icoa-cli 2.19.244 → 2.19.246

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -20,7 +20,7 @@
20
20
  # ── CTF Core ──
21
21
  pwntools==4.12.0
22
22
  pycryptodome==3.20.0
23
- z3-solver==4.12.6
23
+ z3-solver==4.13.0.0 # 4.12.6→4.13.0.0: angr's claripy hard-pins this exact ver (see big-trees note)
24
24
 
25
25
  # ── Web & Network ──
26
26
  requests==2.31.0
@@ -35,10 +35,10 @@ gmpy2==2.3.0 # reconciled: was env.ts >=2.2.0 vs Dockerfile ==2.1.5
35
35
  cryptography==42.0.0
36
36
 
37
37
  # ── Binary & RE ──
38
- capstone==5.0.1
38
+ capstone==5.0.6 # 5.0.1→5.0.6: angr 9.2.217 hard-pins capstone==5.0.6 exactly
39
39
  ropper==1.13.8
40
40
  ROPgadget==7.4
41
- pefile==2023.2.7
41
+ pefile==2024.8.26 # 2023.2.7→2024.8.26: volatility3 2.28.0 needs pefile>=2024.8.26
42
42
 
43
43
  # ── Data & Forensics ──
44
44
  pillow==10.2.0
@@ -51,11 +51,15 @@ uncompyle6==3.9.1
51
51
  pyserial==3.5
52
52
  ipython==9.6.0 # was floating; pinned to current 3.12-compatible release
53
53
 
54
- # ── Large dependency trees: top-level pinned, transitive deps float ──
55
- # Pinned to the versions pip resolves on macOS (Apple, Python 3.12). Only the
56
- # top-level package is lockedtheir transitive deps (claripy/cle/pyvex/
57
- # unicorn for angr, etc.) stay free so they can't conflict with the exact
58
- # pins above (e.g. capstone==5.0.1). Re-resolve on macOS when bumping.
54
+ # ── Large dependency trees: angr / volatility3 / sqlmap ──
55
+ # WARNING (was the v2.19.240 bug): a pip constraints file pins the ENTIRE
56
+ # resolution graph, including every transitive dep they do NOT "float". So
57
+ # the exact pins above MUST agree with whatever these trees hard-pin, or pip
58
+ # dies with ResolutionImpossible. angr 9.2.217 hard-pins capstone==5.0.6 and
59
+ # (via claripy) z3-solver==4.13.0.0; volatility3 2.28.0 needs pefile>=2024.8.26.
60
+ # The Binary&RE / CTF-core pins above are set to satisfy all three.
61
+ # When bumping angr/volatility3: re-resolve on a clean macOS + Ubuntu, then sync
62
+ # the same numbers in src/commands/env.ts (PYTHON_LIBS) and docker/Dockerfile.
59
63
  angr==9.2.217
60
64
  sqlmap==1.10.5
61
65
  volatility3==2.28.0
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "icoa-cli",
3
- "version": "2.19.244",
3
+ "version": "2.19.246",
4
4
  "description": "ICOA CLI — The world's first CLI-native cyber & AI security olympiad terminal: AI4CTF (Day 1), CTF4AI (Day 2), VLA4CTF (Pioneer Round — embodied AI)",
5
5
  "type": "module",
6
6
  "bin": {
@@ -10,6 +10,7 @@
10
10
  "dist",
11
11
  "refs",
12
12
  "assets",
13
+ "docker/Dockerfile",
13
14
  "docker/constraints.txt"
14
15
  ],
15
16
  "scripts": {