v1.2.0 — ElevenAgents operations

ElevenAgents operations update

• Adds current conversation filtering, tags, and post-call analysis/evaluation reruns.
• Adds file-upload and maximum-duration controls for agents.
• Updates SDK/tooling and locks patched transitive dependencies.

Validation

• Node 18, 20, and 22 CI builds passed.
• Local TypeScript build and npm audit passed with zero vulnerabilities.
• MCP stdio handshake and tools-list smoke test passed.

The Claude review check is currently unavailable because the repository's Claude GitHub App installation is suspended; this is an external integration configuration issue.

v1.1.0 — Supply chain hardening

What's new

This is a supply-chain-focused release. No behaviour changes for end users — every tool and the public client API are identical.

Highlights

• Replaced axios with native Node 18+ fetch in src/client.ts. Drops axios and 7 transitive packages (follow-redirects, form-data and its subtree, proxy-from-env). Production dependency tree shrinks 103 → 92 packages.
• npm publish provenance via GitHub Actions OIDC trusted publishing. This release is the first to ship with a verifiable build attestation linking the published tarball to this commit.
• CI on every push/PR — typecheck and build matrix on Node 18, 20, and 22.
• Dependabot weekly grouped updates for npm and GitHub Actions.
• SECURITY.md disclosure policy.
• 0 known vulnerabilities at release time.

For users

No action required. npm install -g twelvelabs-mcp-server or npx twelvelabs-mcp-server will pick up 1.1.0 automatically.

For maintainers

The published tarball now carries a sigstore attestation; verify with:

npm view twelvelabs-mcp-server@1.1.0
# Look for the "provenance" field

See PR #2 for the full diff.