Mish Ushakov
be1ffa19f6
Follow-up to #1559 with two changes. First, it removes four `pnpm.overrides` entries whose targets are no longer in the dependency graph at all — `@next/eslint-plugin-next>glob` (the parent package is gone), `yaml@2.x`, `@tootallnate/once`, and `flatted`; the lockfile change is header-only and no resolved package versions change, verified with a clean `pnpm audit`. The remaining overrides are kept because no parent's declared range excludes the vulnerable versions, so they are the only enforcement of the patched floors. Second, it adds a patch changeset for `@e2b/cli`: the CLI bundles all runtime dependencies into `dist/index.js` at build time (tsdown `alwaysBundle`), so the patched transitive deps from #1559 (e.g. brace-expansion 5.0.7 via the glob/minimatch chains) only reach users through a new release. No changeset is needed for the `e2b` SDK or Python SDK since they publish dependency ranges that resolve fresh at user install time. Supersedes #1560. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
51 lines
1.8 KiB
JSON
51 lines
1.8 KiB
JSON
{
|
|
"name": "e2b",
|
|
"private": true,
|
|
"scripts": {
|
|
"version": "pnpm changeset version && pnpm run -r postVersion",
|
|
"publish": "pnpm changeset publish && pnpm run -r postPublish",
|
|
"test": "pnpm test --recursive --if-present",
|
|
"rm-node-modules": "find . -name 'node_modules' -type d -prune -exec rm -rf '{}' +",
|
|
"pnpm-install-hack": "cd packages/js-sdk && sed -i '' 's/\"version\": \".*\"/\"version\": \"9.9.9\"/g' package.json && cd ../.. && pnpm i && git checkout -- packages/js-sdk/package.json",
|
|
"lint": "pnpm --if-present --recursive run lint",
|
|
"typecheck": "pnpm --if-present --recursive run typecheck",
|
|
"format": "pnpm --if-present --recursive run format",
|
|
"changeset": "pnpm dlx @changesets/cli"
|
|
},
|
|
"packageManager": "pnpm@9.15.5",
|
|
"dependencies": {
|
|
"@changesets/read": "^0.6.2"
|
|
},
|
|
"devDependencies": {
|
|
"changeset": "^0.2.6",
|
|
"oxlint": "^1.72.0"
|
|
},
|
|
"engines": {
|
|
"pnpm": ">=9.0.0 <10"
|
|
},
|
|
"pnpm": {
|
|
"overrides": {
|
|
"rollup@>=4": ">=4.59.0",
|
|
"postcss@<8.5.10": "^8.5.10",
|
|
"vite@>=6.0.0 <6.4.3": "^6.4.3",
|
|
"lodash@<4.18.0": "^4.18.0",
|
|
"brace-expansion@<1.1.13": "^1.1.13",
|
|
"brace-expansion@>=2.0.0 <2.0.3": "^2.0.3",
|
|
"brace-expansion@>=5.0.0 <5.0.6": "^5.0.6",
|
|
"underscore@<1.13.8": "^1.13.8",
|
|
"js-yaml@<3.15.0": "^3.15.0",
|
|
"js-yaml@>=4.0.0 <4.2.0": "^4.2.0",
|
|
"@babel/core@<7.29.6": "^7.29.6",
|
|
"picomatch@<2.3.2": "^2.3.2",
|
|
"picomatch@>=4.0.0 <4.0.4": "^4.0.4",
|
|
"smol-toml@<1.6.1": "^1.6.1",
|
|
"minimatch@<3.1.3": "^3.1.3",
|
|
"minimatch@>=5.0.0 <5.1.8": "^5.1.8",
|
|
"minimatch@>=9.0.0 <9.0.7": "^9.0.7",
|
|
"minimatch@>=10.0.0 <10.2.3": "^10.2.3",
|
|
"ws@>=8.0.0 <8.20.1": "^8.20.1",
|
|
"shell-quote@<1.8.4": "^1.8.4"
|
|
}
|
|
}
|
|
}
|