v0.39.2

Changelog

Others

• 47482d8: chore(release): promote CHANGELOG Unreleased to 0.39.2 (@scttfrdmn)
• f5d6fb0: deps(actions)(deps): bump the github-actions group across 1 directory with 5 updates (#30) (@dependabot[bot])
• 19a420c: deps(deps): bump github.com/mark3labs/mcp-go (#33) (@dependabot[bot])

v0.39.1

Changelog

Others

• 3690fb5: Gate gofmt in CI (#27) (@scttfrdmn)
• 4594b84: chore(ci): add Dependabot so SHA-pinned actions get bumped (#29) (@scttfrdmn)
• ebc5eb8: chore(deps): bump spawn v0.98.0, truffle v0.48.1 for v0.39.1 (@scttfrdmn)
• 0575b55: ci: move CI off self-hosted orion onto ubuntu-latest (#32) (@scttfrdmn)

v0.39.0

Changelog

Features

• 6cceb47: feat(truffle_find): show match reasons and cap broad-query output (#23) (@scttfrdmn)

Others

• b3633ae: chore(release): spore-host-mcp v0.39.0 (@scttfrdmn)

v0.38.0

Changelog

Bug fixes

• e7354f1: fix: prevent whole-server crash from nil matcher in truffle tools (#21) (#22) (@scttfrdmn)

Others

• 86a02bb: chore(release): spore-host-mcp v0.38.0 (@scttfrdmn)

v0.37.0

Changelog

Features

• f3241f1: feat(config): honor the shared config base via spawn/truffle bump (#18) (@scttfrdmn)

Bug fixes

• 6d52001: fix(mcp): bump spawn/truffle pins + test lifecycle handlers + pin CI actions (#13) (#17) (@scttfrdmn)
• e424225: fix(spawn_extend): floor TTL deadline at now+duration (spore-host#374) (#16) (@scttfrdmn)
• f06e480: fix: address #13 medium/low audit items (@scttfrdmn)
• 2243f42: fix: spawn_extend writes spawn:ttl-deadline, not just spawn:ttl (#11) (#14) (@scttfrdmn)
• 6d991b7: fix: spawn_list state=all + guard destructive spawn_terminate (#12) (@scttfrdmn)

Others

• a0a41e0: chore(release): spore-host-mcp v0.37.0 (@scttfrdmn)
• 5837a24: ci(security): add Security workflow (govulncheck, gitleaks, Trivy, Semgrep) (#10) (@scttfrdmn)
• 54533b6: ci(security): make Semgrep enforcing (--error) (#368) (#15) (@scttfrdmn)
• e0c9e74: ci: force Node 24 for bundled actions (#345) (#7) (@scttfrdmn)
• a475c0e: ci: run tests on self-hosted orion runner (#5) (@scttfrdmn)
• 938f41b: security: sign release artifacts with keyless cosign + SLSA (#19) (#20) (@scttfrdmn)

v0.36.1

Changelog

Others

• ffbf2f4: deps: bump spawn and truffle to v0.36.1 (@scttfrdmn)