Skip to content

v0.10.9

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Jun 18:42
· 11 commits to main since this release
v0.10.9
eb81dd3

Consolidated release. npm 0.10.8 was published from a version-bump commit that predated the credential-label work and six other merged PRs, so those fixes ship for the first time here.

Fixes

  • Credential labels resolve to the correct provider (#201): protect/review/init no longer label every sk- token as "OpenAI API Key" — OpenRouter (sk-or-v1-), Stripe (sk_live_/sk_test_), and OpenAI project/legacy keys are distinguished via the canonical @opena2a/credential-patterns catalog.
  • Finding Why:/Impact: prose matches the refined label (#202): no more "OpenRouter API Key … grants full OpenAI API access".
  • Short sk-ant-api03- Anthropic keys are detected (#184): body floor lowered 80→20 to match the OpenAI floor.
  • check --json no longer leaks the contribute banner into stdout (release-test P2).
  • init empty-project Verify command no longer errors on a missing .gitignore (release-test P3).

Closed (verified fixed): #176, #182, #183, #184

Trusted Publishing

Published via GitHub Actions OIDC. Verify: npm view opena2a-cli dist.attestations --json

Assets 2
Loading