@vercel/functions - npm Package Compare versions

Comparing version 3.5.0-canary.20260211174907.cdd2da6 to 3.5.0

cache/index.js

@@ -40,17 +40,2 @@ "use strict";
 const defaultNamespaceSeparator = "$";
-function encodeTags(tags) {
-  return tags.map(encodeURIComponent);
-}
-function encodeTag(tag) {
-  return Array.isArray(tag) ? encodeTags(tag) : encodeURIComponent(tag);
-}
-function encodeOptions(options) {
-  if (!options) {
-    return void 0;
-  }
-  if (options.tags && options.tags.length > 0) {
-    return { ...options, tags: encodeTags(options.tags) };
-  }
-  return options;
-}
 let inMemoryCacheInstance = null;
@@ -90,7 +75,3 @@ let buildCacheInstance = null;
     set: (key, value, options) => {
-      const encodedOptions = encodeOptions(options);
-      if (encodedOptions) {
-        return resolveCache().set(makeKey(key), value, encodedOptions);
-      }
-      return resolveCache().set(makeKey(key), value);
+      return resolveCache().set(makeKey(key), value, options);
     },
@@ -101,3 +82,3 @@ delete: (key) => {
     expireTag: (tag) => {
-      return resolveCache().expireTag(encodeTag(tag));
+      return resolveCache().expireTag(tag);
     }
@@ -104,0 +85,0 @@ };

CHANGELOG.md

 # @vercel/functions
 
+## 3.5.0
+
+### Minor Changes
+
+- c56f851: Upgrade to TypeScript 5.9
+
+### Patch Changes
+
+- Updated dependencies [c56f851]
+  - @vercel/oidc@3.4.0
+
+## 3.4.6
+
+### Patch Changes
+
+- Updated dependencies [bf07448]
+  - @vercel/oidc@3.3.1
+
+## 3.4.5
+
+### Patch Changes
+
+- 56c9f89: add missing prettier dev dependency
+- Updated dependencies [24686d0]
+- Updated dependencies [56c9f89]
+  - @vercel/oidc@3.3.0
+
+## 3.4.4
+
+### Patch Changes
+
+- Pin `typedoc-plugin-markdown` to `3.15.2` and `typedoc-plugin-mdn-links` to `3.0.3` to match the version used by `@vercel/edge`. The previous `4.1.2` version requires `typedoc@0.26.x` as a peer dependency but was paired with `typedoc@0.24.6`, which caused CI failures whenever pnpm hoisted the 4.x plugin (the plugin calls `app.internationalization.addTranslations`, which does not exist in typedoc 0.24). The choice of which plugin version got hoisted was non-deterministic, which is why the failure appeared as flaky `Build @vercel/<pkg>` steps in CI. ([#16072](https://github.com/vercel/vercel/pull/16072))
+
+- Updated dependencies [[`2aa78415831fe89d1b21dd89704706bd1ad5e78d`](https://github.com/vercel/vercel/commit/2aa78415831fe89d1b21dd89704706bd1ad5e78d)]:
+  - @vercel/oidc@3.2.1
+
+## 3.4.3
+
+### Patch Changes
+
+- [functions] Revert "[functions] URL encode cache tags" ([#15213](https://github.com/vercel/vercel/pull/15213))
+
 ## 3.4.2
@@ -4,0 +46,0 @@

docs/modules/index.md

@@ -264,3 +264,3 @@ # Module: index
 
-[packages/functions/src/cache/index.ts:55](https://github.com/vercel/vercel/blob/main/packages/functions/src/cache/index.ts#L55)
+[packages/functions/src/cache/index.ts:33](https://github.com/vercel/vercel/blob/main/packages/functions/src/cache/index.ts#L33)
 
@@ -267,0 +267,0 @@ ---

oidc/aws-credentials-provider.js

@@ -38,3 +38,3 @@ "use strict";
     return await import("@aws-sdk/credential-provider-web-identity");
-  } catch (err) {
+  } catch (_err) {
     throw new Error(
@@ -41,0 +41,0 @@ "package '@aws-sdk/credential-provider-web-identity' not found"

package.json

@@ -33,3 +33,3 @@ {
   },
-  "version": "3.5.0-canary.20260211174907.cdd2da6",
+  "version": "3.5.0",
   "repository": {
@@ -53,7 +53,7 @@ "directory": "packages/functions",
     "mysql2": "3.14.2",
+    "prettier": "3.8.3",
     "tinyspawn": "1.3.1",
     "typedoc": "0.24.6",
-    "typedoc-plugin-markdown": "4.1.2",
-    "typedoc-plugin-mdn-links": "3.2.3",
-    "typescript": "4.9.5",
+    "typedoc-plugin-markdown": "3.15.2",
+    "typedoc-plugin-mdn-links": "3.0.3",
     "vitest": "2.0.1"
@@ -77,3 +77,3 @@ },
   "dependencies": {
-    "@vercel/oidc": "3.3.0-canary.20260211174907.cdd2da6"
+    "@vercel/oidc": "3.4.0"
   },
@@ -80,0 +80,0 @@ "scripts": {

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 8 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 8 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

153664

0.5%

Number of low quality alerts

0

-100%

Worsened metrics

Lines of code

2005

-0.94%

Dependency changes

• + Added

  @vercel/oidc@3.4.0
  (transitive)

• - Removed

  @vercel/[e-mail]2da6
  (transitive)

• Updated

  @vercel/oidc@3.4.0