v0.1.4 Release Notes

Highlights

docmd-search v0.1.4 patches known vulnerabilities in core binary dependencies and ensures modern cross-platform prebuild compatibility across Apple Silicon and Linux distributions.

Security & Dependency Improvements

• sharp (^0.35.4): Remediates a high-severity vulnerability in the bundled libheif image processing library (GHSA-rgj7-g3m4-5g8c).
• adm-zip (>=0.6.0): Resolves a directory traversal and arbitrary file overwrite vulnerability (GHSA-955c-w567-g4pw).
• protobufjs (^7.6.5): Fixes a prototype pollution vulnerability (CVE-2023-36665).
• onnxruntime-node (^1.27.0): Provides native prebuilds for Node 20/22+ on Apple Silicon (darwin-arm64) and modern Linux distributions.
• Explicit Dependency Overrides: Root-level overrides are now enforced directly, preventing consumers from inadvertently pulling obsolete or vulnerable binary builds.

Upgrade

npm install docmd-search@0.1.4