From 0298d4ee20c5a121ae4e3d2f3b47e05ea747e650 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 10:42:10 +0000 Subject: [PATCH] fix: remediate Dependabot security alerts Automated by fix-dependabot-alerts workflow. Applied: app-builder-lib brace-expansion builder-util-runtime diff esbuild js-yaml linkify-it nodemailer qs sharp underscore undici uuid ws xml2js Rolled back: (none) Blocked: 1 package(s) Deferred (min release age): 0 package(s) Shell packaging: passed Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- ts/pnpm-lock.yaml | 68 ++++++++++++++++++++++++----------------------- 1 file changed, 35 insertions(+), 33 deletions(-) diff --git a/ts/pnpm-lock.yaml b/ts/pnpm-lock.yaml index 26be14170..cb7847885 100644 --- a/ts/pnpm-lock.yaml +++ b/ts/pnpm-lock.yaml @@ -1320,7 +1320,7 @@ importers: version: 5.4.5 vite: specifier: ^6.4.3 - version: 6.4.3(@types/node@26.1.2)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.9.0) + version: 6.4.3(@types/node@26.1.2)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.9.0) packages/actionGrammar: dependencies: @@ -2132,7 +2132,7 @@ importers: version: 29.3.3(@babel/core@7.29.7)(@jest/transform@29.7.0)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.7))(esbuild@0.28.1)(jest@29.7.0(@types/node@22.15.18)(ts-node@10.9.2(@types/node@22.15.18)(typescript@5.4.5)))(typescript@5.4.5) vite: specifier: ^6.4.3 - version: 6.4.3(@types/node@22.15.18)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.8.3) + version: 6.4.3(@types/node@22.15.18)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.8.3) packages/agents/browserControlRpc: dependencies: @@ -2296,7 +2296,7 @@ importers: version: 5.4.5 vite: specifier: ^6.4.3 - version: 6.4.3(@types/node@22.20.1)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.9.0) + version: 6.4.3(@types/node@22.20.1)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.9.0) packages/agents/calendar: dependencies: @@ -2929,7 +2929,7 @@ importers: version: 5.4.5 vite: specifier: ^6.4.3 - version: 6.4.3(@types/node@26.1.2)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.9.0) + version: 6.4.3(@types/node@26.1.2)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.9.0) packages/agents/montage: dependencies: @@ -3798,7 +3798,7 @@ importers: version: 5.4.5 vite: specifier: ^6.4.3 - version: 6.4.3(@types/node@26.1.2)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.9.0) + version: 6.4.3(@types/node@26.1.2)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.9.0) packages/agents/weather: dependencies: @@ -5200,7 +5200,7 @@ importers: version: 5.4.5 vite: specifier: ^6.4.3 - version: 6.4.3(@types/node@26.1.2)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.9.0) + version: 6.4.3(@types/node@26.1.2)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.9.0) packages/interactiveApp: dependencies: @@ -6001,7 +6001,7 @@ importers: version: 26.8.1(dmg-builder@26.8.1)(supports-color@8.1.1) electron-vite: specifier: ^4.0.1 - version: 4.0.1(vite@6.4.3(@types/node@22.20.1)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.9.0)) + version: 4.0.1(vite@6.4.3(@types/node@22.20.1)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.9.0)) jest: specifier: ^29.7.0 version: 29.7.0(@types/node@22.20.1)(ts-node@10.9.2(@types/node@22.20.1)(typescript@5.4.5)) @@ -6022,7 +6022,7 @@ importers: version: 5.4.5 vite: specifier: ^6.4.3 - version: 6.4.3(@types/node@22.20.1)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.9.0) + version: 6.4.3(@types/node@22.20.1)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.9.0) packages/studio-service: dependencies: @@ -9287,11 +9287,11 @@ packages: resolution: {integrity: sha512-4ct/ovL0h/0kuLFligLdZgt3qtWbNZEHnIKO321qvkaGLx1HmzbMpiL6V8tq7iDqNKeoqAzFb/2vnUeYGv1Ndw==} '@modelcontextprotocol/client@2.0.0': - resolution: {integrity: sha1-TcGMmDx6y0AEDwhEISPjxbiNYHQ=} + resolution: {integrity: sha512-8f1OghQ2rjzIOfqgUCP+8GiUWqRs89njoWLNqAe8kWmDePv3s1fZXseej+QXemssEuuOvLLmLO/kqM3IQHtISw==} engines: {node: '>=20'} '@modelcontextprotocol/core@2.0.0': - resolution: {integrity: sha1-yRikxq7yKnxZ37CqvCqCwYfM4Vc=} + resolution: {integrity: sha512-pJCEwGG7Lfr/+PQp9ZTwKXNeO5wzbfKL7H3MYpCorM4oFBoQrdjnBgEoqG+RjhsvS1FKrDbKux+M1HhlnGWqcA==} engines: {node: '>=20'} '@modelcontextprotocol/sdk@1.26.0': @@ -11466,10 +11466,12 @@ packages: '@xmldom/xmldom@0.8.13': resolution: {integrity: sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==} engines: {node: '>=10.0.0'} + deprecated: this version has critical issues, please update to the latest version '@xmldom/xmldom@0.9.10': resolution: {integrity: sha512-A9gOqLdi6cV4ibazAjcQufGj0B1y/vDqYrcuP6d/6x8P27gRS8643Dj9o1dEKtB6O7fwxb2FgBmJS2mX7gpvdw==} engines: {node: '>=14.6'} + deprecated: this version has critical issues, please update to the latest version '@xtuc/ieee754@1.2.0': resolution: {integrity: sha512-DX8nKgqcGwsc0eJSqYt5lwP4DH5FlHnmuWWBRy7X0NcaGR0ZtuyeESgMwTYVEtxmsNGY+qit4QYT/MIYTOTPeA==} @@ -13209,8 +13211,8 @@ packages: electron-publish@26.8.1: resolution: {integrity: sha512-q+jrSTIh/Cv4eGZa7oVR+grEJo/FoLMYBAnSL5GCtqwUpr1T+VgKB/dn1pnzxIxqD8S/jP1yilT9VrwCqINR4w==} - electron-to-chromium@1.5.401: - resolution: {integrity: sha512-H6ViHN68nGYlChEvlIU67fn8O2/tpbWQPwck98yaJmh+08LSvHiydzDQ6oXNccLU3kNRVIRS9A4mA7CG+i6fLQ==} + electron-to-chromium@1.5.402: + resolution: {integrity: sha512-/oOpMaPT6Yg+6/1XQhyIPlzgj7Ye9zf+nNM2Uh6OcE2G2oNptWazFa+qB2Pdqqbsc9KnIDzgAntoYN0dbwOXwA==} electron-updater@6.6.2: resolution: {integrity: sha512-Cr4GDOkbAUqRHP5/oeOmH/L2Bn6+FQPxVLZtPbcmKZC63a1F3uu5EefYOssgZXG3u/zBlubbJ5PJdITdMVggbw==} @@ -14937,7 +14939,7 @@ packages: resolution: {integrity: sha512-YYVDInQKFJfR/xa3ojUTl8c2KoTwiL1R5Wg9YCydwH0x0B9grbzlg5HC7mMjCtUJjbQ/YnGEZIhI5tCgfTb4Hw==} jose@6.2.8: - resolution: {integrity: sha1-OcFFn+XqyE6zmxYjuAd9z5ymxQY=} + resolution: {integrity: sha512-Bsdjwm3Qsd/P0jR+BHDe3LytDfY7WBq2HmCCLIwuVRHMuEC9ae7/R474GIUdF1NgCyZjzVo/A9DOiOBtXq8ZoQ==} js-stringify@1.0.2: resolution: {integrity: sha512-rtS5ATOo2Q5k1G+DADISilDA6lv79zIiwFd6CcjuIxGKLFm5C+RLImRscVap9k55i+MOZwgliw+NejvkLuGD5g==} @@ -14950,7 +14952,7 @@ packages: hasBin: true js-yaml@4.3.1: - resolution: {integrity: sha1-ASFsAB1n9I4s1WDXCMevIQkKOEg=} + resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==} hasBin: true jsbi@2.0.5: @@ -15953,8 +15955,8 @@ packages: node-pty@1.1.0: resolution: {integrity: sha512-20JqtutY6JPXTUnL0ij1uad7Qe1baT46lyolh2sSENDd4sTzKZ4nmAFkeAARDKwmlLjPx6XKRlwRUxwjOy+lUg==} - node-releases@2.0.52: - resolution: {integrity: sha512-MRlTqhAfoMx/4mhEbPo3Hi02g9LJZaJkka69V6h67Cb1gjrAG0jsTE4CZX1eptNx+VCAwJmfpnDIF4P0Nh1A7A==} + node-releases@2.0.53: + resolution: {integrity: sha512-D9UOmYG3UH1V+ENW56t5QXBwJw1YEY18ruVeus89Rw+SyIgjPkCO84bRzO3uNIYosJbNwiabWVn48o3uJLjxFQ==} engines: {node: '>=18'} node-rsa@1.1.1: @@ -17766,8 +17768,8 @@ packages: engines: {node: '>=10'} hasBin: true - terser@5.49.1: - resolution: {integrity: sha512-7A2xlQ5EnGT8KPA92dUh6RbRYTVw8hEaEN9L1K68l4UOXFuV511NnAqObGoRqGOQofQcMypisu1s3xawCEHrvA==} + terser@5.49.2: + resolution: {integrity: sha512-rGbJiKeQ4WDe3EXlDAIaQcwftVfv2Q8o1awFNfvXolJYKkb1AuZY1RTOmqx4LJXZENbWZA7eIsYGHuEzHsi1nQ==} engines: {node: '>=10'} hasBin: true @@ -26054,8 +26056,8 @@ snapshots: dependencies: baseline-browser-mapping: 2.11.12 caniuse-lite: 1.0.30001806 - electron-to-chromium: 1.5.401 - node-releases: 2.0.52 + electron-to-chromium: 1.5.402 + node-releases: 2.0.53 update-browserslist-db: 1.2.3(browserslist@4.28.7) bs-logger@0.2.6: @@ -27460,7 +27462,7 @@ snapshots: transitivePeerDependencies: - supports-color - electron-to-chromium@1.5.401: {} + electron-to-chromium@1.5.402: {} electron-updater@6.6.2(supports-color@8.1.1): dependencies: @@ -27475,7 +27477,7 @@ snapshots: transitivePeerDependencies: - supports-color - electron-vite@4.0.1(vite@6.4.3(@types/node@22.20.1)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.9.0)): + electron-vite@4.0.1(vite@6.4.3(@types/node@22.20.1)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.9.0)): dependencies: '@babel/core': 7.29.7 '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.29.7) @@ -27483,7 +27485,7 @@ snapshots: esbuild: 0.25.12 magic-string: 0.30.17 picocolors: 1.1.1 - vite: 6.4.3(@types/node@22.20.1)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.9.0) + vite: 6.4.3(@types/node@22.20.1)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.9.0) transitivePeerDependencies: - supports-color @@ -31544,7 +31546,7 @@ snapshots: dependencies: node-addon-api: 7.1.1 - node-releases@2.0.52: {} + node-releases@2.0.53: {} node-rsa@1.1.1: dependencies: @@ -33933,7 +33935,7 @@ snapshots: '@jridgewell/trace-mapping': 0.3.31 jest-worker: 27.5.1 schema-utils: 4.3.3 - terser: 5.49.1 + terser: 5.49.2 webpack: 5.105.0(esbuild@0.28.1)(postcss@8.5.24) optionalDependencies: esbuild: 0.28.1 @@ -33944,7 +33946,7 @@ snapshots: '@jridgewell/trace-mapping': 0.3.31 jest-worker: 27.5.1 schema-utils: 4.3.3 - terser: 5.49.1 + terser: 5.49.2 webpack: 5.105.0(esbuild@0.28.1)(postcss@8.5.24)(webpack-cli@5.1.4) optionalDependencies: esbuild: 0.28.1 @@ -33957,7 +33959,7 @@ snapshots: commander: 2.20.3 source-map-support: 0.5.21 - terser@5.49.1: + terser@5.49.2: dependencies: '@jridgewell/source-map': 0.3.11 acorn: 8.18.0 @@ -34653,7 +34655,7 @@ snapshots: '@types/unist': 3.0.3 vfile-message: 4.0.2 - vite@6.4.3(@types/node@22.15.18)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.8.3): + vite@6.4.3(@types/node@22.15.18)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.8.3): dependencies: esbuild: 0.25.12 fdir: 6.5.0(picomatch@4.0.5) @@ -34666,11 +34668,11 @@ snapshots: fsevents: 2.3.3 jiti: 2.7.0 less: 4.3.0 - terser: 5.49.1 + terser: 5.49.2 tsx: 4.21.0 yaml: 2.8.3 - vite@6.4.3(@types/node@22.20.1)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.9.0): + vite@6.4.3(@types/node@22.20.1)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.9.0): dependencies: esbuild: 0.25.12 fdir: 6.5.0(picomatch@4.0.5) @@ -34683,11 +34685,11 @@ snapshots: fsevents: 2.3.3 jiti: 2.7.0 less: 4.3.0 - terser: 5.49.1 + terser: 5.49.2 tsx: 4.21.0 yaml: 2.9.0 - vite@6.4.3(@types/node@26.1.2)(jiti@2.7.0)(less@4.3.0)(terser@5.49.1)(tsx@4.21.0)(yaml@2.9.0): + vite@6.4.3(@types/node@26.1.2)(jiti@2.7.0)(less@4.3.0)(terser@5.49.2)(tsx@4.21.0)(yaml@2.9.0): dependencies: esbuild: 0.25.12 fdir: 6.5.0(picomatch@4.0.5) @@ -34700,7 +34702,7 @@ snapshots: fsevents: 2.3.3 jiti: 2.7.0 less: 4.3.0 - terser: 5.49.1 + terser: 5.49.2 tsx: 4.21.0 yaml: 2.9.0