mirror of
https://github.com/langchain-ai/langgraphjs.git
synced 2026-07-21 08:35:23 -04:00
John Kennedy
041c0e81c9
## Summary - Add pnpm overrides for patched transitive dependency versions flagged by Dependabot - Refresh pnpm lockfile to resolve vulnerable @babel/core, @grpc/grpc-js, form-data, protobufjs, esbuild, shell-quote, tmp, uuid, and ws versions - Leaves only the low-severity elliptic advisory, which currently has no patched version ## Testing - sfw pnpm install --offline --frozen-lockfile - pnpm audit --json (1 remaining low elliptic advisory, no patched version) - pnpm lint Co-authored-by: John Kennedy <jkennedyvz@users.noreply.github.com>
106 lines
3.2 KiB
JSON
106 lines
3.2 KiB
JSON
{
|
|
"private": true,
|
|
"packageManager": "pnpm@10.27.0",
|
|
"engines": {
|
|
"node": ">=18"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git@github.com:langchain-ai/langgraphjs.git"
|
|
},
|
|
"scripts": {
|
|
"build": "turbo run build:internal",
|
|
"changeset": "npx @changesets/cli@^2.29.5",
|
|
"lint": "oxlint",
|
|
"lint:fix": "oxlint --fix",
|
|
"clean": "turbo run clean",
|
|
"test": "turbo run test",
|
|
"test:int": "pnpm test:int:deps && turbo run test:int ; pnpm test:int:deps:down",
|
|
"test:int:deps": "docker compose -f int-test-deps-docker-compose.yml up -d",
|
|
"test:int:deps:down": "docker compose -f int-test-deps-docker-compose.yml down",
|
|
"test:exports:docker": "docker compose -f internal/environment_tests/docker-compose.yml up --force-recreate",
|
|
"format": "oxfmt",
|
|
"format:check": "oxfmt --check",
|
|
"release": "pnpm changeset publish"
|
|
},
|
|
"lint-staged": {
|
|
"*.{js,jsx,ts,tsx,mjs,cjs}": "pnpm run lint",
|
|
"*": "pnpm run format --no-error-on-unmatched-pattern"
|
|
},
|
|
"devDependencies": {
|
|
"@changesets/changelog-github": "^0.6.0",
|
|
"@swc/core": "^1.3.90",
|
|
"@tsconfig/recommended": "^1.0.3",
|
|
"@types/d3": "^7",
|
|
"@types/semver": "^7",
|
|
"cheerio": "^1.0.0-rc.12",
|
|
"cheminfo-types": "^1.4.0",
|
|
"d3": "^7.9.0",
|
|
"eslint-plugin-no-instanceof": "^1.0.1",
|
|
"lint-staged": "^16.4.0",
|
|
"oxfmt": "^0.42.0",
|
|
"oxlint": "^1.55.0",
|
|
"readline": "^1.3.0",
|
|
"semver": "^7.6.3",
|
|
"tslab": "^1.0.21",
|
|
"tsx": "^4.19.3",
|
|
"turbo": "^2.9.14",
|
|
"typescript": "^4.9.5 || ^5.4.5"
|
|
},
|
|
"pnpm": {
|
|
"overrides": {
|
|
"@langchain/core": "^1.2.1",
|
|
"@langchain/langgraph-sdk": "workspace:*",
|
|
"@langchain/langgraph-checkpoint": "workspace:*",
|
|
"cheerio": "^1.0.0-rc.12",
|
|
"semver": "^7.0.0",
|
|
"zod": "^4.3.5",
|
|
"axios": ">=1.15.0",
|
|
"@babel/core": ">=7.29.6 <8",
|
|
"@grpc/grpc-js": ">=1.14.4 <2",
|
|
"qs": ">=6.15.2",
|
|
"dompurify": ">=3.4.11",
|
|
"follow-redirects": ">=1.16.0",
|
|
"form-data": ">=4.0.6 <5",
|
|
"langsmith@<0.5.19": ">=0.5.19 <1",
|
|
"minimatch@<4": ">=3.1.4 <4",
|
|
"minimatch@>=5 <6": ">=5.1.8 <6",
|
|
"minimatch@>=9": ">=9.0.7",
|
|
"rollup@2": ">=4.59.0",
|
|
"handlebars": ">=4.7.9",
|
|
"path-to-regexp@>=8": ">=8.4.0",
|
|
"picomatch@<3": ">=2.3.2 <3",
|
|
"picomatch@>=4": ">=4.0.4",
|
|
"undici@<7": ">=6.27.0 <7",
|
|
"undici@>=7": ">=7.28.0 <8",
|
|
"fast-xml-parser": ">=5.7.0",
|
|
"lodash": ">=4.18.0",
|
|
"lodash-es": ">=4.18.0",
|
|
"brace-expansion@>=2 <3": ">=2.0.3 <3",
|
|
"brace-expansion@>=4": ">=5.0.5",
|
|
"yaml@>=2 <2.8.3": ">=2.8.3",
|
|
"protobufjs@<8": ">=7.6.3 <8",
|
|
"basic-ftp@>=5 <6": ">=5.3.0 <6",
|
|
"esbuild@>=0.27.3 <0.28.1": ">=0.28.1 <0.29",
|
|
"vite@>=7 <8": ">=7.3.2",
|
|
"defu@>=6 <7": ">=6.1.5 <7",
|
|
"shell-quote": ">=1.8.4 <2",
|
|
"tmp@>=0.2.0 <0.2.6": ">=0.2.6 <0.3",
|
|
"uuid@>=10 <11.1.1": ">=11.1.1 <12",
|
|
"ws@>=8 <8.21.0": ">=8.21.0 <9",
|
|
"better-sqlite3": "^12.10.0"
|
|
},
|
|
"onlyBuiltDependencies": [
|
|
"@swc/core",
|
|
"better-sqlite3",
|
|
"cpu-features",
|
|
"esbuild",
|
|
"msw",
|
|
"protobufjs",
|
|
"sharp",
|
|
"ssh2",
|
|
"zeromq"
|
|
]
|
|
}
|
|
}
|