fix(coding-agent): bump uuid to v14 closes #3577

packages/coding-agent/CHANGELOG.md

@@ -8,6 +8,7 @@
 
 ### Fixed
 
+- Fixed `pi-coding-agent` shipping `uuid@11`, which triggered `npm audit` moderate vulnerability reports for downstream installs; the package now depends on `uuid@14` ([#3577](https://github.com/badlogic/pi-mono/issues/3577))
 - Fixed `ctx.ui.setWorkingMessage()` to persist across loader recreation, matching the behavior of `ctx.ui.setWorkingIndicator()` ([#3566](https://github.com/badlogic/pi-mono/issues/3566))
 - Fixed coding-agent `fs.watch` error handling for theme and git-footer watchers to retry after transient watcher failures such as `EMFILE`, avoiding startup crashes in large repos ([#3564](https://github.com/badlogic/pi-mono/issues/3564))
 

packages/coding-agent/package.json

@@ -43,7 +43,6 @@
 		"@mariozechner/pi-ai": "^0.69.0",
 		"@mariozechner/pi-tui": "^0.69.0",
 		"@silvia-odwyer/photon-node": "^0.3.4",
-		"typebox": "^1.1.24",
 		"chalk": "^5.5.0",
 		"cli-highlight": "^2.1.11",
 		"diff": "^8.0.2",
@@ -56,8 +55,9 @@
 		"minimatch": "^10.2.3",
 		"proper-lockfile": "^4.1.2",
 		"strip-ansi": "^7.1.0",
+		"typebox": "^1.1.24",
 		"undici": "^7.19.1",
-		"uuid": "^11.1.0",
+		"uuid": "^14.0.0",
 		"yaml": "^2.8.2"
 	},
 	"overrides": {