0.6.6

Excalibur 0.6.6 is a patch release fixing bugs on the app and server.

App

🔒️ Security

• 🔒️ Overridden version minima of dependencies in pnpm-workspace.yaml to address security vulnerabilities:
  • GHSA-4x5r-pxfx-6jf8: @babel/core to 7.29.1
  • GHSA-gv7w-rqvm-qjhr, GHSA-g7r4-m6w7-qqqr: esbuild to 0.28.1
  • GHSA-hmw2-7cc7-3qxx: form-data to 4.0.6
  • GHSA-h67p-54hq-rp68: js-yaml to 4.1.2
  • GHSA-q8mj-m7cp-5q26: qs to 6.15.2
  • GHSA-vmf3-w455-68vh: tar to 7.5.16
  • GHSA-ph9p-34f9-6g65: tmp to 0.2.6
  • GHSA-w5hq-g745-h8pq: uuid to 11.1.1
  • GHSA-fx2h-pf6j-xcff, GHSA-v6wh-96g9-6wx3: vite to 7.3.5

🐛 Bug Fixes

• 🐛 Fixed a bug where nested directories with paths like folder/subfolder would be created as a single directory with the name folder/subfolder (with the slash)

⬆️ Dependencies

• ⬆️ Updated prettier development dependency from 3.8.3 to 3.8.4 (#54)
• ⬆️ Updated typescript-eslint development dependency from 8.60.1 to 8.61.0 (#55)

Server

🔒️ Security

• 🔒️ Overridden version minima of dependencies in uv.lock to address security vulnerabilities:
  • GHSA-65pc-fj4g-8rjx: idna to 3.15
  • GHSA-86qp-5c8j-p5mr, GHSA-x746-7m8f-x49c, GHSA-wqp7-x3pw-xc5r, GHSA-82w8-qh3p-5jfq, GHSA-jp82-jpqv-5vv3: starlette to 1.3.1

🐛 Bug Fixes

• 🐛 Fixed bug where the server did not properly resolve dot-slashes (./) in paths, especially for encrypted paths

⬆️ Dependencies

• ➕ Added httpx2 test dependency
• ➖ Removed httpx test dependency
• ⬆️ Updated ipython development dependency from 9.14.0 to 9.14.1 (#57)
• ⬆️ Updated ruff development dependency from 0.15.13 to 0.15.16 (#53)