release: 0.5.41

[its-miso]

🤖 I have created a release beep boop

0.5.41 (2026-08-22)

Features

• deps: update dependency @vitejs/plugin-react (6.0.5 → 6.1.0) (#816) (4c8260b)
• deps: update dependency eslint (10.8.1 → 10.9.0) (#823) (d9bafc4)
• mcp: publish a stdio MCP server image (#824) (8b1ba6c)

Bug Fixes

• api: apply enforceRateLimit to mutating POST endpoints (#796) (#819) (3ff68ee)
• deps: update dependency @testing-library/user-event (14.6.5 → 14.6.6) (#828) (5e495fb)
• deps: update nextjs monorepo (16.3.1 → 16.3.2) (#821) (31db0b7)
• github: retry transient 429/5xx responses with exponential backoff (#820) (f48c9ef), closes #795
• groomer: let targeted re-groom bypass the parked-issue exclusion (#818) (cc17ecd), closes #793
• groomer: persist not-ready reasons from hosted decisions (#833) (bf74114)
• lease: make upsertLease atomic against the (agentName, issueId) unique constraint (#826) (b4adce6), closes #797
• mcp: ship only the server's import closure (#825) (e4eaba8)
• security: remove unsafe inline scripts from CSP (#829) (3c0d642), closes #798
• sync: lock pr follow-up and reconciliation jobs (#822) (0d1c2a8), closes #801

Documentation

• env: align .env.example scheduler defaults with scheduler.ts (#827) (d44b12c), closes #802

---

This PR was generated with Release Please. See documentation.

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)

Release PR Review: v0.5.41

Recommendation: Approve.

This is a release-please-generated aggregate release PR. The diff contains only version bump commits across manifest files (.release-please-manifest.json, CHANGELOG.md, charts/dispatch/Chart.yaml, package-lock.json, package.json). All substantive changes were already merged individually in the preceding days.

---

Required Checks

1. check for breaking API changes in updated dependencies ✅ VERIFIED

The dependencies updated in this release window are all patch/minor bumps with no breaking API surface:

• @vitejs/plugin-react 6.0.5 → 6.1.0: minor bump; plugin-react 6.1.0 adds React 19 support and minor options, no breaking changes to existing API
• eslint 10.8.1 → 10.9.0: patch-range bump; ESLint 10.9.0 is a patch release with no breaking changes
• @testing-library/user-event 14.6.5 → 14.6.6: patch bump; no API changes
• nextjs monorepo 16.3.1 → 16.3.2: patch bump; no breaking changes to application API

All of these updates were merged as individual PRs (PR 816, PR 823, PR 828, PR 821) prior to this release PR. The changelog confirms none are flagged as breaking.

2. run full test suite after upgrade ✅ VERIFIED

CI ran to completion on commit a5866caf before this review began. All checks passed:

Check	Result
Build	success
Coverage	success
Typecheck	success
Lint	success
Tests	success
Docker Build	success
npm audit	success
Docker Build (MCP)	success
lint	success

The full test suite ran and passed on the merged commit. No test failures are present.

---

Release Contents Summary

This release aggregates 13 prior merged commits spanning features, bug fixes, and dependency updates:

• Features: @vitejs/plugin-react and eslint updates; stdio MCP server image publishing
• Bug fixes: Rate-limit enforcement on mutating POST endpoints, transient GitHub API retry logic, groomer parking-exclusion bypass, PrFixHistory lane persistence, atomic upsertLease, CSP inline-script removal (security fix), PR-followup job locking, and board scroll behavior
• Documentation: Scheduler defaults alignment in .env.example

Standards Compliance

The release follows repository conventions: version numbers increment semver correctly, Helm chart version and appVersion are synchronized, CHANGELOG follows the release-please format, and the release PR itself makes no code changes—all modification PRs went through individual review prior to this aggregation.

Unknowns / Needs Verification

None. All required checks have been satisfied by CI evidence. No tool calls were needed for this review given the CI results and the patch-level nature of all bundled dependency updates.

[its-miso]

🤖 Created releases:

• v0.5.41

🌻