Skip to content

chore(deps): cli-core 0.584.0, cli-base 0.77.1 and workflows v0.77.1 - #103

Merged
leemour merged 3 commits into
mainfrom
chore/core-bump
Nov 6, 2026
Merged

leemour merged 3 commits into
mainfrom
chore/core-bump

Conversation

@leemour

@leemour leemour commented Nov 6, 2026

Copy link
Copy Markdown
Member

Task

Move the skeleton to the newest shared libraries that resolve together, so a CLI made with new starts current.

Why

The template still pinned cli-core 0.495.0 and cli-base 0.65.0, and its reusable cli-base workflows were at v0.61.2.
cli-core 0.584.0 (the newest) declares the peer @wirecat/cli-base >=0.76.0 <0.78.0, so cli-base 0.78.0 is out of
range and pnpm peers check in CI would fail; 0.77.1 is the newest inside it.

What

  • @wirecat/cli-core 0.495.0 → 0.584.0, @wirecat/cli-base 0.65.0 → 0.77.1. cli-testing stays at 0.5.3.
  • The four reusable-workflow pins (ci.yml, release.yml, monthly.yml, changelog-guard.yml) move to cli-base
    v0.77.1 by commit (WC-CI-8). node-ci.yml, release-checks.yml and changelog-guard.yml are byte-identical
    between v0.61.2 and v0.77.1.
  • contracts/mcp-tools.json regenerated and formatted: error code conflict, page.total, meta.now.
  • docs/commands.md regenerated: --compact, config migrate, config repair; the messenger-only --bot,
    --personal, speech_model and picture_search are gone.
  • Tests for config migrate, config repair, config repair --dry-run and --compact, so the test matrix has no
    gaps (WC-TEST-12).
  • new writes a neutral description into the new CLI's package.json instead of the template's own.
  • CHANGELOG under Unreleased.

Supersedes the Dependabot PRs #102, #94, #95 and #96.

Testing

Locally: lint, typecheck, ci:quick, test (with coverage), contracts:check, test:matrix:check,
docs:check, generate:check, standards:check, security:no-leak, package:check, pnpm peers check.
Not run locally: audit:commands (CI runs scripts/audit.sh).

🤖 Generated with Claude Code

leemour and others added 2 commits November 6, 2026 02:03
Pin @wirecat/cli-core 0.584.0 and @wirecat/cli-base 0.77.1. cli-core 0.584's peer
range takes cli-base >=0.76.0 <0.78.0, so 0.78.0 is out; pnpm peers check passes.
The reusable cli-base workflows move from v0.61.2 to v0.77.1 by commit (WC-CI-8);
the three workflow files are identical between the two tags.

- contracts/mcp-tools.json regenerated: error code conflict, page.total, meta.now.
- docs/commands.md regenerated: --compact, config migrate, config repair; the
  messenger-only --bot, --personal, speech_model and picture_search are gone.
- Tests for config migrate, config repair (--dry-run) and runs list --compact, so the
  test matrix is complete again (WC-TEST-12).
- new writes a neutral description into the new CLI's package.json instead of the
  template's own, and the first task in DESIGN.md names it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…itself

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@socket-security

socket-security Bot commented Nov 6, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​wirecat/​cli-base@​0.65.0 ⏵ 0.77.198 +1100100 +196 +170
Updated@​wirecat/​cli-core@​0.495.0 ⏵ 0.584.075 -22100100 +19670 -20

View full report

…s differences

cli-core 0.565 gives --bot and --personal on config show/set/unset only to a
messenger CLI. The template's template-config parity group compares clidev with
tg, max and wa, so the audit reported five new same-path-contract findings. Each is
declared in the group's differences with absent clidev and its reason, as
docs/standards/new-cli.md asks for a CLI that must differ for good.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant