chore: security NPM updates / bump turbo (#3700)

* lower logging * add json5 * bump lockfile for json5 * allow Plugin to store actual npm name * allow character file to be json5, adjust logging, handle improper/failed to load plugins better * remove wrongly added plugin * properly handle paths with spaces * audit fix * bump turbo * don't await on async returns, note * attempt ci typing fix * try what claude says to fix CI * try what claude says to fix CI * try what claude says to fix CI * claude ci fix * go back to any * cursor attempt * cursor attempt * remove unused dependencies according to npx depcheck and testing
elizaOS · Feb 28, 2025 · 963afd3 · 963afd3
1 parent 151ad23
commit 963afd3
Show file tree

Hide file tree

Showing 5 changed files with 1,294 additions and 4,484 deletions.
diff --git a/package.json b/package.json
@@ -37,7 +37,7 @@
     "lerna": "8.1.5",
     "nodemon": "3.1.7",
     "only-allow": "1.2.1",
-    "turbo": "2.4.2",
+    "turbo": "2.4.4",
     "typedoc": "0.26.11",
     "typescript": "5.6.3",
     "viem": "2.21.58",
@@ -64,7 +64,12 @@
       "axios@>=0.8.1 <0.28.0": ">=0.28.0",
       "undici@>=6.0.0 <6.21.1": ">=6.21.1",
       "path-to-regexp@<0.1.12": ">=0.1.12",
-      "secp256k1": "5.0.1"
+      "secp256k1": "5.0.1",
+      "@octokit/request-error@>=1.0.0 <5.1.1": ">=5.1.1",
+      "dompurify@<3.2.4": ">=3.2.4",
+      "@octokit/request@>=1.0.0 <9.2.1": ">=9.2.1",
+      "@octokit/plugin-paginate-rest@>=1.0.0 <11.4.1": ">=11.4.1",
+      "esbuild@<=0.24.2": ">=0.25.0"
     }
   },
   "engines": {

diff --git a/packages/client-direct/package.json b/packages/client-direct/package.json
@@ -24,11 +24,11 @@
         "@types/cors": "2.8.17",
         "body-parser": "1.20.3",
         "cors": "2.8.5",
-        "discord.js": "14.16.3",
         "express": "4.21.1",
         "multer": "1.4.5-lts.1",
         "openai": "4.73.0",
-        "path-to-regexp": "^1.7.0"
+        "path-to-regexp": "^1.7.0",
+        "zod": "^3.24.2"
     },
     "devDependencies": {
         "@types/express": "4.17.21",

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -31,54 +31,26 @@
     "author": "",
     "license": "MIT",
     "devDependencies": {
-        "@eslint/js": "9.16.0",
-        "@rollup/plugin-commonjs": "25.0.8",
-        "@rollup/plugin-json": "6.1.0",
-        "@rollup/plugin-node-resolve": "15.3.0",
-        "@rollup/plugin-replace": "5.0.7",
-        "@rollup/plugin-terser": "0.1.0",
-        "@rollup/plugin-typescript": "11.1.6",
-        "@solana/web3.js": "npm:@solana/web3.js@1.95.8",
-        "@types/fluent-ffmpeg": "2.1.27",
-        "@types/jest": "29.5.14",
-        "@types/mocha": "10.0.10",
         "@types/node": "22.8.4",
-        "@types/pdfjs-dist": "2.10.378",
-        "@types/tar": "6.1.13",
-        "@types/wav-encoder": "1.3.3",
-        "@typescript-eslint/eslint-plugin": "8.16.0",
-        "@typescript-eslint/parser": "8.16.0",
-        "@vitest/coverage-v8": "2.1.5",
-        "jest": "29.7.0",
-        "lint-staged": "15.2.10",
-        "nodemon": "3.1.7",
-        "pm2": "5.4.3",
-        "rimraf": "6.0.1",
-        "rollup": "2.79.2",
-        "ts-jest": "29.2.5",
-        "ts-node": "10.9.2",
-        "tslib": "2.8.1",
         "tsup": "8.3.5",
         "typescript": "5.6.3"
     },
     "dependencies": {
+        "@ai-sdk/amazon-bedrock": "1.1.6",
         "@ai-sdk/anthropic": "1.1.6",
         "@ai-sdk/google": "1.1.0",
-        "@ai-sdk/google-vertex": "2.1.11",
         "@ai-sdk/groq": "1.1.7",
         "@ai-sdk/mistral": "1.1.6",
         "@ai-sdk/openai": "1.1.9",
-        "@ai-sdk/amazon-bedrock": "1.1.6",
+        "@electric-sql/pglite": "^0.2.17",
         "@fal-ai/client": "1.2.0",
-        "@tavily/core": "^0.0.2",
+        "@supabase/supabase-js": "^2.49.1",
         "@types/uuid": "10.0.0",
         "ai": "4.1.16",
-        "anthropic-vertex-ai": "1.0.2",
+        "better-sqlite3": "11.8.1",
         "bignumber.js": "9.1.2",
         "dotenv": "16.4.5",
         "fastembed": "1.14.1",
-        "fastestsmallesttextencoderdecoder": "1.0.22",
-        "gaxios": "6.7.1",
         "glob": "11.0.0",
         "handlebars": "^4.7.8",
         "js-sha1": "0.7.0",
@@ -87,10 +59,13 @@
         "openai": "4.82.0",
         "pino": "^9.6.0",
         "pino-pretty": "^13.0.0",
-        "tinyld": "1.3.4",
+        "sql.js": "^1.12.0",
         "together-ai": "0.7.0",
         "unique-names-generator": "4.7.1",
-        "uuid": "11.0.3"
+        "uuid": "11.0.3",
+        "viem": "2.21.58",
+        "vitest": "^3.0.5",
+        "zod": "^3.24.2"
     },
     "publishConfig": {
         "access": "public"