Skip to content

v0.1.7: OSV ecosystem authority, recovery hints, content[] parity

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 30 Jun 20:01
v0.1.7
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
10aee99
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

OSV ecosystem authority, recovery hints, content[] parity

Four coupled DX fixes across the tool surface; tool output schemas unchanged.

Fixed:

  • osv_query_batch: drop the static ecosystem preflight — OSV now validates, and an unknown ecosystem degrades to a per-package error instead of failing the whole batch (#3)
  • osv_query_package, osv_get_vulnerability: declared recovery hints reach data.recovery.hint and content[] via ctx.recoveryFor() (#4)
  • format(): osv_query_batch renders a Clean Packages section; osv_get_vulnerability renders all references (was capped at the first 8) (#5)
  • Stale osv_query references corrected to osv_query_package in tool/output text and docs/design.md (#8)

Dependency bumps:

  • @biomejs/biome ^2.5.0 → ^2.5.1
  • @types/node ^26.0.0 → ^26.0.1

43 tests pass; bun run devcheck clean.

Assets 3
Loading