@ouro.bot/cli 0.1.0-alpha.740 → 0.1.0-alpha.741

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.741",
+      "changes": [
+        "Pin the packaged Bitwarden CLI to the Vaultwarden-compatible 2026.6.0 client so container credential bootstrap can write vault items, while overriding vulnerable transitive packages to audited fixed versions."
+      ]
+    },
     {
       "version": "0.1.0-alpha.740",
       "changes": [

package/deploy/unraid/Dockerfile

@@ -35,7 +35,7 @@ RUN BW_VERIFY_ROOT="$(mktemp -d)" \
   && command -v bw >/dev/null \
   && BW_VERSION="$(BITWARDENCLI_APPDATA_DIR="$BW_VERIFY_ROOT/appdata" bw --version 2>"$BW_VERIFY_ROOT/stderr")" \
   && test ! -s "$BW_VERIFY_ROOT/stderr" \
-  && test "$BW_VERSION" = "2026.8.0" \
+  && test "$BW_VERSION" = "2026.6.0" \
   && rm -rf -- "$BW_VERIFY_ROOT" \
   && trap - 0 \
   && test ! -e "/home/ouro/.config/Bitwarden CLI"

package/npm-shrinkwrap.json

@@ -1,17 +1,17 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.740",
+  "version": "0.1.0-alpha.741",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.740",
+      "version": "0.1.0-alpha.741",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",
         "@azure/storage-blob": "^12.31.0",
-        "@bitwarden/cli": "2026.8.0",
+        "@bitwarden/cli": "2026.6.0",
         "@microsoft/teams.api": "2.0.11",
         "@microsoft/teams.apps": "2.0.11",
         "@microsoft/teams.cards": "2.0.11",
@@ -442,20 +442,20 @@
       }
     },
     "node_modules/@bitwarden/cli": {
-      "version": "2026.8.0",
-      "resolved": "https://registry.npmjs.org/@bitwarden/cli/-/cli-2026.8.0.tgz",
-      "integrity": "sha512-eZWm8hX2n1po5D5zaWoJbESHxCu9ArIwtu/uwJz7NPUFu0jV9F7ZGGJkvTE+jZ4RXsdL5VVhYYlvUVocBAkUwg==",
+      "version": "2026.6.0",
+      "resolved": "https://registry.npmjs.org/@bitwarden/cli/-/cli-2026.6.0.tgz",
+      "integrity": "sha512-quoPpGnLIAaGOBe61FZjZInbZzSvJTRzyK76icDFj4p6I4Oah7QubTKa//tIThU1GG5wFWK/OJeHA7AR1Knaxw==",
       "license": "SEE LICENSE IN LICENSE.txt",
       "dependencies": {
         "@koa/multer": "4.0.0",
-        "@koa/router": "15.7.0",
+        "@koa/router": "15.5.0",
         "big-integer": "1.6.52",
         "browser-hrtime": "1.1.8",
         "chalk": "4.1.2",
         "commander": "14.0.0",
         "core-js": "3.49.0",
-        "form-data": "4.0.6",
-        "https-proxy-agent": "9.1.0",
+        "form-data": "4.0.4",
+        "https-proxy-agent": "9.0.0",
         "inquirer": "8.2.6",
         "jsdom": "26.1.0",
         "jszip": "3.10.1",
@@ -464,7 +464,7 @@
         "koa-json": "2.0.2",
         "lowdb": "1.0.0",
         "lunr": "2.3.9",
-        "multer": "2.2.0",
+        "multer": "2.1.1",
         "node-fetch": "2.7.0",
         "node-forge": "1.4.0",
         "open": "8.4.2",
@@ -477,10 +477,6 @@
       },
       "bin": {
         "bw": "build/bw.js"
-      },
-      "engines": {
-        "node": "~22",
-        "npm": "~10"
       }
     },
     "node_modules/@bitwarden/cli/node_modules/agent-base": {
@@ -527,14 +523,13 @@
       }
     },
     "node_modules/@bitwarden/cli/node_modules/https-proxy-agent": {
-      "version": "9.1.0",
-      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-9.1.0.tgz",
-      "integrity": "sha512-ag87y7cJJ9/3+GxFr8Oy4O5faDsGRGnBGsJj/YjOSsSx/5eadKLYTMPlzuR6obgoCDDm0abAAZitXXQkMOPSpA==",
+      "version": "9.0.0",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-9.0.0.tgz",
+      "integrity": "sha512-/MVmHp58WkOypgFhCLk4fzpPcFQvTJ/e6LBI7irpIO2HfxUbpmYoHF+KzipzJpxxzJu7aJNWQ0xojJ/dzV2G5g==",
       "license": "MIT",
       "dependencies": {
         "agent-base": "9.0.0",
-        "debug": "^4.3.4",
-        "proxy-agent-negotiate": "1.1.0"
+        "debug": "^4.3.4"
       },
       "engines": {
         "node": ">= 20"
@@ -1154,9 +1149,9 @@
       }
     },
     "node_modules/@koa/router": {
-      "version": "15.7.0",
-      "resolved": "https://registry.npmjs.org/@koa/router/-/router-15.7.0.tgz",
-      "integrity": "sha512-WaAlk4TOl/O0rhTpOR0l052gz03syPMmI6Pe2gd7v3ubjfv5UcSGcnb0Y/J5NNC/ln+5FiUqPJTc/a15I+XqAA==",
+      "version": "15.5.0",
+      "resolved": "https://registry.npmjs.org/@koa/router/-/router-15.5.0.tgz",
+      "integrity": "sha512-KSC0oG/5t6ITu5wqX4lJseA/dngoj14hEaohrLZEXtlUT2RRyJvwaJ0KV+5uQoaWrY3A8ClHOrBEU4g8dujn8Q==",
       "license": "MIT",
       "dependencies": {
         "debug": "^4.4.3",
@@ -6577,23 +6572,6 @@
         "node": ">= 0.10"
       }
     },
-    "node_modules/proxy-agent-negotiate": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/proxy-agent-negotiate/-/proxy-agent-negotiate-1.1.0.tgz",
-      "integrity": "sha512-N8IBcM3UgCVzz2L2Lqv8DVntDnnC8/hiV4nEDUPkqq72TPUgYWjQc+bdZlBPZK9LzPAvOY//gAt0S0DApoOXWQ==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 20"
-      },
-      "peerDependencies": {
-        "kerberos": "^2.0.0"
-      },
-      "peerDependenciesMeta": {
-        "kerberos": {
-          "optional": true
-        }
-      }
-    },
     "node_modules/proxy-from-env": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.740",
+  "version": "0.1.0-alpha.741",
   "engines": {
     "node": ">=22"
   },
@@ -58,7 +58,7 @@
     "@anthropic-ai/sdk": "^0.78.0",
     "@azure/identity": "^4.13.0",
     "@azure/storage-blob": "^12.31.0",
-    "@bitwarden/cli": "2026.8.0",
+    "@bitwarden/cli": "2026.6.0",
     "@microsoft/teams.api": "2.0.11",
     "@microsoft/teams.apps": "2.0.11",
     "@microsoft/teams.cards": "2.0.11",
@@ -99,6 +99,8 @@
   },
   "overrides": {
     "deepmerge-ts": "^8.0.1",
+    "form-data": "4.0.6",
+    "multer": "2.2.0",
     "tmp": "0.2.7",
     "@microsoft/teams.apps": {
       "@azure/msal-node": "^5.2.2"