-
chore(deps): consolidate dependency updates (#3760)
发布于
2026-07-06 10:33:55 +00:00 This PR:
- consolidates https://github.com/ComposioHQ/composio/pull/3733,
https://github.com/ComposioHQ/composio/pull/3735 through
https://github.com/ComposioHQ/composio/pull/3744, and
https://github.com/ComposioHQ/composio/pull/3752 - refreshes the pnpm workspace dependencies under the existing
minimumReleaseAgesupply-chain gate - keeps latest compatible pins for ESLint 9, AI SDK 6, and Cloudflare
workers types 4 where latest majors conflict with the current workspace - keeps zod-v3 runtime fixtures on
zod@3.25.76while bumping the
workspace catalog to zod 4 - bumps Python
composio-clientto1.42.0and refreshesuv.lock - updates the SHA-pinned Claude and Codex workflow actions from the
Dependabot action group - adds a patch changeset for the versioned package manifests touched by
dependency updates - verifies the rollup with frozen pnpm/uv locks, peer checks, audit
threshold checks, typecheck, lint, builds, TypeScript tests, and Python
nox -s chk
Context
pnpm audit --prod --audit-level=moderatepasses. The remaining
production audit item is a low@ai-sdk/provider-utilsadvisory through
Mastra transitive dependencies; forcing it higher would require leaving
the compatible stable Mastra dependency path.下载附件
- consolidates https://github.com/ComposioHQ/composio/pull/3733,