2.0.0: breaking security bump — Node >=20, thrift 0.23, uuid 11, lz4→lz4-napi (0 OSV findings)#390

Merged

vikrantpuppala merged 16 commits into

mainfrom

vp/security-bump-runtime-and-dev

Jul 14, 2026

Commits on Jul 14, 2026

fix(deps): trim redundant overrides to minimal 3; fail-fast:false for diagnosis
vikrantpuppala
committed
Revert override trim — restore 7-override set consistent with the lockfile
vikrantpuppala
committed
lz4: replace unmaintained `lz4` with maintained `lz4-napi` (frame-compatible)
vikrantpuppala
committed
ci: complete lz4-napi lockfile, restore npm ci, fix prettier
vikrantpuppala
committed
review: address code-review findings on the lz4-napi swap
vikrantpuppala
committed
review: gate real-codec lz4 tests on availability, not the environment
vikrantpuppala
committed
Merge branch 'main' into vp/security-bump-runtime-and-dev
vikrantpuppala
committed