audio-utils v0.6.0

Highlights

• Preserve spaces, Unicode, metacharacters, and embedded newlines across audio discovery, batch processing, playlists, audits, and conversion pipelines.
• Add roots-file configuration for libraries whose paths cannot be represented safely as a space-separated environment value.
• Harden the MCP HTTP/SSE gateway with shared session limits, idle cleanup, trusted host/origin checks, payload limits, and accurate client error responses.
• Pin keyfinder source builds to reviewed commits and report installed revisions.
• Add stronger CI coverage for MCP, documentation links and anchors, minimum runtimes, Fedora ShellCheck, and FFmpeg variants.

Dependencies and compatibility

• Update the MCP SDK to 1.30 and its resolved dependency tree, including Hono server 2.1.0, fast-uri 3.1.5, Hono 4.13.0, and ip-address 10.4.0.
• The optional Node MCP gateway now requires Node 20 or newer. The dependency-free Bash MCP server is unchanged.
• npm audit --omit=dev reports zero known vulnerabilities.

Validation

• 105 unit and smoke tests passed.
• 232 functional tests passed locally.
• GitHub CI passed CodeQL, documentation validation, Ubuntu and Fedora ShellCheck, Node 20 MCP tests, and functional matrices against distro and latest FFmpeg.
• Coverage audit reports 100% of testable tools.