chore: Upgrade dependencies (#89)

aarne · web-flow · commit 517e33bac35b · 2026-03-05T08:27:03.000+01:00
diff --git a/examples/builtin-tools/package.json b/examples/builtin-tools/package.json
@@ -11,6 +11,6 @@
     "graphql-yoga": "^5.18.0"
   },
   "devDependencies": {
-    "@types/node": "^25.3.2"
+    "@types/node": "^25.3.3"
   }
 }
diff --git a/examples/composed-gateway/package.json b/examples/composed-gateway/package.json
@@ -11,6 +11,6 @@
     "graphql-yoga": "^5.18.0"
   },
   "devDependencies": {
-    "@types/node": "^25.3.2"
+    "@types/node": "^25.3.3"
   }
 }
diff --git a/examples/travel-api/package.json b/examples/travel-api/package.json
@@ -11,6 +11,6 @@
     "graphql-yoga": "^5.18.0"
   },
   "devDependencies": {
-    "@types/node": "^25.3.2"
+    "@types/node": "^25.3.3"
   }
 }
diff --git a/examples/weather-api/package.json b/examples/weather-api/package.json
@@ -11,6 +11,6 @@
     "graphql-yoga": "^5.18.0"
   },
   "devDependencies": {
-    "@types/node": "^25.3.2"
+    "@types/node": "^25.3.3"
   }
 }
diff --git a/examples/without-graphql/package.json b/examples/without-graphql/package.json
@@ -11,6 +11,6 @@
     "@stackables/bridge": "workspace:*"
   },
   "devDependencies": {
-    "@types/node": "^25.3.2"
+    "@types/node": "^25.3.3"
   }
 }
diff --git a/package.json b/package.json
@@ -22,7 +22,7 @@
   },
   "devDependencies": {
     "@changesets/changelog-github": "^0.6.0",
-    "@changesets/cli": "^2.29.8",
+    "@changesets/cli": "^2.30.0",
     "@eslint/js": "^10.0.1",
     "@tsconfig/node24": "^24.0.4",
     "eslint": "^10.0.2",
diff --git a/packages/bridge-compiler/package.json b/packages/bridge-compiler/package.json
@@ -27,7 +27,7 @@
   },
   "devDependencies": {
     "@stackables/bridge-parser": "workspace:*",
-    "@types/node": "^25.3.2",
+    "@types/node": "^25.3.3",
     "fast-check": "^4.5.3",
     "typescript": "^5.9.3"
   },
diff --git a/packages/bridge-compiler/test/fuzz-compile.test.ts b/packages/bridge-compiler/test/fuzz-compile.test.ts
@@ -16,7 +16,16 @@ const AsyncFunction = Object.getPrototypeOf(async function () {})
   ...args: string[]
 ) => (...args: unknown[]) => Promise<unknown>;
 
-const identifierArb = fc.stringMatching(/^[a-zA-Z_][a-zA-Z0-9_]{0,20}$/);
+const forbiddenPathSegments = new Set([
+  "__proto__",
+  "prototype",
+  "constructor",
+]);
+
+const identifierArb = fc
+  .stringMatching(/^[a-zA-Z_][a-zA-Z0-9_]{0,20}$/)
+  // Runtime blocks unsafe traversal segments; fuzz should stay in valid domain.
+  .filter((segment) => !forbiddenPathSegments.has(segment));
 const canonicalIdentifierArb = fc.constantFrom(
   "a",
   "b",
diff --git a/packages/bridge-core/package.json b/packages/bridge-core/package.json
@@ -35,7 +35,7 @@
     "@stackables/bridge-types": "workspace:*"
   },
   "devDependencies": {
-    "@types/node": "^25.3.2",
+    "@types/node": "^25.3.3",
     "typescript": "^5.9.3"
   },
   "publishConfig": {
diff --git a/packages/bridge-graphql/package.json b/packages/bridge-graphql/package.json
@@ -34,14 +34,14 @@
   "devDependencies": {
     "@graphql-tools/executor-http": "^3.1.0",
     "@stackables/bridge-parser": "workspace:*",
-    "@types/node": "^25.3.2",
-    "graphql": "^16.13.0",
+    "@types/node": "^25.3.3",
+    "graphql": "^16.13.1",
     "graphql-yoga": "^5.18.0",
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "graphql": "^16",
-    "@graphql-tools/utils": "^11"
+    "@graphql-tools/utils": "^11",
+    "graphql": "^16"
   },
   "publishConfig": {
     "access": "public"
diff --git a/packages/bridge-parser/package.json b/packages/bridge-parser/package.json
@@ -29,10 +29,10 @@
   "dependencies": {
     "@stackables/bridge-core": "workspace:*",
     "@stackables/bridge-stdlib": "workspace:*",
-    "chevrotain": "^11.1.2"
+    "chevrotain": "^11.2.0"
   },
   "devDependencies": {
-    "@types/node": "^25.3.2",
+    "@types/node": "^25.3.3",
     "typescript": "^5.9.3"
   },
   "publishConfig": {
diff --git a/packages/bridge-parser/src/bridge-format.ts b/packages/bridge-parser/src/bridge-format.ts
@@ -21,6 +21,29 @@ export function parseBridge(text: string): BridgeDocument {
 
 const BRIDGE_VERSION = "1.5";
 
+const RESERVED_BARE_VALUE_KEYWORDS = new Set([
+  "version",
+  "bridge",
+  "tool",
+  "define",
+  "with",
+  "input",
+  "output",
+  "context",
+  "const",
+  "from",
+  "as",
+  "alias",
+  "on",
+  "error",
+  "continue",
+  "break",
+  "throw",
+  "panic",
+  "if",
+  "pipe",
+]);
+
 /** Serialize a ControlFlowInstruction to its textual form. */
 function serializeControl(ctrl: ControlFlowInstruction): string {
   if (ctrl.kind === "throw") return `throw ${JSON.stringify(ctrl.message)}`;
@@ -77,7 +100,9 @@ function needsQuoting(v: string): boolean {
   if (v === "true" || v === "false" || v === "null") return false;
   if (/^-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?$/.test(v)) return false; // number
   if (/^\/[\w./-]+$/.test(v)) return false; // /path
-  if (/^[a-zA-Z_][\w-]*$/.test(v)) return false; // identifier / keyword
+  if (/^[a-zA-Z_][\w-]*$/.test(v)) {
+    return RESERVED_BARE_VALUE_KEYWORDS.has(v);
+  }
   return true;
 }
 
diff --git a/packages/bridge-stdlib/package.json b/packages/bridge-stdlib/package.json
@@ -33,7 +33,7 @@
     "lru-cache": "^11.2.6"
   },
   "devDependencies": {
-    "@types/node": "^25.3.2",
+    "@types/node": "^25.3.3",
     "typescript": "^5.9.3"
   },
   "publishConfig": {
diff --git a/packages/bridge-syntax-highlight/package.json b/packages/bridge-syntax-highlight/package.json
@@ -51,7 +51,7 @@
   },
   "devDependencies": {
     "@stackables/bridge": "workspace:*",
-    "@types/node": "^25.3.2",
+    "@types/node": "^25.3.3",
     "@types/vscode": "^1.109.0",
     "esbuild": "^0.27.3",
     "typescript": "^5.9.3",
diff --git a/packages/bridge-types/package.json b/packages/bridge-types/package.json
@@ -26,7 +26,7 @@
   },
   "license": "MIT",
   "devDependencies": {
-    "@types/node": "^25.3.2",
+    "@types/node": "^25.3.3",
     "typescript": "^5.9.3"
   },
   "publishConfig": {
diff --git a/packages/bridge/package.json b/packages/bridge/package.json
@@ -38,15 +38,15 @@
   "devDependencies": {
     "@graphql-tools/executor-http": "^3.1.0",
     "@stackables/bridge-compiler": "workspace:*",
-    "@types/node": "^25.3.2",
-    "graphql": "^16.13.0",
+    "@types/node": "^25.3.3",
+    "graphql": "^16.13.1",
     "graphql-yoga": "^5.18.0",
     "typescript": "^5.9.3"
   },
   "dependencies": {
-    "@stackables/bridge-parser": "workspace:*",
     "@stackables/bridge-core": "workspace:*",
     "@stackables/bridge-graphql": "workspace:*",
+    "@stackables/bridge-parser": "workspace:*",
     "@stackables/bridge-stdlib": "workspace:*"
   },
   "publishConfig": {
diff --git a/packages/bridge/test/bridge-format.test.ts b/packages/bridge/test/bridge-format.test.ts
@@ -1266,3 +1266,19 @@ bridge Query.test {
     );
   });
 });
+
+describe("serializeBridge string keyword quoting", () => {
+  test("keeps reserved-word strings quoted in constant wires", () => {
+    const src = `version 1.5
+bridge Query.test {
+  with input as i
+  with output as o
+
+  o.value = "const"
+}`;
+
+    const serialized = serializeBridge(parseBridge(src));
+    assert.ok(serialized.includes('o.value = "const"'), serialized);
+    assert.doesNotThrow(() => parseBridge(serialized));
+  });
+});
diff --git a/packages/docs-site/package.json b/packages/docs-site/package.json
@@ -24,11 +24,11 @@
   },
   "devDependencies": {
     "@astrojs/check": "^0.9.6",
-    "@types/node": "^25.3.2",
+    "@types/node": "^25.3.3",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "@yeskunall/astro-umami": "^0.0.7",
     "typescript": "^5.9.3",
-    "wrangler": "^4.69.0"
+    "wrangler": "^4.70.0"
   }
 }
diff --git a/packages/playground/package.json b/packages/playground/package.json
@@ -12,13 +12,13 @@
     "preview": "vite preview"
   },
   "dependencies": {
-    "@codemirror/autocomplete": "^6.20.0",
+    "@codemirror/autocomplete": "^6.20.1",
     "@codemirror/commands": "^6.10.2",
     "@codemirror/lang-json": "^6.0.2",
     "@codemirror/language": "^6.12.2",
-    "@codemirror/lint": "^6.9.4",
+    "@codemirror/lint": "^6.9.5",
     "@codemirror/state": "^6.5.4",
-    "@codemirror/view": "^6.39.15",
+    "@codemirror/view": "^6.39.16",
     "@lezer/highlight": "^1.2.3",
     "@radix-ui/react-dialog": "1.1.15",
     "@radix-ui/react-dropdown-menu": "^2.1.16",
@@ -29,23 +29,23 @@
     "clsx": "2.1.1",
     "cm6-graphql": "^0.2.1",
     "codemirror": "^6.0.2",
-    "graphql": "^16.13.0",
-    "lucide-react": "0.575.0",
+    "graphql": "^16.13.1",
+    "lucide-react": "0.577.0",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
-    "react-resizable-panels": "4.6.5",
+    "react-resizable-panels": "4.7.1",
     "tailwind-merge": "3.5.0"
   },
   "devDependencies": {
-    "@cloudflare/vite-plugin": "^1.25.6",
-    "@cloudflare/workers-types": "^4.20260305.0",
+    "@cloudflare/vite-plugin": "^1.26.0",
+    "@cloudflare/workers-types": "^4.20260305.1",
     "@tailwindcss/vite": "4.2.1",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "^5.1.4",
     "tailwindcss": "4.2.1",
     "typescript": "^5.9.3",
     "vite": "^7.3.1",
-    "wrangler": "^4.69.0"
+    "wrangler": "^4.70.0"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml

Original file line number	Diff line number	Diff line change
`@@ -11,6 +11,6 @@`
`11`	`11`	`"graphql-yoga": "^5.18.0"`
`12`	`12`	`},`
`13`	`13`	`"devDependencies": {`
`14`		`- "@types/node": "^25.3.2"`
	`14`	`+ "@types/node": "^25.3.3"`
`15`	`15`	`}`
`16`	`16`	`}`