8bc3d7b0a5
Harden dependency floors and update the Vitest toolchain to patched releases. - upgrade workspace vitest and @vitest/coverage-v8 dependencies to the 4.1 line across packages and plugins - pin transitive protobufjs via pnpm overrides and lockfile updates to patched versions - adapt Vitest configs, engine test helpers, and security-floor coverage for the new dependency baselines - add the published CLI changeset and related workspace/package metadata updates included in the task branch Files changed: .changeset/fn-6042-security-dependencies.md | 5 + AGENTS.md | 4 + Dockerfile | 3 + docs/PLUGIN_AUTHORING.md | 2 - package.json | 3 +- packages/cli/package.json | 4 +- packages/cli/vitest.config.ts | 2 +- packages/core/package.json | 4 +- packages/core/vitest.config.ts | 2 +- packages/dashboard/app/test/mockApi.ts | 4 +- packages/dashboard/package.json | 4 +- packages/dashboard/vitest.config.ts | 2 +- packages/desktop/package.json | 4 +- packages/desktop/vitest.config.ts | 2 +- packages/droid-cli/package.json | 2 +- packages/droid-cli/vitest.config.ts | 2 +- packages/engine/package.json | 4 +- .../engine/src/__tests__/executor-test-helpers.ts | 29 +- .../engine/src/__tests__/gridlock-detector.test.ts | 5 +- .../src/__tests__/heartbeat-scheduler.test.ts | 3 +- packages/engine/src/__tests__/scheduler.test.ts | 24 +- packages/engine/src/__tests__/self-healing.test.ts | 5 + packages/engine/tsconfig.json | 3 +- packages/engine/vitest.config.ts | 10 +- packages/i18n/package.json | 2 +- packages/i18n/vitest.config.ts | 7 + packages/mobile/package.json | 2 +- packages/mobile/vitest.config.ts | 2 +- packages/pi-claude-cli/package.json | 2 +- packages/pi-claude-cli/vitest.config.ts | 2 +- packages/pi-llama-cpp/package.json | 2 +- packages/pi-llama-cpp/vitest.config.ts | 2 +- packages/plugin-sdk/package.json | 2 +- packages/plugin-sdk/vitest.config.ts | 2 +- .../examples/fusion-plugin-auto-label/package.json | 2 +- .../fusion-plugin-auto-label/vitest.config.ts | 2 +- .../examples/fusion-plugin-ci-status/package.json | 2 +- .../fusion-plugin-ci-status/vitest.config.ts | 2 +- .../fusion-plugin-notification/package.json | 2 +- .../fusion-plugin-notification/vitest.config.ts | 2 +- .../fusion-plugin-settings-demo/package.json | 2 +- .../fusion-plugin-settings-demo/vitest.config.ts | 2 +- plugins/fusion-plugin-acp-runtime/package.json | 2 +- plugins/fusion-plugin-acp-runtime/vitest.config.ts | 2 +- plugins/fusion-plugin-agent-browser/package.json | 2 +- .../fusion-plugin-agent-browser/vitest.config.ts | 2 +- .../fusion-plugin-cli-printing-press/package.json | 2 +- .../vitest.config.ts | 2 +- .../package.json | 2 +- .../src/__tests__/orchestrator-live-output.test.ts | 4 +- .../vitest.config.ts | 2 +- plugins/fusion-plugin-cursor-runtime/package.json | 4 +- .../fusion-plugin-dependency-graph/package.json | 4 +- .../vitest.config.ts | 2 +- plugins/fusion-plugin-droid-runtime/package.json | 2 +- .../fusion-plugin-droid-runtime/vitest.config.ts | 2 +- plugins/fusion-plugin-even-cards/package.json | 2 +- plugins/fusion-plugin-even-cards/vitest.config.ts | 2 +- .../package.json | 2 +- .../vitest.config.ts | 2 +- plugins/fusion-plugin-hermes-runtime/package.json | 2 +- .../fusion-plugin-hermes-runtime/vitest.config.ts | 2 +- .../fusion-plugin-openclaw-runtime/package.json | 2 +- .../vitest.config.ts | 2 +- .../fusion-plugin-paperclip-runtime/package.json | 2 +- .../vitest.config.ts | 2 +- plugins/fusion-plugin-reports/package.json | 2 +- .../src/__tests__/review-panel.test.ts | 6 +- plugins/fusion-plugin-reports/vitest.config.ts | 2 +- plugins/fusion-plugin-roadmap/package.json | 2 +- plugins/fusion-plugin-roadmap/vitest.config.ts | 2 +- plugins/fusion-plugin-whatsapp-chat/package.json | 2 +- .../fusion-plugin-whatsapp-chat/vitest.config.ts | 2 +- pnpm-lock.yaml | 626 ++++++++------------- .../__tests__/dependency-security-floor.test.mjs | 95 ++++ 75 files changed, 475 insertions(+), 491 deletions(-) Fusion-Task-Id: FN-6042 Fusion-Task-Lineage: fff6a1cb-8937-435c-9a91-b7c7a59cc80e
105 lines
4.9 KiB
JSON
105 lines
4.9 KiB
JSON
{
|
|
"name": "fusion-workspace",
|
|
"version": "0.39.0",
|
|
"private": true,
|
|
"license": "MIT",
|
|
"homepage": "https://github.com/Runfusion/Fusion#readme",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/Runfusion/Fusion"
|
|
},
|
|
"bugs": {
|
|
"url": "https://github.com/Runfusion/Fusion/issues"
|
|
},
|
|
"type": "module",
|
|
"packageManager": "pnpm@10.33.0",
|
|
"scripts": {
|
|
"pretest": "node scripts/check-no-nohup.mjs && node scripts/check-no-kill-4040.mjs",
|
|
"pretest:full": "node scripts/check-no-nohup.mjs && node scripts/check-no-kill-4040.mjs",
|
|
"test:gate": "node scripts/check-no-nohup.mjs && node scripts/check-no-kill-4040.mjs && pnpm --filter @fusion/engine test:core && pnpm --filter @runfusion/fusion test:ci-shape",
|
|
"smoke:boot": "node scripts/boot-smoke.mjs",
|
|
"local": "node scripts/start-local.mjs",
|
|
"dev": "node scripts/dev-with-memory.mjs",
|
|
"dev:ui": "pnpm --filter @fusion/dashboard dev",
|
|
"dev:hmr": "node scripts/dev-hmr.mjs",
|
|
"lint": "eslint .",
|
|
"sync:fusion-skill": "node scripts/sync-fusion-skill-tools.mjs",
|
|
"sync:fusion-skill:check": "node scripts/sync-fusion-skill-tools.mjs --check",
|
|
"build": "pnpm -r --filter=!@fusion/desktop --filter=!@fusion/mobile build",
|
|
"build:all": "pnpm -r build",
|
|
"verify:workspace": "pnpm lint && pnpm test:full && pnpm build",
|
|
"build:exe": "pnpm build && pnpm --filter @runfusion/fusion build:exe",
|
|
"build:exe:all": "pnpm build && pnpm --filter @runfusion/fusion build:exe:all",
|
|
"test": "node scripts/test-changed.mjs",
|
|
"test:scripts": "node --test scripts/__tests__/*.test.mjs",
|
|
"fn:cache-stats": "node scripts/cache-stats.mjs",
|
|
"test:full": "node scripts/test-changed.mjs --full --no-cache && pnpm --filter @fusion/engine test:slow",
|
|
"test:ci:shard": "node scripts/ci-test-shard.mjs",
|
|
"test:serial": "FUSION_TEST_CONCURRENCY=1 FUSION_TEST_WORKSPACE_CONCURRENCY=1 pnpm test:full",
|
|
"test:fast": "FUSION_TEST_CONCURRENCY=4 FUSION_TEST_WORKSPACE_CONCURRENCY=4 pnpm test:full",
|
|
"test:locked": "node scripts/test-with-lock.mjs",
|
|
"test:build": "pnpm --filter @fusion/dashboard test:build",
|
|
"test:isolated": "node scripts/check-test-isolation.mjs --before && pnpm test:full && node scripts/check-test-isolation.mjs",
|
|
"test:check-isolation": "node scripts/check-test-isolation.mjs",
|
|
"test:coverage": "pnpm -r --workspace-concurrency=1 exec vitest run --silent=passed-only --reporter=dot --coverage",
|
|
"test:coverage:core": "pnpm --filter @fusion/core exec vitest run --silent=passed-only --reporter=dot --coverage",
|
|
"test:coverage:engine": "pnpm --filter @fusion/engine exec vitest run --silent=passed-only --reporter=dot --coverage",
|
|
"test:coverage:cli": "pnpm --filter @runfusion/fusion exec vitest run --silent=passed-only --reporter=dot --coverage",
|
|
"test:coverage:dashboard": "pnpm --filter @fusion/dashboard exec vitest run --silent=passed-only --reporter=dot --coverage",
|
|
"test:slow-cli": "pnpm --filter @runfusion/fusion test:slow-cli",
|
|
"typecheck": "pnpm -r --filter=!@fusion/desktop --filter=!@fusion/mobile typecheck",
|
|
"i18n:extract": "i18next-cli extract",
|
|
"i18n:sync": "i18next-cli sync",
|
|
"i18n:types": "i18next-cli types",
|
|
"i18n:status": "i18next-cli status",
|
|
"i18n:lint": "i18next-cli lint",
|
|
"i18n:gen-cli": "pnpm --filter @fusion/i18n gen:cli-catalogs",
|
|
"changeset": "changeset",
|
|
"version": "changeset version",
|
|
"release": "node scripts/release.mjs",
|
|
"release:version": "changeset version && node scripts/sync-workspace-version.mjs",
|
|
"mobile:build": "pnpm --filter @fusion/dashboard build && pnpm --filter @fusion/mobile cap sync",
|
|
"mobile:ios": "pnpm mobile:build && pnpm --filter @fusion/mobile cap open ios",
|
|
"mobile:android": "pnpm mobile:build && pnpm --filter @fusion/mobile cap open android",
|
|
"mobile:dev:ios": "pnpm --filter @fusion/mobile dev:ios",
|
|
"mobile:dev:android": "pnpm --filter @fusion/mobile dev:android",
|
|
"mobile:sync": "pnpm --filter @fusion/mobile cap sync",
|
|
"build:desktop": "pnpm --filter @fusion/desktop build",
|
|
"dist:desktop:win": "pnpm --filter @fusion/desktop build && pnpm --filter @fusion/desktop dist:win"
|
|
},
|
|
"pnpm": {
|
|
"ignoredBuiltDependencies": [
|
|
"@google/genai",
|
|
"better-sqlite3",
|
|
"cpu-features",
|
|
"electron-winstaller",
|
|
"keytar",
|
|
"sharp",
|
|
"ssh2"
|
|
],
|
|
"onlyBuiltDependencies": [
|
|
"@homebridge/node-pty-prebuilt-multiarch",
|
|
"electron",
|
|
"esbuild",
|
|
"koffi",
|
|
"protobufjs"
|
|
],
|
|
"overrides": {
|
|
"@types/node": "^25.5.2",
|
|
"protobufjs": "^7.5.8"
|
|
}
|
|
},
|
|
"devDependencies": {
|
|
"@changesets/cli": "^2.30.0",
|
|
"@eslint/js": "^9.0.0",
|
|
"eslint": "^9.0.0",
|
|
"fast-glob": "^3.3.3",
|
|
"i18next-cli": "^1.59.1",
|
|
"react-devtools-core": "^7.0.1",
|
|
"tsx": "^4.19.0",
|
|
"typescript": "^5.7.0",
|
|
"typescript-eslint": "^8.0.0",
|
|
"yaml": "^2.8.3"
|
|
}
|
|
}
|