@skillsmith/cli 0.5.2 → 0.5.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -2,6 +2,40 @@
2
2
 
3
3
  All notable changes to `@skillsmith/cli` are documented here.
4
4
 
5
+ ## v0.5.3
6
+
7
+ - Version bump
8
+
9
+ ## v0.5.2 (2026-03-24)
10
+
11
+ - **Unified Install Command**: `skillsmith install` now supports both registry names and GitHub URLs (SMI-3484).
12
+
13
+ ## v0.5.1 (2026-03-21)
14
+
15
+ - **Fix**: npm registry regression — core dependency version gap resolved (SMI-3537).
16
+ - **Security**: Remediated 14 identified security gaps across CLI commands (SMI-3506).
17
+
18
+ ## v0.5.0 (2026-03-06)
19
+
20
+ - **Skill Scaffolding**: `skillsmith create <name>` scaffolds new Claude Code skills with SKILL.md template, README, CHANGELOG, and optional scripts directory (SMI-3083).
21
+ - **Version Diff**: `skillsmith diff` compares installed skill versions with change classification.
22
+ - **Version Pinning**: `skillsmith pin` / `skillsmith unpin` to lock skills to specific versions.
23
+ - **Security Audit**: `skillsmith audit` checks installed skills against security advisories.
24
+ - **Skill Name Validation**: Names must match `/^[a-z][a-z0-9-]*$/`.
25
+
26
+ ## v0.4.3 (2026-03-06)
27
+
28
+ - **Security**: Remediated 14 security gaps across CLI commands including path traversal, shell injection, and ANSI escape injection (SMI-3506).
29
+ - **WASM migration**: Migrated to `createDatabaseAsync` and deprecated synchronous schema exports (SMI-2721 Wave 2).
30
+
31
+ ## v0.4.2 (2026-02-23)
32
+
33
+ - **Fix**: Updated core dependency to v0.4.12 for @huggingface/transformers migration.
34
+
35
+ ## v0.4.1 (2026-02-23)
36
+
37
+ - **Fix**: Credential storage exports — pins core@0.4.11 for `storeApiKey`, `clearApiKey`, `getAuthStatus`.
38
+
5
39
  ## v0.4.0
6
40
 
7
41
  - **CLI Authentication**: `skillsmith login` opens your browser, you copy the API key and paste it — done. Stored securely in your OS keyring.