From e6f4a2a1b97db3423ce85668434f310bb384b282 Mon Sep 17 00:00:00 2001 From: tomas Date: Tue, 6 Oct 2026 13:43:47 +0000 Subject: [PATCH 1/2] chore(server): remove jest from runtime dependencies jest ^26.0.1 has been listed under both `dependencies` and `devDependencies` of packages/server since f5b085b ("migrate testing tool to jest", 2020-05-16). Nothing under src/, bin/ or npm_bin/ loads it at runtime. It is only the test runner, and the devDependencies entry stays. Because it was a runtime dependency, every consumer of @deepnote/sql-language-server installed the whole jest 26 tree in production. In vscode-deepnote that put jest, @jest/*, micromatch, braces and sprintf-js into `npm audit --omit=dev`, so their advisories failed the production audit gate. yarn.lock is unchanged: `yarn install --frozen-lockfile` accepts it, since the devDependencies entry keeps the same `jest@^26.0.1` resolution. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01USEnGCRP32gQH4AZHbRVqQ --- packages/server/package.json | 1 - 1 file changed, 1 deletion(-) diff --git a/packages/server/package.json b/packages/server/package.json index 8958c198..1e67fa5f 100644 --- a/packages/server/package.json +++ b/packages/server/package.json @@ -48,7 +48,6 @@ "@types/pg": "^8.6.6", "@types/yargs": "^17.0.8", "cardinal": "^2.1.1", - "jest": "^26.0.1", "mysql2": "^3.9.8", "node-ssh-forward": "^0.6.3", "pg": "^8.9.0", From 2a8356bf4e867f8ac7f896107b3f6b6ffaf4dc46 Mon Sep 17 00:00:00 2001 From: tomas Date: Tue, 6 Oct 2026 13:45:11 +0000 Subject: [PATCH 2/2] chore(server): bump @deepnote/sql-language-server to 3.0.1 Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01USEnGCRP32gQH4AZHbRVqQ --- packages/server/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/server/package.json b/packages/server/package.json index 1e67fa5f..a7cdd488 100644 --- a/packages/server/package.json +++ b/packages/server/package.json @@ -1,6 +1,6 @@ { "name": "@deepnote/sql-language-server", - "version": "3.0.0", + "version": "3.0.1", "main": "dist/src/index.js", "bin": { "sql-language-server": "./npm_bin/cli.js"