@uluops/cli 0.19.0 → 0.19.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +6 -0
  2. package/package.json +2 -2
package/CHANGELOG.md CHANGED
@@ -4,6 +4,12 @@ All notable changes to `@uluops/cli` will be documented in this file.
4
4
 
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
6
6
 
7
+ ## [0.19.1] - 2026-06-16
8
+
9
+ ### Dependencies
10
+
11
+ - **Bumped `@uluops/ops-sdk` 3.3.0 → 3.4.0** (exact). Pulls in the CWE-20 defensive string-length ceilings on the issue-domain response schemas (`IssueResponseSchema`, `OccurrenceResponseSchema`, `IssueNoteResponseSchema`, `StatusHistoryResponseSchema`): a degenerate or malicious tracker server returning oversized fields now throws a `ZodError` at parse time instead of forcing a large heap allocation on the calling host. The CLI consumes these schemas in `issues history` picker mode and `formatIssue`, so the protection applies transparently to `ulu issues` / `ulu runs` reads. Compliant servers are unaffected. 460 tests green against 3.4.0.
12
+
7
13
  ## [0.19.0] - 2026-06-16
8
14
 
9
15
  ### Dependencies
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@uluops/cli",
3
- "version": "0.19.0",
3
+ "version": "0.19.1",
4
4
  "description": "Unified CLI for UluOps - validation tracking and registry management",
5
5
  "type": "module",
6
6
  "bin": {
@@ -41,7 +41,7 @@
41
41
  "license": "MIT",
42
42
  "dependencies": {
43
43
  "@uluops/core": "0.22.7",
44
- "@uluops/ops-sdk": "3.3.0",
44
+ "@uluops/ops-sdk": "3.4.0",
45
45
  "@uluops/registry-sdk": "0.35.0",
46
46
  "commander": "13.1.0",
47
47
  "ora": "8.1.1",