Mish Ushakov
5417dd4f9f
## Summary Fixes all 8 open [Dependabot alerts](https://github.com/e2b-dev/E2B/security/dependabot), all in `pnpm-lock.yaml`: | Package | Severity | Alerts | Before | After | How | |---|---|---|---|---|---| | `@vitest/browser` | critical | #328 | 4.1.8 | 4.1.10 | updated the vitest family in js-sdk and cli devDeps (4.1.10 peer-requires `vitest@4.1.10` exactly) | | `tar` | critical/high/medium ×4 | #324–#327 | 7.5.16 | 7.5.21 | bumped the js-sdk runtime dep floor to `^7.5.19` + repo-wide override | | `sharp` | high | #329 | 0.34.5 | 0.35.3 | new override (pinned exactly by miniflare, dev-only) | | `shell-quote` | high | #323 | 1.8.4 | 1.10.0 | widened existing override (dev-only, via npm-run-all) | | `brace-expansion` | high | #322 | 2.1.0 | 2.1.2 | widened existing override | The only runtime-dependency change is `tar` in the js-sdk (used for template build contexts), so a patch changeset for `e2b` is included. The CLI bundles the SDK and its dependencies into `dist/index.js`, so the published CLI also ships the vulnerable `tar` — a patch changeset for `@e2b/cli` is included to rebundle it. Everything else is dev tooling or lockfile-only. ## Verification - `pnpm run lint` and `pnpm run typecheck` pass (the 7 python-sdk ty diagnostics pre-exist on main) - js-sdk: unit + connectionConfig (393 passed) and template projects (132 passed, exercises the new `tar` end-to-end against the real API) on vitest 4.1.10; `pnpm run build` clean - js-sdk `test:cf` passes — miniflare/workerd boots with sharp 0.35.3 - cli: full suite green (103 passed) on vitest 4.1.10 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
95 lines
2.3 KiB
JSON
95 lines
2.3 KiB
JSON
{
|
|
"name": "@e2b/cli",
|
|
"version": "2.15.0",
|
|
"description": "CLI for managing e2b sandbox templates",
|
|
"homepage": "https://e2b.dev",
|
|
"license": "MIT",
|
|
"author": {
|
|
"name": "FoundryLabs, Inc.",
|
|
"email": "hello@e2b.dev",
|
|
"url": "https://e2b.dev"
|
|
},
|
|
"bugs": "https://github.com/e2b-dev/e2b/issues",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/e2b-dev/e2b",
|
|
"directory": "packages/cli"
|
|
},
|
|
"publishConfig": {
|
|
"access": "public"
|
|
},
|
|
"keywords": [
|
|
"e2b",
|
|
"ai-agents",
|
|
"agents",
|
|
"ai",
|
|
"code-interpreter",
|
|
"sandbox",
|
|
"code",
|
|
"cli",
|
|
"runtime",
|
|
"vm",
|
|
"nodejs",
|
|
"javascript",
|
|
"typescript"
|
|
],
|
|
"sideEffects": false,
|
|
"scripts": {
|
|
"prepublishOnly": "pnpm build",
|
|
"build": "tsc --noEmit --skipLibCheck && tsdown --minify",
|
|
"dev": "tsdown --watch",
|
|
"typecheck": "tsc --noEmit --skipLibCheck",
|
|
"lint": "oxlint --config ../../.oxlintrc.json src",
|
|
"format": "prettier --write src",
|
|
"test:interactive": "pnpm build && ./dist/index.js",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest watch",
|
|
"test:coverage": "vitest run --coverage",
|
|
"check-deps": "knip"
|
|
},
|
|
"devDependencies": {
|
|
"@types/handlebars": "^4.1.0",
|
|
"@types/inquirer": "^9.0.7",
|
|
"@types/json2md": "^1.5.4",
|
|
"@types/node": "^20.19.19",
|
|
"@types/npmcli__package-json": "^4.0.4",
|
|
"@types/statuses": "^2.0.5",
|
|
"@typescript/native": "npm:typescript@^7.0.2",
|
|
"@vitest/coverage-v8": "^4.1.10",
|
|
"json2md": "^2.0.1",
|
|
"knip": "^5.43.6",
|
|
"tsdown": "^0.22.3",
|
|
"typescript": "npm:@typescript/typescript6@^6.0.2",
|
|
"vitest": "^4.1.10"
|
|
},
|
|
"files": [
|
|
"dist",
|
|
"LICENSE",
|
|
"README",
|
|
"package.json"
|
|
],
|
|
"bin": {
|
|
"e2b": "dist/index.js"
|
|
},
|
|
"dependencies": {
|
|
"@iarna/toml": "^2.2.5",
|
|
"@inquirer/prompts": "^7.9.0",
|
|
"@npmcli/package-json": "^5.2.1",
|
|
"async-listen": "^3.0.1",
|
|
"boxen": "^7.1.1",
|
|
"chalk": "^5.3.0",
|
|
"cli-highlight": "^2.1.11",
|
|
"commander": "^11.1.0",
|
|
"console-table-printer": "^2.11.2",
|
|
"e2b": "^2.35.3",
|
|
"handlebars": "^4.7.9",
|
|
"inquirer": "^12.10.0",
|
|
"simple-update-notifier": "^2.0.0",
|
|
"statuses": "^2.0.1",
|
|
"yup": "^1.3.2"
|
|
},
|
|
"engines": {
|
|
"node": ">=20.18.1 <21 || >=22"
|
|
}
|
|
}
|