mirror of
https://github.com/getpaseo/paseo.git
synced 2026-10-22 17:22:47 +00:00
LiuJingandMohamed Boudra
56fd50988c
* fix(plugin): loosen the react peer to ~19.1.0 The plugin SDK pins its react peer to exactly 19.1.0, and that pin is what a downstream `npm i -g @getpaseo/cli` resolves against. So every user ends up with react 19.1.0 in their global node_modules, where corporate dependency scanners flag it: the CVE-2025-55182 advisory range covers 19.1.0 even though the vulnerability itself lives in react-server-dom-webpack/-parcel/-turbopack, none of which the CLI installs. The user is then left hand-patching node_modules or uninstalling Paseo. Widening the peer to ~19.1.0 lets a downstream install pick the latest 19.1.x patch (19.1.9 today) while this repo stays on 19.1.0, which the root override still pins. Keeping the repo itself on 19.1.0 is deliberate. react-native 0.81.5 embeds a 19.1.0 Paper renderer that hard-throws "Incompatible React versions" on any exact mismatch, and it is reachable from Fabric builds too: RendererImplementation.js requires the Paper shim unconditionally in findNodeHandle, unstable_batchedUpdates, sendAccessibilityEvent and three other entry points, and react-native-gesture-handler re-exports findNodeHandle. Bumping the app's react is therefore not safe until react-native moves. The published CLI tree contains no react-native, so downstream installs are not subject to that constraint. Supersedes the earlier 19.1.5/19.1.9 version-bump approach on this branch, which would have broken the mobile app. * Update Nix dependency hash for plugin peer metadata --------- Co-authored-by: Mohamed Boudra <boudra.moha@gmail.com>
86 lines
2.1 KiB
JSON
86 lines
2.1 KiB
JSON
{
|
|
"name": "@getpaseo/plugin",
|
|
"version": "0.7.2",
|
|
"description": "Paseo plugin SDK package",
|
|
"files": [
|
|
"dist",
|
|
"!dist/**/*.map"
|
|
],
|
|
"type": "module",
|
|
"exports": {
|
|
".": {
|
|
"types": "./dist/index.d.ts",
|
|
"source": "./src/index.ts",
|
|
"default": "./dist/index.js"
|
|
},
|
|
"./server": {
|
|
"types": "./dist/server.d.ts",
|
|
"source": "./src/server.ts",
|
|
"default": "./dist/server.js"
|
|
},
|
|
"./provider": {
|
|
"types": "./dist/provider.d.ts",
|
|
"source": "./src/provider.ts",
|
|
"default": "./dist/provider.js"
|
|
},
|
|
"./acp": {
|
|
"types": "./dist/acp.d.ts",
|
|
"source": "./src/acp.ts",
|
|
"default": "./dist/acp.js"
|
|
},
|
|
"./react-native": {
|
|
"types": "./dist/react-native.d.ts",
|
|
"source": "./src/react-native.ts",
|
|
"default": "./dist/react-native.js"
|
|
},
|
|
"./host": {
|
|
"types": "./dist/host.d.ts",
|
|
"source": "./src/host.ts",
|
|
"default": "./dist/host.js"
|
|
},
|
|
"./ui": {
|
|
"types": "./dist/ui.d.ts",
|
|
"source": "./src/ui.ts",
|
|
"default": "./dist/ui.js"
|
|
}
|
|
},
|
|
"publishConfig": {
|
|
"access": "public"
|
|
},
|
|
"scripts": {
|
|
"clean": "node ../../scripts/clean-package-dist.mjs",
|
|
"build": "tsc -p tsconfig.json --incremental false",
|
|
"build:clean": "npm run clean && npm run build",
|
|
"prepack": "npm run build:clean",
|
|
"typecheck": "tsgo --noEmit && tsgo -p tsconfig.examples.json --noEmit",
|
|
"test": "vitest run"
|
|
},
|
|
"dependencies": {
|
|
"@agentclientprotocol/sdk": "^1.4.0",
|
|
"use-sync-external-store": "^1.6.0"
|
|
},
|
|
"devDependencies": {
|
|
"@getpaseo/client": "0.7.2",
|
|
"@getpaseo/protocol": "0.7.2",
|
|
"@types/node": "^20.9.0",
|
|
"@types/react": "~19.2.0",
|
|
"react": "19.1.0",
|
|
"react-native": "0.81.5",
|
|
"typescript": "^5.9.3",
|
|
"vitest": "^4.1.6",
|
|
"zod": "^4.4.3"
|
|
},
|
|
"peerDependencies": {
|
|
"@getpaseo/client": "0.7.2",
|
|
"@getpaseo/protocol": "0.7.2",
|
|
"react": "~19.1.0",
|
|
"react-native": ">=0.81.5",
|
|
"zod": "^4.4.3"
|
|
},
|
|
"peerDependenciesMeta": {
|
|
"react-native": {
|
|
"optional": true
|
|
}
|
|
}
|
|
}
|