borgmcp 3.15.0 → 3.15.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -2,4 +2,4 @@
2
2
 
3
3
  | Package | Version | License |
4
4
  | --- | --- | --- |
5
- | borgmcp-shared | 0.12.2 | Apache-2.0 |
5
+ | borgmcp-shared | 0.12.3 | Apache-2.0 |
package/docs/RELEASING.md CHANGED
@@ -21,19 +21,21 @@ Before creating the release tag, independently verify all of these conditions:
21
21
  - the extraction review confirms no private backend secrets, deployment
22
22
  configuration, customer data, local state, or duplicated shared contracts
23
23
  entered the public package;
24
- - the exact audited registry dependency `borgmcp-shared@0.12.2` remains locked to
24
+ - the exact audited registry dependency `borgmcp-shared@0.12.3` remains locked to
25
25
  its canonical tarball and integrity
26
- `sha512-l459XEeqk0cSz1+Z8yk8cCVWik4/CX4OBTRZqj6n1SZYvDpzWJksUz82FA9k4taf//rs43Tfl1tpWXnRHAqxOQ==`;
27
- - the coupled shared/server/client candidates use the same exact
28
- `borgmcp-shared` version;
26
+ `sha512-3GPQ1U7tBxg8Jp1Uac31CKKXQjMv4UNPhs5P6N83CyDXGJvkI88yowVJZGlLuo30eEk6jhERZ9AQWOjHst/sFA==`;
27
+ - the current published server and the client candidate use the same exact
28
+ `borgmcp-shared` version; publish a compatible server before tagging the
29
+ client when that pin changes;
29
30
  - the selected stable client version is unused and the exact release commit is
30
31
  on protected `main`;
31
32
  - the repository and protected npm environment settings pass an operator audit;
32
33
  - the exact release source passes exact-SHA CI and one Code Review.
33
34
 
34
35
  `scripts/verify-release-readiness.mjs` makes the source-side blockers
35
- machine-checkable. A release tag created before they are resolved fails before
36
- dependency installation or publication.
36
+ machine-checkable and compares the client pin with the current published server.
37
+ A release tag created before they are resolved fails before dependency
38
+ installation or publication.
37
39
 
38
40
  ### Release branches
39
41
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "borgmcp",
3
- "version": "3.15.0",
3
+ "version": "3.15.1",
4
4
  "description": "Coordinate AI coding agents in shared cubes. Works with Claude Code, Codex, and OpenCode.",
5
5
  "type": "module",
6
6
  "main": "./dist/index.js",
@@ -72,7 +72,7 @@
72
72
  },
73
73
  "dependencies": {
74
74
  "@modelcontextprotocol/sdk": "^1.0.4",
75
- "borgmcp-shared": "0.12.2",
75
+ "borgmcp-shared": "0.12.3",
76
76
  "chalk": "^5.3.0",
77
77
  "prompts": "^2.4.2",
78
78
  "which": "^4.0.0"