@cairnkeep/cli 2.17.2 → 2.17.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. package/CHANGELOG.md +9 -0
  2. package/docs/learning/CURRICULUM-MAP.md +1 -1
  3. package/docs/learning/FEATURE-GUIDE.md +1 -1
  4. package/docs/learning/lessons/L00-why-cairnkeep.md +1 -1
  5. package/docs/learning/lessons/L01-safe-trial.md +1 -1
  6. package/docs/learning/lessons/L02-installation.md +1 -1
  7. package/docs/learning/lessons/L03-first-project.md +1 -1
  8. package/docs/learning/lessons/L19-validated-skill-improvement.md +1 -1
  9. package/docs/learning/lessons/L20-mcp-tool-profiles.md +1 -1
  10. package/docs/learning/lessons/L21-context-packs.md +1 -1
  11. package/docs/learning/lessons/L22-native-windows.md +1 -1
  12. package/docs/learning/lessons/L23-guided-setup.md +1 -1
  13. package/docs/learning/lessons/L24-okf-exchange.md +1 -1
  14. package/docs/learning/lessons/L25-playbooks.md +1 -1
  15. package/examples/eval/bundled-fake.json +1 -1
  16. package/package.json +1 -1
package/CHANGELOG.md CHANGED
@@ -5,6 +5,15 @@ All notable user-facing changes are documented here. This project follows
5
5
 
6
6
  ## [Unreleased]
7
7
 
8
+ ## [2.17.3] - 2026-09-03
9
+
10
+ ### Security
11
+
12
+ - Refresh the production dependency locks to `fast-uri` 3.1.7 and `qs`
13
+ 6.16.0 so published server and workspace containers do not retain the URI
14
+ parsing, SSRF, host-confusion, or denial-of-service advisories affecting the
15
+ versions locked by 2.17.2. Runtime APIs and command behavior are unchanged.
16
+
8
17
  ## [2.17.2] - 2026-09-02
9
18
 
10
19
  ### Fixed
package/docs/learning/CURRICULUM-MAP.md CHANGED
@@ -1,6 +1,6 @@
1
1
  # Curriculum Coverage Map
2
2
 
3
- **Baseline:** Cairnkeep 2.17.2
3
+ **Baseline:** Cairnkeep 2.17.3
4
4
  **Last reviewed:** 2026-08-19
5
5
 
6
6
  This map prevents the course from drifting behind the product. It assigns each
package/docs/learning/FEATURE-GUIDE.md CHANGED
@@ -1,6 +1,6 @@
1
1
  # Cairnkeep feature guide
2
2
 
3
- **Baseline:** Cairnkeep 2.17.2
3
+ **Baseline:** Cairnkeep 2.17.3
4
4
 
5
5
  This is the step-back map for choosing and operating Cairnkeep features. The
6
6
  [course labs](https://github.com/cairnkeep/cairnkeep-course-labs) provide one
package/docs/learning/lessons/L00-why-cairnkeep.md CHANGED
@@ -3,7 +3,7 @@
3
3
  **Status:** Ready
4
4
  **Track:** Quickstart
5
5
  **Time:** 10 minutes
6
- **Tested with:** Cairnkeep 2.17.2
6
+ **Tested with:** Cairnkeep 2.17.3
7
7
 
8
8
  ## Outcome
9
9
 
package/docs/learning/lessons/L01-safe-trial.md CHANGED
@@ -3,7 +3,7 @@
3
3
  **Status:** Ready
4
4
  **Track:** Quickstart
5
5
  **Time:** 15 minutes
6
- **Tested with:** Cairnkeep 2.17.2
6
+ **Tested with:** Cairnkeep 2.17.3
7
7
 
8
8
  ## Outcome
9
9
 
package/docs/learning/lessons/L02-installation.md CHANGED
@@ -3,7 +3,7 @@
3
3
  **Status:** Ready
4
4
  **Track:** Quickstart
5
5
  **Time:** 25 minutes
6
- **Tested with:** Cairnkeep 2.17.2 and Node.js 22 or newer
6
+ **Tested with:** Cairnkeep 2.17.3 and Node.js 22 or newer
7
7
 
8
8
  ## Outcome
9
9
 
package/docs/learning/lessons/L03-first-project.md CHANGED
@@ -3,7 +3,7 @@
3
3
  **Status:** Ready
4
4
  **Track:** Quickstart
5
5
  **Time:** 25 minutes
6
- **Tested with:** Cairnkeep 2.17.2
6
+ **Tested with:** Cairnkeep 2.17.3
7
7
 
8
8
  ## Outcome
9
9
 
package/docs/learning/lessons/L19-validated-skill-improvement.md CHANGED
@@ -3,7 +3,7 @@
3
3
  **Status:** Ready
4
4
  **Track:** Evidence and Evaluation
5
5
  **Time:** 50 minutes
6
- **Tested with:** Cairnkeep 2.17.2
6
+ **Tested with:** Cairnkeep 2.17.3
7
7
 
8
8
  ## Outcome
9
9
 
package/docs/learning/lessons/L20-mcp-tool-profiles.md CHANGED
@@ -1,7 +1,7 @@
1
1
  # L20 - Least-authority MCP tool profiles
2
2
 
3
3
  **Status:** Ready
4
- **Tested with:** Cairnkeep 2.17.2 and Node.js 22 or newer
4
+ **Tested with:** Cairnkeep 2.17.3 and Node.js 22 or newer
5
5
  **Time:** 25 minutes
6
6
 
7
7
  ## Outcome
package/docs/learning/lessons/L21-context-packs.md CHANGED
@@ -1,7 +1,7 @@
1
1
  # L21 - Immutable context packs and skill approval
2
2
 
3
3
  **Status:** Ready
4
- **Tested with:** Cairnkeep 2.17.2 and Node.js 22 or newer
4
+ **Tested with:** Cairnkeep 2.17.3 and Node.js 22 or newer
5
5
  **Time:** 40 minutes
6
6
 
7
7
  ## Outcome
package/docs/learning/lessons/L22-native-windows.md CHANGED
@@ -3,7 +3,7 @@
3
3
  **Status:** Ready
4
4
  **Track:** Operator
5
5
  **Time:** 30 minutes
6
- **Tested with:** Cairnkeep 2.17.2, Windows x64, and Node.js 22 or newer
6
+ **Tested with:** Cairnkeep 2.17.3, Windows x64, and Node.js 22 or newer
7
7
 
8
8
  ## Outcome
9
9
 
package/docs/learning/lessons/L23-guided-setup.md CHANGED
@@ -3,7 +3,7 @@
3
3
  **Status:** Ready
4
4
  **Track:** Quickstart and Operator
5
5
  **Time:** 35 minutes
6
- **Tested with:** Cairnkeep 2.17.2; Pi 0.84.1; Node.js 22, 24, and 26
6
+ **Tested with:** Cairnkeep 2.17.3; Pi 0.84.1; Node.js 22, 24, and 26
7
7
 
8
8
  ## Outcome
9
9
 
package/docs/learning/lessons/L24-okf-exchange.md CHANGED
@@ -1,7 +1,7 @@
1
1
  # L24 - Reviewed knowledge exchange
2
2
 
3
3
  **Status:** Ready
4
- **Tested with:** Cairnkeep 2.17.2 and Node.js 22 or newer
4
+ **Tested with:** Cairnkeep 2.17.3 and Node.js 22 or newer
5
5
  **Time:** 35 minutes
6
6
 
7
7
  ## Outcome
package/docs/learning/lessons/L25-playbooks.md CHANGED
@@ -1,7 +1,7 @@
1
1
  # L25 - Bounded workflow playbooks
2
2
 
3
3
  **Status:** Ready
4
- **Tested with:** Cairnkeep 2.17.2 and Node.js 22 or newer
4
+ **Tested with:** Cairnkeep 2.17.3 and Node.js 22 or newer
5
5
  **Time:** 35 minutes
6
6
 
7
7
  ## Outcome
package/examples/eval/bundled-fake.json CHANGED
@@ -1 +1 @@
1
- {"identifier":"cairn-offline-fake-v1","package_version":"2.17.2","schema_version":1,"task_set_digest":"13e95379f35839593047ec34521a65a8fa3ab92bd3993bca9dc8bf5c4a9ff36f"}
1
+ {"identifier":"cairn-offline-fake-v1","package_version":"2.17.3","schema_version":1,"task_set_digest":"13e95379f35839593047ec34521a65a8fa3ab92bd3993bca9dc8bf5c4a9ff36f"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@cairnkeep/cli",
3
- "version": "2.17.2",
3
+ "version": "2.17.3",
4
4
  "description": "A durable, harness-agnostic memory + context layer for coding agents and MCP clients.",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",