Merge dev to stable

.github/workflows/cd.yml

@@ -41,7 +41,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@fe104658747b27e96e4f7e80cd0a94068e53901d # v2.16.1
+        uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
         with:
           egress-policy: "audit"
 
@@ -135,7 +135,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@fe104658747b27e96e4f7e80cd0a94068e53901d # v2.16.1
+        uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
         with:
           egress-policy: "audit"
 

.github/workflows/ci.yml

@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@fe104658747b27e96e4f7e80cd0a94068e53901d # v2.16.1
+        uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
         with:
           egress-policy: "audit"
 

.oxlintrc.json

@@ -8,7 +8,7 @@
     "oxc/misrefactored-assign-op": "error",
     "oxc/no-accumulating-spread": "error",
     "oxc/no-barrel-file": "error",
-    "oxc/no-const-enum": "warn",
+    "oxc/no-const-enum": "off",
     "oxc/no-map-spread": "error",
     "oxc/no-this-in-exported-function": "error",
     "typescript/adjacent-overload-signatures": "error",
@@ -20,8 +20,8 @@
     "typescript/consistent-type-assertions": "error",
     "typescript/consistent-type-definitions": ["error", "type"],
     "typescript/dot-notation": "error",
-    "typescript/explicit-function-return-type": "error",
-    "typescript/explicit-module-boundary-types": "error",
+    "typescript/explicit-function-return-type": "off",
+    "typescript/explicit-module-boundary-types": "off",
     "typescript/no-confusing-non-null-assertion": "error",
     "typescript/no-confusing-void-expression": "error",
     "typescript/no-deprecated": "error",
@@ -44,14 +44,14 @@
     "typescript/no-unnecessary-type-assertion": "error",
     "typescript/no-unnecessary-type-constraint": "error",
     "typescript/no-unnecessary-type-parameters": "error",
-    "typescript/no-unsafe-argument": "error",
-    "typescript/no-unsafe-assignment": "error",
+    "typescript/no-unsafe-argument": "off",
+    "typescript/no-unsafe-assignment": "off",
     "typescript/no-unsafe-call": "off",
-    "typescript/no-unsafe-enum-comparison": "error",
-    "typescript/no-unsafe-function-type": "error",
+    "typescript/no-unsafe-enum-comparison": "off",
+    "typescript/no-unsafe-function-type": "off",
     "typescript/no-unsafe-member-access": "off",
-    "typescript/no-unsafe-return": "error",
-    "typescript/no-unsafe-type-assertion": "error",
+    "typescript/no-unsafe-return": "off",
+    "typescript/no-unsafe-type-assertion": "off",
     "typescript/no-useless-default-assignment": "error",
     "typescript/non-nullable-type-assertion-style": "error",
     "typescript/only-throw-error": "error",
@@ -76,14 +76,14 @@
     "typescript/require-await": "error",
     "typescript/restrict-plus-operands": "error",
     "typescript/return-await": "error",
-    "typescript/strict-boolean-expressions": "error",
+    "typescript/strict-boolean-expressions": "off",
     "typescript/strict-void-return": "error",
-    "typescript/switch-exhaustiveness-check": "error",
+    "typescript/switch-exhaustiveness-check": "warn",
     "typescript/unified-signatures": "error",
     "typescript/use-unknown-in-catch-callback-variable": "error"
   },
   "options": {
-    // deno incompatibility
+    // manual check only
     "typeAware": false
   }
 }

CONTRIBUTING.md

@@ -78,7 +78,7 @@ You can get a quick overview with:
 If using Scalar Client, disable the CORS proxy and follow these steps to import the
 instance `oas.json`..:
 
-![](https://static.x.inetol.net/jspaste/backend/scalar-t1.webp)
+![](https://static.inetol.net/jspaste/backend/scalar-t1.webp)
 
 ## Maintenance
 

deno.json

@@ -3,6 +3,9 @@
   "license": "EUPL-1.2",
   "lock": true,
   "nodeModulesDir": "auto",
+  "compilerOptions": {
+    "lib": ["deno.window", "deno.unstable", "esnext"]
+  },
   "unstable": ["cron", "raw-imports", "bare-node-builtins"],
   "allowScripts": [],
   "imports": {
@@ -17,25 +20,26 @@
     "@hono/openapi": "npm:hono-openapi@^1.3.0",
     "@hono/standard-validator": "jsr:@hono/standard-validator@~0.2.2",
     "@std/assert": "jsr:@std/assert@^1.0.19",
-    "@std/async": "jsr:@std/async@^1.2.0",
-    "@std/cache": "jsr:@std/cache@~0.2.2",
-    "@std/collections": "jsr:@std/collections@^1.1.6",
+    "@std/async": "jsr:@std/async@^1.3.0",
+    "@std/cache": "jsr:@std/cache@~0.2.3",
+    "@std/collections": "jsr:@std/collections@^1.1.7",
     "@std/dotenv": "jsr:@std/dotenv@~0.225.6",
     "@std/encoding": "jsr:@std/encoding@^1.0.10",
-    "@std/fmt": "jsr:@std/fmt@^1.0.9",
+    "@std/fmt": "jsr:@std/fmt@^1.0.10",
     "@std/fs": "jsr:@std/fs@^1.0.23",
     "@std/path": "jsr:@std/path@^1.1.4",
-    "@std/streams": "jsr:@std/streams@^1.0.17",
+    "@std/streams": "jsr:@std/streams@^1.1.0",
     "@std/ulid": "jsr:@std/ulid@^1.0.0",
-    "@types/node": "npm:@types/node@^25.5.2",
+    "@types/node": "npm:@types/node@^25.6.0",
     "arkenv": "npm:arkenv@~0.11.0",
     "arktype": "npm:arktype@^2.2.0",
     "hash-wasm": "npm:hash-wasm@^4.12.0",
-    "hono": "jsr:@hono/hono@^4.12.10",
-    "nanoid": "jsr:@sitnik/nanoid@^5.1.7",
-    "oxfmt": "npm:oxfmt@^0.43.0",
-    "oxlint": "npm:oxlint@^1.58.0",
-    "rolldown": "npm:rolldown@1.0.0-rc.13"
+    "hono": "jsr:@hono/hono@^4.12.15",
+    "nanoid": "jsr:@sitnik/nanoid@^5.1.9",
+    "oxfmt": "npm:oxfmt@^0.46.0",
+    "oxlint": "npm:oxlint@^1.61.0",
+    "oxlint-tsgolint": "npm:oxlint-tsgolint@^0.21.1",
+    "rolldown": "npm:rolldown@1.0.0-rc.17"
   },
   "fmt": {
     "exclude": ["**"]