chore: bump the deepseek-harness group in /plugins/dsh-skill-up with 18 updates by dependabot[bot] · Pull Request #298 · alibaba/skill-up

dependabot · 2026-10-05T07:36:57Z

Bumps the deepseek-harness group in /plugins/dsh-skill-up with 18 updates:

Package	From	To
@deepseek-ai/cordis	`4.0.2`	`4.0.4`
@deepseek-ai/dsh-agent	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-brand	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-code-runtime	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-http-proxy	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-invariants	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-jobs	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-llm	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-scope	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-session	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-session-projection	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-skill	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-subprocess	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-system-prompt	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-tools	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-typert-protocol	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-user-approval	`0.1.5-rc.2`	`0.1.5-rc.3`
@deepseek-ai/dsh-util-values	`0.1.5-rc.2`	`0.1.5-rc.3`

Updates @deepseek-ai/cordis from 4.0.2 to 4.0.4

Commits

See full diff in compare view

Updates @deepseek-ai/dsh-agent from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-brand from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-code-runtime from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-http-proxy from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-invariants from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

See full diff in compare view

Updates @deepseek-ai/dsh-jobs from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-llm from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-scope from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-session from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-session-projection from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-skill from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-subprocess from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-system-prompt from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-tools from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-typert-protocol from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-user-approval from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Updates @deepseek-ai/dsh-util-values from 0.1.5-rc.2 to 0.1.5-rc.3

Commits

8e7cca2 release(dsh): 0.1.5-rc.3
943af81 fix(release): pin vendor dependencies for dsh 0.1.5
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the deepseek-harness group in /plugins/dsh-skill-up with 18 updates: | Package | From | To | | --- | --- | --- | | [@deepseek-ai/cordis](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/vendor/cordis) | `4.0.2` | `4.0.4` | | [@deepseek-ai/dsh-agent](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/core/agent) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-brand](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/util/brand) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-code-runtime](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/code-runtime/code-runtime) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-http-proxy](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/util/http-proxy) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-invariants](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/support/invariants) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-jobs](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/jobs/jobs) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-llm](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/llm/llm) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-scope](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/core/scope) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-session](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/core/session) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-session-projection](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/session/session-projection) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-skill](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/skill/skill) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-subprocess](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/subprocess/subprocess) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-system-prompt](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/core/system-prompt) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-tools](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/core/tools) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-typert-protocol](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/typert/protocol) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-user-approval](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/interaction/user-approval) | `0.1.5-rc.2` | `0.1.5-rc.3` | | [@deepseek-ai/dsh-util-values](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/util/values) | `0.1.5-rc.2` | `0.1.5-rc.3` | Updates `@deepseek-ai/cordis` from 4.0.2 to 4.0.4 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/HEAD/vendor/cordis) Updates `@deepseek-ai/dsh-agent` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/core/agent) Updates `@deepseek-ai/dsh-brand` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/util/brand) Updates `@deepseek-ai/dsh-code-runtime` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/code-runtime/code-runtime) Updates `@deepseek-ai/dsh-http-proxy` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/util/http-proxy) Updates `@deepseek-ai/dsh-invariants` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/support/invariants) Updates `@deepseek-ai/dsh-jobs` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/jobs/jobs) Updates `@deepseek-ai/dsh-llm` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/llm/llm) Updates `@deepseek-ai/dsh-scope` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/core/scope) Updates `@deepseek-ai/dsh-session` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/core/session) Updates `@deepseek-ai/dsh-session-projection` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/session/session-projection) Updates `@deepseek-ai/dsh-skill` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/skill/skill) Updates `@deepseek-ai/dsh-subprocess` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/subprocess/subprocess) Updates `@deepseek-ai/dsh-system-prompt` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/core/system-prompt) Updates `@deepseek-ai/dsh-tools` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/core/tools) Updates `@deepseek-ai/dsh-typert-protocol` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/typert/protocol) Updates `@deepseek-ai/dsh-user-approval` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/interaction/user-approval) Updates `@deepseek-ai/dsh-util-values` from 0.1.5-rc.2 to 0.1.5-rc.3 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.5-rc.3/packages/util/values) --- updated-dependencies: - dependency-name: "@deepseek-ai/cordis" dependency-version: 4.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-agent" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-brand" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-code-runtime" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-http-proxy" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-invariants" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-jobs" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-llm" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-scope" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-session" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-session-projection" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-skill" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-subprocess" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-system-prompt" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-tools" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-typert-protocol" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-user-approval" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness - dependency-name: "@deepseek-ai/dsh-util-values" dependency-version: 0.1.5-rc.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: deepseek-harness ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-05T07:37:00Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0038064d70

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

chatgpt-codex-connector · 2026-10-05T07:40:41Z

-    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-user-approval": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-util-values": "0.1.5-rc.2"
+    "@deepseek-ai/cordis": "4.0.4",


Align Cordis with the DSH rc.3 peer requirement

The updated DSH rc.3 packages require @deepseek-ai/cordis exactly at 4.0.2 (for example, the newly locked dsh-agent metadata does so), but this direct dependency now installs 4.0.4. This leaves the dependency tree invalid (npm ls reports the Cordis peer as invalid), so the CI npm ci and the documented package-install flow must override an unsupported peer combination rather than testing a supported DSH set. Keep Cordis at 4.0.2 until a DSH release declares compatibility with 4.0.4.

Useful? React with 👍 / 👎.

dependabot Bot requested review from JHWang-1997, hittyt and zpzjzj as code owners October 5, 2026 07:36

chatgpt-codex-connector Bot reviewed Oct 5, 2026

View reviewed changes

Navigation Menu

Repository navigation

chore: bump the deepseek-harness group in /plugins/dsh-skill-up with 18 updates - #298

chore: bump the deepseek-harness group in /plugins/dsh-skill-up with 18 updates#298
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/plugins/dsh-skill-up/deepseek-harness-28a118f100

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

chatgpt-codex-connector Bot Oct 5, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 5, 2026

Labels

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Oct 5, 2026

Choose a reason for hiding this comment

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants