From 71af37696f579eeb13c19522a37a1794005ea11a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 16 Jan 2026 06:51:57 +0000 Subject: [PATCH 01/18] Bump devalue from 5.1.1 to 5.6.2 Bumps [devalue](https://github.com/sveltejs/devalue) from 5.1.1 to 5.6.2. - [Release notes](https://github.com/sveltejs/devalue/releases) - [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md) - [Commits](https://github.com/sveltejs/devalue/compare/v5.1.1...v5.6.2) --- updated-dependencies: - dependency-name: devalue dependency-version: 5.6.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 4e1f2da..cb68e37 100644 --- a/package-lock.json +++ b/package-lock.json @@ -6580,9 +6580,9 @@ } }, "node_modules/devalue": { - "version": "5.1.1", - "resolved": "https://registry.npmjs.org/devalue/-/devalue-5.1.1.tgz", - "integrity": "sha512-maua5KUiapvEwiEAe+XnlZ3Rh0GD+qI1J/nb9vrJc3muPXvcF/8gXYTWF76+5DAqHyDUtOIImEuo0YKE9mshVw==", + "version": "5.6.2", + "resolved": "https://registry.npmjs.org/devalue/-/devalue-5.6.2.tgz", + "integrity": "sha512-nPRkjWzzDQlsejL1WVifk5rvcFi/y1onBRxjaFMjZeR9mFpqu2gmAZ9xUB9/IEanEP/vBtGeGganC/GO1fmufg==", "license": "MIT" }, "node_modules/didyoumean": { From cefcc89b3f00956d133d3a6a7bebe6b434dd226f Mon Sep 17 00:00:00 2001 From: Logan Date: Fri, 23 Jan 2026 13:53:08 -0500 Subject: [PATCH 02/18] Potential fix for code scanning alert no. 23: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/lint-format.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/lint-format.yml b/.github/workflows/lint-format.yml index 796fe5a..8608ac3 100644 --- a/.github/workflows/lint-format.yml +++ b/.github/workflows/lint-format.yml @@ -7,6 +7,8 @@ on: jobs: lint_format: + permissions: + contents: write runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 From ce5bf484ffbf089b4dea74e3268289137253f9cc Mon Sep 17 00:00:00 2001 From: Cattn Date: Fri, 23 Jan 2026 14:06:15 -0500 Subject: [PATCH 03/18] adapter-node --- svelte.config.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/svelte.config.js b/svelte.config.js index 72dcaca..2c950a2 100644 --- a/svelte.config.js +++ b/svelte.config.js @@ -1,7 +1,7 @@ import { vitePreprocess } from '@sveltejs/vite-plugin-svelte'; //import adapter from '@sveltejs/adapter-auto'; -//import adapter from '@sveltejs/adapter-node'; -import adapter from '@sveltejs/adapter-cloudflare'; +import adapter from '@sveltejs/adapter-node'; +//import adapter from '@sveltejs/adapter-cloudflare'; /** @type {import('@sveltejs/kit').Config} */ const config = { From d6f51548432959915e5e140b97cbbd387ac674b9 Mon Sep 17 00:00:00 2001 From: HammerPot Date: Fri, 23 Jan 2026 14:19:39 -0500 Subject: [PATCH 04/18] Modify rate limits to be more forgiving Subject to more fine tuning --- api/maple.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/api/maple.js b/api/maple.js index 2b0ad1e..e957274 100644 --- a/api/maple.js +++ b/api/maple.js @@ -56,7 +56,7 @@ var options = { const slower = slowDown({ windowMs: 2 * 60 * 1000, - delayAfter: 5, + delayAfter: 50, delayMs: (hits) => { if (hits <= 15) return hits * 100; return (hits - 15) * 1000 + 2000; @@ -66,7 +66,7 @@ const slower = slowDown({ const limiter = rateLimit({ windowMs: 2 * 60 * 1000, - limit: 35, + limit: 100, }) try { From 04140b4df431fabc59bcb81cc6263a56b39c88f3 Mon Sep 17 00:00:00 2001 From: Cattn Date: Fri, 23 Jan 2026 14:20:53 -0500 Subject: [PATCH 05/18] fix playlist page --- src/routes/playlists/playlist/[slug]/+page.svelte | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/routes/playlists/playlist/[slug]/+page.svelte b/src/routes/playlists/playlist/[slug]/+page.svelte index a230c2c..0407ed9 100644 --- a/src/routes/playlists/playlist/[slug]/+page.svelte +++ b/src/routes/playlists/playlist/[slug]/+page.svelte @@ -206,7 +206,7 @@ {playlist?.name} {:catch}
Date: Fri, 23 Jan 2026 14:25:42 -0500 Subject: [PATCH 06/18] fix login detection --- src/lib/components/SideBar.svelte | 4 ++-- src/routes/playlists/playlist/[slug]/+page.svelte | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/src/lib/components/SideBar.svelte b/src/lib/components/SideBar.svelte index c42b207..ceb08bf 100644 --- a/src/lib/components/SideBar.svelte +++ b/src/lib/components/SideBar.svelte @@ -3,7 +3,7 @@ import { goto } from '$app/navigation'; import { page } from '$app/state'; import { createLibrary } from '$lib/library'; - import { SavedUser } from '$lib/store'; + import { SavedUser, isLoggedIn } from '$lib/store'; const isActive = (path: string) => page.url.pathname === path; @@ -15,7 +15,7 @@