Skip to content

v0.28.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Aug 09:57
· 87 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.28.0
94f8375
This commit was signed with the committer’s verified signature.
claude Claude
SSH Key Fingerprint: 32dP45eSMmVSt/G/CGvcxl/P+MO3Nwj9xeTh/GSA2wc
Verified
Learn about vigilant mode.

What's Changed

Other Changes

  • fix(lock,verify): a truncated lock must not be written, nor verify green by @m1ngshum in #154
  • fix(server): mcpm_install must not leave a live server behind a failure by @m1ngshum in #155
  • test: stop the suite writing to the developer's real ~/.mcpm by @m1ngshum in #156
  • fix(scanner)!: tier 2 never fetches a scanner; it was dead and squattable by @m1ngshum in #159
  • fix(guard): decode Unicode TAG payloads; the block-tier path was bypassable by @m1ngshum in #160
  • fix(trust): evaluate the MCP trust floor on mcpm-native evidence only (#33) by @m1ngshum in #161
  • fix(guard): count concealed occurrences; a decoy phrase disarmed the TAG pass (#34) by @m1ngshum in #162

Full Changelog: v0.27.0...v0.28.0

Contributors

m1ngshum
Assets 4
Loading