@namzu/bedrock 5.1.1 → 5.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +29 -0
- package/README.md +2 -4
- package/package.json +3 -3
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,34 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 5.1.2
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- 8d5223b: Nothing a consumer installs or calls changes, and that is the whole of this
|
|
8
|
+
release. `vitest` moves from `^3.2.6` to `^4.1.11` in the `devDependencies` of
|
|
9
|
+
all nineteen packages that declared it, and `@vitest/coverage-v8` moves with it
|
|
10
|
+
in `@namzu/sdk`. Every occurrence is a devDependency — checked, not assumed —
|
|
11
|
+
so `dependencies`, `peerDependencies`, exports, types, defaults and the wire
|
|
12
|
+
shape are untouched, and the published tarballs differ from the previous
|
|
13
|
+
release only in `package.json#devDependencies`.
|
|
14
|
+
|
|
15
|
+
The reason is a security fix with no 3.x backport. `GHSA-82fw-gwwq-j7x9`
|
|
16
|
+
("Path Traversal / Arbitrary File Read via `@vitest/mocker` Redirect Mock")
|
|
17
|
+
covers `vitest` and `@vitest/mocker` from `2.1.0` up to `4.1.11`, so `^3.2.6`
|
|
18
|
+
can only be resolved by leaving the 3.x line. `4.1.11` is the first patched
|
|
19
|
+
release and is what the lockfile now resolves for both.
|
|
20
|
+
|
|
21
|
+
What this costs anyone who works on the repository rather than with it: the
|
|
22
|
+
upgrade was not a version bump. Vitest 4 changed test discovery, coverage
|
|
23
|
+
configuration, mock construction and reporter output, and each of those broke
|
|
24
|
+
something here that had to be migrated rather than worked around. Those fixes
|
|
25
|
+
are all under `__tests__/`, `vitest.config.ts` files and `scripts/`, none of
|
|
26
|
+
which is published, which is why this is a patch and not a major.
|
|
27
|
+
|
|
28
|
+
You do not need to do anything. If you pin `vitest` yourself to run this
|
|
29
|
+
project's own suites, note that the config files it ships are now written for
|
|
30
|
+
`>= 4.1.11` and will not run under 3.x.
|
|
31
|
+
|
|
3
32
|
## 5.1.1
|
|
4
33
|
|
|
5
34
|
### Patch Changes
|
package/README.md
CHANGED
|
@@ -6,9 +6,8 @@ description: >-
|
|
|
6
6
|
the region and credential semantics natively rather than as a base-URL
|
|
7
7
|
override.
|
|
8
8
|
tags: [readme, package, provider, bedrock]
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
diataxis: reference
|
|
9
|
+
status: stable
|
|
10
|
+
generated: { by: human:bahadirarda, at: 2026-08-17T00:00:00Z }
|
|
12
11
|
-->
|
|
13
12
|
|
|
14
13
|
<div align="center">
|
|
@@ -67,7 +66,6 @@ events.
|
|
|
67
66
|
|
|
68
67
|
## Documentation
|
|
69
68
|
|
|
70
|
-
- [The AWS Bedrock driver — model ids, credentials and prompt caching](https://github.com/cogitave/namzu/blob/main/docs/providers/bedrock.md)
|
|
71
69
|
- [Namzu docs](https://github.com/cogitave/namzu/tree/main/docs)
|
|
72
70
|
|
|
73
71
|
## License
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@namzu/bedrock",
|
|
3
|
-
"version": "5.1.
|
|
3
|
+
"version": "5.1.2",
|
|
4
4
|
"description": "AWS Bedrock LLM provider for @namzu/sdk. Provides Converse API (chat + streaming) with full tool-use support.",
|
|
5
5
|
"license": "FSL-1.1-MIT",
|
|
6
6
|
"engines": {
|
|
@@ -56,8 +56,8 @@
|
|
|
56
56
|
"@biomejs/biome": "^1.9.4",
|
|
57
57
|
"@types/node": "^22.19.17",
|
|
58
58
|
"typescript": "^5.5.0",
|
|
59
|
-
"vitest": "^
|
|
60
|
-
"@namzu/sdk": "^
|
|
59
|
+
"vitest": "^4.1.11",
|
|
60
|
+
"@namzu/sdk": "^42.0.2"
|
|
61
61
|
},
|
|
62
62
|
"scripts": {
|
|
63
63
|
"build": "tsc --build",
|