tododdle-mcp 3.5.0 → 3.5.1

package/.claude-plugin/marketplace.json

@@ -5,17 +5,17 @@
     "url": "https://tododdle.com"
   },
   "description": "Agent workflow plugins for ToDoddle.",
-  "version": "3.5.0",
+  "version": "3.5.1",
   "plugins": [
     {
       "name": "tododdle",
       "displayName": "ToDoddle",
       "description": "Connect repositories and use ToDoddle for project context and ticket execution.",
-      "version": "3.5.0",
+      "version": "3.5.1",
       "source": {
         "source": "npm",
         "package": "tododdle-mcp",
-        "version": "3.5.0"
+        "version": "3.5.1"
       },
       "category": "productivity",
       "tags": ["project-management", "tickets", "mcp"]

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "tododdle",
   "displayName": "ToDoddle",
-  "version": "3.5.0",
+  "version": "3.5.1",
   "description": "Connect repositories and run disciplined agent workflows in ToDoddle.",
   "author": {
     "name": "ToDoddle",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "tododdle",
-  "version": "3.5.0",
+  "version": "3.5.1",
   "description": "Disciplined agent workflows for projects managed in ToDoddle.",
   "author": {
     "name": "ToDoddle",

package/README.md

@@ -390,3 +390,7 @@ Deploy the matching web `/documents/:documentId/image` API before releasing this
 ### 3.5.0 release
 
 Adds native private image previews through `get_document_image`. Deploy the matching web image endpoint before updating clients. Refresh the plugin or restart an npm-based MCP client after updating to 3.5.0. No database migration or new environment setting is required. Hosted rollout remains a separate release gate.
+
+### 3.5.1 release
+
+Updates vulnerable transitive dependencies and enforces the dependency audit in both the publish workflow and `prepublishOnly`. A release must pass Quality before its tag is published. Failed audits must be fixed, not bypassed.

package/dist/compatibility.d.ts

@@ -1,9 +1,9 @@
-export declare const MCP_PACKAGE_VERSION = "3.5.0";
+export declare const MCP_PACKAGE_VERSION = "3.5.1";
 export declare const MCP_COMPATIBILITY_LEVEL = 3;
 export declare const MCP_VERSION_HEADER = "x-tododdle-mcp-version";
 export declare const MCP_COMPATIBILITY_HEADER = "x-tododdle-mcp-compatibility";
 export declare const MCP_REQUEST_HEADERS: {
-    readonly "x-tododdle-mcp-version": "3.5.0";
+    readonly "x-tododdle-mcp-version": "3.5.1";
     readonly "x-tododdle-mcp-compatibility": string;
 };
 export declare function formatMcpUpdateRequiredMessage(message: string, details: unknown): string;

package/dist/compatibility.js

@@ -1,4 +1,4 @@
-export const MCP_PACKAGE_VERSION = '3.5.0';
+export const MCP_PACKAGE_VERSION = '3.5.1';
 export const MCP_COMPATIBILITY_LEVEL = 3;
 export const MCP_VERSION_HEADER = 'x-tododdle-mcp-version';
 export const MCP_COMPATIBILITY_HEADER = 'x-tododdle-mcp-compatibility';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tododdle-mcp",
-  "version": "3.5.0",
+  "version": "3.5.1",
   "description": "Agent-first task, project context, and time tracking for ToDoddle",
   "type": "module",
   "main": "dist/index.js",
@@ -29,7 +29,7 @@
     "test": "npm run build && node --test test/*.test.mjs",
     "test:coverage": "npm run build && node --test --experimental-test-coverage --test-coverage-include='dist/**/*.js' --test-coverage-exclude='dist/index.js' --test-coverage-lines=90 --test-coverage-branches=75 --test-coverage-functions=85 test/*.test.mjs",
     "prepack": "npm run build",
-    "prepublishOnly": "npm run test:coverage"
+    "prepublishOnly": "npm audit --audit-level=low && npm run test:coverage"
   },
   "keywords": [
     "mcp",