@companion-ai/feynman 0.5.56 → 0.5.57
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/RELEASES.md +8 -0
- package/package.json +3 -2
package/RELEASES.md
CHANGED
|
@@ -6,6 +6,14 @@ GitHub release notes are generated from the matching `## vX.Y.Z` section in this
|
|
|
6
6
|
|
|
7
7
|
## Unreleased
|
|
8
8
|
|
|
9
|
+
## v0.5.57 - 2026-10-24
|
|
10
|
+
|
|
11
|
+
- **Security updates from advisories published Oct 23.**
|
|
12
|
+
- `undici` 8.12.3, now a direct dependency, so a fresh install no longer gives every package the pinned 8.10.2 below ([GHSA-xjj6-f33q-929c](https://github.com/advisories/GHSA-xjj6-f33q-929c), [GHSA-4qv8-2p9j-2685](https://github.com/advisories/GHSA-4qv8-2p9j-2685), [GHSA-f72v-6w45-q472](https://github.com/advisories/GHSA-f72v-6w45-q472)).
|
|
13
|
+
- `body-parser` 2.4.0, `fast-uri` 3.1.9 and `zod` 4.6.7, through Alpha Hub's MCP SDK.
|
|
14
|
+
- The website's build tools (vite 8.3.5, sharp 0.35.5, hono 4.13.13 and others) are patched too; its full `npm audit` is clean.
|
|
15
|
+
- Pi 1.4.0 and pi-subagents 0.81.0 still pin `undici` 8.10.2 for their own HTTP clients. Feynman can't change those copies; they'll move when Pi ([pi#11208](https://github.com/earendil-works/pi/issues/11208)) and pi-subagents ([#3022](https://github.com/nicobailon/pi-subagents/issues/3022)) release patched versions.
|
|
16
|
+
|
|
9
17
|
## v0.5.56 - 2026-10-23
|
|
10
18
|
|
|
11
19
|
- **pi-subagents 0.81.0.**
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@companion-ai/feynman",
|
|
3
|
-
"version": "0.5.
|
|
3
|
+
"version": "0.5.57",
|
|
4
4
|
"description": "The open source AI research agent.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -87,7 +87,8 @@
|
|
|
87
87
|
"pi-docparser": "4.0.0",
|
|
88
88
|
"pi-subagents": "0.81.0",
|
|
89
89
|
"pi-web-access": "0.44.0",
|
|
90
|
-
"posthog-node": "^5.53.0"
|
|
90
|
+
"posthog-node": "^5.53.0",
|
|
91
|
+
"undici": "^8.12.3"
|
|
91
92
|
},
|
|
92
93
|
"peerDependencies": {
|
|
93
94
|
"@earendil-works/pi-agent-core": "1.4.0",
|