mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-09-22 06:42:19 +03:00
443d66996d
* deps/main: restore npm 11 lockfile compatibility
Remove obsolete brace-expansion overrides already dropped on the release branch so npm 11 can resolve the locked dependency tree on main. Preserve the scoped libxmljs2 and rimraf constraints and refresh only the affected transitive packages.
Signed-off-by: Minxi Hou <houminxi@gmail.com>
* deps/security: keep main installs within vulnerability limits
Update affected direct and transitive dependencies without relaxing audit thresholds. Keep Next and its ESLint configuration aligned and regenerate the lockfile with npm 11.
Signed-off-by: Minxi Hou <houminxi@gmail.com>
* tests/embeddings: isolate the optional runtime in UI tests
Vite resolves the lazy Transformers import before the runtime fallback can catch an absent optional package. Alias it to an explicitly unavailable backend for UI unit tests and cover both the failure path and injected embeddings without downloading models.
Signed-off-by: Minxi Hou <houminxi@gmail.com>
* memory/embed: do not let Next resolve optional transformers
A literal import("@huggingface/transformers") is still traced at compile
time. Integration /health then 500s when the optional package is absent,
and the combo fingerprint cases time out behind it. Assemble the specifier
at runtime and mark webpackIgnore, same pattern as sql.js.
Signed-off-by: Minxi Hou <houminxi@gmail.com>
* electron/security: clear the desktop lockfile advisories
The desktop lockfile carried three high-severity advisories that the main
tree's sweep never reached, because it has its own package.json and its own
audit step. Move the three override floors up to the fixed releases and
regenerate the lockfile.
xmldom gains the requireWellFormed bypass fixes and the quadratic parse and
dedup fixes; fast-uri gains the host-confusion and IPv6 normalization fixes;
js-yaml gains the merge-key CPU fix. Their consumers here are the packaging
path only: plist for Info.plist, ajv for schema validation, and the update
manifest reader.
Signed-off-by: Minxi Hou <houminxi@gmail.com>
* sse/timing: stop asserting wall-clock setTimeout against Date.now
CI Unit Tests (3/8) failed once npm ci started succeeding: setTimeout(15)
can fire before Date.now() has moved 15ms. Tests now drive createStreamTiming
with an injected clock; production still uses Date.now. The rewritten test
no longer trips unused-vars, so drop that file's leftover eslint suppression.
Signed-off-by: Minxi Hou <houminxi@gmail.com>
* ci: retrigger Build after the runner shutdown
Head 482228ce47 compiled (`Next.js 16.3.3`, 4.4 min) and then the
hosted runner received a shutdown signal while collecting page data.
Every other required check on that SHA is green. Empty commit so the
suite runs again; no product change.
Signed-off-by: Minxi Hou <houminxi@gmail.com>
---------
Signed-off-by: Minxi Hou <houminxi@gmail.com>