Skip to content

chore(deps): upgrade cheerio, chonkie, sqlite-vec and the S3 client - #134

Merged
djannot merged 1 commit into
mainfrom
claude/routine-dep-upgrades
Nov 2, 2026
Merged

djannot merged 1 commit into
mainfrom
claude/routine-dep-upgrades

Conversation

@djannot

@djannot djannot commented Nov 2, 2026

Copy link
Copy Markdown
Collaborator

Description

Routine upgrades from the open Snyk PRs, reapplied with DCO-signed commits. It replaces #112, #114, #115 and #116.

Package From → to Snyk PR
cheerio ^1.0.0-rc.12 → ^1.2.0 #116 (conflicting)
@chonkiejs/core ^0.0.7 → ^0.0.12 #115
@aws-sdk/client-s3 ^3.1004.0 → ^3.1161.0 #112
sqlite-vec 0.1.7-alpha.2 → 0.1.9 (root and mcp/) #114 (root only)

sqlite-vec is bumped in mcp/ as well, so databases are written and read by the same extension version. 0.1.9 reads the existing 0.1.7-built databases. I checked this by running a KNN query with 0.1.9 against istio.db from the S3 bucket the MCP image downloads from.

web-tree-sitter (#113) is not included. 0.26+ renames its runtime WASM, which code-chunker.ts loads by name, and 60 tests fail. It needs a code change.

No version bump here; that lands in the batch's release PR.

Testing

  1. npm run build passes in the root and in mcp/, and npm audit reports 0 in both.
  2. npx vitest run against qdrant/qdrant 1.20 and postgres:17-alpine containers: 18 files pass, 788 tests pass, 0 skipped.

🤖 Generated with Claude Code

Replaces the Snyk upgrade PRs #112, #114, #115 and #116, which fail
the DCO check.

- cheerio ^1.0.0-rc.12 -> ^1.2.0
- @chonkiejs/core ^0.0.7 -> ^0.0.12
- @aws-sdk/client-s3 ^3.1004.0 -> ^3.1161.0
- sqlite-vec 0.1.7-alpha.2 -> 0.1.9, in both the root and mcp/ so the
  indexer and the MCP server stay on the same version. 0.1.9 reads the
  existing 0.1.7 databases (checked with a KNN query on istio.db).

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Signed-off-by: Denis Jannot <[email protected]>
@djannot
djannot merged commit 376cb6a into main Nov 2, 2026
3 checks passed
djannot added a commit that referenced this pull request Nov 2, 2026
- #94 mcp: run image as numeric non-root user 14000
- #134 chore(deps): upgrade cheerio, chonkie, sqlite-vec and the S3 client

Signed-off-by: Denis Jannot <[email protected]>
Co-authored-by: Claude Opus 5.5 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant