v0.11.0 — Moleculer 0.15 support

.editorconfig

@@ -19,10 +19,16 @@ insert_final_newline = true
 
 [*.md]
 trim_trailing_whitespace = false
+indent_style = space
+indent_size = 4
 
 [{package,bower}.json]
 indent_style = space
 indent_size = 2
 
+[*.yml]
+indent_style = space
+indent_size = 2
+
 [*.js]
 quote_type = "double"

.github/workflows/nodejs.yml

@@ -8,7 +8,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [10.x, 12.x, 14.x, 16.x, 18.x, 20.x]
+        node-version: [22.x, 24.x]
 
     steps:
     - uses: actions/checkout@v4

.github/workflows/publish.yml

@@ -0,0 +1,30 @@
+name: Publish to NPM
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Use Node.js 22.x
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run tests
+        run: npm test
+
+      - name: Publish
+        run: npm publish --provenance

CHANGELOG.md

@@ -1,3 +1,145 @@
+<a name="0.11.0-beta4"></a>
+# 0.11.0-beta4 (2026-03-23)
+
+## Changes
+
+### Bug fixes
+- fix: skip blacklisted actions in auto-alias regeneration [#366](https://github.com/moleculerjs/moleculer-web/pull/366)
+- fix: crash when the upload file size exceeds the limit [#363](https://github.com/moleculerjs/moleculer-web/pull/363)
+- fix: mergeParams for internal services ($node.*) — params were not merged on the current request [#332](https://github.com/moleculerjs/moleculer-web/pull/332)
+
+### Improvements
+- Remove incorrect `declare module "moleculer-web"` wrapper from TypeScript definitions (based on [#357](https://github.com/moleculerjs/moleculer-web/pull/357))
+- Add tests for blacklist with autoAliases and mergeParams with internal services
+
+### Dependencies
+- Update all dependencies (major: eslint 10, @sinonjs/fake-timers 15, @types/serve-static 2, cross-env 10, eslint-plugin-security 4, webpack-dev-middleware 8)
+- Remove unused `eslint-plugin-node`
+- Add `@eslint/js` and `globals` for ESLint 10 flat config
+
+### CI
+- Update Node.js CI matrix: remove 18.x and 20.x, add 24.x
+- Bump minimum Node.js version to 22.x
+
+-----------------------------
+<a name="0.11.0-beta3"></a>
+# 0.11.0-beta3 (2025-10-09)
+
+## Changes
+
+- Added missing exported 3rd-party types
+- Added context response type
+- Added boolean CORS option
+- Fixed TypeScript definition exports
+- Fixed TypeScript import issue in case of module node16
+- Fixed typo in documentation
+
+<a name="0.11.0-beta2"></a>
+# 0.11.0-beta2 (2025-06-11)
+
+## Changes
+
+### BREAKING: Minimum Node 20
+
+The minimum Node version is Node 20.x.
+
+### BREAKING: Update dependencies
+Many dependencies (major, minor, patch) is upgraded which can contain breaking changes
+
+<a name="0.11.0-beta1"></a>
+# 0.11.0-beta1 (2024-12-04)
+
+## Changes
+
+### BREAKING: Updated `path-ro-regexp` library
+
+The `path-to-regexp` has been updated to 8.x.x. It contains many breaking changes in the path resolving. Check the [documentation](https://github.com/pillarjs/path-to-regexp?tab=readme-ov-file#express--4x) of library to how migrate your alias paths.
+
+**Optional parameter alias path**
+
+```
+    // Old way
+    "GET user/:name?": "user.get"
+
+    // New way
+    "GET user{/:name}": "user.get"
+```
+
+**Repeating parameter alias path**
+
+```
+    // Old way
+    "GET /users/*username": "user.resolveUsersByNames",
+
+    // New way
+    "GET /users/:username*": "user.resolveUsersByNames",
+```
+
+
+### Using 0.15 new streaming solution
+
+The moleculer-web@0.11.x supports Moleculer v0.15.x including the new streaming solution. It means, it doesn't support 0.13 and 0.14 moleculer versions.
+
+Thanks for the new solution, the multipart fields and request parameters are sent via `ctx.params` instead of meta and the file stream is available in `ctx.stream` in action handlers.
+
+**Example**
+
+```js
+module.exports = {
+    name: "file",
+    actions: {
+        save: {
+            handler(ctx) {
+                return new this.Promise((resolve, reject) => {
+                    const filePath = path.join(uploadDir, ctx.params.$filename);
+                    const f = fs.createWriteStream(filePath);
+                    f.on("close", () => {
+                        // File written successfully
+                        this.logger.info(`Uploaded file stored in '${filePath}'`);
+                        resolve({ filePath });
+                    });
+
+                    ctx.stream.on("error", err => {
+                        this.logger.info("File error received", err.message);
+                        reject(err);
+
+                        // Destroy the local file
+                        f.destroy(err);
+                    });
+
+                    f.on("error", () => {
+                        // Remove the errored file.
+                        fs.unlinkSync(filePath);
+                    });
+
+                    ctx.stream.pipe(f);
+                });
+            }
+        }
+    }
+};
+```
+
+Example content of `ctx.params`:
+
+```js
+{
+    // Multipart file properties
+    $fieldname: "myfile",
+    $filename: "avatar.png",
+    $encoding: "7bit",
+    $mimetype: "image/png",
+
+    // Other multipart fields
+    // e.g.: `<input type="text" name="name" id="name" value="Test User">`
+    name: "Test User",
+
+    // Request path parameter, e.g.: `/upload/single/1234`
+    id: "1234"
+}
+```
+
+-----------------------------
 <a name="0.10.8"></a>
 # 0.10.8 (2025-03-24)
 

benchmarks/cluster/index.js

@@ -1,25 +1,31 @@
-/* eslint-disable no-console */
-
 "use strict";
 
-const
-	os = require("os"),
+const os = require("os"),
 	cluster = require("cluster"),
 	stopSignals = [
-		"SIGHUP", "SIGINT", "SIGQUIT", "SIGILL", "SIGTRAP", "SIGABRT",
-		"SIGBUS", "SIGFPE", "SIGUSR1", "SIGSEGV", "SIGUSR2", "SIGTERM"
+		"SIGHUP",
+		"SIGINT",
+		"SIGQUIT",
+		"SIGILL",
+		"SIGTRAP",
+		"SIGABRT",
+		"SIGBUS",
+		"SIGFPE",
+		"SIGUSR1",
+		"SIGSEGV",
+		"SIGUSR2",
+		"SIGTERM"
 	],
 	production = true; //process.env.NODE_ENV == "production";
 
 let stopping = false;
 
-cluster.on("disconnect", function(worker) {
+cluster.on("disconnect", function (worker) {
 	if (production) {
 		if (!stopping) {
 			cluster.fork();
 		}
-	} else
-		process.exit(1);
+	} else process.exit(1);
 });
 
 if (cluster.isMaster) {
@@ -30,11 +36,11 @@ if (cluster.isMaster) {
 	}
 
 	if (production) {
-		stopSignals.forEach(function(signal) {
-			process.on(signal, function() {
+		stopSignals.forEach(function (signal) {
+			process.on(signal, function () {
 				console.log(`Got ${signal}, stopping workers...`);
 				stopping = true;
-				cluster.disconnect(function() {
+				cluster.disconnect(function () {
 					console.log("All workers stopped, exiting.");
 					process.exit(0);
 				});
@@ -48,7 +54,6 @@ if (cluster.isMaster) {
 	worker.process.argv.push(hostname + "-worker-" + worker.id);
 
 	require("./worker.js");
-
 }
 
 /**

benchmarks/cluster/worker.js

@@ -1,8 +1,7 @@
-/* eslint-disable no-console */
 "use strict";
 
-const { ServiceBroker } 	= require("moleculer");
-const ApiService 			= require("../../index");
+const { ServiceBroker } = require("moleculer");
+const ApiService = require("../../index");
 
 // Create broker
 const broker = new ServiceBroker({
@@ -24,5 +23,4 @@ broker.createService({
 broker.createService(ApiService);
 
 // Start server
-broker.start()
-	.then(() => console.log(`Worker '${broker.nodeID}' started.`));
+broker.start().then(() => console.log(`Worker '${broker.nodeID}' started.`));