@praneeth_54/agentdoctor 1.0.0 → 1.1.1

package/CHANGELOG.md

@@ -9,8 +9,62 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Notes
 
-- Owner release sequence for `1.0.0`: `npm publish` → `git tag v1.0.0` → GitHub Release → then bump Action `version` default `0.3.0-beta` → `1.0.0` (only after npm serves `1.0.0`).
-- Project Brain V1 remains a parallel laboratory under `src/core/understanding/brain` and is excluded from the published npm pack. Docs: [docs/project-brain.md](docs/project-brain.md).
+- Vitest 3 → 4/5 major upgrade remains deferred (dev-only moderate advisory).
+- Do **not** auto-publish from CI agents.
+
+## [1.1.1] — 2026-09-20
+
+Patch release: Marketplace Action naming + dependency security pins. npm, git tag,
+GitHub Release, and Action default are aligned on **`1.1.1`**.
+
+### Changed
+
+- GitHub Action Marketplace display name is now `AgentDoctor Safety`.
+- npm overrides pin patched transitive versions: `js-yaml@4.3.2`, `fast-uri@3.1.8`,
+  `hono@4.13.8`, `qs@6.16.0`.
+- Fixture `fixtures/multi-agent-project` pins `next@15.5.24` (scan fixture only).
+- Action default `version` input and CI smoke pins use `1.1.1`.
+
+### Security
+
+- Clears known high/moderate advisories on transitive lint/MCP stack dependencies
+  without changing the Safety CLI public API.
+- Vitest / `@vitest/mocker` moderate advisory deferred (requires major upgrade).
+
+### Docs
+
+- [docs/DEPENDENCY_SECURITY_AUDIT.md](docs/DEPENDENCY_SECURITY_AUDIT.md)
+- [docs/DEPENDABOT_PR_REVIEW.md](docs/DEPENDABOT_PR_REVIEW.md)
+- [docs/release-notes-v1.1.1.md](docs/release-notes-v1.1.1.md)
+
+## [1.1.0] — 2026-08-13
+
+Minor release: Brain → MCP → Agent consumption for Project Brain (Safety V1 unchanged).
+
+### Added
+
+- Project Brain MCP bridge (`agentdoctor brain-mcp --root <path>`): STDIO MCP server
+  exposing evidence-backed Brain tools (`brain_overview`, `brain_query`, `brain_explain`,
+  `brain_trace`, `brain_claims`, `brain_evidence`, `brain_ownership`, `brain_risk`,
+  `brain_delta`, `brain_snapshot`) with provenance envelopes. Local-only; no API key.
+  Docs: [docs/mcp/brain-mcp.md](docs/mcp/brain-mcp.md). Examples: [examples/mcp/](examples/mcp/).
+  Demo: [docs/demo/brain-mcp-demo.md](docs/demo/brain-mcp-demo.md).
+  Validation: [validation/mcp-agent/](validation/mcp-agent/).
+
+### Changed
+
+- Build packaging now includes `src/core/understanding/**` and `src/mcp/**` so the
+  `brain-mcp` CLI command can run from `dist/` (Safety public API export remains
+  Scan/Fix/Verify-focused).
+- MCP tool descriptions explicitly mark READ vs CONTROLLED WRITE (`brain_snapshot` rebuild
+  only under `.agentdoctor/project-brain/`).
+
+### Notes
+
+- Product promise: help AI coding agents understand what is in a repository, what can be
+  trusted, and why. Not a generic coding assistant, not RAG, not chatbot memory.
+- Authenticated third-party agent LLM smoke (Cursor / Claude Code / Codex Q1–Q7) remains an
+  environment/auth gate; engineering MCP + Brain contracts pass without it.
 
 ## [1.0.0] — 2026-08-12
 
@@ -78,8 +132,7 @@ First production release: Scan → Fix → Verify → CI contract frozen for v1.
 ### Compatibility
 
 - CLI + JSON + rule ID contracts frozen for v1 (see [docs/compatibility.md](docs/compatibility.md))
-- Action `version` input default remains `0.3.0-beta` until `1.0.0` is published to npm;
-  pin `1.0.0` or use `version: workspace` after the release is cut
+- Action `version` input default is `1.0.0` (bumped after npm published `@praneeth_54/agentdoctor@1.0.0`)
 
 ## [0.3.0-beta] — 2026-08-07
 
@@ -245,7 +298,9 @@ First public beta.
 - Not a complete secret scanner
 - Git “tracked secret” detection deferred
 
-[Unreleased]: https://github.com/pranee54/AgentDoctor/compare/v1.0.0...HEAD
+[Unreleased]: https://github.com/pranee54/AgentDoctor/compare/v1.1.1...HEAD
+[1.1.1]: https://github.com/pranee54/AgentDoctor/releases/tag/v1.1.1
+[1.1.0]: https://github.com/pranee54/AgentDoctor/releases/tag/v1.1.0
 [1.0.0]: https://github.com/pranee54/AgentDoctor/releases/tag/v1.0.0
 [0.3.0-beta]: https://github.com/pranee54/AgentDoctor/releases/tag/v0.3.0-beta
 [0.2.0-beta]: https://github.com/pranee54/AgentDoctor/releases/tag/v0.2.0-beta