From 712e343e1f17f233f509ce0e73aedbe170cf0f0d Mon Sep 17 00:00:00 2001
From: "claude[bot]" <claude[bot]@users.noreply.github.com>
Date: Tue, 21 Apr 2026 00:36:54 +0000
Subject: [PATCH] fix(security): pin packages/cli runtime dependencies to exact
 versions

Co-Authored-By: Claude Code <noreply@anthropic.com>
---
 packages/cli/package.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/packages/cli/package.json b/packages/cli/package.json
index e069069..7ff6984 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -30,16 +30,16 @@
     "@ai-devkit/agent-manager": "0.7.0",
     "@ai-devkit/channel-connector": "0.2.0",
     "@ai-devkit/memory": "0.9.0",
-    "chalk": "^4.1.2",
-    "commander": "^11.1.0",
-    "debug": "^4.4.3",
-    "fs-extra": "^11.2.0",
-    "gray-matter": "^4.0.3",
-    "inquirer": "^8.2.6",
-    "ora": "^5.4.1",
-    "smol-toml": "^1.6.1",
-    "yaml": "^2.3.4",
-    "zod": "^3.25.76"
+    "chalk": "4.1.2",
+    "commander": "11.1.0",
+    "debug": "4.4.3",
+    "fs-extra": "11.3.2",
+    "gray-matter": "4.0.3",
+    "inquirer": "8.2.7",
+    "ora": "5.4.1",
+    "smol-toml": "1.6.1",
+    "yaml": "2.8.3",
+    "zod": "3.25.76"
   },
   "devDependencies": {
     "@types/debug": "^4.1.13",