NousResearch/hermes-agent

npm audit dependency fixes across workspaces and packages

Cluster 130323 · dashboard. Data as of 2026-10-26 12:29 UTC

1 open item. Fix merged in #138024 on 14 Oct 2026. Check it covers your case.

open issue

open PRs

items grouped

Known?: Yes. 3 related items grouped here, 0 issues already closed.
Fix event: A fix was merged to main in PR #138024. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open: 1 issue and 0 PRs.

Next step: read #138024, then check whether your report is the one still open.

Read #138024 Pick up a Lab task

These three pull requests all address npm audit findings by changing dependencies, including bumping pinned undici and brace-expansion and updating packages for agent-browser, workspaces, root, web, ui-tui, and the WhatsApp bridge. Titles alone don't show whether the changes overlap or what their outcomes are.

Open issues1

Issue#130323fix: npm audit fixes for agent-browser and workspace dependencies

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#138024 fix(deps): `hermes doctor` npm audits clear for root, web, ui-tui and the WhatsApp bridge (salvage #136789)

merged to main

files: .npmrc, apps/desktop/package.json, package.json, tests-js/package.json, ui-tui/package.json, web/package.json

1 PR closed without merging

From the close comments: superseded by another PR 1

#130336 fix(deps): bump pinned undici and brace-expansion past new npm audit highs · superseded by another PR → #138024

How this cluster was grouped

Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem: dashboard
Merged PRs: #138024
Closed issues: 0
Attempts: 1 PR closed without merging
Fix link checked: 14 Oct 2026

For your agent

The same facts, typed.

cluster/130323.json
cluster/130323.md