mirror of
https://github.com/hanzoai/bot.git
synced 2026-10-30 17:24:26 +00:00
zeekay
9addabbf10
Adds pnpm overrides for 31 high / 3 critical advisories that the pnpm-audit-prod pre-commit hook surfaces (CI was failing). Key bumps: hono >=4.12.18, axios >=1.15.2, protobufjs >=8.0.2, fast-xml-parser >=5.7.0, @opentelemetry/sdk-node >=0.217.0, dompurify >=3.4.0, file-type >=21.3.1, ip-address >=10.1.1, postcss >=8.5.10, vite >=7.3.2, yaml >=2.8.3, lodash >=4.18.0 and several others. Also: extensions/brain and extensions/memory had '@hanzo/bot-graph-links: "*"' which pnpm 10 no longer auto-resolves to a workspace package without an existing lockfile entry. Switched to explicit 'workspace:*' so a clean lockfile regen works. Audit: 85 vulns (3 critical / 31 high / 49 moderate / 2 low) → 12 vulns (0 critical / 0 high / 11 moderate / 1 low). At --audit-level=high CI hook now passes (exit 0).
18 lines
413 B
JSON
18 lines
413 B
JSON
{
|
|
"name": "@hanzo/bot-brain",
|
|
"version": "1.4.2",
|
|
"private": true,
|
|
"description": "Hanzo Brain meta-pack — gbrain-equivalent on top of Hanzo Bot. Single binary, single config.",
|
|
"type": "module",
|
|
"main": "./index.ts",
|
|
"peerDependencies": {
|
|
"@hanzo/bot-graph-links": "workspace:*",
|
|
"@hanzo/bot-memory": "workspace:*"
|
|
},
|
|
"hanzo-bot": {
|
|
"extensions": [
|
|
"./index.ts"
|
|
]
|
|
}
|
|
}
|