v0.4.0
v0.4.0
Breaking change
- Removed MCP transport from
xyte-cli. xyte-cli mcp serveis no longer available.
Highlights
- Added CI matrix validation (
ubuntu/macos, Node18/22) and dedicated security audit job. - Hardened npm publish workflow with required
typecheck,test,build, andnpm pack --dry-rungates. - Added release-assets automation to publish tarball + SBOM + checksums on tagged releases.
- Added
npm run release:checkfor local release gating. - Added golden snapshot regression tests for core JSON contracts.
- Added sensitive-value redaction in text and JSON error outputs.
- Added
SECURITY.md, updated release governance docs, and compatibility policy notes.
Upgrade note
- Agent workflows should call
xyte-clicommands directly (CLI/TUI/headless). - If you previously used MCP transport, migrate to direct CLI invocation.
Full Changelog: v0.3.2...v0.4.0