From 2c2425ec55842763eed55a93e3c3696278235334 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 1 Oct 2026 21:10:37 +0000 Subject: [PATCH 1/2] Bump the npm group with 2 updates Bumps the npm group with 2 updates: [@deepseek-ai/dsh-mcp-client](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/mcp/mcp-client) and [@deepseek-ai/dsh-skill-filesystem](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/skill/skill-filesystem). Updates `@deepseek-ai/dsh-mcp-client` from 0.1.0-rc.8 to 0.2.0-rc.1 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.2.0-rc.1/packages/mcp/mcp-client) Updates `@deepseek-ai/dsh-skill-filesystem` from 0.1.0-rc.8 to 0.2.0-rc.1 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.2.0-rc.1/packages/skill/skill-filesystem) --- updated-dependencies: - dependency-name: "@deepseek-ai/dsh-mcp-client" dependency-version: 0.2.0-rc.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@deepseek-ai/dsh-skill-filesystem" dependency-version: 0.2.0-rc.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm ... Signed-off-by: dependabot[bot] --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index d257321..ee1628a 100644 --- a/package.json +++ b/package.json @@ -32,7 +32,7 @@ "node": ">=20.19.0" }, "dependencies": { - "@deepseek-ai/dsh-mcp-client": "^0.1.0-rc.6", - "@deepseek-ai/dsh-skill-filesystem": "^0.1.0-rc.6" + "@deepseek-ai/dsh-mcp-client": "^0.2.0-rc.1", + "@deepseek-ai/dsh-skill-filesystem": "^0.2.0-rc.1" } } From 16ada9cf1e1a3246196d72bbe794bee86f912976 Mon Sep 17 00:00:00 2001 From: Alex Ezell Date: Thu, 1 Oct 2026 16:25:22 -0500 Subject: [PATCH 2/2] Test required dependencies without pinning their versions --- tests/test_repository.py | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/tests/test_repository.py b/tests/test_repository.py index 4e7da02..646f7a4 100644 --- a/tests/test_repository.py +++ b/tests/test_repository.py @@ -50,11 +50,15 @@ def test_manifest_declares_a_patch_bundle(self) -> None: self.assertIn("dsh-plugin", self.manifest["keywords"]) self.assertEqual(self.manifest["main"], "index.js") self.assertEqual(self.manifest["engines"]["node"], ">=20.19.0") + + def test_manifest_declares_harness_plugins_as_direct_dependencies(self) -> None: + # Dependency versions are maintained by Dependabot; enforce the package + # contract here and check compatibility with check_skill_entry.mjs in CI. self.assertEqual( - self.manifest["dependencies"], + set(self.manifest["dependencies"]), { - "@deepseek-ai/dsh-mcp-client": "^0.1.0-rc.6", - "@deepseek-ai/dsh-skill-filesystem": "^0.1.0-rc.6", + "@deepseek-ai/dsh-mcp-client", + "@deepseek-ai/dsh-skill-filesystem", }, )