oxynote/server
dependabot[bot] a3286cacd7
deps(auth-realtime): bump the safe group (#183)
Bumps the safe group in /server/auth-realtime with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [@hocuspocus/extension-logger](https://github.com/ueberdosis/hocuspocus) | `4.6.0` | `4.7.0` |
| [@hocuspocus/server](https://github.com/ueberdosis/hocuspocus) | `4.6.0` | `4.7.0` |
| [@hocuspocus/transformer](https://github.com/ueberdosis/hocuspocus) | `4.6.0` | `4.7.0` |
| [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.10` |
| [kysely](https://github.com/kysely-org/kysely) | `0.29.5` | `0.29.6` |
| [yjs](https://github.com/yjs/yjs) | `13.6.32` | `13.6.33` |
| [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.5` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `24.19.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.0` | `5.0.2` |
| [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.11.0` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.35.1` | `6.38.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.71.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.2` |


Updates `@hocuspocus/extension-logger` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/ueberdosis/hocuspocus/releases)
- [Changelog](https://github.com/ueberdosis/hocuspocus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/hocuspocus/compare/v4.6.0...v4.7.0)

Updates `@hocuspocus/server` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/ueberdosis/hocuspocus/releases)
- [Changelog](https://github.com/ueberdosis/hocuspocus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/hocuspocus/compare/v4.6.0...v4.7.0)

Updates `@hocuspocus/transformer` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/ueberdosis/hocuspocus/releases)
- [Changelog](https://github.com/ueberdosis/hocuspocus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/hocuspocus/compare/v4.6.0...v4.7.0)

Updates `hono` from 4.13.7 to 4.13.10
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](https://github.com/honojs/hono/compare/v4.13.7...v4.13.10)

Updates `kysely` from 0.29.5 to 0.29.6
- [Release notes](https://github.com/kysely-org/kysely/releases)
- [Commits](https://github.com/kysely-org/kysely/compare/v0.29.5...v0.29.6)

Updates `yjs` from 13.6.32 to 13.6.33
- [Release notes](https://github.com/yjs/yjs/releases)
- [Commits](https://github.com/yjs/yjs/compare/v13.6.32...v13.6.33)

Updates `zod` from 4.5.4 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](https://github.com/colinhacks/zod/compare/v4.5.4...v4.6.5)

Updates `@types/node` from 24.13.3 to 24.19.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 5.0.0 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/coverage-v8)

Updates `eslint` from 10.10.0 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/compare/v10.10.0...v10.11.0)

Updates `knip` from 6.35.1 to 6.38.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.38.0/packages/knip)

Updates `prettier` from 3.9.6 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.9.6...3.9.9)

Updates `tsx` from 4.23.13 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](https://github.com/privatenumber/tsx/compare/v4.23.13...v4.23.15)

Updates `typescript-eslint` from 8.70.0 to 8.71.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/typescript-eslint)

Updates `vitest` from 5.0.0 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest)

---
updated-dependencies:
- dependency-name: "@hocuspocus/extension-logger"
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: "@hocuspocus/server"
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: "@hocuspocus/transformer"
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: hono
  dependency-version: 4.13.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: kysely
  dependency-version: 0.29.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: yjs
  dependency-version: 13.6.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: "@types/node"
  dependency-version: 24.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: knip
  dependency-version: 6.38.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: typescript-eslint
  dependency-version: 8.71.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: vitest
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-06 19:46:31 +03:00
..
auth-realtime deps(auth-realtime): bump the safe group (#183) 2026-10-06 19:46:31 +03:00
core deps(docker): bump distroless/static-debian13 in /server/core (#188) 2026-10-06 19:45:31 +03:00
AGENTS.md clean up reusable consts, vars, functions 2026-09-22 22:22:12 +03:00
CLAUDE.md add AGENTS.md files 2026-09-08 20:51:36 +02:00
Makefile update makefiles 2026-08-13 20:01:42 +02:00
README.md make valkey dependency optional 2026-08-27 18:53:30 +03:00

Server

To build and run the core and auth-realtime applications simply use the following command:

make run

By default the following ports are opened:

  • 8080 - core application's HTTP and WebSocket server.
  • 8081 - auth-realtime's Hocuspocus HTTP and WebSocket server.

Better Auth

Using Migrations

Nothing to do by hand: the Better Auth tables are owned by core's SQL migrations (server/core/internal/db/migrations/), which are embedded in the binary and applied automatically on startup.

Generating the Reference Schema

auth-realtime/sql/better_auth_schema.sql is a generated reference of the schema Better Auth expects — regenerate it after changing the Better Auth config in src/auth.ts and diff it against core's migrations to see whether a new migration is needed.

To generate it, start a postgres container:

docker run \
  --name betterauth-db \
  -e POSTGRES_USER=postgres \
  -e POSTGRES_PASSWORD=postgres \
  -e POSTGRES_DB=betterauth \
  -p 5432:5432 \
  --rm \
  postgres

Then put the DB DSN values into the env var:

OXYNOTE_AUTH_REALTIME_DB_DSN=postgresql://postgres:postgres@localhost:5432/betterauth

Then, from within the auth-realtime directory, run (make sure that other env vars that are needed by src/auth.ts are available and exported too):

source ../../docker/env/auth-realtime.local.env && npx @better-auth/cli generate --output ./sql/better_auth_schema.sql