v0.5.41

0.5.41 (2026-08-22)

Features

• deps: update dependency @vitejs/plugin-react (6.0.5 → 6.1.0) (#816) (4c8260b)
• deps: update dependency eslint (10.8.1 → 10.9.0) (#823) (d9bafc4)
• mcp: publish a stdio MCP server image (#824) (8b1ba6c)

Bug Fixes

• api: apply enforceRateLimit to mutating POST endpoints (#796) (#819) (3ff68ee)
• deps: update dependency @testing-library/user-event (14.6.5 → 14.6.6) (#828) (5e495fb)
• deps: update nextjs monorepo (16.3.1 → 16.3.2) (#821) (31db0b7)
• github: retry transient 429/5xx responses with exponential backoff (#820) (f48c9ef), closes #795
• groomer: let targeted re-groom bypass the parked-issue exclusion (#818) (cc17ecd), closes #793
• groomer: persist not-ready reasons from hosted decisions (#833) (bf74114)
• lease: make upsertLease atomic against the (agentName, issueId) unique constraint (#826) (b4adce6), closes #797
• mcp: ship only the server's import closure (#825) (e4eaba8)
• security: remove unsafe inline scripts from CSP (#829) (3c0d642), closes #798
• sync: lock pr follow-up and reconciliation jobs (#822) (0d1c2a8), closes #801

Documentation

• env: align .env.example scheduler defaults with scheduler.ts (#827) (d44b12c), closes #802