From 464afe0fee49da83da5a3011b8da16c3541e586d Mon Sep 17 00:00:00 2001 From: Miki Palet <64255955+mikipalet@users.noreply.github.com> Date: Fri, 7 Aug 2026 08:43:46 +0200 Subject: [PATCH] chore(deps): bump @zernio/node to 0.2.519 to close the key leak (#18) 0.2.518 and earlier registered the SDK's auth interceptor on a module-global client, so the last-constructed key won for every in-flight request. ZernFlow builds a client per request, so on Fluid Compute one workspace's call could carry another workspace's key. 0.2.519 gives each instance its own client. Co-Authored-By: Claude Opus 5 (1M context) --- package-lock.json | 8 ++++---- package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index f58ee599a..fad17d04d 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12,7 +12,7 @@ "@supabase/ssr": "^0.8.0", "@supabase/supabase-js": "^2.95.3", "@xyflow/react": "^12.10.0", - "@zernio/node": "^0.2.518", + "@zernio/node": "^0.2.519", "ai": "^6.0.85", "clsx": "^2.1.1", "lucide-react": "^0.563.0", @@ -3401,9 +3401,9 @@ } }, "node_modules/@zernio/node": { - "version": "0.2.518", - "resolved": "https://registry.npmjs.org/@zernio/node/-/node-0.2.518.tgz", - "integrity": "sha512-kAfybrXriyUmwpPG8hfHRQwtSMkbttKlcKIzS3ybrULoqQNjigSdwzoqf2A4JkFAiaBKKRWijGoDZIftebVWYA==", + "version": "0.2.519", + "resolved": "https://registry.npmjs.org/@zernio/node/-/node-0.2.519.tgz", + "integrity": "sha512-en/RJ/2/THgR1CyOeC8AVPucFYMROi0NelV4f83DRXLBcMCEHFUMxTs7v1Wy7x3Sll5r/gRT3LDc9bvUKK/cAQ==", "license": "Apache-2.0", "engines": { "node": ">=18" diff --git a/package.json b/package.json index e9e6bbb6c..788bc5017 100644 --- a/package.json +++ b/package.json @@ -15,7 +15,7 @@ "@supabase/ssr": "^0.8.0", "@supabase/supabase-js": "^2.95.3", "@xyflow/react": "^12.10.0", - "@zernio/node": "^0.2.518", + "@zernio/node": "^0.2.519", "ai": "^6.0.85", "clsx": "^2.1.1", "lucide-react": "^0.563.0",