Skip to content

chore(deps): bump undici and fast-uri in coding-agents lockfile - #6081

Merged
cdbartholomew merged 1 commit into
mainfrom
chore/security-daily-20261025-npm-coding-agents
Oct 25, 2026
Merged

cdbartholomew merged 1 commit into
mainfrom
chore/security-daily-20261025-npm-coding-agents

Conversation

@cdbartholomew

Copy link
Copy Markdown
Contributor

Routine dependency maintenance for hindsight-integrations/coding-agents/package-lock.json.

Closes Dependabot alerts: #2308 #2309 #2302 #2304 #2301 #2303

Package Before After How
undici (hoisted, via node-gyp ^6.25.0) 6.28.1 6.29.1 in-range update
undici (nested under @opencode/util, via @effect/platform-node ^8.10.0) 8.10.2 8.12.3 in-range update
fast-uri (via ajv ^3.0.1) 3.1.7 3.1.9 existing override floor raised to >=3.1.9 <4.0.0

All dev dependencies; patch/minor moves only. Lockfile regenerated with npm 11 (matches how it was last written); npm ci under npm 10.9.2 accepts it.

Local verification (mirrors test-coding-agents)

  • npm ci OK
  • npx tsc --noEmit OK
  • npm test — 83 files / 1399 tests passed
  • npm run build OK

@cdbartholomew cdbartholomew added security Security / dependency vulnerability remediation p1 High severity - remediate within 30 days labels Oct 25, 2026
@cdbartholomew cdbartholomew self-assigned this Oct 25, 2026
@cdbartholomew
cdbartholomew merged commit c228cee into main Oct 25, 2026
93 checks passed
@cdbartholomew
cdbartholomew deleted the chore/security-daily-20261025-npm-coding-agents branch October 25, 2026 14:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

p1 High severity - remediate within 30 days security Security / dependency vulnerability remediation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant