3 Commits

Author	SHA1	Message	Date
Jordan Ritter	6bc0db6a25	fix: harden showcase packages — dep pins + Docker image pins ... Dependency version floors: - next: ^15.0.0 → ^15.5.15 across all 19 showcase packages (CVE-2025-29927) - express: ^4.21.0 → ^4.21.2 in claude-sdk-typescript (open redirect fix) - hono: ^4.0.0 → ^4.6.0 in shell (path traversal fix) Docker base image pins: - node:20-slim → node:20.19-slim (18 Dockerfiles) - python:3.12-slim → python:3.12.11-slim (12 Dockerfiles) - aimock:latest → aimock:1.13.0 (1 Dockerfile) Part of CPK-7320	2026-04-28 10:33:06 -07:00
Jordan Ritter	72381f81bc	fix(showcase): ensure all build/dev/test/Docker paths generate data ... Now that generated JSON is gitignored, every path that consumes these files must run generators first. Fixes: - shell: add bundle-demo-content to dev preamble (eliminates race between watcher and Next.js on fresh clone); add bundle-starter-content to Dockerfile RUN chain - shell-dojo: add predev hook (generate-registry + bundle-demo-content) - shell-docs: add predev hook (generate-registry + bundle-demo-content + generate-search-index) - ops: replace direct COPY of gitignored registry.json with generate-registry.ts at build time (copy scripts+shared+packages, npm ci, run generator)	2026-04-23 21:13:21 -07:00
Jordan Ritter	878ac3af2d	chore(showcase): rename shell-dojolike → shell-dojo for naming consistency with dojo.showcase.copilotkit.ai ... - Renamed showcase/shell-dojolike/ → showcase/shell-dojo/ (git mv for history). - Updated package name to @copilotkit/showcase-shell-dojo. - Updated .github/workflows/showcase_deploy.yml: dispatch option, paths-filter key, ALL_SERVICES entry (context, image, comment). - Updated .github/workflows/static_check-binaries.yml size allowlist path. - Renamed Railway service showcase-shell-dojolike → showcase-shell-dojo (id 7ad1ece7-2228-49cd-8a78-bddf30322907 preserved; domain dojo.showcase.copilotkit.ai unchanged). - Updated image source to ghcr.io/copilotkit/showcase-shell-dojo:latest.	2026-04-20 13:54:42 -07:00