Skip to content

v0.7.0 — Wave 2 major dep upgrades

Choose a tag to compare

View all tags
@pbmagnet4 pbmagnet4 released this 10 Jun 02:43
· 52 commits to main since this release
v0.7.0
5e82a49
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's new

Upgrades all major dependencies deferred from 0.6.0. No new features — pure dependency hygiene.

Upgraded

  • React 18 → 19 + react-dom 18 → 19
  • Vite 5 → 8 + @vitejs/plugin-react 4 → 6
  • Vitest 2 → 4
  • TypeScript 5 → 6
  • Commander 12 → 15
  • Zod 3 → 4
  • better-sqlite3 11 → 12
  • pgvector 0.2 → 0.3

Breaking: Node ≥22 required

Commander 15 and pgvector 0.3 both require Node ≥22. Node 20 reached EOL on 2026-04-30. If you're still on Node 20, stay on v0.6.x until you can upgrade.

Security

Clears all 5 vulnerabilities from v0.6.0 (1 critical + 4 moderate — esbuild dev-only vuln via the vite/vitest dep chain).

Also included

Rebuilt codex-plugin artifacts (nlm/index.js, plugin/scripts/*.mjs) from the already-committed hook TypeScript source. These were stale since the facts-in-recall feature landed in src/hook/ before 0.6.0 but artifacts were not rebuilt at release time.

Assets 2
Loading