[charliesantos]

Pull Request Details

Description

Merge feature/seccomp into main to remediate vulnerable development, build, test, and example dependencies.

• chore(deps): refresh dev dependencies and replace uri-js with fast-uri #80: Refresh dev dependencies, retain Vite 7.x, and replace unmaintained uri-js with fast-uri.
• chore(deps): upgrade cmake-js to 8 #81: Upgrade cmake-js to 8, moving transitive tar to 7.5.22.
• chore(deps): upgrade onnxruntime-node to 1.31.1 in examples and add a lockfile #82: Upgrade examples to onnxruntime-node 1.31.1, moving transitive adm-zip to 0.6.1, and add an examples lockfile for reproducible installs.

Changes are limited to the root and examples package manifests and lockfiles. The SDK has no runtime dependencies.

Public API changes

None. Published runtime behavior is unchanged.

Validation

Reported in the component PRs on Linux x64, Node 24.14:

• Lint, typecheck, and documentation checks passed.
• Coverage tests: 424 passed, with unchanged coverage.
• Integration tests: 66 passed, 1 skipped.
• Browser tests: 3 passed.
• Clean native build, packaging, release ABI checks, and package installation passed.
• Real-Room examples passed, including the ONNX computer-vision examples. voice_agent.js was not run because it requires an OpenAI key.
• Examples installed with npm ci; npm audit reported no vulnerabilities.

Proxy-dependent build runners need NODE_USE_ENV_PROXY=1 for cmake-js 8 to honor HTTP_PROXY when downloading Node headers.