v4.1.2

What's Changed

• build: distribute the 4.1.1 Claude security patch by @devag7 in #44
• fix: patch Vitest development dependencies by @devag7 in #45
• Repair runtime and publisher dependency findings by @devag7 in #48
• Prepare 4.1.2 security patch candidate by @devag7 in #49

Full Changelog: v4.1.1...v4.1.2

Optional local Claude packages

Both formats wrap the exact verified npm 4.1.2 runtime (24 tools). Download the matching checksum companion and verify it before allowing local Node code to run.

• Desktop extension: linkedin-mcp-tools-4.1.2.mcpb; SHA256 526b183e36f40139c8a351335859268ca680bd3d309f5980fcc92f3e27d81ba7.
• Local plugin: linkedin-mcp-local-4.1.2.zip; SHA256 cd0417c9dda049792b7095432690de1a065af9e04fd1ca458b3f9d1d1524de62.

Packed/unpacked cold discovery and input-bound checks passed, production audits were zero, and all 14 hosted packaging/source checks passed at the reviewed wrapper implementation. Both public files and checksums were independently downloaded and matched their local bytes. The plugin template rejects unexpected private files before packaging.

These are unsigned local packages. Code runs with the user's account permissions; native 4.1.2 Desktop/Code/Cowork startup and live LinkedIn behavior remain unverified. Local command plugins are not a cloud-chat connector or a Directory listing. No automatic job application submission is included. Packaging review and current evidence.