Skip to content

v2.1.0

Latest
Latest

Choose a tag to compare

View all tags
@TheStreamCode TheStreamCode released this 30 Oct 22:55
· 5 commits to main since this release
v2.1.0
a58fc03
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release 2.1.0.

Highlights

  • npm publication now uses Trusted Publishing (OIDC); the publish workflow requires the npm environment, checks main ancestry, and gates on the MCP surface, release metadata, package contents and runtime audit. Manual dispatch can retry an existing tag.
  • New registry workflow publishes server.json to the official MCP Registry with GitHub OIDC, a pinned mcp-publisher and checksum verification.
  • New npm run verify:mcp protocol smoke test and npm run release:check metadata check, both wired into CI on Node 20, 22 and 24.
  • Runtime zod upgraded to v4; @types/node realigned to the Node 20 line; package repository metadata normalized.
  • Runtime lockfile refreshed to clear the body-parser high advisory and the qs and @hono/node-server moderate advisories that kept CI red.

Verification

npm run check (format, lint, types, coverage, build), npm run verify:mcp, npm run release:check, npm audit --omit=dev --audit-level=high and npm pack --dry-run pass. The published package still contains the expected 13 files. Live Chutes integration tests remain opt-in and were not run.

See CHANGELOG.md for details.

Assets 2
Loading