mirror of
https://github.com/langchain-ai/deepagentsjs.git
synced 2026-08-24 22:11:26 -04:00
John Kennedy
cb3dbec4e7
## Summary Patches all four currently open Dependabot alerts in `pnpm-lock.yaml` using narrow root-level pnpm overrides: - `nanoid` 3.3.16 → 3.3.18 (GHSA-2v37-7h3g-55p8 / CVE-2026-67213) - `js-yaml` 3.15.0 → 3.15.1 (GHSA-5p4m-2wfm-xmqj) - `js-yaml` 4.3.0 → 4.3.1 (GHSA-5p4m-2wfm-xmqj) - `postcss` 8.5.19 → 8.5.23 (GHSA-fxqj-rqcc-2cmp / CVE-2026-69153) No direct application dependencies or runtime code are changed. ## Validation - [x] `corepack pnpm install --frozen-lockfile` - [x] `corepack pnpm format:check` - [x] Verified patched lockfile resolutions are present and prior vulnerable resolutions are absent - [ ] `corepack pnpm lint` — blocked by an `oxlint` allocator panic in this sandbox (exit 134) - [ ] `corepack pnpm --filter "./libs/*" typecheck` — blocked by pre-existing missing `@langchain/sandbox-standard-tests/vitest` build artifacts/imports in `libs/deepagents` Scoped to the four open Dependabot alerts. Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>
93 lines
3.2 KiB
JSON
93 lines
3.2 KiB
JSON
{
|
|
"name": "deepagentsjs-monorepo",
|
|
"version": "0.0.0",
|
|
"private": true,
|
|
"description": "Deep Agents - a library for building controllable AI agents with LangGraph",
|
|
"type": "module",
|
|
"scripts": {
|
|
"build": "pnpm --filter \"./libs/*\" --filter \"./libs/providers/*\" build",
|
|
"clean": "pnpm --filter \"./libs/*\" clean",
|
|
"typecheck": "pnpm --filter \"./libs/*\" typecheck",
|
|
"lint": "oxlint",
|
|
"lint:fix": "oxlint --fix",
|
|
"format": "oxfmt",
|
|
"format:check": "oxfmt --check",
|
|
"test": "pnpm format:check && pnpm lint && pnpm --filter \"./libs/*\" test",
|
|
"test:unit": "pnpm --filter \"./libs/*\" test:unit",
|
|
"test:int": "pnpm --filter \"./libs/*\" --filter \"./libs/providers/*\" test:int",
|
|
"test:watch": "pnpm --filter \"./libs/*\" test:watch",
|
|
"test:coverage": "pnpm --filter \"./libs/*\" test:coverage",
|
|
"changeset:version": "changeset version",
|
|
"release": "pnpm build && changeset publish"
|
|
},
|
|
"homepage": "https://docs.langchain.com/oss/javascript/deepagents",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git+https://github.com/langchain-ai/deepagentsjs.git"
|
|
},
|
|
"keywords": [
|
|
"ai",
|
|
"agents",
|
|
"langgraph",
|
|
"langchain",
|
|
"typescript",
|
|
"llm"
|
|
],
|
|
"author": "LangChain",
|
|
"license": "MIT",
|
|
"bugs": {
|
|
"url": "https://github.com/langchain-ai/deepagentsjs/issues"
|
|
},
|
|
"devDependencies": {
|
|
"@changesets/changelog-github": "^0.7.0",
|
|
"@changesets/cli": "^2.29.8",
|
|
"@tsconfig/recommended": "^1.0.13",
|
|
"dotenv": "^17.4.2",
|
|
"eslint-plugin-no-instanceof": "^1.0.1",
|
|
"globals": "^17.3.0",
|
|
"jiti": "^2.6.1",
|
|
"lint-staged": "^17.0.7",
|
|
"oxfmt": "^0.61.0",
|
|
"oxlint": "^1.57.0",
|
|
"tsx": "^4.21.0",
|
|
"typescript": "^7.0.2"
|
|
},
|
|
"lint-staged": {
|
|
"*.{js,jsx,ts,tsx,mjs,cjs}": "pnpm run lint",
|
|
"*": "pnpm run format --no-error-on-unmatched-pattern"
|
|
},
|
|
"packageManager": "pnpm@10.29.2",
|
|
"pnpm": {
|
|
"overrides": {
|
|
"minimatch@<3.1.4": "3.1.4",
|
|
"minimatch@>=9 <10.2.1": "10.2.4",
|
|
"fast-xml-parser@>=4.0.0-beta.3 <=5.5.6": "5.5.10",
|
|
"rollup@>=4.0.0 <4.59.0": "4.59.0",
|
|
"lodash@<=4.17.23": "4.18.1",
|
|
"picomatch@<2.3.2": "2.3.2",
|
|
"picomatch@>=4.0.0 <4.0.4": "4.0.4",
|
|
"flatted@<3.4.2": "3.4.2",
|
|
"protobufjs@<8.0.0": "7.6.5",
|
|
"protobufjs@>=8.0.0 <8.6.0": "8.6.0",
|
|
"axios@<1.18.0": "1.18.0",
|
|
"@opentelemetry/core@<2.8.0": "2.8.0",
|
|
"@opentelemetry/propagator-jaeger@<2.9.0": "2.9.0",
|
|
"js-yaml@<3.15.1": "3.15.1",
|
|
"js-yaml@>=4.0.0 <4.3.1": "4.3.1",
|
|
"nanoid@<3.3.18": "3.3.18",
|
|
"postcss@<=8.5.22": "8.5.23",
|
|
"follow-redirects@<1.16.0": "1.16.0",
|
|
"es-define-property": "npm:@socketregistry/es-define-property@^1",
|
|
"es-set-tostringtag": "npm:@socketregistry/es-set-tostringtag@^1",
|
|
"function-bind": "npm:@socketregistry/function-bind@^1",
|
|
"gopd": "npm:@socketregistry/gopd@^1",
|
|
"has-symbols": "npm:@socketregistry/has-symbols@^1",
|
|
"has-tostringtag": "npm:@socketregistry/has-tostringtag@^1",
|
|
"hasown": "npm:@socketregistry/hasown@^1",
|
|
"safe-buffer": "npm:@socketregistry/safe-buffer@^1",
|
|
"safer-buffer": "npm:@socketregistry/safer-buffer@^1",
|
|
"shell-quote": "npm:shell-quote@^1"
|
|
}
|
|
}
|
|
}
|