fix(coding-agent): require protobufjs 7.6.5, closes #7005

This commit is contained in:
Armin Ronacher 2026-07-23 23:16:07 +02:00
parent 6abb4b0640
commit ec1a87e856
9 changed files with 15 additions and 11 deletions

6
package-lock.json generated
View file

@ -4188,9 +4188,9 @@
}
},
"node_modules/protobufjs": {
"version": "7.6.4",
"resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.4.tgz",
"integrity": "sha512-RJJPTTpvFfHcWLkIa2JFWK4XvtSzS0yEWDmunqHXli1h3JlkbcQZXDZdcWxv+JK3Xsl5/UFDPZ0iGm7DAengYw==",
"version": "7.6.5",
"resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.5.tgz",
"integrity": "sha512-/FPD0nUc9jH6rfFjji9IBqOz4pcSE3CsT1m7Ep6Mdb0LxSUMj8hgl6GomOvZzpNpAqqGaXA0P3VSrZLFzIhQrw==",
"hasInstallScript": true,
"license": "BSD-3-Clause",
"dependencies": {

View file

@ -63,6 +63,7 @@
},
"version": "0.0.3",
"overrides": {
"protobufjs": "7.6.5",
"rimraf": "6.1.2",
"gaxios": {
"rimraf": "6.1.2"

View file

@ -10,6 +10,7 @@
- Fixed compaction and branch-summary requests to use fresh routing session IDs with prompt caching disabled where supported.
- Fixed explicit self-updates when `PI_SKIP_VERSION_CHECK` is set ([#6977](https://github.com/earendil-works/pi/issues/6977)).
- Updated the packaged `protobufjs` dependency to 7.6.5 to address GHSA-j3f2-48v5-ccww ([#7005](https://github.com/earendil-works/pi/issues/7005)).
## [0.81.1] - 2026-07-21

View file

@ -1603,9 +1603,9 @@
}
},
"node_modules/protobufjs": {
"version": "7.6.4",
"resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.4.tgz",
"integrity": "sha512-RJJPTTpvFfHcWLkIa2JFWK4XvtSzS0yEWDmunqHXli1h3JlkbcQZXDZdcWxv+JK3Xsl5/UFDPZ0iGm7DAengYw==",
"version": "7.6.5",
"resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.5.tgz",
"integrity": "sha512-/FPD0nUc9jH6rfFjji9IBqOz4pcSE3CsT1m7Ep6Mdb0LxSUMj8hgl6GomOvZzpNpAqqGaXA0P3VSrZLFzIhQrw==",
"license": "BSD-3-Clause",
"dependencies": {
"@protobufjs/aspromise": "^1.1.2",

View file

@ -7,6 +7,7 @@
"@earendil-works/pi-coding-agent": "0.81.1"
},
"overrides": {
"protobufjs": "7.6.5",
"rimraf": "6.1.2",
"gaxios": {
"rimraf": "6.1.2"

View file

@ -1593,9 +1593,9 @@
}
},
"node_modules/protobufjs": {
"version": "7.6.4",
"resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.4.tgz",
"integrity": "sha512-RJJPTTpvFfHcWLkIa2JFWK4XvtSzS0yEWDmunqHXli1h3JlkbcQZXDZdcWxv+JK3Xsl5/UFDPZ0iGm7DAengYw==",
"version": "7.6.5",
"resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.5.tgz",
"integrity": "sha512-/FPD0nUc9jH6rfFjji9IBqOz4pcSE3CsT1m7Ep6Mdb0LxSUMj8hgl6GomOvZzpNpAqqGaXA0P3VSrZLFzIhQrw==",
"license": "BSD-3-Clause",
"dependencies": {
"@protobufjs/aspromise": "^1.1.2",

View file

@ -59,6 +59,7 @@
"yaml": "2.9.0"
},
"overrides": {
"protobufjs": "7.6.5",
"rimraf": "6.1.2",
"gaxios": {
"rimraf": "6.1.2"

View file

@ -15,7 +15,7 @@ const internalPackagePrefix = "@earendil-works/pi-";
const installPackageName = "@earendil-works/pi-coding-agent-install";
const allowedInstallScriptPackages = new Map([
["@google/genai@1.52.0", "preinstall is a no-op in the published package"],
["protobufjs@7.6.4", "postinstall only warns about protobufjs version scheme mismatches"],
["protobufjs@7.6.5", "postinstall only warns about protobufjs version scheme mismatches"],
]);
const args = new Set(process.argv.slice(2));

View file

@ -12,7 +12,7 @@ const shrinkwrapPath = join(codingAgentDir, "npm-shrinkwrap.json");
const internalPackagePrefix = "@earendil-works/pi-";
const allowedInstallScriptPackages = new Map([
["@google/genai@1.52.0", "preinstall is a no-op in the published package"],
["protobufjs@7.6.4", "postinstall only warns about protobufjs version scheme mismatches"],
["protobufjs@7.6.5", "postinstall only warns about protobufjs version scheme mismatches"],
]);
const args = new Set(process.argv.slice(2));