v1.4.1

• v1.4.1
• docs(changelog): entry for the upcoming patch release
• chore(engines): require Node >= 20.11.0 to match the test tooling
• chore(security): gitignore .npmrc so a project-local token can't be committed
• fix(test): bound the suite with --test-timeout so a hang cannot wedge a release
• fix(launcher): port the ssh-mcp launcher fixes (#13)
• fix(release): stop recommending web login on npm auth failure

v1.4.0

• v1.4.0
• style: apply formatter to satisfy the release lint gate
• feat(runtime): require oam 0.9.0
• test: assert server.json and package.json stay in sync (#12)

v1.3.0

• v1.3.0
• docs: promote [Unreleased] to 1.3.0 and sync server.json
• feat(runtime): prefer oam, fall back to Node (#11)
• v1.2.15
• chore(ci): remove GitHub Actions workflows and dependabot config (#10)
• chore(deps-dev): bump hono from 4.12.23 to 4.12.26 (#9)
• fix: update esbuild (dependabot alerts)

v1.2.15

v1.2.15

v1.2.14

• v1.2.14
• fix(deps): bump hono + add qs override to clear Dependabot advisories
• fix(tools): scope raw-ipcRenderer detection and sanitize codegen inputs (#7)

v1.2.13

• v1.2.13
• test: cover renderer/innerHTML lint-security branches + deprecated-API stateful-regex
• fix(release): compare tag-object shas in drift guard so resume runs don't false-abort
• fix(readme): point "Add to Yaw MCP" badge at the https forwarder
• docs(release): fix tag-drift comment to describe the real failure mode
• fix(release): refuse to push if origin's tag drifted from local
• fix(release): add SKIP_LINT=1 escape hatch for broken lint runners

v1.2.12

• v1.2.12
• chore: sync server.json version to match package.json
• fix(release): tty-gate the confirmation prompt
• fix(release): sync server.json unconditionally, not only inside the bump else
• fix(release): fall back to gh auth token for MCP Registry
• chore: fold MCP Registry publish into release.sh, drop release.yml
• fix(release): run lint/build/test unconditionally on CI path
• fix(release): drop needs: ref to removed reusable workflow
• chore(ci): drop non-release workflows
• chore(readme): swap mcp.hosting badge -> Add to Yaw MCP yaw:// deep link
• docs(readme): pin npx spawn to @latest for auto-update
• fix(release): address six issues from review of the CI-handoff step
• fix(release): hand off to CI instead of racing it at step 5

v1.2.11

• v1.2.11
• docs(changelog): 1.2.9 and 1.2.10 release notes

v1.2.10

• v1.2.10
• release infra hardening: npm whoami pre-flight + OIDC login retry

v1.2.9

• v1.2.9
• full-pass + coverage followups: construction gate, IPv6/0.0.0.0 HTTPS exclusion, test-script drift, +35 coverage tests