fix(deps): update default npm tools by renovate[bot] · Pull Request #129 · donadiosolutions/gpubox

renovate · 2026-06-26T02:49:50Z

This PR contains the following updates:

Package	Change	Age	Confidence
@donadiosolutions/lcm	`1.2.1` → `1.4.1`
@openai/codex (source)	`0.142.0` → `0.145.0`
firecrawl-cli (source)	`1.19.18` → `1.19.27`
socket	`1.1.127` → `1.1.143`

Release Notes

donadiosolutions/lcm (@donadiosolutions/lcm)

`v1.4.1`

Compare Source

Patch Changes

6fedb37: Preserve passive-learning sidecars with missing timestamps, make promoted-memory search-index updates atomic, safely retain legacy message search indexes during migration, and ignore punctuation-only fallback searches.
12c242e: Make custom-server setup retry empty required values before safely falling back
to the native provider, and make installer health polling reject invalid
timeouts while using a bounded monotonic deadline.
5cb31b9: Keep lcm doctor responsive when the MCP helper exits early or its input pipe closes.
0f9b8ee: Allow configured and one-invocation request timeouts to govern Claude and Codex process-provider compaction instead of stopping every subprocess after a hidden 120-second limit.
b1eaa7c: Protect local memory files with private permissions, safe atomic metadata writes, contained instruction reads, private hashed restore locks, stable project aliases, and a transcript allowlist that cannot be widened by using the filesystem root.
31ab876: Harden local hooks, diagnostics, connector file updates, installer parsing, and test-home isolation against unsafe path aliasing, terminal controls, unbounded sidecar reports, filesystem races, and Windows profile writes.
cee718b: Keep flat Claude transcripts whose path only resembles a legacy nested-session path, preventing intermittent omissions during historical session import.
9fa4f34: Prevent nested daemon, config, map, and connector help flags from executing command actions, await unknown-command output before the CLI settles, and honor the Ninja renderer's one-shot onReady callback.
67112db: Verify daemon PID, version, and listener ownership before sending credentials or request data, and keep PostToolUse payloads from selecting notification ports.
eb7dfd4: Scrub every persistent memory path, fence restored model content, isolate replay and ingestion state, and serialize same-project database writes.
fb72194: Ship reproducible plugin entrypoint bundles, verify pinned Gitleaks update inputs, and prevent managed daemons from inheriting an untrusted shell path.
3afd311: Redact complete tokens for zero-width sensitive patterns and show unknown instead of an empty category in sensitive-data warnings.
d8274d0: Prevent lcm compact --all from repeatedly selecting fresh-tail-only conversations, limit automatic promotion to projects compacted by the current run, and return exit status 1 when that automatic promotion fails.
ba3e98b: Honor legacy compaction candidate limits across stored and runtime configuration, and let lcm doctor repair Claude settings files whose JSON root is not an object.
8d27ff7: Require Node.js 22.12.0 or newer for Commander 15 compatibility and align the
development Node.js types with the supported Node 22 runtime.
df87d63: Allow managed Linux daemons to launch process-provider CLIs installed alongside LCM without inheriting an untrusted shell path, and align doctor checks with the managed daemon environment.

`v1.4.0`

Compare Source

Minor Changes

aff66cc: Add configurable OpenAI-compatible timeouts and retries, safe configuration get/set and daemon restart commands, model environment overrides, and accurate batch compaction token totals.
a589e11: Add strict LLM configuration validation, provider aliases, and opt-in OpenAI Responses API reasoning effort for compaction.
3495cc7: Add provider-native reasoning effort and compaction-scoped fast-mode controls for Claude and Codex process summarizers.

Patch Changes

d77ed1a: Refresh the supported YAML, SDK, lint, type, and test dependencies while retaining Commander 14 compatibility with Node.js 22. Update prompt template loading for js-yaml v5's named exports.
d063722: Prevent user-configured OpenAI retry delays from reaching timer durations directly while preserving the configured aggregate backoff.

`v1.3.0`

Compare Source

Minor Changes

cb5228d: Install a Codex PreCompact hook that snapshots transcript deltas before manual or automatic compaction.
4f183a6: Start background daemons through the user systemd manager on Linux and have doctor repair daemons running under the wrong parent process.

openai/codex (@openai/codex)

`v0.143.0`

`v0.142.5`

`v0.142.4`

`v0.142.3`

`v0.142.2`

`v0.142.1`

firecrawl/cli (firecrawl-cli)

`v1.19.27`: Firecrawl CLI v1.19.27

Compare Source

Merge pull request #162 from firecrawl/mogery/search-highlights-parameter
feat(cli): add search highlights option

`v1.19.26`: Firecrawl CLI v1.19.26

Compare Source

revert: remove managed MCP router cards (#153)

`v1.19.25`: Firecrawl CLI v1.19.25

Compare Source

feat: deliver managed MCP router cards (#152)
Merge pull request #151 from firecrawl/dd/feedback
Update init.ts
Scope setup/install to a single harness

`v1.19.24`: Firecrawl CLI v1.19.24

Compare Source

fix(research): send integration=cli on research endpoints

`v1.19.23`: Firecrawl CLI v1.19.23

Compare Source

Merge pull request #148 from firecrawl/search-mon-updates
Support conditional implicit stdin for monitor command

`v1.19.22`: Firecrawl CLI v1.19.22

Compare Source

Merge pull request #146 from firecrawl/search-monitor-updates
Update package.json
Update SKILL.md

`v1.19.21`: Firecrawl CLI v1.19.21

Compare Source

Merge pull request #145 from firecrawl/jonathan/monitor-cli-ux
Clarify monitor target modes + link to dashboard on create

`v1.19.20`: Firecrawl CLI v1.19.20

Compare Source

Merge pull request #142 from firecrawl/search-monitor
Merge remote-tracking branch 'origin/main' into search-monitor
Update package.json
Update SKILL.md
Use 'web monitors' in error and test
feat(monitor): add search-target support to monitor create

`v1.19.19`: Firecrawl CLI v1.19.19

Compare Source

Merge pull request #143 from firecrawl/mogery/fix-crawl-wait-poll-interval
fix(crawl): keep wait polling in seconds
Merge pull request #141 from firecrawl/docs/skill-keyless-fallback
docs(skill): note keyless free tier fallback in CLI skill

SocketDev/socket-cli (socket)

Configuration

📅 Schedule: (in timezone Etc/UTC)

Branch creation
- Between 12:00 AM and 02:59 AM (* 0-2 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-06-26T02:50:13Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
npm/@openai/codex@0.142.0-win32-x64 ⏵ 0.145.0	⁺²¹	⁺¹⁶	⁺¹
npm/firecrawl-cli@1.19.18 ⏵ 1.19.27	⁺¹
npm/@donadiosolutions/lcm@1.2.1 ⏵ 1.4.1	⁺¹		⁺¹
npm/socket@1.1.127 ⏵ 1.1.143	⁺¹		^-1

View full report

renovate Bot added the dependencies label Jun 26, 2026

renovate Bot force-pushed the renovate/default-npm-tools branch 11 times, most recently from 018664f to 4c498d5 Compare July 3, 2026 14:58

renovate Bot force-pushed the renovate/default-npm-tools branch 7 times, most recently from c98838c to eef1970 Compare July 10, 2026 15:56

renovate Bot force-pushed the renovate/default-npm-tools branch 6 times, most recently from ce2230d to 3a1c622 Compare July 17, 2026 08:33

renovate Bot force-pushed the renovate/default-npm-tools branch 4 times, most recently from 7febc95 to 35b6f5d Compare July 21, 2026 03:49

fix(deps): update default npm tools

c36909e

renovate Bot force-pushed the renovate/default-npm-tools branch from 35b6f5d to c36909e Compare July 21, 2026 22:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update default npm tools#129

fix(deps): update default npm tools#129
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/default-npm-tools

renovate Bot commented Jun 26, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 26, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

v1.19.27: Firecrawl CLI v1.19.27

v1.19.26: Firecrawl CLI v1.19.26

v1.19.25: Firecrawl CLI v1.19.25

v1.19.24: Firecrawl CLI v1.19.24

v1.19.23: Firecrawl CLI v1.19.23

v1.19.22: Firecrawl CLI v1.19.22

v1.19.21: Firecrawl CLI v1.19.21

v1.19.20: Firecrawl CLI v1.19.20

v1.19.19: Firecrawl CLI v1.19.19

Configuration

Uh oh!

socket-security Bot commented Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jun 26, 2026 •

edited

Loading

`v1.19.27`: Firecrawl CLI v1.19.27

`v1.19.26`: Firecrawl CLI v1.19.26

`v1.19.25`: Firecrawl CLI v1.19.25

`v1.19.24`: Firecrawl CLI v1.19.24

`v1.19.23`: Firecrawl CLI v1.19.23

`v1.19.22`: Firecrawl CLI v1.19.22

`v1.19.21`: Firecrawl CLI v1.19.21

`v1.19.20`: Firecrawl CLI v1.19.20

`v1.19.19`: Firecrawl CLI v1.19.19

socket-security Bot commented Jun 26, 2026 •

edited

Loading