@wirecat/cli-base 0.61.1 → 0.61.2

package/CHANGELOG.md

@@ -8,6 +8,17 @@ Versions before 0.8.0 are in the [git tags](https://github.com/WireCatLabs/cli-b
 Every entry says what changed as a caller sees it, why, and what to watch for — the rules are
 [`docs/dev/CONVENTIONS.md`](docs/dev/CONVENTIONS.md#the-changelog).
 
+## 0.61.2 — 26.10.2026
+
+### Fixed
+
+- **A failing test shard in `node-ci.yml` names the failed test.** With `test-shards` above 1, each shard wrote only a
+  blob report, so its log said a shard failed but not which test; the shard now also prints Vitest's default report
+  and a GitHub annotation with the test's file and line. Its blob report is uploaded even when its tests fail, so it
+  can be downloaded from the run. The `coverage` job still fails when any shard fails. A caller gets this when it moves
+  its `node-ci.yml` pin to the release that carries it; a caller without shards already had both from Vitest's
+  defaults.
+
 ## 0.61.1 — 26.10.2026
 
 ### Fixed

package/docs/standards/security.md

@@ -31,7 +31,10 @@ inside a URL, and a long opaque string. Inside any typed word cli-core also find
 only the secret: a token of a known format (GitHub `ghp_…`/`github_pat_…`, `sk-…`, Slack `xox…-`, AWS `AKIA…`, Google
 `AIza…`, Stripe `sk_`/`rk_`, npm `npm_…`, a Telegram bot token, a JWT, a PEM private key), a `Bearer` or `Basic`
 credential, the value of a secret-named pair (`password=…`, `API_TOKEN=…`, `client_secret:…`), a random-looking string
-of 20 or more characters, and a phone number. The same search runs on a kept error message. `record_input: false` in the CLI's config masks every value that may be content, and a
+of 20 or more characters
+([how often it is caught](https://github.com/WireCatLabs/cli-testing/blob/main/performance/runs/secret-masking/README.md)),
+and a phone number. The same search runs on a kept error message. `record_input: false` in the CLI's config masks
+every value that may be content, and a
 config that will not load masks the same way. A problem report sent to other people (`doctor reports create`) masks
 the typed words always.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-base",
-  "version": "0.61.1",
+  "version": "0.61.2",
   "description": "The parts every command line tool needs: output modes, terminal rendering, error model, exit codes, credentials, clocks",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",