From e24ca375acb44835648c597280802416b1a0e09f Mon Sep 17 00:00:00 2001 From: Aleksandr Borovskii Date: Tue, 6 Oct 2026 00:35:57 +0200 Subject: [PATCH] fix(deps): bump @brightsec/node-libcurl to 5.1.6 @brightsec/node-libcurl 5.1.6 (NeuraLegion/node-libcurl#46) makes the Windows vcpkg source build resilient to GNU FTP outages: it routes vcpkg asset downloads through an x-script that falls back to a reachable GNU mirror (gsasl etc.), fixing the download timeouts that broke the Windows e2e install. Keeps bright-cli on the maintained node-libcurl release. The transitive build deps (tar / brace-expansion / picomatch) were already patched on next via the undici-override PR (#788); this bump moves the direct dependency itself and carries the install-resilience fix. Production webpack build and all 222 unit tests pass. --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 2246c8fe..bed7fcc5 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,7 +9,7 @@ "version": "13.14.0-next.6", "license": "MIT", "dependencies": { - "@brightsec/node-libcurl": "5.1.3", + "@brightsec/node-libcurl": "5.1.6", "@modelcontextprotocol/sdk": "1.17.5", "@neuralegion/os-service": "^2.0.6", "@neuralegion/raw-socket": "^2.0.2", @@ -681,9 +681,9 @@ "license": "MIT" }, "node_modules/@brightsec/node-libcurl": { - "version": "5.1.3", - "resolved": "https://registry.npmjs.org/@brightsec/node-libcurl/-/node-libcurl-5.1.3.tgz", - "integrity": "sha512-Bc9TTYuacymctNv8HmCWjdoWLiSSWw6EYjhfNEm+w9RWGs1ER49hmDpQEH8SS1ubH5MgeiSq8vpn+jXdNDfWCQ==", + "version": "5.1.6", + "resolved": "https://registry.npmjs.org/@brightsec/node-libcurl/-/node-libcurl-5.1.6.tgz", + "integrity": "sha512-ByDzbm27bqTtZB0v7TCFM1XzP/3bsRoWIpJ7sRdgRfPCbp+SHvnZPtSiJNf9PTsl3J3lFXtprhZXhR0U5xWREg==", "hasInstallScript": true, "license": "MIT", "dependencies": { @@ -18409,9 +18409,9 @@ "dev": true }, "@brightsec/node-libcurl": { - "version": "5.1.3", - "resolved": "https://registry.npmjs.org/@brightsec/node-libcurl/-/node-libcurl-5.1.3.tgz", - "integrity": "sha512-Bc9TTYuacymctNv8HmCWjdoWLiSSWw6EYjhfNEm+w9RWGs1ER49hmDpQEH8SS1ubH5MgeiSq8vpn+jXdNDfWCQ==", + "version": "5.1.6", + "resolved": "https://registry.npmjs.org/@brightsec/node-libcurl/-/node-libcurl-5.1.6.tgz", + "integrity": "sha512-ByDzbm27bqTtZB0v7TCFM1XzP/3bsRoWIpJ7sRdgRfPCbp+SHvnZPtSiJNf9PTsl3J3lFXtprhZXhR0U5xWREg==", "requires": { "@mapbox/node-pre-gyp": "2.0.3", "env-paths": "2.2.0", diff --git a/package.json b/package.json index 94a415a8..624e9128 100644 --- a/package.json +++ b/package.json @@ -25,7 +25,7 @@ "node": ">=24 <=26" }, "dependencies": { - "@brightsec/node-libcurl": "5.1.3", + "@brightsec/node-libcurl": "5.1.6", "@modelcontextprotocol/sdk": "1.17.5", "@neuralegion/os-service": "^2.0.6", "@neuralegion/raw-socket": "^2.0.2",