@bivy/bivy 0.5.1-staging.69 → 0.5.1-staging.71
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -5,7 +5,7 @@
|
|
|
5
5
|
* pi-coding-agent 0.82.1 publishes an npm-shrinkwrap that pins the vulnerable
|
|
6
6
|
* brace-expansion 5.0.7 below its own node_modules. npm overrides update the
|
|
7
7
|
* outer lockfile/audit result but do not replace the shrinkwrapped files during
|
|
8
|
-
* installation. Replace that one nested package with our direct, exact 5.0.
|
|
8
|
+
* installation. Replace that one nested package with our direct, exact 5.0.9
|
|
9
9
|
* dependency until pi publishes a corrected shrinkwrap.
|
|
10
10
|
*/
|
|
11
11
|
import fs from "node:fs";
|
|
@@ -32,13 +32,13 @@ const piPackage = findDependency(path.join("@earendil-works", "pi-coding-agent")
|
|
|
32
32
|
const target = piPackage && path.join(piPackage, "node_modules", "brace-expansion");
|
|
33
33
|
|
|
34
34
|
if (!target || !fs.existsSync(target)) process.exit(0);
|
|
35
|
-
if (!source) throw new Error("Security patch source brace-expansion@5.0.
|
|
35
|
+
if (!source) throw new Error("Security patch source brace-expansion@5.0.9 is missing");
|
|
36
36
|
|
|
37
37
|
const sourcePackage = JSON.parse(fs.readFileSync(path.join(source, "package.json"), "utf8"));
|
|
38
|
-
if (sourcePackage.version !== "5.0.
|
|
38
|
+
if (sourcePackage.version !== "5.0.9") {
|
|
39
39
|
throw new Error(`Refusing dependency patch from unexpected brace-expansion ${sourcePackage.version}`);
|
|
40
40
|
}
|
|
41
41
|
|
|
42
42
|
fs.rmSync(target, { recursive: true, force: true });
|
|
43
43
|
fs.cpSync(source, target, { recursive: true });
|
|
44
|
-
console.log("Patched pi-coding-agent's nested brace-expansion to 5.0.
|
|
44
|
+
console.log("Patched pi-coding-agent's nested brace-expansion to 5.0.9");
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@bivy/bivy",
|
|
3
|
-
"version": "0.5.1-staging.
|
|
3
|
+
"version": "0.5.1-staging.71",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"license": "FSL-1.1-ALv2",
|
|
6
6
|
"description": "Run coding agents on machines you own. Source-available, self-hostable agent workspace.",
|
|
@@ -33,7 +33,7 @@
|
|
|
33
33
|
"@anthropic-ai/claude-agent-sdk": "^0.3.199",
|
|
34
34
|
"@earendil-works/pi-ai": "0.82.1",
|
|
35
35
|
"@earendil-works/pi-coding-agent": "0.82.1",
|
|
36
|
-
"brace-expansion": "5.0.
|
|
36
|
+
"brace-expansion": "5.0.9",
|
|
37
37
|
"express": "^5.2.1",
|
|
38
38
|
"node-pty": "^1.1.0",
|
|
39
39
|
"typebox": "^1.3.6",
|
|
@@ -44,8 +44,8 @@
|
|
|
44
44
|
"@hono/node-server": "2.0.12",
|
|
45
45
|
"@modelcontextprotocol/sdk": "1.30.0",
|
|
46
46
|
"@earendil-works/pi-coding-agent": {
|
|
47
|
-
"brace-expansion": "5.0.
|
|
47
|
+
"brace-expansion": "5.0.9"
|
|
48
48
|
},
|
|
49
|
-
"brace-expansion": "5.0.
|
|
49
|
+
"brace-expansion": "5.0.9"
|
|
50
50
|
}
|
|
51
51
|
}
|