@loxtep/sdk 0.7.0 → 0.7.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +15 -0
- package/package.json +9 -5
package/CHANGELOG.md
CHANGED
|
@@ -6,6 +6,21 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
|
|
|
6
6
|
and this project adheres to
|
|
7
7
|
[Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
8
8
|
|
|
9
|
+
## [0.7.1] - 2026-07-23
|
|
10
|
+
|
|
11
|
+
### Security
|
|
12
|
+
|
|
13
|
+
- **js-yaml** upgraded to **4.3.0+** ([GHSA-52cp-r559-cp3m](https://github.com/advisories/GHSA-52cp-r559-cp3m) /
|
|
14
|
+
CVE-2026-59869): fixes quadratic CPU use from chained YAML merge-key (`<<:`) documents.
|
|
15
|
+
|
|
16
|
+
### Changed
|
|
17
|
+
|
|
18
|
+
- **leo-sdk** bumped **7.1.12 → 7.1.21** (latest npm; lodash already at 4.18.x upstream).
|
|
19
|
+
- **Dependency overrides** (transitive hardening for npm consumers):
|
|
20
|
+
- `uuid` → **^11.1.0** (leo-sdk still declares 8.x)
|
|
21
|
+
- `fast-csv` → **^5.0.7** (drops deprecated `lodash.isequal`; leo-sdk still declares 4.x)
|
|
22
|
+
- `lodash` → **^4.18.0** (unchanged)
|
|
23
|
+
|
|
9
24
|
## [0.7.0] - 2026-07-23
|
|
10
25
|
|
|
11
26
|
### Breaking changes — MCP-aligned client facades
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@loxtep/sdk",
|
|
3
|
-
"version": "0.7.
|
|
3
|
+
"version": "0.7.1",
|
|
4
4
|
"description": "Loxtep SDK for Node.js — the Enterprise Context Layer: data products, workflows, projects, queues, and machine-usable context for AI",
|
|
5
5
|
"author": "Loxtep <engineering@loxtep.io>",
|
|
6
6
|
"homepage": "https://loxtep.io",
|
|
@@ -60,11 +60,15 @@
|
|
|
60
60
|
],
|
|
61
61
|
"license": "MIT",
|
|
62
62
|
"overrides": {
|
|
63
|
-
"lodash": "^4.18.0"
|
|
63
|
+
"lodash": "^4.18.0",
|
|
64
|
+
"uuid": "^11.1.0",
|
|
65
|
+
"fast-csv": "^5.0.7"
|
|
64
66
|
},
|
|
65
67
|
"pnpm": {
|
|
66
68
|
"overrides": {
|
|
67
|
-
"lodash": "^4.18.0"
|
|
69
|
+
"lodash": "^4.18.0",
|
|
70
|
+
"uuid": "^11.1.0",
|
|
71
|
+
"fast-csv": "^5.0.7"
|
|
68
72
|
}
|
|
69
73
|
},
|
|
70
74
|
"dependencies": {
|
|
@@ -78,8 +82,8 @@
|
|
|
78
82
|
"@smithy/protocol-http": "^5.4.3",
|
|
79
83
|
"@smithy/signature-v4": "^5.4.3",
|
|
80
84
|
"@smithy/types": "^4.14.2",
|
|
81
|
-
"js-yaml": "4.
|
|
82
|
-
"leo-sdk": "7.1.
|
|
85
|
+
"js-yaml": "^4.3.0",
|
|
86
|
+
"leo-sdk": "7.1.21",
|
|
83
87
|
"zod": "^4.4.3"
|
|
84
88
|
},
|
|
85
89
|
"devDependencies": {
|