Files
probo/package.json
Sacha Al Himdani 8ce429507b Bump langsmith to 0.5.20 and override @langchain/classic to fix CVE
langsmith <=0.5.18 leaks streamed LLM output past redaction controls
(GHSA-rr7j-v2q5-chgv). The transitive pin via @n8n/ai-utilities held
@langchain/classic at 1.0.5 which required langsmith ^0.3.64, blocking
the upgrade. Add npm overrides for @langchain/classic (^1.0.27) and
langsmith (^0.5.19) to resolve all three langsmith advisories.

The lockfile refresh bumps eslint-plugin-react-hooks from 7.0.1 to
7.1.0 which enables the react-hooks/refs and set-state-in-effect
rules. Fix the resulting lint errors:

- PDFPreview (console + trust): read currentPage through a ref synced
  via useEffect, keeping the setState updater pure and ref access
  outside of render
- MeasuresPage: remove redundant categoryFilter state that mirrored
  urlCategory, use a ref to detect URL changes and trigger refetch
  as the single source of category refetches
- WebhooksSettingsPage: defer loadEvents via requestAnimationFrame
  to avoid synchronous setState within the effect body

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-21 11:16:53 +02:00

51 lines
1.2 KiB
JSON

{
"name": "probo",
"description": "Probo monorepo containing applications and shared packages",
"engines": {
"node": "v24.11.1",
"npm": "11.8.0"
},
"workspaces": [
"apps/*",
"packages/*"
],
"scripts": {
"build": "turbo run build",
"dev": "turbo run dev",
"lint": "turbo run lint",
"check": "turbo run check",
"relay-clean": "find apps -type d -name __generated__ -exec rm -rf {} +",
"relay-compile": "npx relay-compiler",
"relay": "npm run relay-clean && npm run relay-compile"
},
"devDependencies": {
"relay-compiler": "^20.1.1",
"turbo": "^2.5.3"
},
"graphql": {
"schema": "./pkg/server/api/console/v1/graphql/"
},
"overrides": {
"brace-expansion": "^5.0.5",
"minimatch@3": {
"brace-expansion": "^1.1.11"
},
"minimatch@9": "^9.0.9",
"@langchain/classic": "^1.0.27",
"langsmith": "^0.5.19",
"handlebars": "4.7.9",
"@langchain/community": "^1.1.25",
"lodash": "^4.18.1",
"lodash-es": "^4.18.1",
"axios": "^1.15.0"
},
"license": "MIT",
"packageManager": "npm@11.8.0",
"volta": {
"node": "24.4.0"
},
"dependencies": {
"react-dom": "^19.2.1"
}
}