triss-coworker 0.44.1 → 0.44.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +36 -0
- package/THIRD_PARTY_NOTICES +1 -1
- package/package.json +9 -9
package/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,42 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [0.44.2] — 2026-10-29
|
|
11
|
+
|
|
12
|
+
### Fixed
|
|
13
|
+
|
|
14
|
+
- Keep the pinned Harness npx acceptance check executable by installing its
|
|
15
|
+
required peer dependencies explicitly instead of hanging in npm peer
|
|
16
|
+
hoisting. The real add/remove and provider-route checks remain enabled.
|
|
17
|
+
- Update production and development dependencies, including Anthropic SDK
|
|
18
|
+
1.3.0, MCP SDK 1.32.2, dotenv 18.0.9, linkedom 0.18.14 and OpenAI SDK
|
|
19
|
+
7.43.0, and refresh vulnerable transitive dependencies.
|
|
20
|
+
- Keep standalone builds within the existing installer archive limits by
|
|
21
|
+
omitting dependency source maps and TypeScript declaration files. Runtime
|
|
22
|
+
sources, package metadata and licenses remain included.
|
|
23
|
+
- Refresh website dependencies, including Wrangler and Undici security fixes.
|
|
24
|
+
Website development and builds require Node >=22.22.0; the CLI runtime
|
|
25
|
+
requirement remains Node >=22.12.0.
|
|
26
|
+
|
|
27
|
+
### Changed
|
|
28
|
+
|
|
29
|
+
- Incorporate the dependency updates from Dependabot PRs #137, #139,
|
|
30
|
+
#141–#145, #147, #148 and #150–#152. MCP SDK 1.32.2 supersedes the older
|
|
31
|
+
1.32.0 proposal. GitHub Actions remain pinned to immutable commit hashes.
|
|
32
|
+
- Align `triss-dsh-provider-bundle` at 0.44.2; provider routes and settings
|
|
33
|
+
remain unchanged.
|
|
34
|
+
|
|
35
|
+
|
|
36
|
+
### Artifact integrity (0.44.2)
|
|
37
|
+
|
|
38
|
+
- `triss-dsh-provider-bundle-0.44.2.tgz` — sha256
|
|
39
|
+
`46b4b875bc4f8f833765200bbb4440bd7ddbe60699f4acfc32f3ba6eea055528`
|
|
40
|
+
— `sha512-XsGZTWVLVyvNqatXyXc3/xjq/bCrd9Nt913oWrZA28ytCKTZEZ+8se2Kw5JQTbju+AL4sIR42irbdyhEi5S3rg==`
|
|
41
|
+
(computed with npm pack; the output is byte-deterministic).
|
|
42
|
+
- Root `triss-coworker-0.44.2.tgz` sha256 is reproducible via `npm pack` at
|
|
43
|
+
tag `v0.44.2`; its tarball includes this changelog, so its hash is verified
|
|
44
|
+
separately rather than embedded here.
|
|
45
|
+
|
|
10
46
|
## [0.44.1] — 2026-09-09
|
|
11
47
|
|
|
12
48
|
### Fixed
|
package/THIRD_PARTY_NOTICES
CHANGED
|
@@ -4,7 +4,7 @@ Triss Coworker third-party notices
|
|
|
4
4
|
The npm package installs the following direct runtime dependencies. Their
|
|
5
5
|
license texts and transitive notices are distributed with those packages:
|
|
6
6
|
|
|
7
|
-
- @anthropic-ai/sdk —
|
|
7
|
+
- @anthropic-ai/sdk — Apache-2.0
|
|
8
8
|
- @modelcontextprotocol/sdk — MIT
|
|
9
9
|
- commander — MIT
|
|
10
10
|
- dotenv — BSD-2-Clause
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "triss-coworker",
|
|
3
|
-
"version": "0.44.
|
|
3
|
+
"version": "0.44.2",
|
|
4
4
|
"description": "Managed delegation for AI development. Delegate research, code review, and implementation through a local CLI and MCP server.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"bin": {
|
|
@@ -97,12 +97,12 @@
|
|
|
97
97
|
},
|
|
98
98
|
"packageManager": "npm@11.6.2",
|
|
99
99
|
"dependencies": {
|
|
100
|
-
"@anthropic-ai/sdk": "^
|
|
101
|
-
"@modelcontextprotocol/sdk": "^1.
|
|
100
|
+
"@anthropic-ai/sdk": "^1.3.0",
|
|
101
|
+
"@modelcontextprotocol/sdk": "^1.32.2",
|
|
102
102
|
"commander": "^15.0.0",
|
|
103
|
-
"dotenv": "^
|
|
104
|
-
"linkedom": "^0.18.
|
|
105
|
-
"openai": "^7.
|
|
103
|
+
"dotenv": "^18.0.9",
|
|
104
|
+
"linkedom": "^0.18.14",
|
|
105
|
+
"openai": "^7.43.0",
|
|
106
106
|
"picocolors": "^1.1.1",
|
|
107
107
|
"turndown": "^7.2.4"
|
|
108
108
|
},
|
|
@@ -110,8 +110,8 @@
|
|
|
110
110
|
"@deepseek-ai/dsh-app-boot": "^0.1.0-rc.6",
|
|
111
111
|
"@eslint/js": "^10.0.1",
|
|
112
112
|
"c8": "^12.0.0",
|
|
113
|
-
"eslint": "^10.
|
|
114
|
-
"fast-check": "^4.
|
|
115
|
-
"globals": "^17.
|
|
113
|
+
"eslint": "^10.12.0",
|
|
114
|
+
"fast-check": "^4.10.2",
|
|
115
|
+
"globals": "^17.13.0"
|
|
116
116
|
}
|
|
117
117
|
}
|