fix(deps): update dependency @napi-rs/keyring to v2.1.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@napi-rs/keyring	2.0.0 → 2.1.0

---

Release Notes

Brooooooklyn/keyring-node (@​napi-rs/keyring)

v2.1.0

Compare Source

What's Changed

• chore: bump up cross-platform-actions/action action to v1.6.0 by @​renovate[bot] in #​143
• feat: allow selecting the Linux credential store explicitly by @​Brooooooklyn in #​144
• chore: refresh deps and binding files by @​Brooooooklyn in #​145

Full Changelog: Brooooooklyn/keyring-node@v2.0.0...v2.1.0

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • Between 09:00 AM and 06:59 PM, Monday through Friday (* 9-18 * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

🦋 Changeset detected

Latest commit: 8d65e44

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
@tailor-platform/sdk	Patch
@tailor-platform/create-sdk	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[pkg-pr-new]

Open in StackBlitz

@tailor-platform/create-sdk

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/create-sdk@8d65e44

@tailor-platform/eslint-plugin-sdk

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/eslint-plugin-sdk@8d65e44

@tailor-platform/sdk

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk@8d65e44

@tailor-platform/sdk-plugin-seed

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk-plugin-seed@8d65e44

@tailor-platform/sdk-plugin-setup

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk-plugin-setup@8d65e44

@tailor-platform/sdk-plugin-tailordb-erd

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk-plugin-tailordb-erd@8d65e44

commit: 8d65e44

[github-actions]

🤖 Claude Dependency Review

✅ Recommended Actions

None — safe to merge as-is.

📦 Update Summary

• Library: @​napi-rs/keyring
• Version: 2.0.0 → 2.1.0
• Change Type: Minor

📝 Release Notes

Release v2.1.0

What's Changed:

• feat: allow selecting the Linux credential store explicitly (#144) - adds optional third parameter to Entry constructor and withTarget method to allow pinning to specific Linux credential backends (secret-service or keyutils)
• chore: bump up cross-platform-actions/action action to v1.6.0 (#143)
• chore: refresh deps and binding files (#145)

Full Changelog: Brooooooklyn/keyring-node@v2.0.0...v2.1.0

🔐 Security Assessment

• Risk: 🟢 Low
• Known vulnerabilities: None found. No CVEs or GitHub Security Advisories exist for @​napi-rs/keyring (source)
• Supply-chain notes:
  • Maintainer stability: Actively maintained by Brooooooklyn (LongYinan), consistent maintainer since v1.x
  • No suspicious lifecycle scripts detected
  • No unexpected new dependencies introduced
  • Release was signed with verified SSH credentials confirming authenticity

🚨 Breaking Changes

None. This is a fully backwards-compatible minor release.

The new Linux credential store selection feature adds an optional third parameter to the Entry constructor and withTarget method. Omitting the parameter maintains existing behavior (Secret Service → keyutils auto-fallback).

✨ Main Changes

New Feature: Linux Credential Store Selection

Adds optional control over Linux credential backend selection through a new options parameter:

// New optional third parameter (backwards compatible)
new Entry('service', 'account', { linux: { store: 'secret-service' } })
new Entry('service', 'account', { linux: { store: 'keyutils' } })
Entry.withTarget('target', 'svc', 'user', { linux: { store: 'keyutils' } })

Behavior:

• Without the option (existing behavior): Maintains Secret Service → keyutils auto-fallback
• With the option: Pins to the specified backend and fails if that backend is unavailable (prevents silent credential store switching)
• Platform handling: Option is only meaningful on Linux; other platforms ignore it

Why this matters: Previously, credentials could silently fall back from Secret Service (durable storage) to keyutils (in-memory only), which could lead to unexpected credential loss. Explicit pinning prevents this scenario when desired.

Maintenance Updates

• Dependency updates for cross-platform testing infrastructure
• Refreshed binding files for native modules

🔍 Impact Analysis

📁 Usage Locations

@​napi-rs/keyring is used in the following 1 file:

1. packages/sdk/src/cli/shared/token-store.ts

   const entry = new Entry(SERVICE_NAME, account);
   entry.getPassword();
   entry.setPassword(JSON.stringify(tokens));
   entry.deletePassword();

   • Feature used: Entry constructor (2-parameter form), getPassword, setPassword, deletePassword methods
   • Impact: ✅ No impact - The code uses the 2-parameter constructor without the new optional third parameter. This is fully backwards compatible. The new feature is opt-in and does not affect existing usage.

Test Files (Mocked)

The library is mocked in 11 test files to avoid keyring dependencies during testing:

• packages/sdk/src/cli/commands/login.test.ts:34
• packages/sdk/src/cli/commands/logout.test.ts:24
• packages/sdk/src/cli/commands/profile/create.test.ts:17
• packages/sdk/src/cli/commands/profile/list.test.ts:18
• packages/sdk/src/cli/commands/profile/update.test.ts:30
• packages/sdk/src/cli/commands/workspace/create.test.ts:19
• packages/sdk/src/cli/commands/workspace/ttl/ttl.test.ts:19
• packages/sdk/src/cli/commands/user/list.test.ts:17
• packages/sdk/src/cli/commands/user/switch.test.ts:15
• packages/sdk/src/cli/commands/user/current.test.ts:17
• packages/sdk/src/cli/shared/context.test.ts:34
• packages/sdk/src/cli/shared/readonly-guard.test.ts:193
• packages/sdk/src/cli/shared/token-store.test.ts:18

Impact: ✅ No changes needed - test mocks remain compatible with the updated API since the new parameter is optional.

Summary

This update introduces an opt-in feature for Linux users who need explicit control over credential storage backends. The SDK's current usage pattern (2-parameter constructor calls) is fully compatible with v2.1.0, and no code changes are required.

---

[github-actions]

Code Metrics Report (packages/sdk)

	main (5f6664a)	#2383 (9c12832)	+/-
Coverage	84.1%	84.1%	0.0%
Code to Test Ratio	1:0.5	1:0.5	0.0

Details

  |                    | main (5f6664a) | #2383 (9c12832) | +/-  |
  |--------------------|----------------|-----------------|------|
  | Coverage           |          84.1% |           84.1% | 0.0% |
  |   Files            |            526 |             526 |    0 |
  |   Lines            |          21520 |           21520 |    0 |
  |   Covered          |          18103 |           18103 |    0 |
  | Code to Test Ratio |          1:0.5 |           1:0.5 |  0.0 |
  |   Code             |         166156 |          166156 |    0 |
  |   Test             |          88288 |           88288 |    0 |

SDK Configure Bundle Size

	main (5f6664a)	#2383 (9c12832)	+/-
configure-index-size	13.37KB	13.37KB	0KB
dependency-chunks-size	20.72KB	20.72KB	0KB
total-bundle-size	34.1KB	34.1KB	0KB

Runtime Performance

	main (5f6664a)	#2383 (9c12832)	+/-
Generate Median	1,478ms	1,846ms	+368ms
Generate Max	1,506ms	1,857ms	+351ms
Apply Build Median	1,612ms	2,020ms	+408ms
Apply Build Max	1,793ms	2,031ms	+238ms

Type Performance (instantiations)

	main (5f6664a)	#2383 (9c12832)	+/-
tailordb-basic	47,310	47,310	0
tailordb-optional	4,768	4,768	0
tailordb-relation	4,840	4,840	0
tailordb-validate	694	694	0
tailordb-hooks	5,833	5,833	0
tailordb-object	13,762	13,762	0
tailordb-enum	1,619	1,619	0
resolver-basic	12,120	12,120	0
resolver-nested	35,419	35,419	0
resolver-array	24,056	24,056	0
executor-schedule	4,489	4,489	0
executor-webhook	1,130	1,130	0
executor-record	5,443	5,443	0
executor-resolver	5,808	5,808	0
executor-operation-function	1,118	1,118	0
executor-operation-gql	1,126	1,126	0
executor-operation-webhook	1,137	1,137	0
executor-operation-workflow	1,931	1,931	0

---

Reported by octocov