mirror of
https://github.com/langchain-ai/langgraphjs.git
synced 2026-08-24 21:51:39 -04:00
John Kennedy
841466e060
## Summary Patch the currently open Dependabot alerts in `pnpm-lock.yaml` by tightening the existing root pnpm overrides and regenerating the lockfile: - `js-yaml` 4.x → 4.3.1 - `dompurify` → 3.4.13 - `mermaid` → 11.16.1 (covers five advisories) - `undici` 6.x → 6.28.0 and 7.x → 7.29.0 (covers seven advisory/major-version alert instances) - `postcss` → 8.5.25 The remaining `@hono/node-server` alert is already stale on `main`: the lockfile resolves 1.19.17 and 2.1.0, both outside the advisory's vulnerable `<2.0.5` range (the 1.x line is not affected by that range). ## Validation - `pnpm install --frozen-lockfile` - `pnpm run format:check` - Verified every affected package resolution in `pnpm-lock.yaml` is outside the corresponding vulnerable range ## Scope Dependency overrides and generated `pnpm-lock.yaml` only; no runtime code changes. Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>
127 lines
4.4 KiB
JSON
127 lines
4.4 KiB
JSON
{
|
|
"private": true,
|
|
"packageManager": "pnpm@10.27.0",
|
|
"engines": {
|
|
"node": ">=18"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git@github.com:langchain-ai/langgraphjs.git"
|
|
},
|
|
"scripts": {
|
|
"build": "turbo run build:internal",
|
|
"changeset": "npx @changesets/cli@^2.29.5",
|
|
"lint": "oxlint",
|
|
"lint:fix": "oxlint --fix",
|
|
"clean": "turbo run clean",
|
|
"test": "turbo run test",
|
|
"test:int": "pnpm test:int:deps && turbo run test:int ; pnpm test:int:deps:down",
|
|
"test:int:deps": "docker compose -f int-test-deps-docker-compose.yml up -d",
|
|
"test:int:deps:down": "docker compose -f int-test-deps-docker-compose.yml down",
|
|
"test:exports:docker": "docker compose -f internal/environment_tests/docker-compose.yml up --force-recreate",
|
|
"format": "oxfmt",
|
|
"format:check": "oxfmt --check",
|
|
"release": "pnpm changeset publish"
|
|
},
|
|
"lint-staged": {
|
|
"*.{js,jsx,ts,tsx,mjs,cjs}": "pnpm run lint",
|
|
"*": "pnpm run format --no-error-on-unmatched-pattern"
|
|
},
|
|
"devDependencies": {
|
|
"@changesets/changelog-github": "^0.6.0",
|
|
"@swc/core": "^1.3.90",
|
|
"@tsconfig/recommended": "^1.0.3",
|
|
"@types/d3": "^7",
|
|
"@types/semver": "^7",
|
|
"cheerio": "^1.0.0-rc.12",
|
|
"cheminfo-types": "^1.4.0",
|
|
"d3": "^7.9.0",
|
|
"eslint-plugin-no-instanceof": "^1.0.1",
|
|
"lint-staged": "^16.4.0",
|
|
"oxfmt": "^0.42.0",
|
|
"oxlint": "^1.55.0",
|
|
"readline": "^1.3.0",
|
|
"semver": "^7.6.3",
|
|
"tslab": "^1.0.21",
|
|
"tsx": "^4.19.3",
|
|
"turbo": "^2.10.8",
|
|
"typescript": "^4.9.5 || ^5.4.5"
|
|
},
|
|
"pnpm": {
|
|
"overrides": {
|
|
"@langchain/core": "^1.2.1",
|
|
"@langchain/langgraph-sdk": "workspace:*",
|
|
"@langchain/langgraph-checkpoint": "workspace:*",
|
|
"cheerio": "^1.0.0-rc.12",
|
|
"semver": "^7.0.0",
|
|
"zod": "^4.3.5",
|
|
"@vitest/browser": ">=4.1.10 <5",
|
|
"axios": ">=1.18.0 <2",
|
|
"@babel/core": ">=7.29.6 <8",
|
|
"@grpc/grpc-js": ">=1.14.4 <2",
|
|
"qs": ">=6.15.2",
|
|
"dompurify": ">=3.4.13 <4",
|
|
"follow-redirects": ">=1.16.0",
|
|
"form-data": ">=4.0.6 <5",
|
|
"langsmith@<0.5.19": ">=0.5.19 <1",
|
|
"minimatch@<4": ">=3.1.4 <4",
|
|
"minimatch@>=5 <6": ">=5.1.8 <6",
|
|
"minimatch@>=9": ">=9.0.7",
|
|
"postcss@<=8.5.22": ">=8.5.23 <9",
|
|
"rollup@2": ">=4.59.0",
|
|
"handlebars": ">=4.7.9",
|
|
"js-yaml@<5": ">=4.3.1 <5",
|
|
"js-yaml@>=5": ">=5.2.2 <6",
|
|
"mermaid": ">=11.16.1 <12",
|
|
"path-to-regexp@>=8": ">=8.4.0",
|
|
"picomatch@<3": ">=2.3.2 <3",
|
|
"picomatch@>=4": ">=4.0.4",
|
|
"undici@<7": ">=6.28.0 <7",
|
|
"undici@>=7": ">=7.29.0 <8",
|
|
"fast-xml-parser": ">=5.10.1 <6",
|
|
"lodash": ">=4.18.0",
|
|
"lodash-es": ">=4.18.0",
|
|
"brace-expansion": ">=5.0.9",
|
|
"yaml@>=2 <2.8.3": ">=2.8.3",
|
|
"protobufjs@<8": ">=7.6.3 <8",
|
|
"basic-ftp@>=5 <6": ">=5.3.0 <6",
|
|
"esbuild@>=0.27.3 <0.28.1": ">=0.28.1 <0.29",
|
|
"vite@>=7 <8": ">=7.3.2",
|
|
"defu@>=6 <7": ">=6.1.5 <7",
|
|
"shell-quote": ">=1.8.4 <2",
|
|
"tmp@>=0.2.0 <0.2.6": ">=0.2.6 <0.3",
|
|
"uuid@>=10 <11.1.1": ">=11.1.1 <12",
|
|
"ws@>=8 <8.21.0": ">=8.21.0 <9",
|
|
"sharp@<0.35": ">=0.35.0 <0.36",
|
|
"es-define-property": "npm:@socketregistry/es-define-property@^1",
|
|
"es-set-tostringtag": "npm:@socketregistry/es-set-tostringtag@^1",
|
|
"function-bind": "npm:@socketregistry/function-bind@^1",
|
|
"gopd": "npm:@socketregistry/gopd@^1",
|
|
"has-property-descriptors": "npm:@socketregistry/has-property-descriptors@^1",
|
|
"has-symbols": "npm:@socketregistry/has-symbols@^1",
|
|
"has-tostringtag": "npm:@socketregistry/has-tostringtag@^1",
|
|
"hasown": "npm:@socketregistry/hasown@^1",
|
|
"indent-string": "npm:@socketregistry/indent-string@^1",
|
|
"is-unicode-supported": "npm:@socketregistry/is-unicode-supported@^1",
|
|
"isarray": "npm:@socketregistry/isarray@^1",
|
|
"object-keys": "npm:@socketregistry/object-keys@^1",
|
|
"querystringify": "npm:@socketregistry/querystringify@^1",
|
|
"safe-buffer": "npm:@socketregistry/safe-buffer@^1",
|
|
"set-function-length": "npm:@socketregistry/set-function-length@^1",
|
|
"side-channel": "npm:@socketregistry/side-channel@^1",
|
|
"better-sqlite3": "^12.10.0"
|
|
},
|
|
"onlyBuiltDependencies": [
|
|
"@swc/core",
|
|
"better-sqlite3",
|
|
"cpu-features",
|
|
"esbuild",
|
|
"msw",
|
|
"protobufjs",
|
|
"sharp",
|
|
"ssh2",
|
|
"zeromq"
|
|
]
|
|
}
|
|
}
|