Skip to content

chore(deps): sous-ensemble conservateur de la PR upstream #227#2

Merged
cursor[bot] merged 1 commit into
mainfrom
cursor/merge-pr-227-deps-0af3
Jun 23, 2026
Merged

chore(deps): sous-ensemble conservateur de la PR upstream #227#2
cursor[bot] merged 1 commit into
mainfrom
cursor/merge-pr-227-deps-0af3

Conversation

@Emilien-Etadam

Copy link
Copy Markdown
Owner

Summary

Tentative de merger OpenCoworkAI/open-cowork#227 (dependabot production-minor) sur le fork Windows.

Résultat : la PR #227 complète ne peut pas être mergée telle quelle. Le bump @mariozechner/pi-coding-agent 0.60 → 0.73 casse le build :

  • patch @mariozechner/pi-ai@0.60.0 incompatible
  • erreurs TypeScript dans agent-runner.ts (API ModelRegistry, events auto_compaction_*, @sinclair/typebox)

Cette PR applique donc le sous-ensemble non cassant des mises à jour de #227, en gardant pi-ai et pi-coding-agent à 0.60.0.

Packages mis à jour

  • @anthropic-ai/sdk 0.39 → 0.102
  • @larksuiteoapi/node-sdk 1.59 → 1.66
  • @modelcontextprotocol/sdk 1.26 → 1.29
  • @slack/web-api 7.15 → 7.16
  • better-sqlite3 12.8 → 12.10
  • dotenv 17.2 → 17.4
  • katex 0.16 → 0.17
  • lucide-react 1.8 → 1.17
  • openai 6.32 → 6.42
  • ws 8.19 → 8.21

Type of change

  • Build / CI (build / ci)

Checklist

  • Code follows the project style (TypeScript strict, ESLint, Prettier)
  • Commit messages follow Conventional Commits
  • Self-review completed
  • Tests added or updated for the changed behaviour — N/A (deps only)
  • npm run test passes locally (952/952)
  • npm run lint passes locally (8 warnings préexistants)
  • npx tsc --noEmit passes locally
  • UI changes tested on both macOS and Windows — N/A

Testing

npm install
npx patch-package
npm rebuild better-sqlite3
npm run lint
npx tsc --noEmit
npm run test:coverage

npm audit (production, après changement)

26 vulnérabilités (11 moderate, 14 high, 1 critical) — légère amélioration vs avant, mais les alertes pi-coding-agent restent tant qu'on reste en 0.60.0.

Notes

  • Usage cible : Windows uniquement — PR #249 (Lima macOS) non incluse.
  • Pour adopter entièrement #227, il faudra d'abord migrer agent-runner.ts + régénérer le patch pi-ai pour 0.73.x.
Open in Web Open in Cursor 

Merge upstream dependabot PR #227 as-is breaks the build: pi-coding-agent
0.73.1 introduces API changes (ModelRegistry, event types, typebox imports)
and invalidates the @mariozechner/pi-ai@0.60.0 patch.

Bump the non-breaking production dependencies from #227 while keeping
@mariozechner/pi-ai and @mariozechner/pi-coding-agent at 0.60.0 until the
patch and agent-runner are updated for 0.73.x.

Verified: lint, tsc --noEmit, test:coverage (952 tests).
@cursor cursor Bot merged commit 192c840 into main Jun 23, 2026
2 checks passed
cursor Bot pushed a commit that referenced this pull request Jun 23, 2026
Fork alpha including:
- conservative dependency bumps (PR #2)
- sandbox enable toggle in Settings (PR #4)
- European locales and backend i18n
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants