chore: pin package dependencies for v0.3.20

Author: rockyshi1993

CHANGELOG.md

@@ -15,6 +15,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 | Version | Date | Type | Key Theme |
 |---------|------|------|-----------|
 | [Unreleased] | — | — | Pending changes [查看](./changelogs/unreleased.md) |
+| [0.3.20] | 2026-06-09 | Patch | Direct runtime and development dependencies pinned to exact versions for deterministic consumer installs [查看](./changelogs/v0.3.20.md) |
 | [0.3.19] | 2026-06-08 | Patch | Default logger moves to Vext internal zero-runtime-dependency kernel; direct logger package dependencies removed [查看](./changelogs/v0.3.19.md) |
 | [0.3.18] | 2026-06-07 | Patch | Dependency cleanup: Node.js `>=20.19.0`, optional Koa router peer, and controlled MongoDB memory server test binaries [查看](./changelogs/v0.3.18.md) |
 | [0.3.17] | 2026-06-05 | Patch | `app.throw` supports JSON-safe `details`; `app.hooks` adds request/validation/response/fetch/service/plugin/OpenAPI lifecycle hooks [查看](./changelogs/v0.3.17.md) |
@@ -67,7 +68,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - [Contributing Guide](./CONTRIBUTING.md)
 - [Detailed Changelogs](./changelogs/)
 
-[Unreleased]: https://github.com/vextjs/vext/compare/v0.3.19...HEAD
+[Unreleased]: https://github.com/vextjs/vext/compare/v0.3.20...HEAD
+[0.3.20]: https://github.com/vextjs/vext/compare/v0.3.19...v0.3.20
 [0.3.19]: https://github.com/vextjs/vext/compare/v0.3.18...v0.3.19
 [0.3.18]: https://github.com/vextjs/vext/compare/v0.3.17...v0.3.18
 [0.3.17]: https://github.com/vextjs/vext/compare/v0.3.16...v0.3.17

README.md

@@ -65,7 +65,7 @@ npm install vextjs
     "start": "vext start"
   },
   "dependencies": {
-    "vextjs": "^0.3.19"
+    "vextjs": "^0.3.20"
   }
 }
 ```

changelogs/v0.3.20.md

@@ -0,0 +1,16 @@
+# v0.3.20 - 2026-06-09
+
+## Changed
+
+- Pinned all direct `dependencies` and `devDependencies` in `package.json` to exact versions resolved by the current lockfile.
+- Kept `peerDependencies` as compatibility ranges so host framework consumers are not locked to patch-level versions.
+- Synchronized package version references in README, website docs and changelog metadata.
+
+## Verification
+
+- `npm ci`
+- `npm run typecheck`
+- `npm test`
+- `npm run build`
+- `npm run test:audit`
+- `npm pack --dry-run --json`

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "vextjs",
-  "version": "0.3.19",
+  "version": "0.3.20",
   "description": "vextjs is a high‑performance Node.js framework that integrates scaffolding, modular architecture, and a plugin‑based runtime, enabling teams to build maintainable and scalable backend systems with exceptional development efficiency.",
   "type": "module",
   "main": "./dist/index.js",
@@ -108,14 +108,14 @@
     "node": ">=20.19.0"
   },
   "dependencies": {
-    "esbuild": "^0.27.3",
-    "fast-glob": "^3.3.3",
+    "esbuild": "0.27.3",
+    "fast-glob": "3.3.3",
     "flex-rate-limit": "1.0.3",
-    "monsqlize": "^1.3.0",
-    "response-cache-kit": "^1.2.0",
-    "route-core": "^0.0.4",
-    "schema-dsl": "^1.2.5",
-    "ts-morph": "^28.0.0"
+    "monsqlize": "1.3.0",
+    "response-cache-kit": "1.2.0",
+    "route-core": "0.0.4",
+    "schema-dsl": "1.2.5",
+    "ts-morph": "28.0.0"
   },
   "peerDependencies": {
     "@hono/node-server": "^1.14.1",
@@ -146,22 +146,22 @@
     }
   },
   "devDependencies": {
-    "@hono/node-server": "^1.14.1",
-    "@koa/router": "^15.6.0",
-    "@types/express": "^5.0.6",
-    "@types/koa": "^3.0.1",
-    "@types/node": "^22.15.17",
-    "@vitest/coverage-v8": "^3.2.4",
-    "autocannon": "^8.0.0",
-    "eslint": "^10.2.1",
-    "express": "^5.2.1",
-    "fastify": "^5.7.4",
-    "hono": "^4.7.6",
-    "koa": "^3.1.2",
+    "@hono/node-server": "1.19.14",
+    "@koa/router": "15.6.0",
+    "@types/express": "5.0.6",
+    "@types/koa": "3.0.1",
+    "@types/node": "22.19.13",
+    "@vitest/coverage-v8": "3.2.4",
+    "autocannon": "8.0.0",
+    "eslint": "10.2.1",
+    "express": "5.2.1",
+    "fastify": "5.8.5",
+    "hono": "4.12.18",
+    "koa": "3.1.2",
     "mongodb-memory-server-core": "11.2.0",
-    "prettier": "^3.8.1",
-    "typescript": "^5.8.3",
-    "typescript-eslint": "^8.59.0",
-    "vitest": "^3.1.3"
+    "prettier": "3.8.1",
+    "typescript": "5.9.3",
+    "typescript-eslint": "8.59.0",
+    "vitest": "3.2.4"
   }
 }

package.json

@@ -606,7 +606,7 @@ Uptime: 2d 5h 32m
 ```bash
 # 查看版本
 vext --version
-# 输出: vextjs v0.3.19
+# 输出: vextjs v0.3.20
 
 # 查看帮助
 vext --help

website/docs/guide/cli.md

@@ -49,7 +49,7 @@ npm install vextjs
     "build": "vext build"
   },
   "dependencies": {
-    "vextjs": "^0.3.19"
+    "vextjs": "^0.3.20"
   }
 }
 ```

website/docs/guide/quick-start.md

@@ -72,7 +72,7 @@ export default defineConfig({
         activeMatch: "/benchmark",
       },
       {
-        text: "v0.3.19",
+        text: "v0.3.20",
         items: [
           {
             text: "更新日志",