lavamoat-tofu

This is the TOFU (trust-on-first-use) static analysis tool used by LavaMoat to automatically generate useable config

security note

read access on a global object implies write access to its properties.

The following config implies write acess to location.href

{
  "location": "read"
}

Changelog

8.0.7 (2025-05-01)

Bug Fixes

• deps: update babel monorepo to v7.26.10 (#1561) (2757717)
• deps: update babel monorepo to v7.27.0 (#1589) (efd83d7)
• deps: update definitelytyped (#1574) (6c2d54e)
• deps: update dependency type-fest to v4.40.0 (#1619) (4e20306)
• deps: update dependency type-fest to v4.40.1 (#1624) (b918dcc)

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from >15.4.0 to >16.4.0

8.0.6 (2025-03-11)

Bug Fixes

• deps: update babel monorepo to v7.26.7 (#1524) (7285fdf)
• deps: update babel monorepo to v7.26.9 (6a9dc73)

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from >15.4.0 to >16.3.2

8.0.5 (2025-01-28)

Bug Fixes

• deps: update babel monorepo to v7.26.5 (#1501) (4e1e19d)

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from >15.4.0 to >16.3.1

8.0.4 (2024-12-05)

Bug Fixes

• make policy ordering consistntly manifest itself in json files produced (a149a7d)

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from >15.4.0 to >16.2.1

8.0.3 (2024-12-04)

Bug Fixes

• deps: update babel monorepo (e6f4e70)
• deps: update babel monorepo to v7.25.9 (6d9d5a3)
• deps: update babel monorepo to v7.26.2 (9bac12a)
• deps: update dependency type-fest to v4.30.0 (6528665)

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from >15.4.0 to >16.2.0

8.0.2 (2024-10-11)

Bug Fixes

• deps: update babel monorepo to v7.25.7 (1ee84bf)
• deps: update babel monorepo to v7.25.8 (1dcb35e)

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from >15.4.0 to >16.1.0

8.0.1 (2024-09-11)

Bug Fixes

• deps: update babel monorepo to v7.25.4 (6b59ee5)
• deps: update babel monorepo to v7.25.6 (6a42125)
• deps: update dependency type-fest to v4.25.0 (a5c8d3e)
• deps: update dependency type-fest to v4.26.0 (f4051f9)
• deps: update dependency type-fest to v4.26.1 (6172f93)

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from >15.4.0 to >16.0.1

8.0.0 (2024-08-15)

⚠ BREAKING CHANGES

• tofu: remove support for Node.js v16

Bug Fixes

• deps: update babel monorepo (0880e2e)
• deps: update babel monorepo (d9d40b4)
• deps: update babel monorepo (b6aa714)
• deps: update dependency type-fest to v4.23.0 (d04e1f3)
• deps: update dependency type-fest to v4.24.0 (c735909)

Miscellaneous Chores

• tofu: remove support for Node.js v16 (61d4572)

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from ^15.4.0 to ^16.0.0

7.3.0 (2024-07-11)

Features

• tofu: support node.js 22.x (d6c5e1f)

Bug Fixes

• deps: update babel monorepo (246ec25)
• deps: update babel monorepo to v7.24.5 (7e466bd)
• deps: update babel monorepo to v7.24.6 (f6d450f)
• deps: update definitelytyped (a23d8be)
• deps: update dependency type-fest to v4.14.0 (1321a58)
• deps: update dependency type-fest to v4.15.0 (c48f8e3)

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from ^15.3.0 to ^15.4.0

7.2.3 (2024-03-26)

Bug Fixes

• deps: update dependency type-fest to v4.10.3 (95c0ae3)
• deps: update dependency type-fest to v4.12.0 (29d157c)
• deps: update dependency type-fest to v4.13.1 (ec89820)
• tofu: ClassProperty nodes are not globals (ca63a99), closes #1098

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from ^15.2.1 to ^15.3.0

7.2.2 (2024-02-29)

Bug Fixes

• tofu: fix logic error in inspectEsmImports (4c50878)

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from ^15.2.0 to ^15.2.1

7.2.1 (2024-02-29)

Bug Fixes

• tofu/test: platform-agnostic line separator (a9c9c0f)

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from ^15.1.2 to ^15.2.0

7.2.0 (2024-02-07)

Features

• tofu: add ESM support (be9594c)

Bug Fixes

• deps: update dependency type-fest to v4.10.0 (9f2cf3c)
• deps: update dependency type-fest to v4.10.1 (36567e7)
• deps: update dependency type-fest to v4.10.2 (1580ed9)
• deps: update dependency type-fest to v4.9.0 (70e9ffd)
• tofu: fix type errors (fe75965)

Dependencies

• The following workspace dependencies were updated
  • peerDependencies
    • lavamoat-core bumped from ^15.0.0 to ^15.1.2

7.1.0 (2024-01-18)

Features

• tofu: provide type definitions (5057d19)

Bug Fixes

• core: update LavaMoatPolicy types (d9292ca)
• deps: pin dependencies (4006c1f)
• tofu: make lavamoat-core a peer dep (21b0b2b)

7.0.0 (2023-10-18)

⚠ BREAKING CHANGES

• The minimum supported Node.js version is now v16.20.0.

Bug Fixes

• browserify,node,tofu,viz: bump babel packages (4e12040)
• drop Node.js v14 (#729) (10c667b)

6.2.1 (2023-09-14)

Bug Fixes

• normalize all package versions (0800c11)
• tofu: parse private names (f15e027), closes #642

6.0.3 (2023-09-08)

Bug Fixes

• tofu: parse private names (f15e027), closes #642