Skip to content

v0.4.7: Survey-catalog corrections and supply-chain hardening

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 17 Jul 07:15
v0.4.7
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
1ff724f
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

Survey-catalog corrections and supply-chain hardening

Survey-catalog corrections plus mcp-ts-core ^0.10.14 supply-chain hardening (bunfig minimumReleaseAge, Socket scanner, SECURITY.md).

Added:

  • Supply-chain hardening: bunfig minimumReleaseAge + Socket security scanner, .github/SECURITY.md, .gitattributes
  • .github/FUNDING.yml

Changed:

  • Dockerfile: BuildKit cache mounts on bun install; Bun base images to 1.3.14

Dependency bumps:

  • @cyanheads/mcp-ts-core ^0.10.9 → ^0.10.14
  • @biomejs/biome ^2.5.0 → ^2.5.2
  • @types/node ^26.0.0 → ^26.1.0
  • ignore ^7.0.5 → ^7.0.6
  • tsc-alias ^1.8.17 → ^1.9.0
  • vitest ^4.1.9 → ^4.1.10
  • New: @socketsecurity/bun-security-scanner ^1.1.2

Fixed:

  • bls_list_surveys CATEGORY_MAP: dropped the misplaced IN from injuries, added the real injury/illness family; dropped phantom IC/DI from employment/productivity, added PI/PF (#44)
  • bls-catalog harvest sa → ap: the real BLS Average Price Data survey was never indexed; the discontinued SIC employment survey had been mislabeled as CPI average prices (#43)
  • Observations ingester now imports canonical SURVEY_ABBRS from the catalog service instead of a second, drifted survey list (#49)

160 tests pass; bun run devcheck clean.

CHANGELOG v0.4.7

Assets 3
Loading