diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..c852ef39 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,15 @@ +version: 2 +updates: + - package-ecosystem: npm + directory: / + schedule: + interval: weekly + groups: + npm_and_yarn: + patterns: + - "*" + ignore: + # No patched release on npm; tracked via pnpm audit / manual review. + - dependency-name: braces + - dependency-name: node-forge + - dependency-name: sprintf-js diff --git a/apps/desktop/package.json b/apps/desktop/package.json index 22a262d3..a0afa1bf 100644 --- a/apps/desktop/package.json +++ b/apps/desktop/package.json @@ -20,7 +20,7 @@ }, "devDependencies": { "@playwright/test": "^1.55.0", - "electron": "^43.4.0", + "electron": "^43.5.0", "electron-builder": "^26.0.12", "typescript": "^5.9.2", "vitest": "^4.1.10" diff --git a/apps/site/package.json b/apps/site/package.json index aeb69bca..e0b12202 100644 --- a/apps/site/package.json +++ b/apps/site/package.json @@ -4,7 +4,7 @@ "version": "1.0.0", "type": "module", "engines": { - "node": "22.x" + "node": "^22.22.2 || ^24.0.0 || >=26.0.0" }, "scripts": { "dev": "vite", diff --git a/package.json b/package.json index 009e4c88..aebac622 100644 --- a/package.json +++ b/package.json @@ -44,17 +44,23 @@ "deepmerge-ts": "8.0.2", "fast-uri": "3.1.8", "uuid": "14.0.2", - "undici@6.28.0": "6.28.1", - "undici@7.29.0": "7.29.1", - "undici@^8.0.0": "8.10.2", + "undici@^6": "6.29.0", + "undici@^7": "7.30.0", + "undici@^8": "8.11.2", "proxy-addr": "2.0.8", + "shell-quote": ">=1.11.0", + "sharp": ">=0.35.5", + "@modelcontextprotocol/sdk": ">=1.31.0", "compression": "1.8.2", "source-map-js": ">=1.2.2", "ip-address": ">=10.7.1", "@grpc/grpc-js": ">=1.14.5", + "brace-expansion@^1": "1.1.21", "brace-expansion@^2": "2.1.7", "brace-expansion@^5": "5.0.12", - "undici8": "npm:undici@8.10.2" + "http-cache-semantics": ">=4.3.0", + "electron": "43.7.9", + "undici8": "npm:undici@8.11.2" } } } diff --git a/packages/adapters/package.json b/packages/adapters/package.json index 9383d58d..7d3fe28f 100644 --- a/packages/adapters/package.json +++ b/packages/adapters/package.json @@ -17,7 +17,7 @@ "@e2b/desktop": "^2.3.1", "@earendil-works/pi-agent-core": "^0.84.3", "@earendil-works/pi-ai": "^0.84.3", - "@modelcontextprotocol/sdk": "1.31.0", + "@modelcontextprotocol/sdk": "^1.31.0", "@observablehq/plot": "^0.6.17", "@sentrabot/adapter-kit": "workspace:*", "@sentrabot/contracts": "workspace:*", @@ -30,8 +30,8 @@ "nodemailer": "^10.0.9", "pg": "^8.16.3", "sharp": "^0.35.5", - "shell-quote": "1.11.0", - "undici": "^8.10.2", + "shell-quote": "^1.11.0", + "undici": "^8.11.2", "zod": "^4.1.5" }, "devDependencies": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 5823afe7..f336d8e8 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -10,17 +10,23 @@ overrides: deepmerge-ts: 8.0.2 fast-uri: 3.1.8 uuid: 14.0.2 - undici@6.28.0: 6.28.1 - undici@7.29.0: 7.29.1 - undici@^8.0.0: 8.10.2 + undici@^6: 6.29.0 + undici@^7: 7.30.0 + undici@^8: 8.11.2 proxy-addr: 2.0.8 + shell-quote: '>=1.11.0' + sharp: '>=0.35.5' + '@modelcontextprotocol/sdk': '>=1.31.0' compression: 1.8.2 source-map-js: '>=1.2.2' ip-address: '>=10.7.1' '@grpc/grpc-js': '>=1.14.5' + brace-expansion@^1: 1.1.21 brace-expansion@^2: 2.1.7 brace-expansion@^5: 5.0.12 - undici8: npm:undici@8.10.2 + http-cache-semantics: '>=4.3.0' + electron: 43.7.9 + undici8: npm:undici@8.11.2 importers: @@ -101,8 +107,8 @@ importers: specifier: ^1.55.0 version: 1.62.1 electron: - specifier: ^43.4.0 - version: 43.4.1 + specifier: 43.7.9 + version: 43.7.9 electron-builder: specifier: ^26.0.12 version: 26.15.3(electron-builder-squirrel-windows@26.15.3) @@ -469,7 +475,7 @@ importers: version: 0.0.28 '@composio/core': specifier: 0.16.0 - version: 0.16.0(@aws-sdk/credential-provider-node@3.972.81)(@smithy/signature-v4@5.7.3)(undici@8.10.2)(ws@8.21.3)(zod@4.5.4) + version: 0.16.0(@aws-sdk/credential-provider-node@3.972.81)(@smithy/signature-v4@5.7.3)(undici@8.11.2)(ws@8.21.3)(zod@4.5.4) '@daytona/sdk': specifier: ^0.204.1 version: 0.204.1 @@ -483,7 +489,7 @@ importers: specifier: ^0.84.3 version: 0.84.4(@modelcontextprotocol/sdk@1.31.0(zod@4.5.4))(ws@8.21.3)(zod@4.5.4) '@modelcontextprotocol/sdk': - specifier: 1.31.0 + specifier: '>=1.31.0' version: 1.31.0(zod@4.5.4) '@observablehq/plot': specifier: ^0.6.17 @@ -519,14 +525,14 @@ importers: specifier: ^8.16.3 version: 8.23.0 sharp: - specifier: ^0.35.5 + specifier: '>=0.35.5' version: 0.35.5(@types/node@24.13.3) shell-quote: - specifier: 1.11.0 + specifier: '>=1.11.0' version: 1.11.0 undici: - specifier: 8.10.2 - version: 8.10.2 + specifier: 8.11.2 + version: 8.11.2 zod: specifier: ^4.1.5 version: 4.5.4 @@ -2132,7 +2138,7 @@ packages: resolution: {integrity: sha512-gwSvbpiN/17O9TbsqSsE/OzZcpv5Fo4RQjdngGgogtuB9RsyJ8ZHhX5KjHj1bp5N9snN2eK8LDGXSaWW2hof8Q==} engines: {node: '>=20.0.0'} peerDependencies: - '@modelcontextprotocol/sdk': ^1.25.2 + '@modelcontextprotocol/sdk': '>=1.31.0' peerDependenciesMeta: '@modelcontextprotocol/sdk': optional: true @@ -4276,8 +4282,8 @@ packages: resolution: {integrity: sha512-apC2+fspHGI3mMKj+dGevkGo/tCqVB8jMb6i+OX+E29p0Iposz07fABkRIfVUPNd5A5VbuOz1bZbnmkKLYF+wQ==} engines: {node: '>= 5.10.0'} - brace-expansion@1.1.18: - resolution: {integrity: sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==} + brace-expansion@1.1.21: + resolution: {integrity: sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==} brace-expansion@2.1.7: resolution: {integrity: sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==} @@ -5044,8 +5050,8 @@ packages: resolution: {integrity: sha512-bO3y10YikuUwUuDUQRM4KfwNkKhnpVO7IPdbsrejwN9/AABJzzTQ4GeHwyzNSrVO+tEH3/Np255a3sVZpZDjvg==} engines: {node: '>=8.0.0'} - electron@43.4.1: - resolution: {integrity: sha512-5b+EuiwkgG5iRcsEL34rimgRpkYp15SsfZOa0pC5kXs0Tb82TH4n95rpQzTZa7yRCbA7tm0WoEbuBL6NaAhAcA==} + electron@43.7.9: + resolution: {integrity: sha512-wZkQ/R9F5Bv8dM5vX6vWboNo5ZCBC/IYQV195dtG9JvFAlNbebzlkWWSE5esgpCVy3rVYQ/g09GeknJwvQnS9A==} engines: {node: '>= 22.12.0'} hasBin: true @@ -5786,8 +5792,8 @@ packages: html-url-attributes@3.0.1: resolution: {integrity: sha512-ol6UPyBWqsrO6EJySPz2O7ZSr856WDrEzM5zMqp+FJJLGMW35cLYmmZnl0vztAZxRUoNZJFTCohfjuIJ8I4QBQ==} - http-cache-semantics@4.2.0: - resolution: {integrity: sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ==} + http-cache-semantics@4.3.0: + resolution: {integrity: sha512-M5t5LlJpS1UHMjvwRQVdFHvPISGeLAxNcrWuJkeGh0KxsqCHZ1O3NXZU/8x7cD0BDcGW8kapxMKTvwlqrNkHkA==} http-errors@2.0.1: resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==} @@ -6858,7 +6864,7 @@ packages: '@aws-sdk/credential-provider-node': '>=3.972.0 <4' '@smithy/hash-node': '>=4.3.0 <5' '@smithy/signature-v4': '>=5.4.0 <6' - undici: 6.28.1 + undici: 6.29.0 ws: ^8.21.0 zod: ^3.25 || ^4.0 peerDependenciesMeta: @@ -8147,16 +8153,16 @@ packages: undici-types@8.10.0: resolution: {integrity: sha512-ibvdovq3nCFs8Msrd95BW+zUOq+aOVbT+wpHUoPWhztbHEoPc6oof51iFDB6Es8lTKvNvVW9jNSAB8dwrKTMGg==} - undici@6.28.1: - resolution: {integrity: sha512-zWpdTVD54H48CIybL0rWQ3ukpb9d23wM7eH5RtfdmeP70cWHNjtfo7P4vZX+5CoDcO53J4Pu5uXp7lNfjc6DRA==} + undici@6.29.0: + resolution: {integrity: sha512-R+RODBqp6i2pPflGdq+xIOUkl+RNfGgHwoinecKu/JCuf2uO06cOKoDbI2P7Dn6KcswdKwrczbU6IYJ6K8X+wg==} engines: {node: '>=18.17'} - undici@7.29.1: - resolution: {integrity: sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==} + undici@7.30.0: + resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==} engines: {node: '>=20.18.1'} - undici@8.10.2: - resolution: {integrity: sha512-/y4/bH9YNU5hi9NIrpOuvGXFcxrj3CMrV+/AYpowAYTpHn8gX/XPFjNy766FPoYY0miQhdW977JFWKGNhBdwyQ==} + undici@8.11.2: + resolution: {integrity: sha512-u4UB2/IrKdU6lFxumHmmo1a3fCQO5tzQllRorfoRS63txhrB7xTpSn1PftwC4qEHkOaqP95fCWW4lJzwErwzhQ==} engines: {node: '>=22.19.0'} unicode-canonical-property-names-ecmascript@2.0.1: @@ -9474,13 +9480,13 @@ snapshots: '@composio/client@0.1.0-alpha.76': {} - '@composio/core@0.16.0(@aws-sdk/credential-provider-node@3.972.81)(@smithy/signature-v4@5.7.3)(undici@8.10.2)(ws@8.21.3)(zod@4.5.4)': + '@composio/core@0.16.0(@aws-sdk/credential-provider-node@3.972.81)(@smithy/signature-v4@5.7.3)(undici@8.11.2)(ws@8.21.3)(zod@4.5.4)': dependencies: '@composio/client': 0.1.0-alpha.76 '@composio/json-schema-to-zod': 0.3.0(zod@4.5.4) '@types/json-schema': 7.0.15 is-fs-case-sensitive: 2.0.0 - openai: 7.8.0(@aws-sdk/credential-provider-node@3.972.81)(@smithy/signature-v4@5.7.3)(undici@8.10.2)(ws@8.21.3)(zod@4.5.4) + openai: 7.8.0(@aws-sdk/credential-provider-node@3.972.81)(@smithy/signature-v4@5.7.3)(undici@8.11.2)(ws@8.21.3)(zod@4.5.4) picocolors: 1.1.1 pusher-js: 8.6.0 semver: 7.8.5 @@ -9679,7 +9685,7 @@ snapshots: semver: 7.8.5 sumchecker: 3.0.1 optionalDependencies: - undici: 7.29.1 + undici: 7.30.0 transitivePeerDependencies: - supports-color @@ -12789,7 +12795,7 @@ snapshots: dependencies: big-integer: 1.6.52 - brace-expansion@1.1.18: + brace-expansion@1.1.21: dependencies: balanced-match: 1.0.2 concat-map: 0.0.1 @@ -12899,7 +12905,7 @@ snapshots: dependencies: clone-response: 1.0.3 get-stream: 5.2.0 - http-cache-semantics: 4.2.0 + http-cache-semantics: 4.3.0 keyv: 4.5.4 lowercase-keys: 2.0.0 normalize-url: 6.1.0 @@ -13581,9 +13587,9 @@ snapshots: openapi-fetch: 0.14.1 platform: 1.3.6 tar: 7.5.22 - undici: 7.29.1 + undici: 7.30.0 optionalDependencies: - undici8: undici@8.10.2 + undici8: undici@8.11.2 eastasianwidth@0.2.0: {} @@ -13668,7 +13674,7 @@ snapshots: transitivePeerDependencies: - supports-color - electron@43.4.1: + electron@43.7.9: dependencies: '@electron-internal/extract-zip': 1.0.5 '@electron/get': 5.1.0 @@ -14610,7 +14616,7 @@ snapshots: html-url-attributes@3.0.1: {} - http-cache-semantics@4.2.0: {} + http-cache-semantics@4.3.0: {} http-errors@2.0.1: dependencies: @@ -14853,7 +14859,7 @@ snapshots: saxes: 6.0.0 symbol-tree: 3.2.4 tough-cookie: 6.0.2 - undici: 8.10.2 + undici: 8.11.2 w3c-xmlserializer: 5.0.0 webidl-conversions: 8.0.1 whatwg-mimetype: 5.0.0 @@ -15691,7 +15697,7 @@ snapshots: minimatch@3.1.5: dependencies: - brace-expansion: 1.1.18 + brace-expansion: 1.1.21 minimatch@5.1.9: dependencies: @@ -15791,7 +15797,7 @@ snapshots: semver: 7.8.5 tar: 7.5.22 tinyglobby: 0.2.17 - undici: 6.28.1 + undici: 6.29.0 which: 6.0.1 node-int64@0.4.0: {} @@ -15870,11 +15876,11 @@ snapshots: ws: 8.21.3 zod: 4.5.4 - openai@7.8.0(@aws-sdk/credential-provider-node@3.972.81)(@smithy/signature-v4@5.7.3)(undici@8.10.2)(ws@8.21.3)(zod@4.5.4): + openai@7.8.0(@aws-sdk/credential-provider-node@3.972.81)(@smithy/signature-v4@5.7.3)(undici@8.11.2)(ws@8.21.3)(zod@4.5.4): optionalDependencies: '@aws-sdk/credential-provider-node': 3.972.81 '@smithy/signature-v4': 5.7.3 - undici: 8.10.2 + undici: 8.11.2 ws: 8.21.3 zod: 4.5.4 @@ -17242,7 +17248,7 @@ snapshots: ssh-remote-port-forward: 1.0.4 tar-fs: 3.1.3 tmp: 0.2.7 - undici: 7.29.1 + undici: 7.30.0 transitivePeerDependencies: - bare-abort-controller - bare-buffer @@ -17388,11 +17394,11 @@ snapshots: undici-types@8.10.0: {} - undici@6.28.1: {} + undici@6.29.0: {} - undici@7.29.1: {} + undici@7.30.0: {} - undici@8.10.2: {} + undici@8.11.2: {} unicode-canonical-property-names-ecmascript@2.0.1: {}