Skip to content

v0.10.1

Choose a tag to compare

View all tags
@I4cTime I4cTime released this 25 Apr 02:10
v0.10.1
7b54a35
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch release — unblock publish pipeline

This patch ships v0.10.0's refactor + security work to npm. The functional source code is unchanged from v0.10.0; the bump exists solely to push a new artifact through the now-fixed publish workflow.

Fix

  • publish.yml — removed npm install -g npm@latest step that crashed with Cannot find module 'promise-retry' on the Node 22 runner image. This bug had silently blocked v0.9.9 and v0.10.0 from reaching npm (both were tagged + GitHub-released but never published).
  • publish.yml — added workflow_dispatch trigger with optional ref input so a stuck release can be manually re-published from the Actions tab without re-tagging.

Highlights from v0.10.0 (now actually shipping)

  • CLI decomposed into nine themed modules under src/cli/commands/.
  • MCP tools decomposed into ten focused modules under src/mcp/tools/ plus shared _shared.ts.
  • Grouped qring --help with nine glyph-prefixed sections.
  • Approval HMAC widened to cover workspace and sessionId.
  • JIT HTTP SSRF fails closed on DNS errors.
  • Teleport AES-GCM uses 12-byte IVs.
  • 164 tests across 24 files.

Installation

npm install -g @i4ctime/q-ring
brew install i4ctime/tap/qring   # via the auto-update workflow

Full changelog: https://github.com/I4cTime/quantum_ring/blob/main/CHANGELOG.md

Assets 2
Loading