chore(deps): bump the inkeep-agents group across 1 directory with 5 updates by dependabot[bot] · Pull Request #3488 · inkeep/agents

dependabot · 2026-07-24T18:48:48Z

Bumps the inkeep-agents group with 4 updates in the /create-agents-template directory: @inkeep/agents-core, @inkeep/agents-manage-ui, @inkeep/agents-sdk and @inkeep/agents-cli.

Updates @inkeep/agents-core from 0.59.4 to 0.80.5

Release notes

Sourced from @inkeep/agents-core's releases.

2026-04-15

Changelog

@inkeep/agents-api@0.68.4

Patch Changes

Updated dependencies [7438f76]

@inkeep/agents-work-apps@0.68.4

@inkeep/agents-core@0.68.4

@inkeep/agents-email@0.68.4

@inkeep/agents-mcp@0.68.4

@inkeep/agents-cli@0.68.4

Patch Changes

@inkeep/agents-manage-ui@0.68.4

@inkeep/agents-core@0.68.4

@inkeep/agents-sdk@0.68.4

@inkeep/agents-manage-ui@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

@inkeep/agents-sdk@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

@inkeep/agents-work-apps@0.68.4

Patch Changes

7438f76: add thread to resume link message context

@inkeep/agents-core@0.68.4

@inkeep/ai-sdk-provider@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

@inkeep/create-agents@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

... (truncated)

Changelog

Sourced from @inkeep/agents-core's changelog.

0.80.5

Patch Changes

bf54e9e: Fix pnpm db:auth:init failing when the haveIBeenPwned API is unreachable. The bootstrap script now skips the external password-compromise lookup (strength is still enforced locally by the password policy), and setup-dev fails fast in CI when auth initialization fails instead of continuing with a half-initialized environment.

f160b29: Fix AI Gateway timeout retries by updating the Gateway provider to correctly classify retryable errors.

0.80.4

0.80.3

0.80.2

Patch Changes

ac3476b: Include Vercel-format message parts in conversation and feedback webhook payloads, matching the Get Conversation response

0.80.1

Patch Changes

d94d837: Add time-to-first-token (TTFT) telemetry. Records three interaction-level span attributes (inkeep.agent.time_to_first_model_token, time_to_first_visible_token, time_to_first_visible_part) on the request span for classic SSE and Vercel data-stream responses, graph-correctly across transfers and delegations.

0.80.0

Minor Changes

11f7dad: Add agentName to outbound webhook event envelope

Patch Changes

35000b5: Add optional startDate/endDate query filters to evaluation result routes; align feedback date filter params to ISO datetime format

d667b35: Fix MCP tool schemas being stripped of $ref/$defs, nested objects, unions, and enums. Tool input schemas are now converted via z.fromJSONSchema at ingestion (preserving the full structure for the model and validation), and the system prompt renders the full schema (resolving $ref, recursing nested objects/arrays, and showing enums and nullables) instead of a flattened one-level view.

1ca58a3: Disable user-initiated organization creation via the auth API; organizations are provisioned through setup flows

c228447: ?conversationId= filter for slack webhook events

0.79.1

Patch Changes

1f02799: Deliver classic (non-durable) tool approvals across server instances via a shared decision store, fixing approvals lost when the response lands on a different instance than the one running the agent

0.79.0

Minor Changes

62616af: Security: scope the user-providers lookup to an organization, fixing a cross-tenant IDOR in POST /manage/api/users/providers. getUserProvidersFromDb now requires an organizationId and returns providers only for members of that org, so an org admin can no longer enumerate auth providers of users in other orgs.

356084b: Outbound webhook destinations delivered via Slack Bot API

Patch Changes

... (truncated)

Commits

See full diff in compare view

Updates @inkeep/agents-manage-ui from 0.59.4 to 0.80.5

Release notes

Sourced from @inkeep/agents-manage-ui's releases.

2026-04-15

Changelog

@inkeep/agents-api@0.68.4

Patch Changes

Updated dependencies [7438f76]

@inkeep/agents-work-apps@0.68.4

@inkeep/agents-core@0.68.4

@inkeep/agents-email@0.68.4

@inkeep/agents-mcp@0.68.4

@inkeep/agents-cli@0.68.4

Patch Changes

@inkeep/agents-manage-ui@0.68.4

@inkeep/agents-core@0.68.4

@inkeep/agents-sdk@0.68.4

@inkeep/agents-manage-ui@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

@inkeep/agents-sdk@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

@inkeep/agents-work-apps@0.68.4

Patch Changes

7438f76: add thread to resume link message context

@inkeep/agents-core@0.68.4

@inkeep/ai-sdk-provider@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

@inkeep/create-agents@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

... (truncated)

Changelog

Sourced from @inkeep/agents-manage-ui's changelog.

0.80.5

Patch Changes

a24910f: Adjusting conversations per day graph due to changed timestamp parsing

e738843: Update @inkeep/agents-ui to 0.17.7 for chat error messaging and search bar fixes

Updated dependencies [bf54e9e]

Updated dependencies [f160b29]

@inkeep/agents-core@0.80.5

0.80.4

Patch Changes

@inkeep/agents-core@0.80.4

0.80.3

Patch Changes

0565641: Fix side pane node editor type narrowing for agent and tool nodes.

@inkeep/agents-core@0.80.3

0.80.2

Patch Changes

f73615b: Widget view shown in traces

Updated dependencies [ac3476b]

@inkeep/agents-core@0.80.2

0.80.1

Patch Changes

d94d837: Fix time-to-first-token showing 0 ms in the conversation view. The trace lookup matched the wrong span because SigNoz returns 0 for numeric attributes a span lacks; now only a positive value counts as a present TTFT.

d94d837: Show time-to-first-token (TTFT) in the conversation trace view: a customer-facing first-token timing with a fast/moderate/slow band on the conversation detail, and model/visible-token/visible-part timings in the operator span panel.

d94d837: Fix inconsistent conversation trace timing. Anchor the user-message event at the request-arrival span start (matching the conversation list and TTFT) instead of a mid-handler timestamp, and stop labeling the user-message row with the whole-request span duration, so time-to-first-token, conversation duration, and the message event no longer contradict each other.

Updated dependencies [d94d837]

@inkeep/agents-core@0.80.1

0.80.0

Patch Changes

888f8ee: Add user properties to UI and webhooks

35000b5: Add optional startDate/endDate query filters to evaluation result routes; align feedback date filter params to ISO datetime format

b0d0011: Remove unneeded signoz query and timeline fetches

c228447: ?conversationId= filter for slack webhook events

Updated dependencies [35000b5]

... (truncated)

Commits

See full diff in compare view

Updates @inkeep/agents-sdk from 0.59.4 to 0.80.5

Release notes

Sourced from @inkeep/agents-sdk's releases.

2026-04-15

Changelog

@inkeep/agents-api@0.68.4

Patch Changes

Updated dependencies [7438f76]

@inkeep/agents-work-apps@0.68.4

@inkeep/agents-core@0.68.4

@inkeep/agents-email@0.68.4

@inkeep/agents-mcp@0.68.4

@inkeep/agents-cli@0.68.4

Patch Changes

@inkeep/agents-manage-ui@0.68.4

@inkeep/agents-core@0.68.4

@inkeep/agents-sdk@0.68.4

@inkeep/agents-manage-ui@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

@inkeep/agents-sdk@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

@inkeep/agents-work-apps@0.68.4

Patch Changes

7438f76: add thread to resume link message context

@inkeep/agents-core@0.68.4

@inkeep/ai-sdk-provider@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

@inkeep/create-agents@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

... (truncated)

Changelog

Sourced from @inkeep/agents-sdk's changelog.

0.80.5

Patch Changes

Updated dependencies [bf54e9e]

Updated dependencies [f160b29]

@inkeep/agents-core@0.80.5

0.80.4

Patch Changes

@inkeep/agents-core@0.80.4

0.80.3

Patch Changes

@inkeep/agents-core@0.80.3

0.80.2

Patch Changes

Updated dependencies [ac3476b]

@inkeep/agents-core@0.80.2

0.80.1

Patch Changes

Updated dependencies [d94d837]

@inkeep/agents-core@0.80.1

0.80.0

Patch Changes

Updated dependencies [35000b5]

Updated dependencies [d667b35]

Updated dependencies [1ca58a3]

Updated dependencies [11f7dad]

Updated dependencies [c228447]

@inkeep/agents-core@0.80.0

0.79.1

Patch Changes

Updated dependencies [1f02799]

... (truncated)

Commits

See full diff in compare view

Updates @inkeep/agents-cli from 0.59.4 to 0.80.5

Release notes

Sourced from @inkeep/agents-cli's releases.

2026-04-15

Changelog

@inkeep/agents-api@0.68.4

Patch Changes

Updated dependencies [7438f76]

@inkeep/agents-work-apps@0.68.4

@inkeep/agents-core@0.68.4

@inkeep/agents-email@0.68.4

@inkeep/agents-mcp@0.68.4

@inkeep/agents-cli@0.68.4

Patch Changes

@inkeep/agents-manage-ui@0.68.4

@inkeep/agents-core@0.68.4

@inkeep/agents-sdk@0.68.4

@inkeep/agents-manage-ui@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

@inkeep/agents-sdk@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

@inkeep/agents-work-apps@0.68.4

Patch Changes

7438f76: add thread to resume link message context

@inkeep/agents-core@0.68.4

@inkeep/ai-sdk-provider@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

@inkeep/create-agents@0.68.4

Patch Changes

@inkeep/agents-core@0.68.4

... (truncated)

Changelog

Sourced from @inkeep/agents-cli's changelog.

0.80.5

Patch Changes

Updated dependencies [bf54e9e]

Updated dependencies [a24910f]

Updated dependencies [e738843]

Updated dependencies [f160b29]

@inkeep/agents-core@0.80.5

@inkeep/agents-manage-ui@0.80.5

@inkeep/agents-sdk@0.80.5

0.80.4

Patch Changes

@inkeep/agents-manage-ui@0.80.4

@inkeep/agents-core@0.80.4

@inkeep/agents-sdk@0.80.4

0.80.3

Patch Changes

Updated dependencies [0565641]

@inkeep/agents-manage-ui@0.80.3

@inkeep/agents-core@0.80.3

@inkeep/agents-sdk@0.80.3

0.80.2

Patch Changes

Updated dependencies [ac3476b]

Updated dependencies [f73615b]

@inkeep/agents-core@0.80.2

@inkeep/agents-manage-ui@0.80.2

@inkeep/agents-sdk@0.80.2

0.80.1

Patch Changes

Updated dependencies [d94d837]

Updated dependencies [d94d837]

Updated dependencies [d94d837]

Updated dependencies [d94d837]

@inkeep/agents-manage-ui@0.80.1

@inkeep/agents-core@0.80.1

@inkeep/agents-sdk@0.80.1

... (truncated)

Commits

See full diff in compare view

Updates @inkeep/agents-ui from 0.15.20 to 0.17.7

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates Bumps the inkeep-agents group with 4 updates in the /create-agents-template directory: [@inkeep/agents-core](https://github.com/inkeep/agents/tree/HEAD/packages/agents-core), [@inkeep/agents-manage-ui](https://github.com/inkeep/agents/tree/HEAD/agents-manage-ui), [@inkeep/agents-sdk](https://github.com/inkeep/agents/tree/HEAD/packages/agents-sdk) and [@inkeep/agents-cli](https://github.com/inkeep/agents/tree/HEAD/agents-cli). Updates `@inkeep/agents-core` from 0.59.4 to 0.80.5 - [Release notes](https://github.com/inkeep/agents/releases) - [Changelog](https://github.com/inkeep/agents/blob/main/packages/agents-core/CHANGELOG.md) - [Commits](https://github.com/inkeep/agents/commits/HEAD/packages/agents-core) Updates `@inkeep/agents-manage-ui` from 0.59.4 to 0.80.5 - [Release notes](https://github.com/inkeep/agents/releases) - [Changelog](https://github.com/inkeep/agents/blob/main/agents-manage-ui/CHANGELOG.md) - [Commits](https://github.com/inkeep/agents/commits/HEAD/agents-manage-ui) Updates `@inkeep/agents-sdk` from 0.59.4 to 0.80.5 - [Release notes](https://github.com/inkeep/agents/releases) - [Changelog](https://github.com/inkeep/agents/blob/main/packages/agents-sdk/CHANGELOG.md) - [Commits](https://github.com/inkeep/agents/commits/HEAD/packages/agents-sdk) Updates `@inkeep/agents-cli` from 0.59.4 to 0.80.5 - [Release notes](https://github.com/inkeep/agents/releases) - [Changelog](https://github.com/inkeep/agents/blob/main/agents-cli/CHANGELOG.md) - [Commits](https://github.com/inkeep/agents/commits/HEAD/agents-cli) Updates `@inkeep/agents-ui` from 0.15.20 to 0.17.7 - [Commits](https://github.com/inkeep/agents-ui/commits/HEAD/packages/agents-ui) --- updated-dependencies: - dependency-name: "@inkeep/agents-core" dependency-version: 0.80.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: inkeep-agents - dependency-name: "@inkeep/agents-manage-ui" dependency-version: 0.80.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: inkeep-agents - dependency-name: "@inkeep/agents-sdk" dependency-version: 0.80.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: inkeep-agents - dependency-name: "@inkeep/agents-cli" dependency-version: 0.80.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: inkeep-agents - dependency-name: "@inkeep/agents-ui" dependency-version: 0.17.7 dependency-type: indirect update-type: version-update:semver-minor dependency-group: inkeep-agents ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-07-24T18:48:55Z

⚠️ No Changeset found

Latest commit: 15ec7df

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

github-actions · 2026-07-24T18:49:06Z

Thanks for the contribution!

What happens next:

A maintainer will review your PR.
If you don't hear back within a few business days, please comment here to nudge our team.
This repository is maintained through an internal mirror. When your change is accepted, this PR will close automatically. Don't be alarmed when it closes — that's how it merges, and your authorship is preserved.

socket-security · 2026-07-24T18:50:32Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@inkeep/agents-manage-ui@0.80.5
	@inkeep/agents-cli@0.80.5
	@inkeep/agents-core@0.80.5
	@inkeep/agents-sdk@0.80.5

View full report

socket-security · 2026-07-24T18:50:34Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Potentially malicious package (AI signal): npm `@inkeep/agents-manage-ui` is 70.0% likely malicious Notes: Security-critical finding: this bundle includes a client-side SVG injection subsystem that can execute inline <script> content extracted from fetched/injected SVGs via Function(scriptText)(window) when configuration permits it. This is an explicit arbitrary JavaScript execution/XSS vector if an attacker can influence the SVG source or content. Separately, the bundle uses dangerouslySetInnerHTML (additional XSS sink) and performs authenticated network requests where user-controlled file bytes are base64-encoded and sent to remote endpoints (high-sensitivity data egress). Overall, the dominant risk in this fragment is active code execution via SVG script evaluation. Confidence: 0.70 Severity: 0.85 From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is AI-detected potential malware? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Given the AI system's identification of this package as malware, extreme caution is advised. It is recommended to avoid downloading or installing this package until the threat is confirmed or flagged as a false positive. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Potentially malicious package (AI signal): npm `@inkeep/agents-manage-ui` is 80.0% likely malicious Notes: High-risk module: it is a client-side dynamic code transformer/executor that compiles input source and runs it via `Function(...)(...)`. The transformation output also contains an `eval(code)`-based helper for class regeneration. Combined with a custom `require` that resolves from an externally provided module mapping, this gives executed code substantial capability in the browser. If `code` or `scope` can be influenced by an attacker, this becomes effectively arbitrary JavaScript execution and should be treated as untrusted-code execution rather than a safe library. Confidence: 0.80 Severity: 0.95 From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is AI-detected potential malware? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Given the AI system's identification of this package as malware, extreme caution is advised. It is recommended to avoid downloading or installing this package until the threat is confirmed or flagged as a false positive. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@inkeep/agents-manage-ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@inkeep/agents-manage-ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@inkeep/agents-manage-ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@inkeep/agents-manage-ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@inkeep/agents-manage-ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@inkeep/agents-manage-ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@inkeep/agents-manage-ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@inkeep/agents-manage-ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@inkeep/agents-manage-ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@inkeep/agents-manage-ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@inkeep/agents-manage-ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@inkeep/agents-manage-ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/package.json → `npm/@inkeep/agents-manage-ui@0.80.5` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.80.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@sentry/node-core` is 60.0% likely obfuscated Confidence: 0.60 Location: Package overview From: create-agents-template/pnpm-lock.yaml → `npm/@inkeep/agents-manage-ui@0.80.5` → `npm/@sentry/node-core@10.68.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@sentry/node-core@10.68.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `es-abstract` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/pnpm-lock.yaml → `npm/@inkeep/agents-api@0.59.4` → `npm/@inkeep/agents-core@0.80.5` → `npm/es-abstract@1.24.2` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/es-abstract@1.24.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `hash-wasm` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/pnpm-lock.yaml → `npm/@inkeep/agents-manage-ui@0.80.5` → `npm/hash-wasm@4.12.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/hash-wasm@4.12.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `node-forge` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/pnpm-lock.yaml → `npm/@inkeep/agents-core@0.80.5` → `npm/@inkeep/agents-manage-ui@0.80.5` → `npm/node-forge@1.4.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/node-forge@1.4.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `pusher-js` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/pnpm-lock.yaml → `npm/@inkeep/agents-api@0.59.4` → `npm/@inkeep/agents-core@0.80.5` → `npm/pusher-js@8.6.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/pusher-js@8.6.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `rimraf` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/pnpm-lock.yaml → `npm/@inkeep/agents-api@0.59.4` → `npm/@inkeep/agents-core@0.80.5` → `npm/@inkeep/agents-manage-ui@0.80.5` → `npm/rimraf@5.0.10` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/rimraf@5.0.10`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `web-vitals` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/pnpm-lock.yaml → `npm/@inkeep/agents-manage-ui@0.80.5` → `npm/web-vitals@5.3.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/web-vitals@5.3.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `yargs` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: create-agents-template/pnpm-lock.yaml → `npm/@inkeep/agents-api@0.59.4` → `npm/@inkeep/agents-core@0.80.5` → `npm/@inkeep/agents-manage-ui@0.80.5` → `npm/yargs@17.7.3` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/yargs@17.7.3`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot · 2026-07-27T18:48:14Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026

dependabot Bot had a problem deploying to inkeep-oss-sync July 24, 2026 18:48 Error

dependabot Bot had a problem deploying to inkeep-oss-sync July 27, 2026 18:43 Error

dependabot Bot closed this Jul 27, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/create-agents-template/inkeep-agents-b71c07c419 branch July 27, 2026 18:48

dependabot Bot requested a deployment to inkeep-oss-sync July 27, 2026 18:48 Waiting

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the inkeep-agents group across 1 directory with 5 updates - #3488

chore(deps): bump the inkeep-agents group across 1 directory with 5 updates#3488
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/create-agents-template/inkeep-agents-b71c07c419

dependabot Bot commented on behalf of github Jul 24, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Jul 24, 2026

Uh oh!

github-actions Bot commented Jul 24, 2026

Uh oh!

socket-security Bot commented Jul 24, 2026

Uh oh!

socket-security Bot commented Jul 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2026-04-15

Changelog

@​inkeep/agents-api@​0.68.4

Patch Changes

@​inkeep/agents-cli@​0.68.4

Patch Changes

@​inkeep/agents-manage-ui@​0.68.4

Patch Changes

@​inkeep/agents-sdk@​0.68.4

Patch Changes

@​inkeep/agents-work-apps@​0.68.4

Patch Changes

@​inkeep/ai-sdk-provider@​0.68.4

Patch Changes

@​inkeep/create-agents@​0.68.4

Patch Changes

0.80.5

Patch Changes

0.80.4

0.80.3

0.80.2

Patch Changes

0.80.1

Patch Changes

0.80.0

Minor Changes

Patch Changes

0.79.1

Patch Changes

0.79.0

Minor Changes

Patch Changes

2026-04-15

Changelog

@​inkeep/agents-api@​0.68.4

Patch Changes

@​inkeep/agents-cli@​0.68.4

Patch Changes

@​inkeep/agents-manage-ui@​0.68.4

Patch Changes

@​inkeep/agents-sdk@​0.68.4

Patch Changes

@​inkeep/agents-work-apps@​0.68.4

Patch Changes

@​inkeep/ai-sdk-provider@​0.68.4

Patch Changes

@​inkeep/create-agents@​0.68.4

Patch Changes

0.80.5

Patch Changes

0.80.4

Patch Changes

0.80.3

Patch Changes

0.80.2

Patch Changes

0.80.1

Patch Changes

0.80.0

Patch Changes

2026-04-15

Changelog

@​inkeep/agents-api@​0.68.4

Patch Changes

@​inkeep/agents-cli@​0.68.4

Patch Changes

@​inkeep/agents-manage-ui@​0.68.4

Patch Changes

@​inkeep/agents-sdk@​0.68.4

Patch Changes

@​inkeep/agents-work-apps@​0.68.4

Patch Changes

@​inkeep/ai-sdk-provider@​0.68.4

Patch Changes

@​inkeep/create-agents@​0.68.4

Patch Changes

dependabot Bot commented on behalf of github Jul 24, 2026 •

edited

Loading

`@inkeep/agents-api@0`.68.4

`@inkeep/agents-cli@0`.68.4

`@inkeep/agents-manage-ui@0`.68.4

`@inkeep/agents-sdk@0`.68.4

`@inkeep/agents-work-apps@0`.68.4

`@inkeep/ai-sdk-provider@0`.68.4

`@inkeep/create-agents@0`.68.4

`@inkeep/agents-api@0`.68.4

`@inkeep/agents-cli@0`.68.4

`@inkeep/agents-manage-ui@0`.68.4

`@inkeep/agents-sdk@0`.68.4

`@inkeep/agents-work-apps@0`.68.4

`@inkeep/ai-sdk-provider@0`.68.4

`@inkeep/create-agents@0`.68.4

`@inkeep/agents-api@0`.68.4

`@inkeep/agents-cli@0`.68.4

`@inkeep/agents-manage-ui@0`.68.4

`@inkeep/agents-sdk@0`.68.4

`@inkeep/agents-work-apps@0`.68.4

`@inkeep/ai-sdk-provider@0`.68.4

`@inkeep/create-agents@0`.68.4

`@inkeep/agents-api@0`.68.4

`@inkeep/agents-cli@0`.68.4

`@inkeep/agents-manage-ui@0`.68.4

`@inkeep/agents-sdk@0`.68.4

`@inkeep/agents-work-apps@0`.68.4

`@inkeep/ai-sdk-provider@0`.68.4

`@inkeep/create-agents@0`.68.4