Upgrading ipx 0.9 to 1
Unknown0.9.11 → 1.3.2Security2New5Changed2Fixed9Other12
SecurityModerateIPX Allows Path Traversal via Prefix Matching BypassGHSA-mm3p-j368-7jcr · CVE-2025-54387 ↗
UnknownUpgrade verdict
DepDelta hasn't looked for the notes of 1 of 10 releases in its newest sources yet, so breaking changes can't be ruled out.
In plain terms
- DepDelta hasn't finished looking for the notes in this range, so it can't rule out breaking changes yet.
- Their commits are listed with this comparison.
Must act 2 items need code or config changes
Adds @fastify/accept-negotiator ^1.1.0, node-fetch-native ^1.4.0.
Drops ohmyfetch.
Installs 92 packages in all (was 87).
What you must change
Security2
IPX Allows Path Traversal via Prefix Matching Bypass
ModerateUpdates the sharp dependency to ^0.32.6 as a security upgrade.
sharpAPI changes
Generated by DepDelta from published .d.ts files. Not mixed with prose notes.
- removed:
interface ImageMeta - removed:
property ImageMeta.height: number - removed:
property ImageMeta.mimeType: string - removed:
property ImageMeta.type: string - removed:
property ImageMeta.width: number - changed:
function createIPXMiddleware(ipx: IPX): (req: IncomingMessage, res: ServerResponse) => Promise<void> → function createIPXMiddleware(ipx: IPX, options?: Partial<MiddlewareOptions>): (request: IncomingMessage, res: ServerResponse, next?: ((err?: any) => void) | undefined) => Promise<void> - changed:
function handleRequest(req: IPXHRequest, ipx: IPX): Promise<IPXHResponse> → function handleRequest(request: IPXHRequest, ipx: IPX): Promise<IPXHResponse> - changed:
property IPXOptions.sharp?: { [key: string]: any } → property IPXOptions.sharp?: SharpOptions - changed:
type IPX = (id: string, modifiers?: Record<string, string>, reqOptions?: any) => { src: () => Promise<SourceData>; data: () => Promise<{ data: Buffer; meta: ImageMeta; fo… → type IPX = (id: string, modifiers?: Partial<Record<HandlerName | 'f' | 'format' | 'a' | 'animated', string>>, requestOptions?: any) => { src: () => Promise<SourceData>; d… - changed:
type Source = (src: string, reqOptions?: any) => Promise<SourceData> → type Source = (source: string, requestOptions?: any) => Promise<SourceData> - added:
interface MiddlewareOptions - added:
property IPXHResponse.error?: any - added:
property MiddlewareOptions.fallthrough?: boolean