[nborges-aws]

Description

Bump inspector pin to newly released v0.6.3. Large lockfile diff is removing dependencies no longer declared by inspector.

---

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

[github-actions]

Package Tarball

aws-agentcore-1.0.1.tgz

How to install

gh release download pr-2775-tarball --repo aws/agentcore-cli --pattern "*.tgz" --dir /tmp/pr-tarball
npm install -g /tmp/pr-tarball/aws-agentcore-1.0.1.tgz

[agentcore-devx-automation]

Claude Security Review: no high-confidence findings. (run)

[agentcore-devx-automation]

AgentCore Harness Review

Verdict: Looks good

Verified the bump against base v1.x:

• Payload is inert. I unpacked both tarballs from the registry: dist-assets/{index.html,index.js,index.css,favicon.svg} are byte-identical between 0.6.2 and 0.6.3. The only manifest change is eslint-plugin-{import,prettier,react,react-hooks,testing-library} moving from dependencies to devDependencies. So scripts/build.ts:stageInspectorAssets() and src/core/dev/inspectorAssets.ts (which resolve dist-assets/index.html and @aws/agent-inspector/package.json) are unaffected, and the file set they expect is unchanged.
• Lockfile is consistent with a real bun install. The sha512-fuZDSte8… integrity in bun.lock matches the registry entry for 0.6.3. I parsed the post-PR lock and resolved every dependencies/peerDependencies edge against the hoisted + nested keys: 0 unresolved entries (802 packages, down from 1056). Every removal belongs to the eslint/babel/es-abstract transitive tree that the five plugins pulled in; the one non-removal change (json5 hoist 1.0.2 → 2.2.3) is the expected dedupe once tsconfig-paths drops out.
• Nothing in the repo uses eslint (lint is oxlint, .oxlintrc.json uses builtin plugins), and no source/doc/snapshot pins 0.6.2.
• No command.md churn in the diff.

Non-blocking: package.json still carries overrides["@typescript-eslint/typescript-estree"].minimatch, which is now dead config — @typescript-eslint/* is no longer anywhere in the tree after this bump. Fine to leave for a follow-up, but it could be dropped here while the context is fresh.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.50%. Comparing base (0aac7a8) to head (cbffab1).

Additional details and impacted files

@@            Coverage Diff             @@
##             v1.x    #2775      +/-   ##
==========================================
- Coverage   96.50%   96.50%   -0.01%     
==========================================
  Files         709      709              
  Lines       58865    58865              
==========================================
- Hits        56806    56805       -1     
- Misses       2059     2060       +1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.