@benji-money/connect-sdk 1.0.8-beta.1 → 1.0.8-beta.2

package/dist/connect-sdk.umd.global.js

@@ -75,7 +75,7 @@ var ConnectSDK = (() => {
   // src/utils/config.ts
   var buildContext = () => ({
     namespace: "benji-connect-sdk" ? "benji-connect-sdk" : "benji-connect-sdk",
-    version: "1.0.8-beta.1" ? String("1.0.8-beta.1") : "0.0.0"
+    version: "1.0.8-beta.2" ? String("1.0.8-beta.2") : "0.0.0"
   });
   function isBenjiConnectEnvironment(environment) {
     return environment === "development" /* DEVELOPMENT */ || environment === "sandbox" /* SANDBOX */ || environment === "production" /* PRODUCTION */;

package/dist/index.cjs

@@ -113,7 +113,7 @@ function getEnvironment() {
 // src/utils/config.ts
 var buildContext = () => ({
   namespace: "benji-connect-sdk" ? "benji-connect-sdk" : "benji-connect-sdk",
-  version: "1.0.8-beta.1" ? String("1.0.8-beta.1") : "0.0.0"
+  version: "1.0.8-beta.2" ? String("1.0.8-beta.2") : "0.0.0"
 });
 function isBenjiConnectEnvironment(environment) {
   return environment === "development" /* DEVELOPMENT */ || environment === "sandbox" /* SANDBOX */ || environment === "production" /* PRODUCTION */;

package/dist/index.js

@@ -87,7 +87,7 @@ function getEnvironment() {
 // src/utils/config.ts
 var buildContext = () => ({
   namespace: "benji-connect-sdk" ? "benji-connect-sdk" : "benji-connect-sdk",
-  version: "1.0.8-beta.1" ? String("1.0.8-beta.1") : "0.0.0"
+  version: "1.0.8-beta.2" ? String("1.0.8-beta.2") : "0.0.0"
 });
 function isBenjiConnectEnvironment(environment) {
   return environment === "development" /* DEVELOPMENT */ || environment === "sandbox" /* SANDBOX */ || environment === "production" /* PRODUCTION */;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@benji-money/connect-sdk",
-  "version": "1.0.8-beta.1",
+  "version": "1.0.8-beta.2",
   "description": "Benji Connect SDK for authentication and verification",
   "type": "module",
   "main": "dist/index.cjs",
@@ -48,11 +48,27 @@
   "devDependencies": {
     "@changesets/changelog-github": "^0.5.1",
     "@changesets/cli": "^2.29.7",
-    "rimraf": "^6.1.2",
+    "rimraf": "^6.1.3",
     "tsup": "^8.5.0",
     "typescript": "^5.9.3",
     "yalc": "^1.0.0-pre.53"
   },
+  "// 1) rimraf → glob → minimatch": "CVE-2026-26996 (ReDos): Scoped override forces minimatch ^10.2.1 for rimraf->glob only (dev). Blanket override breaks yalc/npm-packlist (minimatch v3 API vs v10 named exports). Dev-deps only; production bundle does not use minimatch.",
+  "// 2) tsup → rollup": "CVE-2026-27606 (GHSA-mw96-cpmx-2vgc): Arbitrary file write via path traversal. >=4.59.0 fixes. Transitive via tsup.",
+  "// 3) tsup → sucrase → glob": "CVE-2025-64756 (GHSA-5j98-mcp5-4vw2): glob CLI command injection via -c/--cmd. >=10.5.0 fixes. Scoped to sucrase only; blanket would break yalc/npm-packlist (glob 7.x).",
+  "overrides": {
+    "rimraf": {
+      "glob": {
+        "minimatch": "^10.2.1"
+      }
+    },
+    "tsup": {
+      "rollup": ">=4.59.0",
+      "sucrase": {
+        "glob": ">=10.5.0"
+      }
+    }
+  },
   "bugs": {
     "url": "https://github.com/benji-money/benji-connect-sdk/issues"
   },

package/dist/connect-sdk.umd.d.ts

@@ -1,14 +0,0 @@
-// These are compile-time constants replaced by tsup's `define` option.
-// Declaring them globally prevents TypeScript errors.
-
-
-declare global {
-  const __VERSION__: string;
-  const __NAMESPACE__: string;
-
-  // Global browser exposure for UMD builds 
-  interface Window {
-    // SDK main class (UMD builds attach this)
-    ConnectSDK?: any;
-  }
-}