…talls fit
jspod spawns jss with no --body-limit, so it rode JSS's default cap.
That blocked installing apps with a large git history through a pod —
e.g. solid-chat/app's ~30MB pack (jss install does a full clone; JSS
git-receive rejects shallow pushes), which 413'd against the old 10MB
(and even the new 20MB) default.
- Pass --body-limit 40MB when spawning jss (overridable via
options.bodyLimit). 40MB clears the ~30MB pack with headroom without
an over-permissive memory-DoS surface.
- Require jss >=0.0.208 <0.0.211: --body-limit only actually reaches
Fastify from the CLI as of 0.0.208 (#562) — before that the flag was
dead wiring — and the range floats up to 0.0.210 without re-pinning.
Bump jspod 0.0.47 → 0.0.48.
Why
jspod spawns jss with no --body-limit, so it rode JSS's default request body cap. That blocked installing apps with a large git history through a pod — e.g. solid-chat/app's ~30MB pack (jss install does a full clone because JSS git-receive rejects shallow pushes), which 413'd against the old 10MB and the new 20MB default.
Changes
Notes