chore(deps): clear root workspace security alerts

[thymikee]

Summary

Clears every open root-workspace Dependabot alert. 6 files; no source changes.

• undici 7.29.0 → 7.29.1 (bundled by tsdown) in root, maestro, provision-kit pins. @limrun/api ^0.59.0 → ^0.60.0 pins undici 7.29.1 itself, so the undici@7 override is removed. 0.61.0 is <24h old, held back by minimumReleaseAge. Alerts Expose dump of recent HTTP traffic for session app #95, Expose app container and file system access (get_app_container / adb pull) #96, Add pixel-level visual screenshot diff (in addition to tree diff) #97, Expose media input simulation (camera roll, photo/video, mic) #98, [Lower priority] Expose performance metrics (FPS, memory, CPU, startup time) #101, [Lower priority] Keyboard state introspection (visibility, type, dismiss) #102, [Lower priority] Biometric simulation beyond Face ID (Touch ID, fingerprint on Android) #104, [Lower priority] Orientation and rotation control (landscape layouts) #105, feat: add full session log coverage and diagnostics workflows #106, chore: streamline AGENTS onboarding and testing matrix #107, feat: publish on ClawHub #110, feat: improve logs debugging workflow #111, docs: harden agent-device skill security guidance #113, open <package> fails to launch app without explicit --activity flag (launcher activity resolution broken for multi-entry apps) #114, fix: add MAIN/LAUNCHER flags to Android launcher activity resolver #115, Fail to fill text with Chinese character or emoji #116, feat: add settings appearance command #119, feat: add network dump command for session app traffic #120, Add trigger-screenshot command to simulate iOS screenshot notification #123, Port https://skills.sh/vercel-labs/agent-browser/dogfood to agent-device ? #124, feat: add AndroidTV and tvOS target support #125, Implement Android CPU and memory sampling in perf payload #126, screenshot fails on physical iOS device with Xcode 26.x — devicectl device screenshot subcommand not found #129, fix: fallback iOS/tvOS screenshot when devicectl screenshot is unavailable #130.
• fast-uri override 3.1.6 (vulnerable) → 3.1.7. Alerts perf: optimize and verify scrollintoview ref path #86, feat: add session perf metrics command #121.
• brace-expansion@5 override ^5.0.9 → ^5.0.12. Alert feat: port dogfood skill to agent-device #133.
• tinypool 2.1.0 → 2.1.2 via oxfmt ^0.64.0 → ^0.67.0 (oldest with tinypool 2.1.2); pnpm format changed nothing. Alerts Android: press @ref fails with "press requires x y" error #139, Android: fill truncates input with standard ASCII special characters (+, @) #140.
• source-map-js 1.2.1 → 1.2.2 via lockfile refresh, no override. Alert fix: harden press @ref bounds recovery #141.

Validation

At e61a2759a: pnpm install --frozen-lockfile clean; pnpm check:affected --run → all runnable checks passed. Limrun suites run directly: 33 files, 212 tests passed. Device lanes are GitHub-authoritative.

pnpm why -r <pkg>:

undici@7.29.1  (single copy, no override)
fast-uri@3.1.7
brace-expansion@5.0.12
tinypool@2.1.2   (└─┬ oxfmt@0.67.0 └── agent-device (devDependencies))
source-map-js@1.2.2

Size +4.7 kB unpacked (>3 kB threshold): bundled undici.js +4.26 kB is the 7.29.1 security patch itself; limrun log-stream.js/ios-client.js +0.4 kB from 0.60.0. Dropping either would reintroduce the vulnerability or the override.

examples/test-app alerts are out of scope.

🤖 Generated with Claude Code

[github-actions]

PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-10-10 13:33 UTC

[cubic-dev-ai]

No issues found across 5 files

_{View guided diff | Turn on auto-fix | Re-trigger cubic}

[github-actions]

Size Report

Metric	Base	Current	Diff
Installed (including dependencies)	5.15 MB	5.15 MB	+4.7 kB
Package (unpacked)	5.15 MB	5.15 MB	+4.7 kB
Package (download)	1.55 MB	1.55 MB	+1.4 kB

Startup median (7 runs, lower is better):

Scenario	Base	Current	Diff
CLI --version	26.7 ms	26.6 ms	-0.0 ms
CLI --help	82.1 ms	82.7 ms	+0.6 ms

[thymikee]

This PR is ready at e61a275. Checks are green (22 of 22), and the diff only touches manifests, the lockfile and workspace overrides. The limrun provider unit tests, the type-check and the bundled-undici size report all cover the changed packages. I read the lockfile text and diffed the @limrun/api tarball. I did not re-run pnpm install --frozen-lockfile or the test suites. I also did not diff the bundled undici output, so the +4.26 kB figure rests on the size-report comment and the version bump. I checked that the resolved versions are the patched ones the body names, but not the Dependabot alert numbers against GitHub's alert state. I did not confirm that oxfmt 0.67 leaves formatting unchanged, and I only have the green format check in CI for that. There are no conflicts, and nothing else needs to happen before merge once maintainers accept it. Not blocking, take or leave: the note on why undici is pinned exactly (tsdown bundles it, so a caret would let lockFileMaintenance move shipped bytes) went away with the override, so the policy for the exact pins in package.json, maestro and provision-kit is now written nowhere, and a one-line note could keep it. Also, with the undici@7 override gone, the transitive copy under @limrun/api and @ai-sdk/provider-utils stays at 7.29.1 only because those packages pin it, so re-add the override if a later @limrun/api release regresses.