chore: deps update 2026-07-09#656
Merged
Merged
Conversation
yumemayu
pushed a commit
that referenced
this pull request
Jul 10, 2026
Unrelated to the briefs: #656 (chore: pnpm update) bumped the lockfile prettier specifier to ^3.9.5 but left package.json at ^3.9.4, so `pnpm install --frozen-lockfile` fails on every PR (and main). Align package.json to ^3.9.5 so this PR's CI can install (no lockfile change). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FLcqXYL3EEYn5AsrpMV2eE
yumemayu
added a commit
that referenced
this pull request
Jul 10, 2026
* briefs: add Critical Brief 099 / 100 / 101 (JA+EN) - 099 Agentjacking（Sentry MCP 経由の偽エラー報告でコーディングエージェントが 攻撃者コマンドを実行）— Pillar 02 / ai-decision-integrity / Pack C - 100 Aptos Move VM 型混同（約3,000ドル検証環境で再現・下流波及リスク） — Pillar 01 / bridge-config-trust / Pack A - 101 Paysafe 偽 SDK（決済SDKを装う17パッケージが決済API鍵・KYC資格情報を窃取） — Pillar 01 / code-provenance / Pack A 098 準拠フォーマット: 番号セクション①〜⑨、TL;DR 圧縮、gap 3行（JA/EN・ gap_fix は規約締め）、内部リンクなし（§5「補完」／§7「相補的に働く。」で閉じる）。 JA+EN 完全対訳。related_briefs は全て実在スラッグ、カテゴリ/Pack は enum 検証済み。 `astro sync` 緑。prettier 未適用（Brief .md 慣例）。 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FLcqXYL3EEYn5AsrpMV2eE * briefs: レビュー反映 — 100 分類を code-provenance 主に / 101 表記統一 - 100 Aptos: primary_category を bridge-config-trust → code-provenance に （根本原因＝Move VM の型/来歴の取り違えに合わせる）。bridge-config-trust は 下流波及の観点で secondary へ。§4 の分類記述も JA/EN で整合。 - 101 Paysafe: TL;DR の「17 件」を「17 の悪性パッケージ」に直し、本文の 「17 パッケージ」表記に統一。 astro sync 緑。 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FLcqXYL3EEYn5AsrpMV2eE * fix(ci): sync package.json prettier spec with lockfile (^3.9.5) Unrelated to the briefs: #656 (chore: pnpm update) bumped the lockfile prettier specifier to ^3.9.5 but left package.json at ^3.9.4, so `pnpm install --frozen-lockfile` fails on every PR (and main). Align package.json to ^3.9.5 so this PR's CI can install (no lockfile change). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FLcqXYL3EEYn5AsrpMV2eE --------- Co-authored-by: Mayumi Hara <mayumi@Mayumis-iMac.local> Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
自動依存更新