⬆️ update Meteor.js verison and dependencies

❌ remove sandstorm support
❌ remove custom extension support
🔒 enhance webhook domain normalization in APIroutes.js
🐎 add rspack.config.js for modern build configuration
💄 move to bootsrap 5 native dark/light mode

Author: faburem

.github/FUNDING.yml

@@ -2,9 +2,8 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [master, ]
+    branches: [master]
   pull_request:
-    # The branches below must be a subset of the branches above
     branches: [master]
   schedule:
     - cron: '0 1 * * 5'
@@ -16,39 +15,15 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
-      with:
-        # We must fetch at least the immediate parents so that if this is
-        # a pull request then we can checkout the head.
-        fetch-depth: 2
-
-    # If this run was triggered by a pull request event, then checkout
-    # the head of the pull request instead of the merge commit.
-    - run: git checkout HEAD^2
-      if: ${{ github.event_name == 'pull_request' }}
+      uses: actions/checkout@v3
 
-    # Initializes the CodeQL tools for scanning.
+    # Initializes the CodeQL tools for scanning
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
-      # Override language selection by uncommenting this and choosing your languages
-      # with:
-      #   languages: go, javascript, csharp, python, cpp, java
+      uses: github/codeql-action/init@v2
 
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
+    # Autobuild attempts to build any compiled languages
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
-
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 https://git.io/JvXDl
-
-    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
-    #    and modify them (or add more) to build your code if your project
-    #    uses a compiled language
-
-    #- run: |
-    #   make bootstrap
-    #   make release
+      uses: github/codeql-action/autobuild@v2
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@v2

.github/workflows/codeql-analysis.yml

@@ -2,3 +2,9 @@ node_modules/
 .log
 .vscode/
 jsconfig.json
+
+# Meteor Modern-Tools build context directories
+_build
+*/build-assets
+*/build-chunks
+.rsdoctor

.gitignore

@@ -6,16 +6,16 @@
 
 meteor-base@1.5.2             # Packages every Meteor app needs to have
 mobile-experience@1.1.2       # Packages for a great mobile UX
-mongo@2.1.4                   # The database Meteor supports right now
+mongo@2.2.0                   # The database Meteor supports right now
 reactive-var@1.0.13            # Reactive variable for tracker
 tracker@1.3.4                 # Meteor's client-side reactive programming library
 
 es5-shim@4.8.1                # ECMAScript 5 compatibility for older browsers.
-ecmascript@0.16.13              # Enable ECMAScript2015+ syntax in app code
-shell-server@0.6.2            # Server-side component of the `meteor shell` command
+ecmascript@0.17.0              # Enable ECMAScript2015+ syntax in app code
+shell-server@0.7.0            # Server-side component of the `meteor shell` command
 
-accounts-password@3.2.1
-check@1.4.4
+accounts-password@3.2.2
+check@1.5.0
 random@1.2.2
 dynamic-import@0.7.4
 ostrio:loggerconsole
@@ -26,13 +26,14 @@ jquery@3.0.0
 mdg:validated-method
 service-configuration@1.3.5
 oauth@3.0.2
-accounts-base@3.1.2
+accounts-base@3.2.0
 accounts-oauth@1.4.6
 oauth2@1.3.3
 blaze-html-templates
 ddp-rate-limiter@1.2.2
-standard-minifier-css@1.9.3
-standard-minifier-js@3.1.1
+standard-minifier-css@1.10.0
+standard-minifier-js@3.2.0
 leonardoventurini:scss
 browser-policy-content@2.0.0
 faburem:accounts-anonymous
+rspack

.meteor/packages

@@ -1 +1 @@
-METEOR@3.3.2
+METEOR@3.4

.meteor/release

@@ -1,22 +1,22 @@
-accounts-base@3.1.2
+accounts-base@3.2.0
 accounts-oauth@1.4.6
-accounts-password@3.2.1
+accounts-password@3.2.2
 allow-deny@2.1.0
 autoupdate@2.0.1
-babel-compiler@7.12.2
+babel-compiler@7.13.0
 babel-runtime@1.5.2
 base64@1.0.13
 binary-heap@1.0.12
 blaze@3.0.2
 blaze-html-templates@3.0.0
 blaze-tools@2.0.0
-boilerplate-generator@2.0.2
+boilerplate-generator@2.1.0
 browser-policy-common@1.0.13
 browser-policy-content@2.0.0
 caching-compiler@2.0.1
 caching-html-compiler@2.0.0
 callback-hook@1.6.1
-check@1.4.4
+check@1.5.0
 core-runtime@1.0.0
 ddp@1.4.2
 ddp-client@3.1.1
@@ -25,7 +25,7 @@ ddp-rate-limiter@1.2.2
 ddp-server@3.1.2
 diff-sequence@1.1.3
 dynamic-import@0.7.4
-ecmascript@0.16.13
+ecmascript@0.17.0
 ecmascript-runtime@0.8.3
 ecmascript-runtime-client@0.12.3
 ecmascript-runtime-server@0.11.1
@@ -48,17 +48,17 @@ leonardoventurini:scss@2.0.2
 localstorage@1.2.1
 logging@1.3.6
 mdg:validated-method@1.3.0
-meteor@2.1.1
+meteor@2.2.0
 meteor-base@1.5.2
 minifier-css@2.0.1
-minifier-js@3.0.4
-minimongo@2.0.4
+minifier-js@3.1.0
+minimongo@2.0.5
 mobile-experience@1.1.2
 mobile-status-bar@1.1.1
 modern-browsers@0.2.3
 modules@0.20.3
 modules-runtime@0.13.2
-mongo@2.1.4
+mongo@2.2.0
 mongo-decimal@0.2.0
 mongo-dev-server@1.1.1
 mongo-id@1.0.9
@@ -73,26 +73,28 @@ ostrio:loggerconsole@2.1.0
 promise@1.0.0
 random@1.2.2
 rate-limit@1.1.2
-react-fast-refresh@0.2.9
+react-fast-refresh@0.3.0
 reactive-dict@1.3.2
 reactive-var@1.0.13
 reload@1.3.2
 retry@1.1.1
 routepolicy@1.1.2
+rspack@1.0.0
 service-configuration@1.3.5
 sha@1.0.10
-shell-server@0.6.2
+shell-server@0.7.0
 socket-stream-client@0.6.1
 spacebars@2.0.0
 spacebars-compiler@2.0.0
-standard-minifier-css@1.9.3
-standard-minifier-js@3.1.1
+standard-minifier-css@1.10.0
+standard-minifier-js@3.2.0
 templating@1.4.4
 templating-compiler@2.0.0
 templating-runtime@2.0.1
 templating-tools@2.0.0
+tools-core@1.0.0
 tracker@1.3.4
-typescript@5.6.6
+typescript@5.9.3
 url@1.3.5
-webapp@2.0.7
+webapp@2.1.0
 webapp-hashing@1.1.2

.meteor/versions

@@ -1,4 +1,4 @@
-FROM node:22.18
+FROM node:22.22
 ENV METEOR_ALLOW_SUPERUSER true
 RUN curl https://install.meteor.com/\?release\=3.3 | sh
 RUN meteor --version
@@ -15,7 +15,7 @@ ENV DISABLE_CLIENT_STATS true
 ENV METEOR_DISABLE_OPTIMISTIC_CACHING 1
 RUN meteor build /build/ --server-only
 
-FROM node:22.18-alpine
+FROM node:22.22-alpine
 RUN apk --no-cache add \
 	bash \
     curl \
@@ -38,7 +38,7 @@ RUN rm -rf /app/bundle/programs/server/npm/node_modules/moment/src/locale
 RUN find /app/bundle/programs/server/npm/node_modules/astronomia/data/ -type f -not -name "deltat.js" -or -name "vsop87Bearth.js" -delete
 RUN find /app/bundle/programs/server/npm/node_modules/astronomia/lib/data/ -type f -not -name "deltat.js" -or -name "vsop87Bearth.js" -delete
 
-FROM node:22.18-alpine
+FROM node:22.22-alpine
 RUN apk --no-cache add \
 	bash \
 	ca-certificates