* security: bump vite across integrations to patched versions Fixes Dependabot alerts for vite transitive dev dependency: - GHSA-v2wj-q39q-566r (high): server.fs.deny bypass with queries - GHSA-p9ff-h696-f583 (high): related vite server vulnerability Adds a `vite` entry to the npm `overrides` in each integration's package.json to force the patched version (>=8.0.5). To make this possible in ai-sdk, chat, and openclaw — which pinned vitest ^4.0.18 whose vite peer is `^6.0.0 || ^7.0.0` — the minor-compatible bump vitest ^4.0.18 -> ^4.1.2 is also included. vitest 4.1.x supports vite 8.x (peer: ^6 || ^7 || ^8), so all six integrations converge on vite 8.x consistently. paperclip had no overrides block; one was added. Verified locally: `npm ci && npx vitest run` passes in all six integrations (ai-sdk 23, chat 28, openclaw 66, opencode 89, paperclip 27, nemoclaw 36 tests). * chore: regenerate hindsight-docs skill Picks up FAQ and best-practice sections added in #905 that were not regenerated at merge time, so that `verify-generated-files` passes for this branch.
55 lines
1.2 KiB
JSON
55 lines
1.2 KiB
JSON
{
|
|
"name": "@vectorize-io/hindsight-paperclip",
|
|
"version": "0.1.1",
|
|
"description": "Persistent memory for Paperclip AI agents using Hindsight",
|
|
"type": "module",
|
|
"main": "dist/index.js",
|
|
"types": "dist/index.d.ts",
|
|
"keywords": [
|
|
"paperclip",
|
|
"hindsight",
|
|
"memory",
|
|
"agents",
|
|
"ai"
|
|
],
|
|
"author": "Vectorize <support@vectorize.io>",
|
|
"license": "MIT",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/vectorize-io/hindsight.git",
|
|
"directory": "hindsight-integrations/paperclip"
|
|
},
|
|
"files": [
|
|
"dist",
|
|
"README.md"
|
|
],
|
|
"scripts": {
|
|
"build": "tsc",
|
|
"dev": "tsc --watch",
|
|
"clean": "rm -rf dist",
|
|
"test": "vitest run tests",
|
|
"test:watch": "vitest tests",
|
|
"prepublishOnly": "npm run clean && npm run build"
|
|
},
|
|
"peerDependencies": {
|
|
"express": ">=4"
|
|
},
|
|
"peerDependenciesMeta": {
|
|
"express": {
|
|
"optional": true
|
|
}
|
|
},
|
|
"devDependencies": {
|
|
"@types/express": "^5.0.0",
|
|
"@types/node": "^20.0.0",
|
|
"express": "^5.0.0",
|
|
"typescript": "^5.3.0",
|
|
"vitest": "^4.0.0"
|
|
},
|
|
"engines": {
|
|
"node": ">=20"
|
|
},
|
|
"overrides": {
|
|
"vite": ">=8.0.5"
|
|
}
|
|
}
|