fix(deps): patch 9 Dependabot security alerts

DE
2d ago
+70-64

Issue for this PR

Part of #1442

Type of change

  • Bug fix
  • New feature
  • Refactor / code improvement
  • Documentation

What does this PR do?

Fixes 9 of the 10 open Dependabot security alerts. Each one gets the smallest patched minor or patch version. There are no major bumps of @ai-sdk/* or other provider SDKs.

AlertSeverityGHSAPackageManifestFrom → To
#10highGHSA-3ppc-4f35-3m26minimatchpackages/opencode/package.json10.0.3 → 10.2.5
#11highGHSA-23c5-xmqv-rm74minimatchpackages/opencode/package.json10.0.3 → 10.2.5
#12highGHSA-7r86-cg39-jmmjminimatchpackages/opencode/package.json10.0.3 → 10.2.5
#36highGHSA-7r86-cg39-jmmjminimatchpackage.json10.0.3 → 10.2.5
#38mediumGHSA-qqj6-54q6-cxv6snowflake-sdkpackages/drivers/package.json2.4.3 → 3.3.0 (^2.0.3 → ~3.3.0)
#29mediumGHSA-hcf7-66rw-9f5rturbopackage.json2.8.13 → 2.9.14
#28lowGHSA-3qcw-2rhx-2726turbopackage.json2.8.13 → 2.9.14
#37lowGHSA-866g-f22w-33x8@ai-sdk/provider-utilspackages/core/package.json4.0.23 → 4.0.33
#32lowGHSA-4x5r-pxfx-6jf8@babel/corepackages/opencode/package.json7.28.4 → 7.29.6

Notes on a few of these:

  • minimatch: this moves both direct pins to 10.2.5, the version packages/core and every transitive consumer already use. After the change bun.lock contains only one minimatch 10.x (10.2.5).
  • @babel/core: I also added a root overrides entry, "@babel/core": "7.29.6". Without it, @opentui/solid keeps its own exact pin of 7.28.0, which is also in the vulnerable range (<= 7.29.0).
  • @ai-sdk/provider-utils 4.0.33 pins @ai-sdk/provider to exactly 3.0.12. Leaving packages/core on @ai-sdk/provider 3.0.8 broke bun typecheck: two copies of APICallError collide in github-copilot/chat/openai-compatible-chat-language-model.ts. So packages/core's @ai-sdk/provider also moves 3.0.8 → 3.0.12 (patch only). Other @ai-sdk/* providers keep their own nested provider-utils copies (4.0.21 / 4.0.27). Dependabot doesn't flag those, and I didn't add an override for them.
  • snowflake-sdk 3.x: the only breaking change in 3.0.0 is dropping official Node 18 support. 3.2.0 removed Column.getRowValue()/getRowValueAsString(), which this repo doesn't use. I pinned ~3.3.0 instead of ^3.3.0 because 3.4.0 turns OCSP checking off by default. That change deserves its own decision.

Not fixed here, and still open in #1442:

  • #33 @hey-api/openapi-ts 0.90.10 → 0.97.3 (GHSA-hhx9-57xq-r5rw, a dev-only SDK codegen tool). The vulnerable buildClientParams template is copied into the generated packages/sdk/js/src/v2/gen/core/params.gen.ts, so the fix means regenerating the SDK. With 0.97.3, packages/sdk/js/script/build.ts fails on its post-codegen patchOnce for ServerSentEventsResult<TData, TError>, because upstream changed that typing. The @hey-api/sdk instance option is also deprecated in favour of operations: {...}. The regenerated src/v2/gen differs by about 18k lines. That should be its own PR that updates build.ts, regenerates the SDK, and reviews the SDK surface.

This supersedes Dependabot PRs #1185 (minimatch), #1104 (turbo) and #1277 (@ai-sdk/provider-utils).

How did you verify your code works?

Linux x64, bun 1.3.14:

  • bun install: bun.lock regenerated and consistent; bun install --frozen-lockfile reports no changes.
  • bun typecheck (turbo typecheck --concurrency=1): all 13 packages pass.
  • packages/core bun test: 1060 pass / 43 fail. Base main on the same machine: 1058 pass / 45 fail. The failures come from the environment: no node binary on PATH (cross-spawn tests), git/project fixtures, and sandboxed network. The one failure that appeared only on this branch (Npm.add > reifies when package cache directory exists…) passes when re-run on its own.
  • packages/drivers bun test: 363 pass / 0 fail. This includes the Snowflake driver tests.
  • packages/opencode bun test, run per test/ directory: 17010 pass / 38 fail. The same 38 failures appear on main (identical set; environment-related: install/project/tool/format/cli).
  • Release binary: bun run script/build.ts --single built altimate-code-linux-x64.
    • altimate-code --version → 0.0.0-devin/1791820395-dependabot-security-…
    • altimate-code run "Reply with the single word: pong" starts a session and resolves the agent (builder) and model, then fails at the outbound LLM request with a certificate error. The cause is the sandbox's network allowlist, not this change.
    • altimate-code check q.sql → PASS (2 warnings); altimate-code debug skill lists the built-in skills.
  • The checks the pre-push hook would run (bun typecheck and script/check-tracker-leaks.ts) pass.

Screenshots / recordings

N/A, dependency-only change.

Checklist

  • I have tested my changes locally
  • I have not included unrelated changes in this PR

Summary by cubic

Fixes 9 of 10 open Dependabot security alerts by bumping dependencies to their smallest patched versions. Leaves the @hey-api/openapi-ts alert open because fixing it requires regenerating the SDK and updating build.ts.

  • minimatch moves to 10.2.5 in both direct pins, deduplicating the lockfile to a single 10.x version.
  • @babel/core bumps to 7.29.6 with a root overrides entry so @opentui/solid's exact pin is forced to the patched version.
  • @ai-sdk/provider-utils bumps to 4.0.33 along with @ai-sdk/provider to 3.0.12 to avoid a typecheck collision from two APICallError copies.
  • turbo bumps to 2.9.14.
  • snowflake-sdk bumps from ^2.0.3 to ~3.3.0; 3.x drops Node 18 support and 3.2.0 removed Column.getRowValue()/getRowValueAsString(), which aren't used. The ~ pin avoids 3.4.0, which turns OCSP checking off by default.