@axiom-lattice/pg-stores 5.2.0 → 5.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,5 +1,5 @@
1
1
 
2
- > @axiom-lattice/pg-stores@5.2.0 build /home/runner/work/agentic/agentic/packages/pg-stores
2
+ > @axiom-lattice/pg-stores@5.2.1 build /home/runner/work/agentic/agentic/packages/pg-stores
3
3
  > tsup src/index.ts --format cjs,esm --dts --sourcemap
4
4
 
5
5
  CLI Building entry: src/index.ts
@@ -10,11 +10,11 @@
10
10
  ESM Build start
11
11
  CJS dist/index.js 585.57 KB
12
12
  CJS dist/index.js.map 1.04 MB
13
- CJS ⚡️ Build success in 1619ms
13
+ CJS ⚡️ Build success in 896ms
14
14
  ESM dist/index.mjs 574.26 KB
15
15
  ESM dist/index.mjs.map 1.04 MB
16
- ESM ⚡️ Build success in 1620ms
16
+ ESM ⚡️ Build success in 900ms
17
17
  DTS Build start
18
- DTS ⚡️ Build success in 15871ms
18
+ DTS ⚡️ Build success in 10253ms
19
19
  DTS dist/index.d.ts 123.99 KB
20
20
  DTS dist/index.d.mts 123.99 KB
package/CHANGELOG.md CHANGED
@@ -1,5 +1,38 @@
1
1
  # @axiom-lattice/pg-stores
2
2
 
3
+ ## 5.2.1
4
+
5
+ ### Patch Changes
6
+
7
+ - b928a17: Follow up the Wiz remediation with `pnpm audit`: bump the pinned transitive
8
+ dependencies to the advisories published after the scan (shell-quote 1.11 —
9
+ critical command injection — fastify 5.12.6, @fastify/busboy 3.2.2,
10
+ @hono/node-server 2.1.3, brace-expansion 1.1.21/2.1.7/5.0.12,
11
+ body-parser 1.20.9/2.4.0, decode-uri-component 0.5.1, fast-uri 3.1.9/4.2.3,
12
+ glob 10.5/11.1/14.0.4, langsmith 0.12, picomatch 2.3.2/4.0.4,
13
+ protobufjs 7.6.5/8.8.1, source-map-js 1.2.2, undici 7.30.1, sanitize-html
14
+ 2.18.1, tar 7.5.22, tmp 0.2.7, vite 6.4.5, yaml 2.9.1, ajv 6.14/8.18,
15
+ mysql2 3.23.1, uuid 11.1, and others). Overrides are scoped per major line
16
+ where different majors are both required, and none pins below a declaring
17
+ package's range. Further zero-out pass: echarts 5.5 → 6.1 in react-sdk,
18
+ katex 0.19.1 (the patched range starts at 0.18.2), glob 14.0.4 for every
19
+ affected major line (10/11/13/14; glob 7 is outside the advisory range),
20
+ minimatch 11.0.8 for every vulnerable line, rimraf 4/5 → 6.1.4 (drops the
21
+ glob 9 dependency), ibm-cloud-sdk-core 5.9.4 (pulls file-type 21.3.4), and
22
+ fast-xml-parser 5.12.0. The client-sdk build moves from tsup 6.7 to 8.5,
23
+ clearing the last GHSA-3mv9-4h5g-vhg3 finding. Drop the unused `xlsx`
24
+ dependency from `apps/web`, which has no patched npm release.
25
+
26
+ Overrides only apply to this monorepo, so also raise the published packages'
27
+ own dependency ranges to patched versions, otherwise downstream consumers
28
+ (fina_demo) resolve the old lower bounds when they reinstall: fastify
29
+ ^5.12.6 (gateway, microsandbox-service, opensandbox-gateway), react-router
30
+ ^7.18.2, vite ^6.4.5, mysql2 ^3.23.1 (core), and uuid ^11.1.1 (core, gateway,
31
+ pg-stores, react-sdk, and the cli-a2a peer range).
32
+
33
+ - Updated dependencies [b928a17]
34
+ - @axiom-lattice/core@12.3.1
35
+
3
36
  ## 5.2.0
4
37
 
5
38
  ### Minor Changes
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@axiom-lattice/pg-stores",
3
- "version": "5.2.0",
3
+ "version": "5.2.1",
4
4
  "description": "PG stores implementation for Axiom Lattice framework",
5
5
  "main": "dist/index.js",
6
6
  "module": "dist/index.mjs",
@@ -24,15 +24,14 @@
24
24
  "@langchain/langgraph-checkpoint-postgres": "1.1.2",
25
25
  "@langchain/core": "1.3.2",
26
26
  "pg": "^8.16.3",
27
- "uuid": "^9.0.1",
28
- "@axiom-lattice/core": "12.3.0",
27
+ "uuid": "^11.1.1",
28
+ "@axiom-lattice/core": "12.3.1",
29
29
  "@axiom-lattice/protocols": "7.3.0"
30
30
  },
31
31
  "devDependencies": {
32
32
  "@types/jest": "^29.5.14",
33
33
  "@types/node": "^20.11.24",
34
34
  "@types/pg": "^8.11.10",
35
- "@types/uuid": "^9.0.8",
36
35
  "@typescript-eslint/eslint-plugin": "^7.2.0",
37
36
  "@typescript-eslint/parser": "^7.2.0",
38
37
  "eslint": "^8.57.0",