chore(deps): combine dependabot version bumps

Author: TheDuffman85

.nvmrc

@@ -1 +1 @@
-24.14.1
+v24.15.0

README.md

@@ -110,7 +110,7 @@ Configure scheduler intervals, SSH timeouts, password settings, and other applic
 
 ### Prerequisites
 
-- Node.js 24.14.1 installed
+- Node.js 24.15.0 installed
 - pnpm 10.33.0 available via Corepack or a global install
 - SSH access to at least one Linux server
 

docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:24.14.1-trixie-slim AS base
+FROM node:24.15.0-trixie-slim AS base
 WORKDIR /app
 RUN apt-get update \
     && apt-get install -y --no-install-recommends --only-upgrade libc6 libc-bin \

package.json

@@ -4,7 +4,7 @@
   "type": "module",
   "packageManager": "pnpm@10.33.0",
   "engines": {
-    "node": "24.14.1"
+    "node": "24.15.0"
   },
   "scripts": {
     "dev": "APP_VERSION=dev-$(date -u +'%Y%m%d%H%M'); VITE_APP_VERSION=\"$APP_VERSION\" LUDASH_APP_VERSION=\"$APP_VERSION\" pnpm run dev:server & VITE_APP_VERSION=\"$APP_VERSION\" LUDASH_APP_VERSION=\"$APP_VERSION\" pnpm run dev:client",
@@ -16,8 +16,7 @@
     "check": "tsc --noEmit"
   },
   "dependencies": {
-    "@hono/node-server": "1.19.14",
-    "@hono/node-ws": "1.3.0",
+    "@hono/node-server": "2.0.0",
     "@simplewebauthn/server": "^13.3.0",
     "@types/sortablejs": "^1.15.9",
     "bcryptjs": "3.0.3",
@@ -31,7 +30,8 @@
     "nodemailer": "^8.0.2",
     "openid-client": "^6.3.0",
     "sortablejs": "^1.15.7",
-    "ssh2": "^1.16.0"
+    "ssh2": "^1.16.0",
+    "ws": "^8.20.0"
   },
   "devDependencies": {
     "@tailwindcss/vite": "^4.2.2",
@@ -42,6 +42,7 @@
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "@types/ssh2": "^1.15.0",
+    "@types/ws": "^8.18.1",
     "@vitejs/plugin-react": "^6.0.1",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
@@ -50,7 +51,7 @@
     "tsup": "8.5.1",
     "tsx": "4.21.0",
     "typescript": "^6.0.2",
-    "vite": "8.0.8",
-    "vitest": "4.1.4"
+    "vite": "8.0.10",
+    "vitest": "4.1.5"
   }
 }

pnpm-lock.yaml

@@ -157,7 +157,7 @@ fi
 # Check for Node.js and pnpm
 if ! command -v node &> /dev/null; then
     log "Error: 'node' is not installed."
-    log "Please install Node.js 24.14.1 to run this application locally."
+    log "Please install Node.js 24.15.0 to run this application locally."
     log "Alternatively, use Docker to run the containerized application."
     exit 1
 fi

run.sh

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
 import { cors } from "hono/cors";
 import { serveStatic } from "@hono/node-server/serve-static";
-import { createNodeWebSocket } from "@hono/node-ws";
+import { upgradeWebSocket } from "@hono/node-server";
 import { authMiddleware } from "./middleware/auth";
 import { csrfMiddleware } from "./middleware/csrf";
 import { getTrustedPublicOrigin, rememberTrustedPublicOrigin } from "./request-security";
@@ -19,7 +19,6 @@ import credentialsRoutes from "./routes/credentials";
 
 export function createApp() {
   const app = new Hono();
-  const { injectWebSocket, upgradeWebSocket } = createNodeWebSocket({ app });
 
   // Security headers
   app.use("*", async (c, next) => {
@@ -111,5 +110,5 @@ export function createApp() {
     app.get("*", serveStatic({ root: "./dist/client", path: "index.html" }));
   }
 
-  return { app, injectWebSocket };
+  return app;
 }

server/app.ts

@@ -1,6 +1,7 @@
 import { mkdirSync, chmodSync } from "fs";
 import { dirname } from "path";
 import { serve } from "@hono/node-server";
+import { WebSocketServer } from "ws";
 import { eq } from "drizzle-orm";
 import { config, getEncryptionSalt, hasConfiguredBaseUrl } from "./config";
 import { initDatabase, closeDatabase, getDb } from "./db";
@@ -69,7 +70,8 @@ logger.info("Starting update scheduler");
 scheduler.start();
 
 // Create and start Hono app
-const { app, injectWebSocket } = createApp();
+const app = createApp();
+const wss = new WebSocketServer({ noServer: true });
 
 logger.info("Server starting", {
   host: config.host,
@@ -81,8 +83,10 @@ const server = serve({
   fetch: app.fetch,
   hostname: config.host,
   port: config.port,
+  websocket: {
+    server: wss,
+  },
 });
-injectWebSocket(server);
 
 logger.info("Starting notification runtimes");
 notificationRuntime.start().catch((error) => {

server/index.ts

@@ -1,3 +1,5 @@
+/// <reference types="node" />
+
 import { describe, test, expect } from "vitest";
 import { CredentialEncryptor, isPassphraseKey } from "../../server/security";
 import { createCipheriv, randomBytes } from "crypto";
@@ -23,7 +25,9 @@ describe("CredentialEncryptor", () => {
   test("tampered ciphertext fails", () => {
     const enc = new CredentialEncryptor(testKey);
     const ciphertext = enc.encrypt("test");
-    const tampered = "X" + ciphertext.slice(1);
+    const tamperedBytes = Buffer.from(ciphertext, "base64");
+    tamperedBytes[tamperedBytes.length - 1] ^= 0xff;
+    const tampered = tamperedBytes.toString("base64");
     expect(() => enc.decrypt(tampered)).toThrow();
   });