogPost.tsx:168
MEDIUM js-unescaped-html-sink src/views/EmailBroadcast.tsx:412
MEDIUM js-open-redirect src/views/Featured.tsx:279
MEDIUM js-unescaped-html-sink src/views/NewsPost.tsx:137
MEDIUM js-open-redirect src/views/SoftwareDetail.tsx:160
MEDIUM redos-nested-quantifier supabase/functions/_shared/emailMarkdown.ts:43
MEDIUM redos-nested-quantifier supabase/functions/_shared/emailMarkdown.ts:302

Snippets are redacted; ThreatCrush never prints matched credential material.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​profullstack/​throttle@​0.3.5 ⏵ 0.4.078 +1100100 +195 +1100

View full report

@ralyodio
ralyodio merged commit 5e03ffa into main Oct 28, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant