rUv 87bacd5582 chore(release): 3.38.14 → 3.38.15 (#3080) ...

Cuts a release train off main after the following PRs landed unversioned:
- #3060 fix(cli): honor MCP tool selection when listing (closes #3055)
- #3076 fix: resolve Claude Code launches on Windows (closes #3071)
- #3077 fix(hooks): persist real session-end state (closes #3063)
- #3044 dream(security): #3043 advisory scanner for untrusted settings.json
        hooks/allow-rules — CVE-2025-59536-class defense-in-depth,
        advisory-only (non-blocking), hardened against 6 concrete critic
        bypasses.

No code changes in this commit — just the version bump across all three
publishable package.jsons.


Claude-Session: https://claude.ai/code/session_0118jMsYhwHD5dx2vStENsEB

2026-08-21 10:40:29 -04:00

..

agents

…

aidefence

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

browser

chore(deps): bump agentic-flow in /v3/@claude-flow/browser (#2907)

2026-08-13 17:02:07 -04:00

claims

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

cli

chore(release): 3.38.14 → 3.38.15 (#3080)

2026-08-21 10:40:29 -04:00

cli-core

fix: resolve current runtime and verification defects for v3.32.36 (#2850)

2026-07-29 15:08:51 -04:00

codex

fix(codex): close worker stdin so codex exec doesn't hang waiting for EOF (#2947) (#2997)

2026-08-12 16:11:14 -04:00

deployment

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

embeddings

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

guidance

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

hooks

feat(security): implement ADR-377 — AgentDB Retrieval Security Layer (#2874)

2026-07-30 14:09:34 -04:00

integration

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

mcp

fix(mcp): rate-limit authenticated HTTP routes

2026-08-14 19:04:54 -04:00

memory

chore: sync committed versions to already-published 3.36.0 / memory@alpha.22

2026-08-11 08:56:05 -04:00

neural

release(alpha.43+44): pin neural→sona@0.1.5, republish modules w/ standalone READMEs, add npm download badges everywhere (#2022)

2026-05-16 16:46:34 -04:00

performance

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

plugin-agent-federation

fix(release): ship Capability Brain as a self-contained 3.32.30 train (#2829)

2026-07-29 01:30:53 -04:00

plugin-iot-cognitum

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

plugins

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

providers

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

security

fix(security): compare candidate and prefix in the same canonical form (#3011)

2026-08-13 17:02:17 -04:00

shared

feat: ship adaptive swarm and resolve top runtime issues (#2848)

2026-07-29 13:25:22 -04:00

swarm

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

testing

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

watermark

feat(watermark): add browser/Deno ESM entry (@claude-flow/watermark 0.2.0) (#3041)

2026-08-15 19:18:24 -04:00

tmp.json

…