mirror of
https://github.com/ComposioHQ/composio.git
synced 2026-09-22 11:46:35 +08:00
Alberto Schiabel
705591451c
This PR: - upgrades every CI action to its latest release (only `changesets/action` had one: v2.1.1 -> v2.1.2, SHA-pinned) and every outdated dependency across the pnpm workspace, the docs bun workspace, and all three `uv.lock` files - moves zod to 4.5.4 everywhere first-party — catalog, docs, `@composio/json-schema-to-zod`, `@composio/claude-agent-sdk` and the zod-v4 e2e fixtures; the `*-zod-v3` fixtures stay on 3.25.76 because that is what they exercise - moves `@mastra/core` 1.52.1 -> 1.53.0, which is the ceiling rather than a preference: bisecting `ts/examples/mastra`'s `cf:dry-run` shows 1.54.0 moved the workspace/sandbox subsystem behind `@mastra/core/agent`, which drags execa (-> `npm-run-path` -> `unicorn-magic`) into the Workers bundle where esbuild cannot link it. `@mastra/mcp` is capped at 1.17.2 for the same reason — 1.17.3 wants `@mastra/core` >=1.64. The docs bun workspace mirrors that cap as an explicit devDependency plus `overrides` entry, because bun does not apply overrides to auto-installed peers - clears every production advisory that has a published fix, so the audit gate can run without `--ignore`, which does not filter a single run: it writes the advisory into `auditConfig` and exits 0 whatever else is outstanding, so the gate was passing over nine advisories - `qs` -> >=6.16.0, `fast-uri` -> >=3.1.6, `toml` -> the 4.x line, all via overrides in the existing `# temporary: … drop when` style - `extract-zip` (GHSA-jmr9-qjv8-65gv) has no fixed version to move to — 2.0.1 is the newest release and GitHub records `first_patched_version` as null — so it moves to `auditConfig.ignoreGhsas` pointing at the `extractZipSafely` mitigation that already covers it - GHSA-866g-f22w-33x8 (`@ai-sdk/provider-utils` 3.x, low) also has nothing to move to: the advisory names 3.0.98 as patched but the 3.x line stopped at 3.0.30 and GitHub records no fixed version. It only enters the tree through `@mastra/core`, which is a peer or dev dependency of every published package, so all flagged paths are private examples and e2e fixtures. It goes in `ignoreGhsas` with that rationale so the un-levelled `pnpm audit --prod` step stops posting a warning comment on every PR - widens `@composio/anthropic`'s `@anthropic-ai/sdk` peer range to include `^0.124.0`, the line its devDependency now tests against (for a `0.x` caret, `^0.120.0` excluded it); the package is in the changeset for that reason - adapts three call sites that upstream broke: `eve` 0.52 moved `ApprovalContext` to `eve/tools/approval`, `@pierre/diffs` 1.4 gave `FileDiffProps` a second type parameter, and `fumadocs-openapi` 11.4 fixed the undeclared-tag drop that a docs guard test asserted (the guard now also asserts the page positively, so it cannot pass vacuously) - drops the stale `hono` `minimumReleaseAgeExclude` entry (its comment said to after 2026-08-06) and adds an `undici` `peerDependencyRules` allowance for openai 7.10's new optional peer ## Context Some upgrades were deliberately declined, each for a reason recorded next to the pin: - `vitest`/`@vitest/ui` stay on 4.1.11 — `@cloudflare/vitest-pool-workers@0.22.0` (latest) peers on `vitest ^4.1.0` - `undici` stays on `^7` in core — `pinnedDispatcher.node.ts` documents that Node's `fetch` rejects undici 8 dispatchers - the `pnpm` catalog entry stays on `^11` to match the mise-owned toolchain - `eve` stays on 0.27.6 in docs — 0.52 changes the `defineAgent` model definition and the `useEveAgent` helpers, so `agent/agent.ts` and `components/eve-chat.tsx` fail `types:check`; migrating the docs agent is its own PR - `@earendil-works/pi-coding-agent` stays on 0.84.4 — 0.85.x imports `@earendil-works/pi-server` without declaring it, so `test/pi.test.ts` fails to load `declareOperationTags` is kept as a safety net rather than retired, even though `fumadocs-openapi` 11.4 makes it redundant: removing it changes how specs are normalised at sync time and is worth its own PR. Verified locally: `pnpm build:packages`, `pnpm typecheck`, `pnpm test`, `pnpm typecheck:examples`, `pnpm lint:examples`, `turbo cf:dry-run --filter='./ts/examples/*'`, `pnpm peers check`, `pnpm audit --prod --audit-level=high` (exit 0), frozen-lockfile installs for pnpm and bun, docs `types:check` + 542 static tests, and Python `make chk` + `make tst` (1790 passed). https://claude.ai/code/session_018evFic47PFPXuB95uRE1aw EOF -R ComposioHQ/composio
118 lines
4.8 KiB
JSON
118 lines
4.8 KiB
JSON
{
|
|
"name": "composio",
|
|
"version": "0.10.0-alpha.1",
|
|
"private": true,
|
|
"type": "module",
|
|
"packageManager": "pnpm@11.8.0",
|
|
"description": "",
|
|
"workspaces": [
|
|
"ts/packages/core",
|
|
"ts/packages/experimental",
|
|
"ts/packages/slim",
|
|
"ts/packages/json-schema-to-effect-schema",
|
|
"ts/packages/json-schema-to-zod",
|
|
"ts/packages/cli",
|
|
"ts/packages/cli-keyring",
|
|
"ts/packages/cli-local-tools",
|
|
"ts/packages/ts-builders",
|
|
"ts/packages/providers/*"
|
|
],
|
|
"scripts": {
|
|
"build": "turbo build",
|
|
"build:binary": "turbo build:binary --filter=./ts/packages/cli",
|
|
"build:binary:all": "turbo build:binary:all --filter=./ts/packages/cli",
|
|
"build:binary:checksums": "turbo build:binary:checksums --filter=./ts/packages/cli",
|
|
"install:binary": "turbo install:binary --filter=./ts/packages/cli",
|
|
"build:packages": "turbo build --filter=./ts/packages/**",
|
|
"cli:record": "turbo run record --filter=./ts/packages/cli",
|
|
"record": "turbo run record",
|
|
"test": "pnpm run test:toolchain && pnpm run test:install-sh && pnpm run test:release-workflow && pnpm run test:provider-compatibility && turbo test --filter=./ts/packages/** --filter=!@e2e-tests/* && pnpm run test:examples",
|
|
"test:install-sh": "bash test/install-sh-release-resolution.test.sh && bash test/install-sh-atomic-replace.test.sh",
|
|
"test:release-workflow": "bun run test/release-workflow.test.ts",
|
|
"test:provider-compatibility": "bun test test/provider-compatibility.test.ts",
|
|
"test:toolchain": "bun run test/mise-bun-pin.test.ts",
|
|
"test:examples": "tsx ts/scripts/validate-examples.ts",
|
|
"test:e2e": "turbo test:e2e --filter='@e2e-tests/*'",
|
|
"test:e2e:node": "turbo test:e2e:node --filter='@e2e-tests/node-*'",
|
|
"test:e2e:deno": "turbo test:e2e:deno --filter='@e2e-tests/deno-*'",
|
|
"test:e2e:cli": "turbo test:e2e:cli --filter='@e2e-tests/cli-*'",
|
|
"test:e2e:install": "turbo test:e2e:install --filter='@e2e-tests/cli-install'",
|
|
"test:e2e:cloudflare": "turbo test:e2e:cloudflare --filter='@e2e-tests/cf-*'",
|
|
"test:ui": "vitest --ui",
|
|
"typecheck": "turbo typecheck --filter=./ts/packages/**",
|
|
"typecheck:examples": "turbo typecheck --filter='./ts/examples/*'",
|
|
"lint:examples": "turbo lint --filter='./ts/examples/*'",
|
|
"lint": "oxlint ts test tsdown.config.base.ts",
|
|
"lint:packages": "oxlint ts/packages",
|
|
"lint:fix": "oxlint --fix .",
|
|
"lint:fix:packages": "oxlint --fix ts/packages",
|
|
"format": "prettier --write \"**/*.{ts,tsx,js,jsx,json,md}\"",
|
|
"prepare": "husky",
|
|
"create:provider": "bash ts/scripts/create-provider.sh",
|
|
"create:example": "bash ts/scripts/create-example.sh",
|
|
"check:peer-deps": "tsx ts/scripts/check-peer-deps.ts",
|
|
"check:provider-compatibility": "tsx ts/scripts/check-provider-compatibility.ts",
|
|
"update:peer-deps": "tsx ts/scripts/update-peer-deps.ts",
|
|
"validate:agent-skills": "node ts/scripts/validate-agent-skills.mjs",
|
|
"validate:changesets": "node ts/scripts/validate-changesets.mjs",
|
|
"validate:skill-routing": "node ts/scripts/test-skill-routing.mjs",
|
|
"prepublish": "pnpm run build:packages",
|
|
"changeset": "changeset",
|
|
"changeset:version": "changeset version",
|
|
"changeset:release": "bash ts/scripts/changeset-release.sh",
|
|
"changeset:pre-enter": "changeset pre enter",
|
|
"changeset:pre-exit": "changeset pre exit",
|
|
"clean": "git clean -xdf .turbo node_modules ts/packages/**/.turbo ts/packages/**/node_modules ts/packages/**/dist",
|
|
"clean:workspace": "pnpm turbo clean"
|
|
},
|
|
"devEngines": {
|
|
"runtime": {
|
|
"name": "node",
|
|
"version": ">=24.17.0 <25",
|
|
"onFail": "warn"
|
|
}
|
|
},
|
|
"devDependencies": {
|
|
"@arethetypeswrong/cli": "catalog:",
|
|
"@changesets/cli": "^3.0.2",
|
|
"@changesets/read": "^1.0.1",
|
|
"@composio/anthropic": "workspace:*",
|
|
"@composio/cli-local-tools": "workspace:*",
|
|
"@composio/core": "workspace:*",
|
|
"@composio/openai": "workspace:*",
|
|
"@types/bun": "catalog:",
|
|
"@types/node": "^26.4.1",
|
|
"@types/semver": "^7.8.0",
|
|
"@vitest/ui": "catalog:",
|
|
"husky": "^9.1.7",
|
|
"lint-staged": "^17.5.0",
|
|
"oxlint": "1.81.0",
|
|
"oxlint-plugin-eslint": "1.81.0",
|
|
"prettier": "^3.9.6",
|
|
"publint": "catalog:",
|
|
"semver": "^7.8.5",
|
|
"tsdown": "catalog:",
|
|
"tsx": "catalog:",
|
|
"turbo": "^2.10.12",
|
|
"typescript": "catalog:",
|
|
"typescript6": "catalog:ts6",
|
|
"vitest": "catalog:",
|
|
"zod": "catalog:"
|
|
},
|
|
"lint-staged": {
|
|
"{test,ts}/**/*.{ts,tsx,mts,cts}": [
|
|
"oxlint --fix"
|
|
],
|
|
"tsdown.config.base.ts": [
|
|
"oxlint --fix"
|
|
],
|
|
"ts/packages/**/*.{ts,tsx,js,jsx,json,md}": [
|
|
"prettier --write"
|
|
],
|
|
"python/**/*.py": [
|
|
"ruff check --fix --config python/config/ruff.toml",
|
|
"ruff format --config python/config/ruff.toml"
|
|
]
|
|
}
|
|
}
|