{"repo":"NousResearch/hermes-agent","public_id":"89903","display_label":"dependency bumps and vulnerability fixes","summary":"These items address dependency updates including an Electron version bump and fixes for a known nanoid vulnerability (GHSA-2v37-7h3g-55p8) affecting the website and build tooling. A runtime-gated NVIDIA SwiftShader fallback change is also included in the Electron upgrade.","subsystem":"apps/desktop","counts":{"members":4,"open_issues":1,"open_issues_distinct":1,"open_prs":1,"closed_issues":0,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":142707,"merged_at":"2026-10-21T21:07:18+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-10-21T21:07:18+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[{"issue_number":89903,"pr_number":142707,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-10-21T21:07:18+00:00"}],"members":[{"kind":"issue","number":89903,"title":"build(deps): nanoid override pinned to vulnerable 3.3.17 (GHSA-2v37-7h3g-55p8); electron/extract-zip advisories","url":null,"state":"open"},{"kind":"pr","number":125145,"title":"fix(deps): bump the website nanoid override past GHSA-2v37-7h3g-55p8","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#142707","number":142707}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":128267,"title":"fix(deps): bump Electron 40.10.2 to 44.4.5 and gate the NVIDIA SwiftShader fallback on the runtime major","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"36d97a778f1915da4387d08f0cdbd407dce8da97","number":0}],"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":142707,"title":"fix(deps): bump nanoid 3.x to 3.3.20 (high, GHSA-2v37-7h3g-55p8)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["package.json","website/package.json"]}],"trust":{"default_tier":"verified","includes_suggested":false}}