Skip to content

v0.9.1

Latest
Latest

Choose a tag to compare

View all tags
@mizcausevic-dev mizcausevic-dev released this 06 Aug 23:25
· 6 commits to main since this release
v0.9.1
390a675
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Version-alignment release. Reconciles the git tag with the package already published to npm as mcp-kinetic-gain@0.9.1; the newest tag was only v0.9.0 while npm and package.json were at 0.9.1.

No runtime code change. src/ and tests/ are byte-identical to v0.9.0: 75 tools across the twelve-spec Kinetic Gain Protocol Suite (47 spec + 16 implementation-preview + 8 DefenseTech + 4 AI Claims Decision Card), 172 unit tests passing (verified locally via vitest run).

Changed

  • Version fields aligned to 0.9.1 across package.json, package-lock.json, server.json, and CHANGELOG, satisfying the release-metadata parity guard in tests/tool-count.test.ts.
  • Added an OIDC-authenticated MCP Registry publish workflow; refreshed Scorecard/CodeQL actions; removed a trailing-slash ReDoS path; linked private vulnerability reporting.

Security note

Two HIGH advisories (ip-address SSRF, fast-uri host confusion) were reported against the committed lockfile only. A published library ships no lockfile, so a fresh install resolves ip-address@10.4.0 / fast-uri@3.1.5 and audits clean at every severity. The lockfile bump is deferred to Dependabot (enabled 2026-08-04) to avoid a Windows-generated lockfile breaking Linux npm ci.

License: AGPL-3.0. Install: npx -y mcp-kinetic-gain

Assets 2
Loading