From f7e1ad054438257a52a362c7f7012a156f270608 Mon Sep 17 00:00:00 2001 From: satan9394 Date: Fri, 18 Sep 2026 23:57:59 -0700 Subject: [PATCH] chore(deps): align the TypeScript SDK's vitest with the repo baseline sdk/memory-core/typescript declared vitest ^2.0.0, which Dependabot flags as critical (GHSA-5xrq-8626-4rwp; the medium GHSA-82fw-gwwq-j7x9 covers everything below 4.1.11). MemoryPanel and MemoryProxy were just moved to ^5.0.1, so this brings the last manifest in line. devDependency only, so the published package is unaffected. The sub-project has no lockfile and the repository has no test files at all, so a major bump cannot break a test. --- sdk/memory-core/typescript/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sdk/memory-core/typescript/package.json b/sdk/memory-core/typescript/package.json index 771aec7603..f916c42537 100644 --- a/sdk/memory-core/typescript/package.json +++ b/sdk/memory-core/typescript/package.json @@ -30,7 +30,7 @@ "devDependencies": { "@types/node": "^22.0.0", "typescript": "^5.5.0", - "vitest": "^2.0.0" + "vitest": "^5.0.1" }, "dependencies": { "undici": "^6.21.3"