6 lines
897 B
Markdown
6 lines
897 B
Markdown
# Task
|
|
Base SHA: 6382cb8e0473ba9ea5ba7a3f94f34e8ab0d4ec60
|
|
Scope: Complete stage-one R1: minimally update vulnerable next, sharp, source-map-js within same major; record license before/after; achieve npm audit --omit=dev with no critical/high; run npm ci, Prisma generate, npm test, TypeScript, lint, build. Continue R3 only after R1, as directed by coordinator.
|
|
Do not change: existing tests; Randomizer; AuditProof; deterministic proof/snapshot hash/HMAC algorithm; user changes in AGENTS.md; R2/R4/R5 assigned to coordinator; no commit/push.
|
|
Definition of Done: exact vulnerable dependency versions replaced with same-major fixed versions, documented licenses, executed gates recorded; then implement assigned R3 while preserving above boundaries.
|
|
Required verification: npm ci; npx prisma generate; npm test; tsc; lint; build; npm audit --omit=dev. R3 tests and smoke checks per task manifest.
|