pi-roundtable 0.22.4 → 0.22.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,12 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
|
|
|
5
5
|
|
|
6
6
|
## [Unreleased]
|
|
7
7
|
|
|
8
|
+
## [0.22.5] - 2026-10-25
|
|
9
|
+
|
|
10
|
+
### Security
|
|
11
|
+
|
|
12
|
+
- Every supported setup now runs a Bun with the Brotli decoder fix (CVE-2026-111497, GHSA-9v8h-qqgm-4m35): `engines.bun` is `>=1.4.4` (was `>=1.3.0`) in the core, every workspace package and the project templates, so `roundtable init`, `roundtable doctor` and a package manager refuse an older Bun. Upgrade with `bun upgrade`. The WebSocket route tests now expect Bun 1.4.4's behavior only: a frame far over the limit closes with 1009, and a close without a status reports 1005.
|
|
13
|
+
|
|
8
14
|
## [0.22.4] - 2026-10-25
|
|
9
15
|
|
|
10
16
|
### Security
|
package/README.md
CHANGED
|
@@ -18,7 +18,7 @@ You can extend the bot with TypeScript plugins.
|
|
|
18
18
|
|
|
19
19
|
## What you need
|
|
20
20
|
|
|
21
|
-
- [Bun](https://bun.sh/docs/installation) 1.
|
|
21
|
+
- [Bun](https://bun.sh/docs/installation) 1.4.4 or newer.
|
|
22
22
|
- PostgreSQL.
|
|
23
23
|
The project `init` creates has a `docker-compose.yml` that runs one.
|
|
24
24
|
- A model login: the API key of the provider of the model you choose (`ANTHROPIC_API_KEY` for `anthropic/...`), or a login made with Pi.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "pi-roundtable",
|
|
3
|
-
"version": "0.22.
|
|
3
|
+
"version": "0.22.5",
|
|
4
4
|
"description": "A plugin-driven Pi agent server for one owner, reached through Discord or the web",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "MIT",
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"pi-roundtable": "link:."
|
|
12
12
|
},
|
|
13
13
|
"engines": {
|
|
14
|
-
"bun": ">=1.
|
|
14
|
+
"bun": ">=1.4.4"
|
|
15
15
|
},
|
|
16
16
|
"exports": {
|
|
17
17
|
".": "./src/index.ts",
|
|
@@ -211,7 +211,8 @@ export class SocketSet {
|
|
|
211
211
|
|
|
212
212
|
/**
|
|
213
213
|
* The Bun handler for one listener's sockets, given its largest route limits. Bun drops a frame
|
|
214
|
-
* over twice the message limit unread
|
|
214
|
+
* over twice the message limit unread, after sending 1009 (Bun 1.4.4 and newer); up to there each
|
|
215
|
+
* route's own limit closes with 1009.
|
|
215
216
|
* Bun drops a message only when the largest buffered limit already waits, which each route's
|
|
216
217
|
* `send` checks first at its own limit, so a single message larger than any limit still goes out.
|
|
217
218
|
*/
|