fix: patch dependency security advisories - #87
Merged
Conversation
6 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Closes #86
Verification
Lockfile is up to date, resolution step is skipped
Already up to date
╭ Warning ─────────────────────────────────────────────────────────────────────╮
│ │
│ Ignored build scripts: agent-browser@0.34.0, electron-winstaller@5.4.0, │
│ esbuild@0.25.12, esbuild@0.28.1. │
│ Run "pnpm approve-builds" to pick which dependencies should be allowed │
│ to run scripts. │
│ │
╰──────────────────────────────────────────────────────────────────────────────╯
Done in 350ms using pnpm v10.33.0 — passed
RUN v3.2.7 /Users/bradtaylor/Documents/GitHub/answer-engine-oss/.worktrees/issue-86
✓ tests/repository/dependency-security.test.ts (3 tests) 81ms
Test Files 1 passed (1)
Tests 3 passed (3)
Start at 19:20:21
Duration 353ms (transform 18ms, setup 0ms, collect 32ms, tests 81ms, environment 0ms, prepare 41ms) — 3 passed
Public-boundary check passed.
RUN v3.2.7 /Users/bradtaylor/Documents/GitHub/answer-engine-oss/.worktrees/issue-86
✓ tests/server/library-membership.test.ts (2 tests) 5ms
✓ tests/server/openapi-boundary.test.ts (1 test) 46ms
✓ tests/repository/dependency-security.test.ts (3 tests) 117ms
✓ tests/server/request-surface.test.ts (3 tests) 29ms
✓ tests/server/api-key-auth.test.ts (2 tests) 23ms
✓ tests/server/agent-routes.test.ts (1 test) 22ms
✓ tests/server/organization-routes.test.ts (3 tests) 38ms
✓ tests/server/local-ui-session.test.ts (4 tests) 37ms
✓ tests/server/recall-tutorial-routes.test.ts (3 tests) 31ms
✓ tests/server/content-routes-list.test.ts (4 tests) 35ms
✓ tests/server/first-import-routes.test.ts (3 tests) 38ms
✓ tests/server/folder-ingestion-routes.test.ts (3 tests) 37ms
✓ tests/server/local-blob-storage.test.ts (1 test) 26ms
✓ tests/server/organization-service.test.ts (6 tests) 19ms
✓ tests/server/content-service.test.ts (10 tests) 14ms
✓ tests/repository/real-history-verifier.test.ts (16 tests) 414ms
✓ tests/server/application-routes.test.ts (8 tests) 65ms
✓ tests/server/first-import-state.test.ts (3 tests) 6ms
✓ tests/server/recall-tutorial-service.test.ts (4 tests) 9ms
stdout | tests/server/app.test.ts > createApp local defaults > rejects an incomplete authenticated context before a core route runs
{"error":"Application authentication returned an invalid OSS request context","level":"error","message":"Unhandled request error","timestamp":"2026-08-18T02:20:26.916Z"}
✓ tests/server/folder-ingestion-state.test.ts (3 tests) 5ms
✓ tests/server/app.test.ts (8 tests) 113ms
✓ tests/server/application-service.test.ts (4 tests) 9ms
✓ tests/repository/install-prompt-sync.test.ts (1 test) 2ms
✓ tests/server/migration-utils.test.ts (3 tests) 3ms
✓ tests/repository/container-mcp-runtime.test.ts (1 test) 2ms
✓ tests/repository/product-boundary.test.ts (4 tests) 3ms
✓ tests/repository/recall-tutorial-client-matrix.test.ts (1 test) 5ms
↓ tests/server/application-database.integration.test.ts (1 test | 1 skipped)
✓ tests/repository/alpha-loop-setup.test.ts (12 tests) 4517ms
✓ Alpha Loop repository posture > replaces a colliding generated Compose identity and reuses only its own running project 2053ms
✓ Alpha Loop repository posture > replaces a daemon rooted in a prior worktree before browser preflight 598ms
✓ Alpha Loop repository posture > recognizes its daemon when the OSS checkout is a submodule 1015ms
✓ Alpha Loop repository posture > recovers a normal browser open once after a stale project daemon fails 827ms
✓ tests/repository/release-assets.test.ts (7 tests) 4860ms
✓ immutable installer release assets > generates the verified macos Node proposal without mutation 504ms
✓ immutable installer release assets > generates the verified windows-wsl2 Node proposal without mutation 764ms
✓ immutable installer release assets > leaves the user home unchanged when dependency consent is refused 680ms
✓ immutable installer release assets > reuses a compatible installed Node dependency without mutation 874ms
✓ immutable installer release assets > reuses a managed Node dependency after an interrupted bootstrap 2029ms
Test Files 29 passed | 1 skipped (30)
Tests 124 passed | 1 skipped (125)
Start at 19:20:25
Duration 5.20s (transform 1.06s, setup 0ms, collect 6.21s, tests 10.53s, environment 4ms, prepare 2.13s)
RUN v3.2.7 /Users/bradtaylor/Documents/GitHub/answer-engine-oss/.worktrees/issue-86/packages/cli
✓ src/tests/interchange-importer.test.ts (3 tests) 17ms
✓ src/tests/user-config.test.ts (8 tests) 21ms
✓ src/tests/env-generator.test.ts (2 tests) 20ms
✓ src/tests/local-dir-source.test.ts (11 tests) 52ms
✓ src/tests/config-commands.test.ts (3 tests) 24ms
✓ src/tests/first-import.test.ts (5 tests) 67ms
✓ src/tests/channel.test.ts (4 tests) 87ms
✓ src/tests/eval-commands.test.ts (8 tests) 154ms
✓ src/tests/wiring.test.ts (26 tests) 169ms
✓ src/tests/config.test.ts (5 tests) 28ms
✓ src/tests/cli-entrypoint.test.ts (1 test) 375ms
✓ CLI executable entrypoint > waits for an asynchronous API command before exiting 374ms
✓ src/tests/local-dir-sync.test.ts (7 tests) 243ms
✓ src/tests/home.test.ts (3 tests) 15ms
✓ src/tests/sync-source.test.ts (2 tests) 39ms
✓ src/tests/raw-archive.test.ts (10 tests) 412ms
✓ src/tests/claude-code-normalize.test.ts (5 tests) 412ms
✓ src/tests/interchange.test.ts (5 tests) 5ms
✓ src/tests/sync-service.test.ts (8 tests) 46ms
✓ src/tests/tutorial-commands.test.ts (3 tests) 6ms
✓ src/tests/import-commands.test.ts (5 tests) 31ms
✓ src/tests/folder-ingestion.test.ts (8 tests) 433ms
✓ src/tests/organize-commands.test.ts (4 tests) 8ms
✓ src/tests/codex-normalize.test.ts (7 tests) 469ms
✓ src/tests/content-commands.test.ts (4 tests) 9ms
✓ src/tests/api-client.test.ts (12 tests) 7ms
✓ src/tests/cowork-normalize.test.ts (5 tests) 633ms
✓ src/tests/auth.test.ts (1 test) 1ms
✓ src/tests/output.test.ts (7 tests) 5ms
✓ src/tests/sync-commands.test.ts (13 tests) 851ms
Test Files 29 passed (29)
Tests 185 passed (185)
Start at 19:20:31
Duration 1.42s (transform 1.29s, setup 0ms, collect 3.76s, tests 4.64s, environment 4ms, prepare 2.53s)
RUN v3.2.7 /Users/bradtaylor/Documents/GitHub/answer-engine-oss/.worktrees/issue-86/packages/mcp-server
✓ src/tests/api-client.test.ts (15 tests) 8ms
✓ src/tests/resources.test.ts (7 tests) 14ms
✓ src/tests/tools.test.ts (26 tests) 17ms
✓ src/tests/index.test.ts (5 tests) 3ms
✓ src/tests/server.test.ts (6 tests) 23ms
✓ src/tests/http-server.test.ts (4 tests) 45ms
Test Files 6 passed (6)
Tests 63 passed (63)
Start at 19:20:34
Duration 576ms (transform 207ms, setup 0ms, collect 737ms, tests 110ms, environment 1ms, prepare 472ms)
RUN v3.2.7 /Users/bradtaylor/Documents/GitHub/answer-engine-oss/.worktrees/issue-86/packages/create
✓ src/tests/skills.test.ts (3 tests) 8ms
✓ src/tests/interview.test.ts (3 tests) 4ms
✓ src/tests/clients.test.ts (4 tests) 8ms
✓ src/tests/verify.test.ts (10 tests) 7ms
✓ src/tests/preflight.test.ts (20 tests) 14ms
✓ src/tests/uninstall.test.ts (4 tests) 6ms
✓ src/tests/docker.test.ts (4 tests) 11ms
✓ src/tests/release.test.ts (7 tests) 27ms
✓ src/tests/runtime-channel.test.ts (18 tests) 67ms
✓ src/tests/models.test.ts (6 tests) 9ms
✓ src/tests/scaffold.test.ts (6 tests) 53ms
✓ src/tests/legacy-adoption.test.ts (9 tests) 87ms
✓ src/tests/index.test.ts (2 tests) 3ms
✓ src/tests/lifecycle.test.ts (36 tests) 166ms
✓ src/tests/install-channel.test.ts (3 tests) 100ms
✓ src/tests/integrations.test.ts (12 tests) 168ms
Test Files 16 passed (16)
Tests 147 passed (147)
Start at 19:20:35
Duration 739ms (transform 977ms, setup 0ms, collect 2.73s, tests 738ms, environment 2ms, prepare 1.61s)
RUN v3.2.7 /Users/bradtaylor/Documents/GitHub/answer-engine-oss/.worktrees/issue-86/packages/web-ui
✓ src/styles.test.ts (3 tests) 3ms
✓ src/api.test.ts (13 tests) 13ms
✓ src/composition.test.tsx (5 tests) 21ms
✓ src/public.test.ts (1 test) 2ms
✓ src/App.test.tsx (6 tests) 253ms
✓ src/advanced-workflows.test.tsx (3 tests) 377ms
✓ src/workflows.test.tsx (9 tests) 1050ms
Test Files 7 passed (7)
Tests 40 passed (40)
Start at 19:20:37
Duration 2.11s (transform 459ms, setup 0ms, collect 2.08s, tests 1.72s, environment 2.21s, prepare 430ms)
vite v6.4.3 building for production...
transforming...
✓ 357 modules transformed.
rendering chunks...
computing gzip size...
dist/index.html 0.46 kB │ gzip: 0.30 kB
dist/assets/index-PGy1UwwX.css 28.29 kB │ gzip: 6.14 kB
dist/assets/index-BiSUzY1I.js 560.59 kB │ gzip: 165.59 kB
✓ built in 784ms
vite v6.4.3 building for production...
transforming...
✓ 19 modules transformed.
rendering chunks...
computing gzip size...
dist/lib/answer-engine-web.js 178.37 kB │ gzip: 36.13 kB
✓ built in 132ms
RUN v3.2.7 /Users/bradtaylor/Documents/GitHub/answer-engine-oss/.worktrees/issue-86/apps/desktop
✓ src/tests/packaging.test.ts (2 tests) 2ms
✓ src/tests/runtime-controller.test.ts (5 tests) 5ms
✓ src/tests/tray.test.ts (3 tests) 2ms
✓ src/tests/security.test.ts (5 tests) 3ms
✓ src/tests/ipc.test.ts (3 tests) 4ms
Test Files 5 passed (5)
Tests 18 passed (18)
Start at 19:20:51
Duration 309ms (transform 74ms, setup 0ms, collect 141ms, tests 16ms, environment 1ms, prepare 235ms)