@cairnkeep/cli 2.3.0 → 2.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -3,6 +3,14 @@
3
3
  All notable user-facing changes are documented here. This project follows
4
4
  [Semantic Versioning](https://semver.org/).
5
5
 
6
+ ## [2.3.1] - 2026-07-25
7
+
8
+ ### Fixed
9
+
10
+ - Refresh locked runtime dependencies to include the `fast-uri` host-confusion
11
+ fix and the `body-parser` request-limit fix used by the memory server build.
12
+ - Reject high-severity runtime advisories in the public, CI, and release gates.
13
+
6
14
  ## [2.3.0] - 2026-07-25
7
15
 
8
16
  ### Added
@@ -121,6 +129,7 @@ stored memories.
121
129
  - Preserve executable permissions and Bash 3.2 portability on macOS.
122
130
  - Add backup-first uninstall and SQLite-safe memory export/import guidance.
123
131
 
132
+ [2.3.1]: https://github.com/cairnkeep/cairnkeep/compare/v2.3.0...v2.3.1
124
133
  [2.3.0]: https://github.com/cairnkeep/cairnkeep/compare/v2.2.1...v2.3.0
125
134
  [2.2.1]: https://github.com/cairnkeep/cairnkeep/compare/v2.2.0...v2.2.1
126
135
  [2.2.0]: https://github.com/cairnkeep/cairnkeep/compare/v2.1.0...v2.2.0
@@ -3,7 +3,7 @@
3
3
  **Status:** Ready
4
4
  **Track:** Quickstart
5
5
  **Time:** 10 minutes
6
- **Tested with:** Cairnkeep 2.3.0
6
+ **Tested with:** Cairnkeep 2.3.1
7
7
 
8
8
  ## Outcome
9
9
 
@@ -3,7 +3,7 @@
3
3
  **Status:** Ready
4
4
  **Track:** Quickstart
5
5
  **Time:** 15 minutes
6
- **Tested with:** Cairnkeep 2.3.0
6
+ **Tested with:** Cairnkeep 2.3.1
7
7
 
8
8
  ## Outcome
9
9
 
@@ -26,7 +26,7 @@ ephemeral; the named course volume is persistent.
26
26
  1. Pull the public image:
27
27
 
28
28
  ```bash
29
- podman pull ghcr.io/cairnkeep/cairnkeep:2.3.0
29
+ podman pull ghcr.io/cairnkeep/cairnkeep:2.3.1
30
30
  ```
31
31
 
32
32
  2. Start the stdio server with a read-only root filesystem and no Linux
@@ -38,7 +38,7 @@ ephemeral; the named course volume is persistent.
38
38
  --read-only --cap-drop=all --security-opt=no-new-privileges \
39
39
  --tmpfs=/tmp:rw,noexec,nosuid,size=64m,mode=1777 \
40
40
  --volume cairnkeep-course-data:/data:Z,U \
41
- ghcr.io/cairnkeep/cairnkeep:2.3.0 stdio
41
+ ghcr.io/cairnkeep/cairnkeep:2.3.1 stdio
42
42
  ```
43
43
 
44
44
  3. The process waits quietly for MCP input. Press `Ctrl-C` after confirming it
@@ -3,7 +3,7 @@
3
3
  **Status:** Ready
4
4
  **Track:** Quickstart
5
5
  **Time:** 25 minutes
6
- **Tested with:** Cairnkeep 2.3.0 and Node.js 22 or newer
6
+ **Tested with:** Cairnkeep 2.3.1 and Node.js 22 or newer
7
7
 
8
8
  ## Outcome
9
9
 
@@ -40,7 +40,7 @@ machine-level steps.
40
40
  2. Install Cairnkeep:
41
41
 
42
42
  ```bash
43
- npm install --global @cairnkeep/cli@2.3.0
43
+ npm install --global @cairnkeep/cli@2.3.1
44
44
  cairn --version
45
45
  ```
46
46
 
@@ -3,7 +3,7 @@
3
3
  **Status:** Ready
4
4
  **Track:** Quickstart
5
5
  **Time:** 25 minutes
6
- **Tested with:** Cairnkeep 2.3.0
6
+ **Tested with:** Cairnkeep 2.3.1
7
7
 
8
8
  ## Outcome
9
9
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@cairnkeep/cli",
3
- "version": "2.3.0",
3
+ "version": "2.3.1",
4
4
  "description": "A durable, harness-agnostic memory + context layer for coding agents (Claude Code, OpenCode).",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",
@@ -42,7 +42,8 @@
42
42
  "fix:perms": "git ls-files -s | awk '$1==\"100755\"{print $4}' | xargs chmod 755",
43
43
  "prepack": "npm run build:server && npm run fix:perms",
44
44
  "test": "for test in scripts/test-*.sh; do \"$test\" || exit 1; done",
45
- "check:public": "scripts/verify-no-private-references.sh && scripts/verify-docs-parity.sh && npm run build:server && npm test",
45
+ "audit:runtime": "npm audit --omit=dev --audit-level=high && npm --prefix mcp-memory-server audit --omit=dev --audit-level=high",
46
+ "check:public": "scripts/verify-no-private-references.sh && scripts/verify-docs-parity.sh && npm run audit:runtime && npm run build:server && npm test",
46
47
  "prepublishOnly": "npm run check:public && npm --prefix mcp-memory-server test --global=false --dry-run=false"
47
48
  },
48
49
  "repository": {