claude-threads 1.39.3 → 1.40.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -5,6 +5,24 @@ All notable changes to this project will be documented in this file.
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
 
8
+ ## [1.40.0] - 2026-10-30
9
+
10
+ ### Fixed
11
+ - **A stray `_` no longer appears before the reply.** Thinking text can end in blank lines, which pushed the closing italic marker of the 💭 line onto the reply below, leaving a visible `_` on both. The preview is now flattened to one line, which also keeps multi-paragraph thinking inside its quote. A thinking block with only whitespace is skipped (#654).
12
+
13
+ ### Changed
14
+ - ⚠️ **Breaking: Node 22 is now the minimum** (Node 20 reached end of life in April 2026). `ink` 8 requires it. Bun users are unaffected. To stay on Node 20, stay on 1.39.x and turn off `autoUpdate`, because the updater does not check `engines` (#653).
15
+ - `ink` 6 → 8. The log panel now scrolls with `ink`'s own `contentOffsetY`, so `ink-scroll-view` is gone (#653).
16
+ - **Verified against Claude CLI 2.1.314.** `CLAUDE_CLI_LATEST_VERIFIED` moves from 2.1.276 to 2.1.314. The event streams were re-recorded and the decision-bridge e2e passes; the CLI only added fields the bot does not read (#652).
17
+
18
+ ## [1.39.4] - 2026-10-30
19
+
20
+ ### Security
21
+ - `proxy-addr` 2.0.7 → 2.0.8 (critical, IP spoofing), `@modelcontextprotocol/sdk` 1.30.1 → 1.32.2 (three high advisories), `body-parser` 2.3.0 → 2.4.0, `fast-uri` 4.2.1 → 4.2.3, `shell-quote` 1.10.0 → 1.12.0 and `hono` 4.13.9 → 4.13.13, all bundled into what users run (#650). Supersedes the separate Dependabot PRs, none of which could go green on its own.
22
+
23
+ ### Changed
24
+ - `@hono/node-server` 2.1.5, `express-rate-limit` 8.7.1, `@redactpii/node` 1.0.19, `react` 19.3.1, `zod` 4.6.7, plus dev tooling (`eslint`, `knip`, `prettier`, `typescript-eslint`, `@types/*`). `ink` stays on 6.x; the 8.0 major is left for a separate change.
25
+
8
26
  ## [1.39.3] - 2026-10-01
9
27
 
10
28
  ### Fixed
package/README.md CHANGED
@@ -96,7 +96,7 @@ The interactive wizard configures your Slack or Mattermost bot, tests the creden
96
96
 
97
97
  **Prerequisites**
98
98
 
99
- - **Bun 1.2.21+** or **Node 20+** - [Install Bun](https://bun.sh/) or [Install Node](https://nodejs.org/)
99
+ - **Bun 1.2.21+** or **Node 22+** - [Install Bun](https://bun.sh/) or [Install Node](https://nodejs.org/)
100
100
  - **Claude Code CLI** - test with `claude --version` (needs a subscription or API key)
101
101
 
102
102
  Then mention the bot in your channel: