NousResearch/hermes-agent

dependency bumps and vulnerability fixes

Cluster 89903 · apps/desktop. Data as of 2026-10-26 12:29 UTC

2 open items. Fix merged in #142707 on 21 Oct 2026. Check it covers your case.

open issue

open PR

items grouped

Known?: Yes. 4 related items grouped here, 0 issues already closed.
Fix event: A fix was merged to main in PR #142707. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open: 1 issue and 1 PR.

Next step: read #142707, then check whether your report is the one still open.

Read #142707 Pick up a Lab task

These items address dependency updates including an Electron version bump and fixes for a known nanoid vulnerability (GHSA-2v37-7h3g-55p8) affecting the website and build tooling. A runtime-gated NVIDIA SwiftShader fallback change is also included in the Electron upgrade.

Open issues1

Issue#89903build(deps): nanoid override pinned to vulnerable 3.3.17 (GHSA-2v37-7h3g-55p8); electron/extract-zip advisories

Open PRs1

PR#128267fix(deps): bump Electron 40.10.2 to 44.4.5 and gate the NVIDIA SwiftShader fallback on the runtime major

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#142707 fix(deps): bump nanoid 3.x to 3.3.20 (high, GHSA-2v37-7h3g-55p8)

merged to main

files: package.json, website/package.json

1 PR closed without merging

From the close comments: superseded by another PR 1

#125145 fix(deps): bump the website nanoid override past GHSA-2v37-7h3g-55p8 · superseded by another PR → #142707

How this cluster was grouped

Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
Pairwise link density 0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem: apps/desktop
Merged PRs: #142707
Closed issues: 0
Attempts: 1 PR closed without merging
Fix link checked: 21 Oct 2026

For your agent

The same facts, typed.

cluster/89903.json
cluster/89903.md