Files
rohitg00__agentmemory/website/package.json
Rohit Ghumare 91c78e759f chore(deps): bundle Dependabot bumps + clear all 8 audit vulns (#779)
Bundles the two open Dependabot PRs (#497 root, #760 website), drops
the iii-sdk bump per current support window, and pins transitive
overrides so 'npm audit' is clean.

Root (package.json)

- @anthropic-ai/sdk     ^0.93.0   -> ^0.100.1   (minor)
- tsdown                ^0.20.3   -> ^0.21.10   (minor; 0.22.x bumps node engine to >=22.18 which would break our engines.node = >=20)
- @types/node           ^25.7.0   -> ^25.9.1    (dev, patch)
- iii-sdk               0.11.2    unchanged     (engine pin stays per current support; 0.17.x removes triggerVoid + has API drift)

Transitive vuln pins (npm overrides)

- qs           >=6.15.2  (GHSA-q8mj-m7cp-5q26, DoS)
- ws           >=8.21.0  (GHSA-58qx-3vcg-4xpx, uninitialized memory disclosure)
- protobufjs   >=7.5.8   (GHSA-xq3m-2v4x-88gg + 8 others — pulled in transitively via the optional @xenova/transformers/onnxruntime-web/onnx-proto chain; 'npm audit fix --force' would downgrade @xenova/transformers to 2.0.1, the override avoids that)

Website (website/package.json)

- next          ^16.2.6  -> ^16.2.7   (patch)
- react / react-dom  ^19.2.6 -> ^19.2.7   (patch)
- @types/node   ^25.7.0 -> ^25.9.1   (dev)
- @types/react  ^19.2.14 -> ^19.2.16 (dev)

Lockfile hygiene

- Untrack website/package-lock.json (was the only tracked lockfile;
  conflicts with the repo's existing no-lockfile rule in the root
  .gitignore)
- Add package-lock.json / pnpm-lock.yaml / yarn.lock to
  website/.gitignore to match the root convention

Results

- 'npm audit' (root): 8 -> 0 vulnerabilities
- 'npm audit' (website): 0 -> 0 vulnerabilities
- 'npm install': no EBADENGINE warnings on node 20.x
- 'npm run build': clean
- 'npm test': 120 files / 1293 tests passing
- 'cd website && npm run build': static generation completes for all 5 routes
2026-06-02 10:32:59 +01:00

32 lines
668 B
JSON

{
"name": "agentmemory-website",
"version": "0.1.0",
"private": true,
"scripts": {
"gen-meta": "node scripts/gen-meta.mjs",
"predev": "node scripts/gen-meta.mjs",
"prebuild": "node scripts/gen-meta.mjs",
"dev": "next dev",
"build": "next build",
"start": "next start",
"lint": "next lint"
},
"dependencies": {
"next": "^16.2.7",
"react": "^19.2.7",
"react-dom": "^19.2.7"
},
"overrides": {
"postcss": "^8.5.10"
},
"devDependencies": {
"@types/node": "^25.9.1",
"@types/react": "^19.2.16",
"@types/react-dom": "^19.2.3",
"typescript": "^6.0.3"
},
"engines": {
"node": ">=20"
}
}