security: vulnerability remediation

fix-result.json

@@ -0,0 +1,14 @@
+{
+  "fixed": [
+    {
+      "cve": "N/A",
+      "package": "protobufjs",
+      "ecosystem": "npm",
+      "old_version": "7.5.4",
+      "new_version": "7.6.1",
+      "manifest": "package-lock.json"
+    }
+  ],
+  "reverted": [],
+  "summary": "1 fixed, 0 reverted"
+}

src/internal/detect-platform.ts

@@ -67,7 +67,7 @@
       'X-Stainless-Arch': normalizeArch(Deno.build.arch),
       'X-Stainless-Runtime': 'deno',
       'X-Stainless-Runtime-Version':
-        typeof Deno.version === 'string' ? Deno.version : Deno.version?.deno ?? 'unknown',
+        typeof Deno.version === 'string' ? Deno.version : (Deno.version?.deno ?? 'unknown'),
     };
   }
   if (typeof EdgeRuntime !== 'undefined') {

tests/index.test.ts

@@ -552,8 +552,8 @@
       { signal }: RequestInit = {},
     ): Promise<Response> => {
       if (count++ === 0) {
-        return new Promise(
-          (resolve, reject) => signal?.addEventListener('abort', () => reject(new Error('timed out'))),
+        return new Promise((resolve, reject) =>
+          signal?.addEventListener('abort', () => reject(new Error('timed out'))),
         );
       }
       return new Response(JSON.stringify({ a: 1 }), { headers: { 'Content-Type': 'application/json' } });

tests/uploads.test.ts

@@ -69,7 +69,7 @@
     const result = await toFile(input);
     const file: File = result;
     const blob: Blob = result;
-    void file, blob;
+    (void file, blob);
   });
 });
 

triage-result.json

@@ -0,0 +1,27 @@
+{
+  "alerts": [
+    {
+      "category": "fix",
+      "type": "criticalCVE",
+      "severity": "warn",
+      "package": "protobufjs",
+      "version": "7.5.4",
+      "ecosystem": "npm",
+      "cve": null,
+      "manifest": "package-lock.json",
+      "reason": "CVE alert in runtime dependency chain (via dockerode); newer 7.x versions exist, so remediation is likely available without a major bump"
+    },
+    {
+      "category": "dismiss",
+      "type": "criticalCVE",
+      "severity": "warn",
+      "package": "handlebars",
+      "version": "4.7.8",
+      "ecosystem": "npm",
+      "cve": null,
+      "manifest": "pnpm-lock.yaml",
+      "reason": "Development-only dependency through ts-jest (dev dependency), not part of production runtime"
+    }
+  ],
+  "summary": "2 alerts triaged: 1 fix, 0 defer, 1 dismiss"
+}