lingo.dev@0.137.4

lingodotdev/lingo.devlingo.dev@0.137.4Jun 22, 2026by github-actions[bot]

AI Summary

Major dependency maintenance to reduce npm audit vulnerabilities and remove unused packages like `ink`.

Key Highlights

Reduced npm audit findings from 13 to 8 (critical 1 to 0, high 4 to 1)
Removed unused `ink`, `@inkjs/ui`, `ink-spinner`, and `ink-progress-bar` packages
Updated `@babel/core` and `ai-sdk-ollama` versions

Full Release Notes

### Patch Changes

- [#2140](https://github.com/lingodotdev/lingo.dev/pull/2140) [`0d4ebee`](https://github.com/lingodotdev/lingo.dev/commit/0d4ebee8ac613879e57b91dbe1665b232300f998) Thanks [@moygospadin](https://github.com/moygospadin)! - fix(deps): reduce npm audit vulnerabilities and update dependencies

  Security (cuts a fresh consumer `npm audit` from 13 → 8, critical 1 → 0, high 4 → 1):
  - `@lingo.dev/_react`: widen the `next` peerDependency from the exact vulnerable `15.3.8` to `>=15.5.19 <16`.
  - `lingo.dev`: `yaml` 2.8.1 → 2.9.0, `diff` 7.0.0 → 9.0.0, `@datocms/cma-client-node` 4.0.1 → 5.5.3 (patched `uuid`).

  Dependency maintenance (consolidated from dependabot, build + tests verified):
  - `lingo.dev`: removed unused deps `ink`/`@inkjs/ui`/`ink-spinner`/`ink-progress-bar` (avoids ink v7's Node >=22 requirement), `@modelcontextprotocol/sdk`, `unist-util-visit`; bumped `@biomejs/wasm-nodejs` 2.4.6 → 2.5.0.
  - `@lingo.dev/compiler`: bumped `@babel/core` 7.26.0 → 7.29.6, `ai-sdk-ollama` 3.0.0 → 3.8.8.

- Updated dependencies [[`0d4ebee`](https://github.com/lingodotdev/lingo.dev/commit/0d4ebee8ac613879e57b91dbe1665b232300f998)]:
  - @lingo.dev/_react@0.7.9