From 587fa0fdcdaffb31fd4c09e37fd9e7ba66fa01ca Mon Sep 17 00:00:00 2001
From: Gabriel Brown <gbrown@ksensetech.com>
Date: Thu, 1 Oct 2026 15:45:15 -0400
Subject: [PATCH] chore: pin the dependencies that floated on latest

Five dependencies used "latest", so every upstream release changed the resolution and CI's frozen install refused the lockfile. They now use ranges around the versions already locked and deployed, so nothing changes at runtime.
---
 apps/agent-worker/package.json |  4 ++--
 apps/next/package.json         |  6 +++---
 bun.lock                       | 10 +++++-----
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/apps/agent-worker/package.json b/apps/agent-worker/package.json
index 46ab352..b4b1f04 100644
--- a/apps/agent-worker/package.json
+++ b/apps/agent-worker/package.json
@@ -17,10 +17,10 @@
   "dependencies": {
     "@octokit/auth-app": "^8.2.0",
     "@octokit/rest": "^22.0.1",
-    "@opencode-ai/sdk": "latest",
+    "@opencode-ai/sdk": "^1.17.18",
     "convex": "catalog:convex",
     "dockerode": "^4.0.7",
-    "execa": "latest",
+    "execa": "^9.6.1",
     "ws": "catalog:",
     "zod": "catalog:"
   },
diff --git a/apps/next/package.json b/apps/next/package.json
index 9b4e6c5..c54c446 100644
--- a/apps/next/package.json
+++ b/apps/next/package.json
@@ -22,7 +22,7 @@
   "dependencies": {
     "@convex-dev/auth": "catalog:convex",
     "@git-diff-view/react": "^0.1.6",
-    "@monaco-editor/react": "latest",
+    "@monaco-editor/react": "^4.7.0",
     "@sentry/nextjs": "^10.46.0",
     "@spoon/backend": "workspace:*",
     "@spoon/ui": "workspace:*",
@@ -31,8 +31,8 @@
     "@xterm/addon-web-links": "^0.12.0",
     "@xterm/xterm": "^6.0.0",
     "convex": "catalog:convex",
-    "monaco-editor": "latest",
-    "monaco-vim": "latest",
+    "monaco-editor": "~0.55.1",
+    "monaco-vim": "~0.4.4",
     "next": "^16.2.1",
     "next-plausible": "^3.12.5",
     "next-themes": "^0.4.6",
diff --git a/bun.lock b/bun.lock
index 4b18b26..7fac12b 100644
--- a/bun.lock
+++ b/bun.lock
@@ -21,10 +21,10 @@
       "dependencies": {
         "@octokit/auth-app": "^8.2.0",
         "@octokit/rest": "^22.0.1",
-        "@opencode-ai/sdk": "latest",
+        "@opencode-ai/sdk": "^1.17.18",
         "convex": "catalog:convex",
         "dockerode": "^4.0.7",
-        "execa": "latest",
+        "execa": "^9.6.1",
         "ws": "catalog:",
         "zod": "catalog:",
       },
@@ -102,7 +102,7 @@
       "dependencies": {
         "@convex-dev/auth": "catalog:convex",
         "@git-diff-view/react": "^0.1.6",
-        "@monaco-editor/react": "latest",
+        "@monaco-editor/react": "^4.7.0",
         "@sentry/nextjs": "^10.46.0",
         "@spoon/backend": "workspace:*",
         "@spoon/ui": "workspace:*",
@@ -111,8 +111,8 @@
         "@xterm/addon-web-links": "^0.12.0",
         "@xterm/xterm": "^6.0.0",
         "convex": "catalog:convex",
-        "monaco-editor": "latest",
-        "monaco-vim": "latest",
+        "monaco-editor": "~0.55.1",
+        "monaco-vim": "~0.4.4",
         "next": "^16.2.1",
         "next-plausible": "^3.12.5",
         "next-themes": "^0.4.6",