Repository navigation
Prepare 0.2.2 with patched audit dependencies - #19
Conversation
|
@codex review Please review #19 at immutable base Scope: patched Zod and affected transitive dependencies, plus consistent 0.2.2 package/capability/documentation/test metadata. Local full checks passed all 86 tests and package/release smoke checks. Exact-head GitHub CI and Nightly Tests both passed, including npm audit with zero findings. Please report any actionable correctness, compatibility, packaging, or security issue. |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Codex Review: Didn't find any major issues. Chef's kiss. Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
The scheduled audit fails with two high and two moderate vulnerabilities in the pinned dependency tree. This updates Zod from 4.6.2 to 4.6.7 and refreshes the affected transitive dependencies to body-parser 2.4.0, fast-uri 3.1.9, and Hono 4.13.14, including the required qs patch.
Prepare version 0.2.2 across package and lockfile metadata, the packaged capabilities resource, documentation examples, and the public-contract test for the subsequent release.
Validation: a clean
npm ci,npm audit --audit-level=high(zero vulnerabilities), andnpm run check(all 86 tests, schema checks, type checking, build, package verification, installation smoke, and offline release smoke) pass.git diff --checkpasses.Failed audit: https://github.com/thatfactory/cloudkit-mcp/actions/runs/40297026605/job/121485457534