@indigoai-us/hq-cli 5.345.196 → 5.345.197

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +19 -0
  2. package/package.json +7 -7
package/CHANGELOG.md CHANGED
@@ -2,6 +2,25 @@
2
2
 
3
3
  ## [Unreleased]
4
4
 
5
+ ## [5.345.197] — 2026-11-03
6
+ - `hq-hook`: the `block-credential-file-read` port follows the round-7 bash
7
+ guard (hq-core-staging #1770) and its pin moves to it. A git or npm `://`
8
+ operand counts as a URL only with a known scheme, no `.`/`..` segment, no
9
+ `^`/`#` mark and no folder named like the scheme
10
+ (`git diff --no-index /dev/null a://../i#d_rsa` blocks). zsh `$~`,
11
+ `setopt globsubst` in any spelling, `emulate` and similar forms make a `^`
12
+ or `#` anywhere in the command block. git configuration that runs a command
13
+ (`git -c alias.x='!cat f' x`, pager, textconv, helpers, `git config`,
14
+ `GIT_EXTERNAL_DIFF` and similar) is analysed as a command, and
15
+ `GIT_CONFIG_*` variables, `--config-env` for those keys, computed `-c`
16
+ keys and the `ext::` transport block. A git option the guard does not know
17
+ before the subcommand blocks, alias arguments keep their quoting, a `://`
18
+ operand stays a URL only in a single simple command with no `-C`, the
19
+ command that `xargs`, `find -exec` or `parallel` runs is analysed, and git
20
+ configuration keys are matched without case on the fast path and in the
21
+ full-check gate. The vendored fixture and corpus are refreshed. The port
22
+ flag stays off.
23
+
5
24
  ## [5.345.196] — 2026-11-03
6
25
  - Local bots on the HQ Fleet Runtime answer simple questions directly and hand
7
26
  anything that needs a tool to a background helper. The bot replies with one
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@indigoai-us/hq-cli",
3
- "version": "5.345.196",
3
+ "version": "5.345.197",
4
4
  "description": "HQ by Indigo management CLI — modules and cloud sync",
5
5
  "main": "dist/index.js",
6
6
  "bin": {
@@ -114,11 +114,11 @@
114
114
  "*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}": "eslint --cache --no-error-on-unmatched-pattern"
115
115
  },
116
116
  "optionalDependencies": {
117
- "@indigoai-us/hq-hook-win32-x64": "5.345.196",
118
- "@indigoai-us/hq-hook-win32-arm64": "5.345.196",
119
- "@indigoai-us/hq-hook-darwin-x64": "5.345.196",
120
- "@indigoai-us/hq-hook-darwin-arm64": "5.345.196",
121
- "@indigoai-us/hq-hook-linux-x64": "5.345.196",
122
- "@indigoai-us/hq-hook-linux-arm64": "5.345.196"
117
+ "@indigoai-us/hq-hook-win32-x64": "5.345.197",
118
+ "@indigoai-us/hq-hook-win32-arm64": "5.345.197",
119
+ "@indigoai-us/hq-hook-darwin-x64": "5.345.197",
120
+ "@indigoai-us/hq-hook-darwin-arm64": "5.345.197",
121
+ "@indigoai-us/hq-hook-linux-x64": "5.345.197",
122
+ "@indigoai-us/hq-hook-linux-arm64": "5.345.197"
123
123
  }
124
124
  }