v3.4.5

3.4.5 (2026-08-28)

Fixes

• deps: refresh dependencies and resolve alerts (#269) (18f493d)

v3.4.4

3.4.4 (2026-08-28)

Fixes

• container: apply base image security updates (#268) (9066e84)
• mcp: declare tool safety annotations (#266) (74adbd7)

v3.4.3

3.4.3 (2026-08-04)

Fixes

• deps: upgrade cryptography to 50.0.0 (#258) (92b5485)

v3.4.2

3.4.2 (2026-08-04)

Fixes

• auth: make refresh recovery phase-aware (#256) (0c8d5c9)

v3.4.1

3.4.1 (2026-08-03)

Fixes

• lint: adopt Ruff 0.16 rules (5b663ab)

Build

• deps-dev: bump ruff from 0.15.22 to 0.16.0 (5b663ab)
• deps: bump the github-actions group with 5 updates (b2e16f4)

Tests

• ci: track updated action pins (b2e16f4)

v3.4.0

3.4.0 (2026-08-03)

Features

• auth: prepare package-first API key access (#252) (0b55dbc)

Documentation

• auth: codify refresh safety invariants (#254) (0343cf3)

v3.3.1

3.3.1 (2026-07-31)

Fixes

• auth: add safe refresh incident telemetry (#248) (b652f60)

v3.3.0

3.3.0 (2026-07-30)

Features

• cli: stabilize read and batch mutation contracts (d9c5372)
• mcp: make audit reads compact and request-isolated (d9c5372)
• package: add a narrow client and optional MCP service (d9c5372)

Fixes

• client: enforce the public query and service-boundary contracts (d9c5372)

Build

• validate package artifacts and ratchet quality gates (d9c5372)

Documentation

• record the completed expert-review plan and deferred migrations (d9c5372)

v3.2.3

3.2.3 (2026-07-30)

Fixes

• keep cookie refresh inside server validity window (#244) (990057b)

v3.2.2

3.2.2 (2026-07-30)

Fixes

• retain refresh successor across storage failures (bf49421)