Files
composiohq__composio/docs/package.json
T
Alberto Schiabel 705591451c chore(deps): upgrade CI actions and every outdated dependency (#4381)
This PR:

- upgrades every CI action to its latest release (only
`changesets/action` had one: v2.1.1 -> v2.1.2, SHA-pinned) and every
outdated dependency across the pnpm workspace, the docs bun workspace,
and all three `uv.lock` files
- moves zod to 4.5.4 everywhere first-party — catalog, docs,
`@composio/json-schema-to-zod`, `@composio/claude-agent-sdk` and the
zod-v4 e2e fixtures; the `*-zod-v3` fixtures stay on 3.25.76 because
that is what they exercise
- moves `@mastra/core` 1.52.1 -> 1.53.0, which is the ceiling rather
than a preference: bisecting `ts/examples/mastra`'s `cf:dry-run` shows
1.54.0 moved the workspace/sandbox subsystem behind
`@mastra/core/agent`, which drags execa (-> `npm-run-path` ->
`unicorn-magic`) into the Workers bundle where esbuild cannot link it.
`@mastra/mcp` is capped at 1.17.2 for the same reason — 1.17.3 wants
`@mastra/core` >=1.64. The docs bun workspace mirrors that cap as an
explicit devDependency plus `overrides` entry, because bun does not
apply overrides to auto-installed peers
- clears every production advisory that has a published fix, so the
audit gate can run without `--ignore`, which does not filter a single
run: it writes the advisory into `auditConfig` and exits 0 whatever else
is outstanding, so the gate was passing over nine advisories
- `qs` -> >=6.16.0, `fast-uri` -> >=3.1.6, `toml` -> the 4.x line, all
via overrides in the existing `# temporary: … drop when` style
- `extract-zip` (GHSA-jmr9-qjv8-65gv) has no fixed version to move to —
2.0.1 is the newest release and GitHub records `first_patched_version`
as null — so it moves to `auditConfig.ignoreGhsas` pointing at the
`extractZipSafely` mitigation that already covers it
- GHSA-866g-f22w-33x8 (`@ai-sdk/provider-utils` 3.x, low) also has
nothing to move to: the advisory names 3.0.98 as patched but the 3.x
line stopped at 3.0.30 and GitHub records no fixed version. It only
enters the tree through `@mastra/core`, which is a peer or dev
dependency of every published package, so all flagged paths are private
examples and e2e fixtures. It goes in `ignoreGhsas` with that rationale
so the un-levelled `pnpm audit --prod` step stops posting a warning
comment on every PR
- widens `@composio/anthropic`'s `@anthropic-ai/sdk` peer range to
include `^0.124.0`, the line its devDependency now tests against (for a
`0.x` caret, `^0.120.0` excluded it); the package is in the changeset
for that reason
- adapts three call sites that upstream broke: `eve` 0.52 moved
`ApprovalContext` to `eve/tools/approval`, `@pierre/diffs` 1.4 gave
`FileDiffProps` a second type parameter, and `fumadocs-openapi` 11.4
fixed the undeclared-tag drop that a docs guard test asserted (the guard
now also asserts the page positively, so it cannot pass vacuously)
- drops the stale `hono` `minimumReleaseAgeExclude` entry (its comment
said to after 2026-08-06) and adds an `undici` `peerDependencyRules`
allowance for openai 7.10's new optional peer

## Context

Some upgrades were deliberately declined, each for a reason recorded
next to the pin:

- `vitest`/`@vitest/ui` stay on 4.1.11 —
`@cloudflare/vitest-pool-workers@0.22.0` (latest) peers on `vitest
^4.1.0`
- `undici` stays on `^7` in core — `pinnedDispatcher.node.ts` documents
that Node's `fetch` rejects undici 8 dispatchers
- the `pnpm` catalog entry stays on `^11` to match the mise-owned
toolchain
- `eve` stays on 0.27.6 in docs — 0.52 changes the `defineAgent` model
definition and the `useEveAgent` helpers, so `agent/agent.ts` and
`components/eve-chat.tsx` fail `types:check`; migrating the docs agent
is its own PR
- `@earendil-works/pi-coding-agent` stays on 0.84.4 — 0.85.x imports
`@earendil-works/pi-server` without declaring it, so `test/pi.test.ts`
fails to load

`declareOperationTags` is kept as a safety net rather than retired, even
though `fumadocs-openapi` 11.4 makes it redundant: removing it changes
how specs are normalised at sync time and is worth its own PR.

Verified locally: `pnpm build:packages`, `pnpm typecheck`, `pnpm test`,
`pnpm typecheck:examples`, `pnpm lint:examples`, `turbo cf:dry-run
--filter='./ts/examples/*'`, `pnpm peers check`, `pnpm audit --prod
--audit-level=high` (exit 0), frozen-lockfile installs for pnpm and bun,
docs `types:check` + 542 static tests, and Python `make chk` + `make
tst` (1790 passed).

https://claude.ai/code/session_018evFic47PFPXuB95uRE1aw
EOF -R ComposioHQ/composio
2026-09-08 16:15:34 +02:00

126 lines
4.5 KiB
JSON

{
"name": "@composio/docs",
"version": "0.0.0",
"private": true,
"engines": {
"node": ">=24"
},
"scripts": {
"build:agent-index": "bun scripts/build-agent-index.ts",
"build:kb-semantic": "bun run generate:kb && fumadocs-mdx && bun scripts/build-kb-semantic-index.ts",
"check:kb-semantic": "bun run check:kb && fumadocs-mdx && bun scripts/build-kb-semantic-index.ts --check",
"verify:kb": "bun scripts/verify-kb.ts",
"import:kb": "bun scripts/import-support-knowledge.ts",
"generate:kb": "bun scripts/generate-kb.ts",
"check:kb": "bun scripts/generate-kb.ts --check",
"prebuild": "bun run generate:kb && bun scripts/build-agent-index.ts",
"build": "next build",
"predev": "bun run generate:kb && bun scripts/build-agent-index.ts",
"dev": "next dev",
"start": "next start",
"types:check": "bun run generate:kb && bun scripts/build-agent-index.ts && fumadocs-mdx && next typegen && bun ./node_modules/typescript-7/bin/tsc --noEmit",
"postinstall": "bun scripts/generate-kb.ts && fumadocs-mdx",
"lint": "oxlint .",
"lint:links": "bun scripts/validate-links.ts",
"lint:links:external": "bun scripts/validate-links.ts --external",
"sync:search": "bun scripts/sync-algolia-search.ts",
"test:search": "bun scripts/test-algolia-search.ts",
"eval:agent": "eve eval docs-agent --skip-report",
"eval:agent:flows": "bun scripts/eval-agent-flows.ts",
"eval:kb-search": "bun scripts/eval-kb-search.ts",
"generate:toolkits": "bun scripts/generate-toolkits.ts",
"generate:toolkit-versions": "bun scripts/refresh-toolkit-versions.ts",
"generate:meta-tools": "bun scripts/generate-meta-tools.ts",
"generate:api-index": "bun scripts/generate-api-index.ts",
"pretest": "bun run generate:kb",
"test": "bun test tests/static/",
"test:integration": "bun test tests/integration/ --timeout 30000"
},
"dependencies": {
"@ai-sdk/openai": "^4.0.60",
"@fuma-translate/react": "^1.0.2",
"@pierre/diffs": "^1.4.1",
"@pierre/trees": "^1.0.0-beta.6",
"@radix-ui/react-tabs": "^1.1.21",
"@shikijs/langs": "^4.4.3",
"@shikijs/themes": "^4.4.3",
"@shikijs/twoslash": "^4.4.3",
"@vercel/analytics": "^2.0.1",
"algoliasearch": "^5.57.0",
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"diff": "^9.0.0",
"eve": "0.27.6",
"framer-motion": "^12.43.0",
"fumadocs-core": "^16.15.8",
"fumadocs-mdx": "^15.4.0",
"fumadocs-openapi": "^11.4.1",
"fumadocs-ui": "^16.15.8",
"highlight.js": "^11.12.0",
"lucide-react": "^1.42.0",
"mermaid": "^11.17.2",
"motion": "^12.43.0",
"next": "16.2.12",
"nucleo-pixel": "^1.5.1",
"posthog-js": "^1.428.4",
"react": "^19.2.8",
"react-dom": "^19.2.8",
"react-markdown": "^10.1.0",
"react-medium-image-zoom": "^5.4.9",
"remark-gfm": "^4.0.1",
"search-insights": "^2.17.3",
"shiki": "^4.4.3",
"tailwind-merge": "^3.6.0",
"zod": "^4.5.4"
},
"devDependencies": {
"@ai-sdk/anthropic": "^4.0.49",
"@ai-sdk/mcp": "^2.0.45",
"@ai-sdk/react": "^4.0.96",
"@anthropic-ai/claude-agent-sdk": "^0.3.263",
"@anthropic-ai/sdk": "^0.115.0",
"@composio/anthropic": "^0.11.1",
"@composio/claude-agent-sdk": "^0.12.0",
"@composio/core": "^0.18.1",
"@composio/google": "^0.11.0",
"@composio/langchain": "^0.11.0",
"@composio/llamaindex": "^0.11.0",
"@composio/mastra": "^0.10.4",
"@composio/openai": "^0.12.2",
"@composio/openai-agents": "^0.11.0",
"@composio/vercel": "^0.12.0",
"@google/genai": "^2.21.0",
"@langchain/core": "^1.2.9",
"@langchain/langgraph": "^1.4.14",
"@langchain/openai": "^1.5.11",
"@llamaindex/openai": "^0.4.23",
"@llamaindex/workflow": "^1.1.25",
"@mastra/core": "1.53.0",
"@mastra/mcp": "1.17.2",
"@openai/agents": "^0.13.5",
"@shikijs/vitepress-twoslash": "^4.4.3",
"@tailwindcss/postcss": "^4.3.3",
"@types/mdx": "^2.0.14",
"@types/node": "^26.5.0",
"@types/react": "^19.2.18",
"@types/react-dom": "^19.2.7",
"ai": "7.0.37",
"ajv": "^8.20.0",
"ajv-draft-04": "^1.0.0",
"github-slugger": "^2.0.0",
"microsandbox": "^0.6.17",
"next-validate-link": "^1.6.7",
"openai": "^6.49.0",
"oxlint": "1.75.0",
"oxlint-plugin-eslint": "1.75.0",
"postcss": "^8.5.28",
"tailwindcss": "^4.3.3",
"tw-animate-css": "^1.4.0",
"typescript": "^6.0.3",
"typescript-7": "npm:typescript@^7.0.2"
},
"overrides": {
"@mastra/mcp": "1.17.2"
}
}