Skip to content

Bump the inkeep-agents group across 1 directory with 9 updates#2869

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/create-agents-template/inkeep-agents-6c0cc75f22
Open

Bump the inkeep-agents group across 1 directory with 9 updates#2869
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/create-agents-template/inkeep-agents-6c0cc75f22

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 27, 2026

Bumps the inkeep-agents group with 5 updates in the /create-agents-template directory:

Package From To
@inkeep/agents-core 0.59.4 0.73.5
@inkeep/agents-manage-ui 0.59.4 0.73.5
@inkeep/agents-sdk 0.59.4 0.73.5
@inkeep/agents-cli 0.59.4 0.73.5
@inkeep/agents-api 0.59.4 0.73.5

Updates @inkeep/agents-core from 0.59.4 to 0.73.5

Release notes

Sourced from @​inkeep/agents-core's releases.

2026-04-15

Changelog

@​inkeep/agents-api@​0.68.4

Patch Changes

  • Updated dependencies [7438f76]
    • @​inkeep/agents-work-apps@​0.68.4
    • @​inkeep/agents-core@​0.68.4
    • @​inkeep/agents-email@​0.68.4
    • @​inkeep/agents-mcp@​0.68.4

@​inkeep/agents-cli@​0.68.4

Patch Changes

  • @​inkeep/agents-manage-ui@​0.68.4
  • @​inkeep/agents-core@​0.68.4
  • @​inkeep/agents-sdk@​0.68.4

@​inkeep/agents-manage-ui@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-sdk@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-work-apps@​0.68.4

Patch Changes

  • 7438f76: add thread to resume link message context
    • @​inkeep/agents-core@​0.68.4

@​inkeep/ai-sdk-provider@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/create-agents@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

... (truncated)

Changelog

Sourced from @​inkeep/agents-core's changelog.

0.73.5

0.73.4

Patch Changes

  • 867384b: Add GPT-5.5 and GPT-5.5 Pro to OpenAI model options

  • 4f7c661: Attach Postgres connection pools to Vercel Fluid Compute so idle clients can be managed before serverless functions suspend.

    This registers the manage and runtime database pools with attachDatabasePool, including the raw manage pool used for branch/ref-scoped Dolt work. The change follows Vercel's recommended pooling pattern for Fluid Compute to improve connection reuse and reduce the risk of leaked idle clients across suspended function instances.

0.73.3

0.73.2

0.73.1

Patch Changes

  • f069c82: Add Better Auth captcha plugin for login endpoints (Google reCAPTCHA v3, cloud-only via INKEEP_RECAPTCHA_SECRET_KEY)

0.73.0

Minor Changes

  • ed76d93: Add custom HTTP headers for outbound webhooks; tighten header validation (RFC 7230 name charset, length limits) across all user-configurable header fields

0.72.2

0.72.1

Patch Changes

  • 52e099d: Drop FK constraints on events.conversation_id and events.message_id so events fired before their anchor rows exist (e.g. first user_message_submitted of a conversation) are not silently dropped. Conversation deletion still removes associated events via explicit app-level cleanup.

0.72.0

Minor Changes

  • 4a0d963: Phase 2 of the events API: top-level identity + per-turn context columns.
    • Add userProperties and properties jsonb columns to conversations and messages tables (D36/D37). Migration is purely additive; existing rows start null. messages.metadata runtime telemetry stays unchanged; ConversationMetadata.userContext remains intact.
    • Add helpers in utils/conversations.ts for top-level access: getConversationUserProperties, getConversationProperties, getMessageUserProperties (with conversation fallback), buildConversationUserProperties. buildConversationMetadata now skips writing the userProperties argument into metadata.userContext and additionally populates initiatedBy from execution context.
    • Update createOrGetConversation and setActiveAgentForConversation data-access helpers so chat handlers can persist userProperties + properties to the new top-level columns (last-write-wins on existing rows). Chat handlers drop widget-synthesized auto-mint identities (identificationType of 'ANONYMOUS' or 'COOKIED') and strip the identificationType marker from anything they do persist — only host-supplied / SDK-supplied identities reach the database.
    • POST /run/v1/events resolves event-level userProperties from caller body → message anchor → conversation anchor → null. There is no auto-fill from the JWT-verified endUserId; consumers needing the verified user identity should read conversation.userId (the cryptographically verified sub claim, populated on every chat turn).
    • Add 'event.created' to WebhookDestinationEventTypeEnum for the family-level subscription opted into by destinations that want all events fired through POST /run/v1/events.

Patch Changes

  • 4a0d963: Add events table, DAL, validation schemas, and lifecycle-event registry

... (truncated)

Commits

Updates @inkeep/agents-manage-ui from 0.59.4 to 0.73.5

Release notes

Sourced from @​inkeep/agents-manage-ui's releases.

2026-04-15

Changelog

@​inkeep/agents-api@​0.68.4

Patch Changes

  • Updated dependencies [7438f76]
    • @​inkeep/agents-work-apps@​0.68.4
    • @​inkeep/agents-core@​0.68.4
    • @​inkeep/agents-email@​0.68.4
    • @​inkeep/agents-mcp@​0.68.4

@​inkeep/agents-cli@​0.68.4

Patch Changes

  • @​inkeep/agents-manage-ui@​0.68.4
  • @​inkeep/agents-core@​0.68.4
  • @​inkeep/agents-sdk@​0.68.4

@​inkeep/agents-manage-ui@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-sdk@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-work-apps@​0.68.4

Patch Changes

  • 7438f76: add thread to resume link message context
    • @​inkeep/agents-core@​0.68.4

@​inkeep/ai-sdk-provider@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/create-agents@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

... (truncated)

Changelog

Sourced from @​inkeep/agents-manage-ui's changelog.

0.73.5

Patch Changes

  • cbc947d: Add Slack webhook integration with per-event Block Kit formatting
    • @​inkeep/agents-core@​0.73.5

0.73.4

Patch Changes

  • 867384b: Add GPT-5.5 and GPT-5.5 Pro to OpenAI model options
  • 0089acf: Automatically refresh graph after copilot runs
  • Updated dependencies [867384b]
  • Updated dependencies [4f7c661]
    • @​inkeep/agents-core@​0.73.4

0.73.3

Patch Changes

  • @​inkeep/agents-core@​0.73.3

0.73.2

Patch Changes

  • 1613bbf: Fix reCAPTCHA token generation in production by calling grecaptcha.execute directly. react-google-recaptcha-v3's first-mount initialization fails silently in production builds (no React Strict Mode double-mount safety net), leaving useGoogleReCaptcha's executeRecaptcha stuck at undefined. Removed the library entirely; the reCAPTCHA script is now injected via next/script and the executor calls window.grecaptcha.execute directly via grecaptcha.ready.
  • bf4f397: Add userProperties and analyticsProperties to playground and copilot widgets
    • @​inkeep/agents-core@​0.73.2

0.73.1

Patch Changes

  • f069c82: Wire reCAPTCHA v3 captcha header on login, forgot-password, and accept-invitation pages; CSP allowlist for Google reCAPTCHA domains
  • Updated dependencies [f069c82]
    • @​inkeep/agents-core@​0.73.1

0.73.0

Minor Changes

  • ed76d93: Add custom HTTP headers for outbound webhooks; tighten header validation (RFC 7230 name charset, length limits) across all user-configurable header fields

Patch Changes

  • 78b6b83: Add password reveal toggle to password and credential API key inputs
  • 902d800: Add edit links to configured skills
  • Updated dependencies [ed76d93]

... (truncated)

Commits

Updates @inkeep/agents-sdk from 0.59.4 to 0.73.5

Release notes

Sourced from @​inkeep/agents-sdk's releases.

2026-04-15

Changelog

@​inkeep/agents-api@​0.68.4

Patch Changes

  • Updated dependencies [7438f76]
    • @​inkeep/agents-work-apps@​0.68.4
    • @​inkeep/agents-core@​0.68.4
    • @​inkeep/agents-email@​0.68.4
    • @​inkeep/agents-mcp@​0.68.4

@​inkeep/agents-cli@​0.68.4

Patch Changes

  • @​inkeep/agents-manage-ui@​0.68.4
  • @​inkeep/agents-core@​0.68.4
  • @​inkeep/agents-sdk@​0.68.4

@​inkeep/agents-manage-ui@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-sdk@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-work-apps@​0.68.4

Patch Changes

  • 7438f76: add thread to resume link message context
    • @​inkeep/agents-core@​0.68.4

@​inkeep/ai-sdk-provider@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/create-agents@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

... (truncated)

Changelog

Sourced from @​inkeep/agents-sdk's changelog.

0.73.5

Patch Changes

  • @​inkeep/agents-core@​0.73.5

0.73.4

Patch Changes

  • Updated dependencies [867384b]
  • Updated dependencies [4f7c661]
    • @​inkeep/agents-core@​0.73.4

0.73.3

Patch Changes

  • @​inkeep/agents-core@​0.73.3

0.73.2

Patch Changes

  • @​inkeep/agents-core@​0.73.2

0.73.1

Patch Changes

  • Updated dependencies [f069c82]
    • @​inkeep/agents-core@​0.73.1

0.73.0

Patch Changes

  • Updated dependencies [ed76d93]
    • @​inkeep/agents-core@​0.73.0

0.72.2

Patch Changes

  • @​inkeep/agents-core@​0.72.2

0.72.1

Patch Changes

... (truncated)

Commits

Updates @inkeep/agents-cli from 0.59.4 to 0.73.5

Release notes

Sourced from @​inkeep/agents-cli's releases.

2026-04-15

Changelog

@​inkeep/agents-api@​0.68.4

Patch Changes

  • Updated dependencies [7438f76]
    • @​inkeep/agents-work-apps@​0.68.4
    • @​inkeep/agents-core@​0.68.4
    • @​inkeep/agents-email@​0.68.4
    • @​inkeep/agents-mcp@​0.68.4

@​inkeep/agents-cli@​0.68.4

Patch Changes

  • @​inkeep/agents-manage-ui@​0.68.4
  • @​inkeep/agents-core@​0.68.4
  • @​inkeep/agents-sdk@​0.68.4

@​inkeep/agents-manage-ui@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-sdk@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-work-apps@​0.68.4

Patch Changes

  • 7438f76: add thread to resume link message context
    • @​inkeep/agents-core@​0.68.4

@​inkeep/ai-sdk-provider@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/create-agents@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

... (truncated)

Changelog

Sourced from @​inkeep/agents-cli's changelog.

0.73.5

Patch Changes

  • Updated dependencies [cbc947d]
    • @​inkeep/agents-manage-ui@​0.73.5
    • @​inkeep/agents-core@​0.73.5
    • @​inkeep/agents-sdk@​0.73.5

0.73.4

Patch Changes

  • 867384b: Add GPT-5.5 and GPT-5.5 Pro to OpenAI model options
  • Updated dependencies [867384b]
  • Updated dependencies [4f7c661]
  • Updated dependencies [0089acf]
    • @​inkeep/agents-core@​0.73.4
    • @​inkeep/agents-manage-ui@​0.73.4
    • @​inkeep/agents-sdk@​0.73.4

0.73.3

Patch Changes

  • @​inkeep/agents-manage-ui@​0.73.3
  • @​inkeep/agents-core@​0.73.3
  • @​inkeep/agents-sdk@​0.73.3

0.73.2

Patch Changes

  • Updated dependencies [1613bbf]
  • Updated dependencies [bf4f397]
    • @​inkeep/agents-manage-ui@​0.73.2
    • @​inkeep/agents-core@​0.73.2
    • @​inkeep/agents-sdk@​0.73.2

0.73.1

Patch Changes

  • Updated dependencies [f069c82]
  • Updated dependencies [f069c82]
    • @​inkeep/agents-core@​0.73.1
    • @​inkeep/agents-manage-ui@​0.73.1
    • @​inkeep/agents-sdk@​0.73.1

0.73.0

... (truncated)

Commits

Updates @inkeep/agents-api from 0.59.4 to 0.73.5

Release notes

Sourced from @​inkeep/agents-api's releases.

2026-04-15

Changelog

@​inkeep/agents-api@​0.68.4

Patch Changes

  • Updated dependencies [7438f76]
    • @​inkeep/agents-work-apps@​0.68.4
    • @​inkeep/agents-core@​0.68.4
    • @​inkeep/agents-email@​0.68.4
    • @​inkeep/agents-mcp@​0.68.4

@​inkeep/agents-cli@​0.68.4

Patch Changes

  • @​inkeep/agents-manage-ui@​0.68.4
  • @​inkeep/agents-core@​0.68.4
  • @​inkeep/agents-sdk@​0.68.4

@​inkeep/agents-manage-ui@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-sdk@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-work-apps@​0.68.4

Patch Changes

  • 7438f76: add thread to resume link message context
    • @​inkeep/agents-core@​0.68.4

@​inkeep/ai-sdk-provider@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/create-agents@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

... (truncated)

Changelog

Sourced from @​inkeep/agents-api's changelog.

0.73.5

Patch Changes

  • cbc947d: Add Slack webhook integration with per-event Block Kit formatting
  • Updated dependencies [cbc947d]
    • @​inkeep/agents-work-apps@​0.73.5
    • @​inkeep/agents-core@​0.73.5
    • @​inkeep/agents-email@​0.73.5
    • @​inkeep/agents-mcp@​0.73.5

0.73.4

Patch Changes

  • 4f7c661: Attach Postgres connection pools to Vercel Fluid Compute so idle clients can be managed before serverless functions suspend.

    This registers the manage and runtime database pools with attachDatabasePool, including the raw manage pool used for branch/ref-scoped Dolt work. The change follows Vercel's recommended pooling pattern for Fluid Compute to improve connection reuse and reduce the risk of leaked idle clients across suspended function instances.

  • Updated dependencies [867384b]

  • Updated dependencies [4f7c661]

    • @​inkeep/agents-core@​0.73.4
    • @​inkeep/agents-work-apps@​0.73.4
    • @​inkeep/agents-email@​0.73.4
    • @​inkeep/agents-mcp@​0.73.4

0.73.3

Patch Changes

  • 1cc72e2: Honor client-supplied user message ids on chat routes (/run/api/chat and /run/api/chat/completions) so analytics events fired client-side correlate to the persisted messages.id row
    • @​inkeep/agents-core@​0.73.3
    • @​inkeep/agents-email@​0.73.3
    • @​inkeep/agents-mcp@​0.73.3
    • @​inkeep/agents-work-apps@​0.73.3

0.73.2

Patch Changes

  • @​inkeep/agents-core@​0.73.2
  • @​inkeep/agents-email@​0.73.2
  • @​inkeep/agents-mcp@​0.73.2
  • @​inkeep/agents-work-apps@​0.73.2

0.73.1

Patch Changes

  • Updated dependencies [f069c82]

... (truncated)

Commits

Updates @inkeep/agents-email from 0.59.4 to 0.73.5

Release notes

Sourced from @​inkeep/agents-email's releases.

2026-04-15

Changelog

@​inkeep/agents-api@​0.68.4

Patch Changes

  • Updated dependencies [7438f76]
    • @​inkeep/agents-work-apps@​0.68.4
    • @​inkeep/agents-core@​0.68.4
    • @​inkeep/agents-email@​0.68.4
    • @​inkeep/agents-mcp@​0.68.4

@​inkeep/agents-cli@​0.68.4

Patch Changes

  • @​inkeep/agents-manage-ui@​0.68.4
  • @​inkeep/agents-core@​0.68.4
  • @​inkeep/agents-sdk@​0.68.4

@​inkeep/agents-manage-ui@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-sdk@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-work-apps@​0.68.4

Patch Changes

  • 7438f76: add thread to resume link message context
    • @​inkeep/agents-core@​0.68.4

@​inkeep/ai-sdk-provider@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/create-agents@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

... (truncated)

Changelog

Sourced from @​inkeep/agents-email's changelog.

0.73.5

0.73.4

0.73.3

0.73.2

0.73.1

0.73.0

0.72.2

0.72.1

0.72.0

0.71.0

0.70.8

0.70.7

0.70.6

0.70.5

0.70.4

0.70.3

0.70.2

0.70.1

0.70.0

0.69.1

0.69.0

0.68.4

0.68.3

0.68.2

0.68.1

... (truncated)

Commits

Updates @inkeep/agents-mcp from 0.59.4 to 0.73.5

Release notes

Sourced from @​inkeep/agents-mcp's releases.

2026-04-15

Changelog

@​inkeep/agents-api@​0.68.4

Patch Changes

  • Updated dependencies [7438f76]
    • @​inkeep/agents-work-apps@​0.68.4
    • @​inkeep/agents-core@​0.68.4
    • @​inkeep/agents-email@​0.68.4
    • @​inkeep/agents-mcp@​0.68.4

@​inkeep/agents-cli@​0.68.4

Patch Changes

  • @​inkeep/agents-manage-ui@​0.68.4
  • @​inkeep/agents-core@​0.68.4
  • @​inkeep/agents-sdk@​0.68.4

@​inkeep/agents-manage-ui@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-sdk@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-work-apps@​0.68.4

Patch Changes

  • 7438f76: add thread to resume link message context
    • @​inkeep/agents-core@​0.68.4

@​inkeep/ai-sdk-provider@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/create-agents@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

... (truncated)

Changelog

Sourced from @​inkeep/agents-mcp's changelog.

0.73.5

0.73.4

0.73.3

0.73.2

0.73.1

0.73.0

0.72.2

0.72.1

0.72.0

0.71.0

0.70.8

0.70.7

0.70.6

0.70.5

0.70.4

0.70.3

0.70.2

0.70.1

0.70.0

0.69.1

0.69.0

0.68.4

0.68.3

0.68.2

0.68.1

... (truncated)

Commits

Updates @inkeep/agents-ui from 0.15.20 to 0.16.5

Commits

Updates @inkeep/agents-work-apps from 0.59.4 to 0.73.5

Release notes

Sourced from @​inkeep/agents-work-apps's releases.

2026-04-15

Changelog

@​inkeep/agents-api@​0.68.4

Patch Changes

  • Updated dependencies [7438f76]
    • @​inkeep/agents-work-apps@​0.68.4
    • @​inkeep/agents-core@​0.68.4
    • @​inkeep/agents-email@​0.68.4
    • @​inkeep/agents-mcp@​0.68.4

@​inkeep/agents-cli@​0.68.4

Patch Changes

  • @​inkeep/agents-manage-ui@​0.68.4
  • @​inkeep/agents-core@​0.68.4
  • @​inkeep/agents-sdk@​0.68.4

@​inkeep/agents-manage-ui@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-sdk@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/agents-work-apps@​0.68.4

Patch Changes

  • 7438f76: add thread to resume link message context
    • @​inkeep/agents-core@​0.68.4

@​inkeep/ai-sdk-provider@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

@​inkeep/create-agents@​0.68.4

Patch Changes

  • @​inkeep/agents-core@​0.68.4

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 27, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Mar 27, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
agents-api Ready Ready Preview, Comment Apr 15, 2026 6:54pm
agents-docs Ready Ready Preview, Comment Apr 15, 2026 6:54pm
agents-manage-ui Ready Ready Preview, Comment Apr 15, 2026 6:54pm

Request Review

@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented Mar 27, 2026

⚠️ No Changeset found

Latest commit: 70a19d3

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/create-agents-template/inkeep-agents-6c0cc75f22 branch from b21abdf to 105aa2b Compare March 30, 2026 20:08
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/create-agents-template/inkeep-agents-6c0cc75f22 branch from 105aa2b to 24d1441 Compare March 31, 2026 18:50
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/create-agents-template/inkeep-agents-6c0cc75f22 branch from 24d1441 to 465e081 Compare April 1, 2026 19:30
@socket-security
Copy link
Copy Markdown

socket-security Bot commented Apr 1, 2026

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @inkeep/agents-manage-ui is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: create-agents-template/package.jsonnpm/@inkeep/agents-manage-ui@0.73.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.73.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @inkeep/agents-manage-ui is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: create-agents-template/package.jsonnpm/@inkeep/agents-manage-ui@0.73.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.73.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @inkeep/agents-manage-ui is 78.0% likely obfuscated

Confidence: 0.78

Location: Package overview

From: create-agents-template/package.jsonnpm/@inkeep/agents-manage-ui@0.73.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.73.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @inkeep/agents-manage-ui is 82.0% likely obfuscated

Confidence: 0.82

Location: Package overview

From: create-agents-template/package.jsonnpm/@inkeep/agents-manage-ui@0.73.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.73.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @inkeep/agents-manage-ui is 91.0% likely obfuscated

Confidence: 0.91

Location: Package overview

From: create-agents-template/package.jsonnpm/@inkeep/agents-manage-ui@0.73.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.73.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @inkeep/agents-manage-ui is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: create-agents-template/package.jsonnpm/@inkeep/agents-manage-ui@0.73.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.73.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @inkeep/agents-manage-ui is 88.0% likely obfuscated

Confidence: 0.88

Location: Package overview

From: create-agents-template/package.jsonnpm/@inkeep/agents-manage-ui@0.73.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.73.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @inkeep/agents-manage-ui is 80.0% likely obfuscated

Confidence: 0.80

Location: Package overview

From: create-agents-template/package.jsonnpm/@inkeep/agents-manage-ui@0.73.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.73.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @inkeep/agents-manage-ui is 85.0% likely obfuscated

Confidence: 0.85

Location: Package overview

From: create-agents-template/package.jsonnpm/@inkeep/agents-manage-ui@0.73.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.73.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @inkeep/agents-manage-ui is 86.0% likely obfuscated

Confidence: 0.86

Location: Package overview

From: create-agents-template/package.jsonnpm/@inkeep/agents-manage-ui@0.73.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.73.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @inkeep/agents-manage-ui is 86.0% likely obfuscated

Confidence: 0.86

Location: Package overview

From: create-agents-template/package.jsonnpm/@inkeep/agents-manage-ui@0.73.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@inkeep/agents-manage-ui@0.73.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/create-agents-template/inkeep-agents-6c0cc75f22 branch from e161f0a to dc003ba Compare April 8, 2026 18:50
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/create-agents-template/inkeep-agents-6c0cc75f22 branch from dc003ba to 983d23f Compare April 8, 2026 18:56
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/create-agents-template/inkeep-agents-6c0cc75f22 branch from 983d23f to c09a6bd Compare April 9, 2026 18:50
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/create-agents-template/inkeep-agents-6c0cc75f22 branch from c09a6bd to 006b8ee Compare April 10, 2026 18:49
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 13, 2026

Thanks for the contribution! Your PR has been mirrored into Inkeep's internal monorepo, where review and merge happen. Your commit attribution is preserved as @dependabot[bot].

What happens next:

  • An Inkeep maintainer will review the internal mirror PR.
  • Reviewer comments are not automatically mirrored back to this thread. If you don't hear from us within a few business days, please comment here to nudge — that's the right thing to do.
  • Once merged internally, the change will sync back to this repository and this PR will close automatically (don't be alarmed when it closes — that's how it lands).

For Inkeep maintainers (link goes to a private repo and is not accessible to external contributors): https://github.com/inkeep/agents-private/pull/80

See the repository's CONTRIBUTING.md for more context on how public PRs flow. This comment will be updated as the bridge state changes.

@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 19, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​inkeep/​agents-manage-ui@​0.41.1 ⏵ 0.73.547 -331009610090
Added@​inkeep/​agents-cli@​0.73.5711008710090
Added@​inkeep/​agents-api@​0.73.5791007610090
Added@​inkeep/​agents-sdk@​0.73.58610010010090
Updated@​hono/​vite-dev-server@​0.20.1 ⏵ 0.23.0100100100 +189 -2100
Added@​tailwindcss/​vite@​4.2.21001008998100

View full report

Bumps the inkeep-agents group with 5 updates in the /create-agents-template directory:

| Package | From | To |
| --- | --- | --- |
| [@inkeep/agents-core](https://github.com/inkeep/agents/tree/HEAD/packages/agents-core) | `0.59.4` | `0.73.5` |
| [@inkeep/agents-manage-ui](https://github.com/inkeep/agents/tree/HEAD/agents-manage-ui) | `0.59.4` | `0.73.5` |
| [@inkeep/agents-sdk](https://github.com/inkeep/agents/tree/HEAD/packages/agents-sdk) | `0.59.4` | `0.73.5` |
| [@inkeep/agents-cli](https://github.com/inkeep/agents/tree/HEAD/agents-cli) | `0.59.4` | `0.73.5` |
| [@inkeep/agents-api](https://github.com/inkeep/agents/tree/HEAD/agents-api) | `0.59.4` | `0.73.5` |



Updates `@inkeep/agents-core` from 0.59.4 to 0.73.5
- [Release notes](https://github.com/inkeep/agents/releases)
- [Changelog](https://github.com/inkeep/agents/blob/main/packages/agents-core/CHANGELOG.md)
- [Commits](https://github.com/inkeep/agents/commits/HEAD/packages/agents-core)

Updates `@inkeep/agents-manage-ui` from 0.59.4 to 0.73.5
- [Release notes](https://github.com/inkeep/agents/releases)
- [Changelog](https://github.com/inkeep/agents/blob/main/agents-manage-ui/CHANGELOG.md)
- [Commits](https://github.com/inkeep/agents/commits/HEAD/agents-manage-ui)

Updates `@inkeep/agents-sdk` from 0.59.4 to 0.73.5
- [Release notes](https://github.com/inkeep/agents/releases)
- [Changelog](https://github.com/inkeep/agents/blob/main/packages/agents-sdk/CHANGELOG.md)
- [Commits](https://github.com/inkeep/agents/commits/HEAD/packages/agents-sdk)

Updates `@inkeep/agents-cli` from 0.59.4 to 0.73.5
- [Release notes](https://github.com/inkeep/agents/releases)
- [Changelog](https://github.com/inkeep/agents/blob/main/agents-cli/CHANGELOG.md)
- [Commits](https://github.com/inkeep/agents/commits/HEAD/agents-cli)

Updates `@inkeep/agents-api` from 0.59.4 to 0.73.5
- [Release notes](https://github.com/inkeep/agents/releases)
- [Changelog](https://github.com/inkeep/agents/blob/main/agents-api/CHANGELOG.md)
- [Commits](https://github.com/inkeep/agents/commits/HEAD/agents-api)

Updates `@inkeep/agents-email` from 0.59.4 to 0.73.5
- [Release notes](https://github.com/inkeep/agents/releases)
- [Changelog](https://github.com/inkeep/agents/blob/main/packages/agents-email/CHANGELOG.md)
- [Commits](https://github.com/inkeep/agents/commits/HEAD/packages/agents-email)

Updates `@inkeep/agents-mcp` from 0.59.4 to 0.73.5
- [Release notes](https://github.com/inkeep/agents/releases)
- [Changelog](https://github.com/inkeep/agents/blob/main/packages/agents-mcp/CHANGELOG.md)
- [Commits](https://github.com/inkeep/agents/commits/HEAD/packages/agents-mcp)

Updates `@inkeep/agents-ui` from 0.15.20 to 0.16.5
- [Commits](https://github.com/inkeep/agents-ui/commits/HEAD/packages/agents-ui)

Updates `@inkeep/agents-work-apps` from 0.59.4 to 0.73.5
- [Release notes](https://github.com/inkeep/agents/releases)
- [Commits](https://github.com/inkeep/agents/commits/HEAD/packages/agents-workapps)

---
updated-dependencies:
- dependency-name: "@inkeep/agents-api"
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: inkeep-agents
- dependency-name: "@inkeep/agents-cli"
  dependency-version: 0.62.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: inkeep-agents
- dependency-name: "@inkeep/agents-core"
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: inkeep-agents
- dependency-name: "@inkeep/agents-email"
  dependency-version: 0.62.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: inkeep-agents
- dependency-name: "@inkeep/agents-manage-ui"
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: inkeep-agents
- dependency-name: "@inkeep/agents-mcp"
  dependency-version: 0.62.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: inkeep-agents
- dependency-name: "@inkeep/agents-sdk"
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: inkeep-agents
- dependency-name: "@inkeep/agents-ui"
  dependency-version: 0.15.21
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: inkeep-agents
- dependency-name: "@inkeep/agents-work-apps"
  dependency-version: 0.62.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: inkeep-agents
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants