mirror of
https://github.com/typeorm/typeorm.git
synced 2025-12-08 21:26:23 +00:00
9cdfb20b12
* chore: bump sha.js from 2.4.11 to 2.4.12 (fix security issue: CVE-2025-9288) * test: add unit tests for hash() to ensure sha.js upgrade compatibility - Verify SHA1 output for known inputs - Test truncation with options.length - Handle empty string input - Confirm deterministic behavior for identical inputs * removed .only from test/unit/util/string-utils.ts to run all the unit tests * fix(hash): ensure negative or zero options.length returns full hash - Updated hash() to only truncate when options.length > 0 - Prevents accidental truncation when options.length is negative - Maintains expected behavior for full-length hash * added strict +ve number input validation for hash() * simplified the logic to check number len before applying slice() in StringUtils.ts->hash() --------- Co-authored-by: Prateek Hegde <prateek.hegde@deliverysolutions.co> Co-authored-by: Prateek Hegde <prateek@Prateeks-MacBook-Pro.local>