Files
kandev/apps/cli/package.json
T
João Salavisa ed33c7ea3f fix(deps): patch critical Dependabot advisories (#1915)
* fix(deps): patch critical Dependabot advisories

Resolve all open critical-severity Dependabot alerts:

- golang.org/x/crypto 0.51.0 -> 0.52.0 (CVE-2026-39830/39831/39832/
  39833/39834/42508/46595, GHSA ssh agent/key-constraint bypass, DoS)
- vitest ^1.6.0 -> ^4.1.10 in apps/cli (CVE-2026-47429; aligns with
  apps/web, dedupes the lockfile to a single vitest 4.1.10)
- tar ^7.5.11 -> ^7.5.19 in apps/cli (CVE-2026-59873 parse DoS;
  resolves to 7.5.21)

Backend builds and vets clean; all 280 apps/cli tests pass on vitest 4.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(cli): bump esbuild to a Vite-8-supported range

The vitest 4 bump pulls vite@8, whose esbuild peer is ^0.27||^0.28,
but the CLI still pinned esbuild ^0.24.0 — pnpm resolved an
unsupported vite/esbuild pair (esbuild@0.24.2) for the CLI test
stack. Bump to ^0.27.0 so vite@8 resolves against esbuild@0.27.2 and
the peer warning clears. CLI tests still pass (280/280).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Kandev Agent <agent@kandev.dev>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-24 13:03:31 +01:00

49 lines
1.2 KiB
JSON

{
"name": "kandev",
"version": "0.81.0",
"private": false,
"description": "Launcher for Kandev — manage tasks, orchestrate agents, review changes, and ship value",
"license": "AGPL-3.0-only",
"repository": {
"type": "git",
"url": "git+https://github.com/kdlbs/kandev.git"
},
"homepage": "https://github.com/kdlbs/kandev",
"type": "commonjs",
"bin": {
"kandev": "bin/cli.js"
},
"main": "bin/native-shim.js",
"files": [
"bin/cli.js",
"bin/native-shim.js"
],
"engines": {
"npm": ">=7"
},
"optionalDependencies": {
"@kdlbs/runtime-linux-x64": "0.0.0-bootstrap",
"@kdlbs/runtime-linux-arm64": "0.0.0-bootstrap",
"@kdlbs/runtime-darwin-x64": "0.0.0-bootstrap",
"@kdlbs/runtime-darwin-arm64": "0.0.0-bootstrap",
"@kdlbs/runtime-win32-x64": "0.0.0-bootstrap"
},
"devDependencies": {
"@types/node": "^20",
"esbuild": "^0.27.0",
"tar": "^7.5.19",
"tree-kill": "^1.2.2",
"tsx": "^4.15.7",
"typescript": "^5",
"vitest": "^4.1.10"
},
"scripts": {
"dev": "tsx src/cli.ts",
"build": "node -c bin/cli.js && node -c bin/native-shim.js",
"bundle": "pnpm build",
"start": "node bin/cli.js",
"test": "vitest run",
"prepublishOnly": "pnpm build"
}
}