NodeSecure · tony-go · Jul 1, 2025 · Jun 30, 2025
diff --git a/.changeset/dry-singers-invite.md b/.changeset/dry-singers-invite.md
diff --git a/.changeset/four-bars-bet.md b/.changeset/four-bars-bet.md
diff --git a/.changeset/legal-lands-crash.md b/.changeset/legal-lands-crash.md
diff --git a/.changeset/mean-waves-retire.md b/.changeset/mean-waves-retire.md
diff --git a/.changeset/poor-cougars-begin.md b/.changeset/poor-cougars-begin.md
diff --git a/workspaces/estree-ast-utils/CHANGELOG.md b/workspaces/estree-ast-utils/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @nodesecure/estree-ast-utils
 
+## 4.0.0
+
+### Major Changes
+
+- [#366](https://github.com/NodeSecure/js-x-ray/pull/366) [`cf2b5eb`](https://github.com/NodeSecure/js-x-ray/commit/cf2b5eb3b247f60d369740630a019928e6c8d7c2) Thanks [@fraxken](https://github.com/fraxken)! - Refactor relation and dependency to Tracer for estree-ast-utils workspace
+
+### Minor Changes
+
+- [#365](https://github.com/NodeSecure/js-x-ray/pull/365) [`8b72326`](https://github.com/NodeSecure/js-x-ray/commit/8b723266a4153e9e05395f06e70e74cab2544eed) Thanks [@fraxken](https://github.com/fraxken)! - Enhance input and output types using Meriyah ESTree defs
+
 ## 3.0.0
 
 ### Major Changes

diff --git a/workspaces/estree-ast-utils/package.json b/workspaces/estree-ast-utils/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/estree-ast-utils",
-  "version": "3.0.0",
+  "version": "4.0.0",
   "description": "Utilities for AST (ESTree compliant)",
   "type": "module",
   "exports": "./dist/index.js",

diff --git a/workspaces/js-x-ray/CHANGELOG.md b/workspaces/js-x-ray/CHANGELOG.md
@@ -0,0 +1,19 @@
+# @nodesecure/js-x-ray
+
+## 9.1.0
+
+### Minor Changes
+
+- [#363](https://github.com/NodeSecure/js-x-ray/pull/363) [`e37384c`](https://github.com/NodeSecure/js-x-ray/commit/e37384c216a191a14dde19954c281a39512d5485) Thanks [@intincrab](https://github.com/intincrab)! - feat(probes): add serialize-environment warning detection
+
+  Add new probe to detect potential environment variable exfiltration through `JSON.stringify(process.env)`.
+
+- [#362](https://github.com/NodeSecure/js-x-ray/pull/362) [`5f78d4a`](https://github.com/NodeSecure/js-x-ray/commit/5f78d4a7bb19390b6d31892994339c193bf048cf) Thanks [@clemgbld](https://github.com/clemgbld)! - feat(probes): add initialize
+
+- [#366](https://github.com/NodeSecure/js-x-ray/pull/366) [`cf2b5eb`](https://github.com/NodeSecure/js-x-ray/commit/cf2b5eb3b247f60d369740630a019928e6c8d7c2) Thanks [@fraxken](https://github.com/fraxken)! - Refactor relation and dependency to Tracer for estree-ast-utils workspace
+
+### Patch Changes
+
+- Updated dependencies [[`cf2b5eb`](https://github.com/NodeSecure/js-x-ray/commit/cf2b5eb3b247f60d369740630a019928e6c8d7c2), [`8b72326`](https://github.com/NodeSecure/js-x-ray/commit/8b723266a4153e9e05395f06e70e74cab2544eed), [`c3016e0`](https://github.com/NodeSecure/js-x-ray/commit/c3016e0b5266178ad88b65c6fcca4c0a2ddb71b1)]:
+  - @nodesecure/[email protected]
+  - @nodesecure/[email protected]
diff --git a/workspaces/js-x-ray/package.json b/workspaces/js-x-ray/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/js-x-ray",
-  "version": "9.0.0",
+  "version": "9.1.0",
   "description": "JavaScript AST XRay analysis",
   "type": "module",
   "exports": {
@@ -48,9 +48,9 @@
   },
   "homepage": "https://github.com/NodeSecure/js-x-ray#readme",
   "dependencies": {
-    "@nodesecure/estree-ast-utils": "^1.5.0",
+    "@nodesecure/estree-ast-utils": "^4.0.0",
     "@nodesecure/sec-literal": "^1.2.0",
-    "@nodesecure/tracer": "^1.0.0",
+    "@nodesecure/tracer": "^2.0.0",
     "digraph-js": "^2.2.3",
     "estree-walker": "^3.0.1",
     "frequency-set": "^1.0.2",

diff --git a/workspaces/tracer/CHANGELOG.md b/workspaces/tracer/CHANGELOG.md
@@ -1,5 +1,27 @@
 # @nodesecure/tracer
 
+## 2.0.0
+
+### Major Changes
+
+- [#366](https://github.com/NodeSecure/js-x-ray/pull/366) [`cf2b5eb`](https://github.com/NodeSecure/js-x-ray/commit/cf2b5eb3b247f60d369740630a019928e6c8d7c2) Thanks [@fraxken](https://github.com/fraxken)! - Refactor relation and dependency to Tracer for estree-ast-utils workspace
+
+### Patch Changes
+
+- [#356](https://github.com/NodeSecure/js-x-ray/pull/356) [`c3016e0`](https://github.com/NodeSecure/js-x-ray/commit/c3016e0b5266178ad88b65c6fcca4c0a2ddb71b1) Thanks [@fraxken](https://github.com/fraxken)! - Trace Node.js core imports that use /promises
+
+  Here is an example:
+
+  ```ts
+  import { readFile } from "fs/promises";
+
+  const foobar = readFile;
+  await foobar("test.txt");
+  ```
+
+- Updated dependencies [[`cf2b5eb`](https://github.com/NodeSecure/js-x-ray/commit/cf2b5eb3b247f60d369740630a019928e6c8d7c2), [`8b72326`](https://github.com/NodeSecure/js-x-ray/commit/8b723266a4153e9e05395f06e70e74cab2544eed)]:
+  - @nodesecure/[email protected]
+
 ## 1.0.1
 
 ### Patch Changes

diff --git a/workspaces/tracer/package.json b/workspaces/tracer/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/tracer",
-  "version": "1.0.1",
+  "version": "2.0.0",
   "description": "JS-X-Ray variables and assignments tracer",
   "exports": "./dist/index.js",
   "private": false,
@@ -26,7 +26,7 @@
   },
   "homepage": "https://github.com/NodeSecure/js-x-ray/tree/master/workspaces/tracer#readme",
   "dependencies": {
-    "@nodesecure/estree-ast-utils": "^3.0.0",
+    "@nodesecure/estree-ast-utils": "^4.0.0",
     "meriyah": "^6.1.3"
   }
 }