fix: mirror qrcode runtime dependency

steipete · steipete · commit f3efcb4fd304 · 2026-05-01T12:12:01.000+01:00
diff --git a/extensions/whatsapp/package.json b/extensions/whatsapp/package.json
@@ -7,7 +7,6 @@
     "@whiskeysockets/baileys": "7.0.0-rc.9",
     "https-proxy-agent": "^9.0.0",
     "jimp": "^1.6.1",
-    "qrcode": "1.5.4",
     "typebox": "1.1.34",
     "undici": "8.1.0"
   },
diff --git a/package.json b/package.json
@@ -1766,6 +1766,7 @@
         "jszip",
         "markdown-it",
         "openai",
+        "qrcode",
         "semver",
         "sqlite-vec",
         "tar",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/src/plugins/bundled-runtime-deps-drift.test.ts b/src/plugins/bundled-runtime-deps-drift.test.ts
@@ -13,7 +13,6 @@ describe("mirrored root runtime dependency drift guard", () => {
     "file-type", // available transitively via mirrored deps
     "ipaddr.js", // available transitively via mirrored deps
     "proxy-agent", // available transitively via mirrored deps
-    "qrcode", // QR setup flows stage this through the owning channel plugin, not the root mirror
     "typescript", // CLI/dev only (api-baseline, jiti-runtime-api)
   ]);
 
