From 5bb7d8a166e6de52c7fa73d19cfca53bdbed8363 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 25 Oct 2026 03:20:28 +0000 Subject: [PATCH] chore(deps): update dependency brace-expansion to v5.0.12 [security] --- pnpm-lock.yaml | 69 +++++++++++++++++++++++++-------------------- pnpm-workspace.yaml | 2 +- 2 files changed, 39 insertions(+), 32 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index bf8453a9..eea6c939 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -16,7 +16,7 @@ overrides: esbuild: '>=0.28.1 <1' form-data: '>=4.0.6 <5' dompurify: 3.4.17 - brace-expansion: 5.0.9 + brace-expansion: 5.0.12 fast-uri: 3.1.8 undici: 7.30.1 nanoid: 3.3.18 @@ -43,7 +43,7 @@ importers: version: link:packages/core '@agentskit/doc-bridge': specifier: 2.4.0 - version: 2.4.0(@agentskit/adapters@0.19.0(@aws-sdk/client-bedrock-runtime@3.1068.0)(@langchain/core@1.3.0(@opentelemetry/api@1.9.1)(@opentelemetry/sdk-trace-base@2.12.0(@opentelemetry/api@1.9.1))(openai@6.49.0(@aws-sdk/credential-provider-node@3.972.88)(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76))(ws@8.22.0))(@mlc-ai/web-llm@0.2.86))(@agentskit/core@packages+core)(@agentskit/memory@0.12.0(drizzle-orm@0.45.4(@cloudflare/workers-types@4.20260702.1)(@opentelemetry/api@1.9.1)(@types/better-sqlite3@7.6.13)(@types/pg@8.23.1)(@upstash/redis@1.39.0)(better-sqlite3@13.0.3)(pg@8.23.1))(pg@8.23.1)(vectra@0.15.0(@aws-sdk/credential-provider-node@3.972.88)(@huggingface/transformers@4.3.1(@types/node@26.6.5))(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76)))(@agentskit/rag@0.7.0(@aws-sdk/client-s3@3.1124.0))(@types/react@19.3.0)(graphology-types@0.24.8)(react-devtools-core@6.1.5) + version: 2.4.0(@agentskit/adapters@0.19.1(@aws-sdk/client-bedrock-runtime@3.1068.0)(@langchain/core@1.3.0(@opentelemetry/api@1.9.1)(@opentelemetry/sdk-trace-base@2.12.0(@opentelemetry/api@1.9.1))(openai@6.49.0(@aws-sdk/credential-provider-node@3.972.88)(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76))(ws@8.22.0))(@mlc-ai/web-llm@0.2.86))(@agentskit/core@packages+core)(@agentskit/memory@0.12.1(drizzle-orm@0.45.4(@cloudflare/workers-types@4.20260702.1)(@opentelemetry/api@1.9.1)(@types/better-sqlite3@7.6.13)(@types/pg@8.23.1)(@upstash/redis@1.39.0)(better-sqlite3@13.0.3)(pg@8.23.1))(pg@8.23.1)(vectra@0.15.0(@aws-sdk/credential-provider-node@3.972.88)(@huggingface/transformers@4.3.1(@types/node@26.6.5))(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76)))(@agentskit/rag@0.7.1(@aws-sdk/client-s3@3.1124.0))(@types/react@19.3.0)(graphology-types@0.24.8)(react-devtools-core@6.1.5) '@agentskit/eval': specifier: workspace:* version: link:packages/eval @@ -1074,7 +1074,7 @@ importers: version: 25.9.9 braintrust: specifier: ^3.39.0 - version: 3.39.0(@aws-sdk/credential-provider-web-identity@3.972.82)(@types/react@19.3.0)(zod@4.6.7) + version: 3.39.0(@aws-sdk/credential-provider-web-identity@3.972.82)(@types/react@19.3.0)(zod@3.25.76) metro: specifier: 0.87.1 version: 0.87.1 @@ -1105,7 +1105,7 @@ importers: version: 25.9.9 braintrust: specifier: ^3.39.0 - version: 3.39.0(@aws-sdk/credential-provider-web-identity@3.972.82)(@types/react@19.3.0)(zod@4.6.7) + version: 3.39.0(@aws-sdk/credential-provider-web-identity@3.972.82)(@types/react@19.3.0)(zod@3.25.76) tsup: specifier: ^8.5.1 version: 8.5.1(jiti@2.7.0)(postcss@8.5.31)(tsx@4.23.15)(typescript@6.0.3)(yaml@2.9.1) @@ -1734,8 +1734,8 @@ packages: '@adobe/css-tools@4.5.0': resolution: {integrity: sha512-6OzddxPio9UiWTCemp4N8cYLV2ZN1ncRnV1cVGtve7dhPOtRkleRyx32GQCYSwDYgaHU3USMm84tNsvKzRCa1Q==} - '@agentskit/adapters@0.19.0': - resolution: {integrity: sha512-nX0ZiXP5X4Ps5dWaU87kTBSdhLbKkrRQ5W6EpOzgeR9w4FQ/tMBiZAY6zZRTpawC1qtUy1OvXfxB8NJ20Lolog==} + '@agentskit/adapters@0.19.1': + resolution: {integrity: sha512-K8wzViRAVHWUyc+F10PtSXohIX/R6+mZIazYippGXWJPJ3tBhxap1VUY+5+n0/IKAqgXdzo1NGSC1VW815efWA==} engines: {node: '>=20.19'} peerDependencies: '@aws-sdk/client-bedrock-runtime': ^3.0.0 @@ -1869,8 +1869,8 @@ packages: vectra: optional: true - '@agentskit/memory@0.12.0': - resolution: {integrity: sha512-lsHzCUwJxJGWskDU8t4fbEixbqpNaU5s96/2Fy5jEdwgkuFNUu9e/2ouKFKt+0XO3q8v+9Z4w3upgnn5AlPoaA==} + '@agentskit/memory@0.12.1': + resolution: {integrity: sha512-Hy9P6CLhEC2XXleXfX8bgEHtnX7mSfus9ZTN8MrD1Zid4T6JHBjrdleOq8WFEBIxBp6mCeiSNfhQ4PZCjPT+uQ==} engines: {node: '>=20.19'} peerDependencies: drizzle-orm: ^0.44.0 || ^0.45.3 @@ -1892,8 +1892,12 @@ packages: resolution: {integrity: sha512-/i+yoCbFjs+hp7Qs8ygRJDmJRpMIgbNSvl9mjIl2NRH4DHv4YPBclFzmY3t13AHePY/svQvGMLM9DNY3dY046w==} engines: {node: '>=20.19'} - '@agentskit/rag@0.7.0': - resolution: {integrity: sha512-SR6uXS4xl/dkLZ/1Cs18W8xafqiHYA9XFGoR7tNnI/GXz56Io037SH4rNDXhey6IxyjSrLLFCoXUE9KX3NV2Gg==} + '@agentskit/net@0.2.4': + resolution: {integrity: sha512-yMtjSm8BerXSaerMVVwSPMxgmBZtLKi7ts+L+SAtP7J1bhVQ9IaqKBJ/5ZKp5aMMpz4dgrdKeV+d1KaezoUgVw==} + engines: {node: '>=20.19'} + + '@agentskit/rag@0.7.1': + resolution: {integrity: sha512-hFaZ8suJSY5VlsTKNbH5WzOOhAoebJ7NwySiFjy28mhelgB1dYp5NakVnplLQ89pfv9+PKEfLVWX+ZiF+IZMmw==} engines: {node: '>=20.19'} peerDependencies: '@aws-sdk/client-s3': ^3.0.0 @@ -5489,8 +5493,8 @@ packages: bowser@2.14.1: resolution: {integrity: sha512-tzPjzCxygAKWFOJP011oxFHs57HzIhOEracIgAePE4pqB3LikALKnSzUyU4MGs9/iCEUuHlAJTjTc5M+u7YEGg==} - brace-expansion@5.0.9: - resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==} + brace-expansion@5.0.12: + resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==} engines: {node: 20 || >=22} braces@3.0.3: @@ -10158,11 +10162,11 @@ snapshots: '@adobe/css-tools@4.5.0': {} - '@agentskit/adapters@0.19.0(@aws-sdk/client-bedrock-runtime@3.1068.0)(@langchain/core@1.3.0(@opentelemetry/api@1.9.1)(@opentelemetry/sdk-trace-base@2.12.0(@opentelemetry/api@1.9.1))(openai@6.49.0(@aws-sdk/credential-provider-node@3.972.88)(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76))(ws@8.22.0))(@mlc-ai/web-llm@0.2.86)': + '@agentskit/adapters@0.19.1(@aws-sdk/client-bedrock-runtime@3.1068.0)(@langchain/core@1.3.0(@opentelemetry/api@1.9.1)(@opentelemetry/sdk-trace-base@2.12.0(@opentelemetry/api@1.9.1))(openai@6.49.0(@aws-sdk/credential-provider-node@3.972.88)(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76))(ws@8.22.0))(@mlc-ai/web-llm@0.2.86)': dependencies: '@agentskit/core': 1.15.0 '@agentskit/cross-platform': 0.3.0 - '@agentskit/net': 0.2.3 + '@agentskit/net': 0.2.4 optionalDependencies: '@aws-sdk/client-bedrock-runtime': 3.1068.0 '@langchain/core': 1.3.0(@opentelemetry/api@1.9.1)(@opentelemetry/sdk-trace-base@2.12.0(@opentelemetry/api@1.9.1))(openai@6.49.0(@aws-sdk/credential-provider-node@3.972.88)(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76))(ws@8.22.0) @@ -10217,7 +10221,7 @@ snapshots: which: 2.0.2 optional: true - '@agentskit/doc-bridge@2.4.0(@agentskit/adapters@0.19.0(@aws-sdk/client-bedrock-runtime@3.1068.0)(@langchain/core@1.3.0(@opentelemetry/api@1.9.1)(@opentelemetry/sdk-trace-base@2.12.0(@opentelemetry/api@1.9.1))(openai@6.49.0(@aws-sdk/credential-provider-node@3.972.88)(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76))(ws@8.22.0))(@mlc-ai/web-llm@0.2.86))(@agentskit/core@packages+core)(@agentskit/memory@0.12.0(drizzle-orm@0.45.4(@cloudflare/workers-types@4.20260702.1)(@opentelemetry/api@1.9.1)(@types/better-sqlite3@7.6.13)(@types/pg@8.23.1)(@upstash/redis@1.39.0)(better-sqlite3@13.0.3)(pg@8.23.1))(pg@8.23.1)(vectra@0.15.0(@aws-sdk/credential-provider-node@3.972.88)(@huggingface/transformers@4.3.1(@types/node@26.6.5))(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76)))(@agentskit/rag@0.7.0(@aws-sdk/client-s3@3.1124.0))(@types/react@19.3.0)(graphology-types@0.24.8)(react-devtools-core@6.1.5)': + '@agentskit/doc-bridge@2.4.0(@agentskit/adapters@0.19.1(@aws-sdk/client-bedrock-runtime@3.1068.0)(@langchain/core@1.3.0(@opentelemetry/api@1.9.1)(@opentelemetry/sdk-trace-base@2.12.0(@opentelemetry/api@1.9.1))(openai@6.49.0(@aws-sdk/credential-provider-node@3.972.88)(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76))(ws@8.22.0))(@mlc-ai/web-llm@0.2.86))(@agentskit/core@packages+core)(@agentskit/memory@0.12.1(drizzle-orm@0.45.4(@cloudflare/workers-types@4.20260702.1)(@opentelemetry/api@1.9.1)(@types/better-sqlite3@7.6.13)(@types/pg@8.23.1)(@upstash/redis@1.39.0)(better-sqlite3@13.0.3)(pg@8.23.1))(pg@8.23.1)(vectra@0.15.0(@aws-sdk/credential-provider-node@3.972.88)(@huggingface/transformers@4.3.1(@types/node@26.6.5))(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76)))(@agentskit/rag@0.7.1(@aws-sdk/client-s3@3.1124.0))(@types/react@19.3.0)(graphology-types@0.24.8)(react-devtools-core@6.1.5)': dependencies: '@agentskit/cross-platform': 0.2.1 '@agentskit/harness': 0.22.3(@types/react@19.3.0)(react-devtools-core@6.1.5) @@ -10249,10 +10253,10 @@ snapshots: yaml: 2.9.1 zod: 4.6.7 optionalDependencies: - '@agentskit/adapters': 0.19.0(@aws-sdk/client-bedrock-runtime@3.1068.0)(@langchain/core@1.3.0(@opentelemetry/api@1.9.1)(@opentelemetry/sdk-trace-base@2.12.0(@opentelemetry/api@1.9.1))(openai@6.49.0(@aws-sdk/credential-provider-node@3.972.88)(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76))(ws@8.22.0))(@mlc-ai/web-llm@0.2.86) + '@agentskit/adapters': 0.19.1(@aws-sdk/client-bedrock-runtime@3.1068.0)(@langchain/core@1.3.0(@opentelemetry/api@1.9.1)(@opentelemetry/sdk-trace-base@2.12.0(@opentelemetry/api@1.9.1))(openai@6.49.0(@aws-sdk/credential-provider-node@3.972.88)(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76))(ws@8.22.0))(@mlc-ai/web-llm@0.2.86) '@agentskit/core': link:packages/core - '@agentskit/memory': 0.12.0(drizzle-orm@0.45.4(@cloudflare/workers-types@4.20260702.1)(@opentelemetry/api@1.9.1)(@types/better-sqlite3@7.6.13)(@types/pg@8.23.1)(@upstash/redis@1.39.0)(better-sqlite3@13.0.3)(pg@8.23.1))(pg@8.23.1)(vectra@0.15.0(@aws-sdk/credential-provider-node@3.972.88)(@huggingface/transformers@4.3.1(@types/node@26.6.5))(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76)) - '@agentskit/rag': 0.7.0(@aws-sdk/client-s3@3.1124.0) + '@agentskit/memory': 0.12.1(drizzle-orm@0.45.4(@cloudflare/workers-types@4.20260702.1)(@opentelemetry/api@1.9.1)(@types/better-sqlite3@7.6.13)(@types/pg@8.23.1)(@upstash/redis@1.39.0)(better-sqlite3@13.0.3)(pg@8.23.1))(pg@8.23.1)(vectra@0.15.0(@aws-sdk/credential-provider-node@3.972.88)(@huggingface/transformers@4.3.1(@types/node@26.6.5))(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76)) + '@agentskit/rag': 0.7.1(@aws-sdk/client-s3@3.1124.0) transitivePeerDependencies: - '@types/react' - bufferutil @@ -10313,10 +10317,10 @@ snapshots: optionalDependencies: vectra: 0.15.0(@aws-sdk/credential-provider-node@3.972.88)(@huggingface/transformers@4.3.1(@types/node@26.6.5))(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@4.6.7) - '@agentskit/memory@0.12.0(drizzle-orm@0.45.4(@cloudflare/workers-types@4.20260702.1)(@opentelemetry/api@1.9.1)(@types/better-sqlite3@7.6.13)(@types/pg@8.23.1)(@upstash/redis@1.39.0)(better-sqlite3@13.0.3)(pg@8.23.1))(pg@8.23.1)(vectra@0.15.0(@aws-sdk/credential-provider-node@3.972.88)(@huggingface/transformers@4.3.1(@types/node@26.6.5))(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76))': + '@agentskit/memory@0.12.1(drizzle-orm@0.45.4(@cloudflare/workers-types@4.20260702.1)(@opentelemetry/api@1.9.1)(@types/better-sqlite3@7.6.13)(@types/pg@8.23.1)(@upstash/redis@1.39.0)(better-sqlite3@13.0.3)(pg@8.23.1))(pg@8.23.1)(vectra@0.15.0(@aws-sdk/credential-provider-node@3.972.88)(@huggingface/transformers@4.3.1(@types/node@26.6.5))(@smithy/signature-v4@5.7.4)(ws@8.22.0)(zod@3.25.76))': dependencies: '@agentskit/core': 1.15.0 - '@agentskit/net': 0.2.3 + '@agentskit/net': 0.2.4 optionalDependencies: drizzle-orm: 0.45.4(@cloudflare/workers-types@4.20260702.1)(@opentelemetry/api@1.9.1)(@types/better-sqlite3@7.6.13)(@types/pg@8.23.1)(@upstash/redis@1.39.0)(better-sqlite3@13.0.3)(pg@8.23.1) pg: 8.23.1 @@ -10335,10 +10339,17 @@ snapshots: eventsource-parser: 4.1.2 ipaddr.js: 2.5.0 - '@agentskit/rag@0.7.0(@aws-sdk/client-s3@3.1124.0)': + '@agentskit/net@0.2.4': dependencies: '@agentskit/core': 1.15.0 - '@agentskit/net': 0.2.3 + eventsource-parser: 4.1.2 + ipaddr.js: 2.5.0 + optional: true + + '@agentskit/rag@0.7.1(@aws-sdk/client-s3@3.1124.0)': + dependencies: + '@agentskit/core': 1.15.0 + '@agentskit/net': 0.2.4 yaml: 2.9.1 optionalDependencies: '@aws-sdk/client-s3': 3.1124.0 @@ -14051,7 +14062,7 @@ snapshots: bowser@2.14.1: {} - brace-expansion@5.0.9: + brace-expansion@5.0.12: dependencies: balanced-match: 4.0.4 @@ -14059,7 +14070,7 @@ snapshots: dependencies: fill-range: 7.1.1 - braintrust@3.39.0(@aws-sdk/credential-provider-web-identity@3.972.82)(@types/react@19.3.0)(zod@4.6.7): + braintrust@3.39.0(@aws-sdk/credential-provider-web-identity@3.972.82)(@types/react@19.3.0)(zod@3.25.76): dependencies: '@next/env': 14.2.35 '@vercel/functions': 1.6.0(@aws-sdk/credential-provider-web-identity@3.972.82) @@ -14088,8 +14099,8 @@ snapshots: termi-link: 1.1.0 unplugin: 2.3.11 uuid: 11.1.1 - zod: 4.6.7 - zod-to-json-schema: 3.25.2(zod@4.6.7) + zod: 3.25.76 + zod-to-json-schema: 3.25.2(zod@3.25.76) optionalDependencies: '@braintrust/bt-darwin-arm64': 0.12.0 '@braintrust/bt-darwin-x64': 0.12.0 @@ -17211,7 +17222,7 @@ snapshots: minimatch@10.2.6: dependencies: - brace-expansion: 5.0.9 + brace-expansion: 5.0.12 minimizer-webpack-plugin@5.13.1(esbuild@0.28.2)(postcss@8.5.31)(webpack@5.111.1(esbuild@0.28.2)(postcss@8.5.31)): dependencies: @@ -19624,10 +19635,6 @@ snapshots: dependencies: zod: 3.25.76 - zod-to-json-schema@3.25.2(zod@4.6.7): - dependencies: - zod: 4.6.7 - zod@3.25.76: {} zod@4.6.7: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 586ea125..4e77fc8d 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -23,7 +23,7 @@ overrides: esbuild: ">=0.28.1 <1" form-data: ">=4.0.6 <5" dompurify: "3.4.17" - brace-expansion: "5.0.9" + brace-expansion: "5.0.12" # GHSA advisories for fast-uri <3.1.7 (host confusion, SSRF, authority injection) fast-uri: "3.1.8" undici: "7.30.1"