v0.31.0
·
47 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
What's Changed
Other Changes
- fix: four honesty gaps in the dogfood, the install docs, and the test runner by @m1ngshum in #173
- test: fail the build when a doc quotes a stale engines.node range by @m1ngshum in #174
- ci: matrix the pre-publish dogfood across every supported Node major by @m1ngshum in #175
- feat: audit says 'clean · not run' instead of calling every server caution by @m1ngshum in #176
- docs(todos): #50-#54 — five detector gaps found by scoring against real CVEs by @m1ngshum in #178
- fix(policy): stop an external-only registryMeta cap from masking a native drop by @m1ngshum in #179
- feat(guard): detect shell metacharacters in identifier-shaped tool_call_args by @m1ngshum in #180
- feat(guard): detect query-control syntax in identifier-shaped tool_call_args (#51) by @m1ngshum in #181
- fix(guard): pre-release audit — drop bare-pipe FP, finish worstAction dedup by @m1ngshum in #182
Full Changelog: v0.30.0...v0.31.0
Contributors
m1ngshum