7.0.2
Bug Fixes
- Fix
pm2 servereturning 403 Forbidden on Windows — traversal guard used hardcoded/separator #6109 - Fix
pm2 lstable misalignment when a username exceeds theusercolumn width — cli-tableau'struncate()miscounts ANSI bytes, leaking bold into thewatchingcolumn - Fix long status lines (e.g.
Applying action … on app […]) wrapping on narrow terminals —Common.printOutnow ANSI-aware crops single-line TTY output to terminal width (piped output unaffected)
Features
pm2 lshost-metrics line now shown by defaultpm2 update)pm2 lsadaptive layout: picks the widest layout that fits the terminal — full → condensed → new ultra-compactmini(id · name · status · cpu · mem) — and caps thenamecolumn so long names can't overflow the tablepm2 lshost-metrics line only lists network interfaces carrying traffic (hides idle utun/awdl/bridge/anpi/unused en*)pm2 lshost-metrics line: replacedmem freewithram usage(%), added GPU memory/temperature when reported, per-interface network errors/drops shown when non-zero
Core Refactor
- Drop old vizion module, refactor to support only git and drop 3 submodules
- Replace the bundled
pm2-sysmonitmodule andsysteminformationwithlib/tools/SysMetrics.js(Linux/macOS);pm2 slist/getSystemDataand the Docker metrics path now read this collector. Covered bytest/programmatic/sysmetrics.mocha.js
Security
- Bump
js-yaml4.1.1 → 4.3.0 — fixes quadratic-complexity DoS in merge-key handling (GHSA-h67p-54hq-rp68) #6122 - Bump
ws8.20.0 → 8.21.0 — fixes uninitialized-memory disclosure and tiny-fragment DoS (GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p) #6116 - Bump
@pm2/js-api0.8.0 → 0.8.1, pulling in patchedws@8.21.0(its transitivewswas pinned to the vulnerable 7.x). Production deps are now advisory-free (npm audit --omit=devclean)