ruvnet 384b923986 chore(release): 3.38.21 -> 3.38.23 ...

Patch release covering the six commits landed since 3.38.21:
- #3221 gate EnhancedModelRouter's forwarded modelId on tier match
- #3169 wire embedding-cosine into SmartRetrieval's MMR step
- #3184 wire real cold-start measurement, drop the fabricated V2-vs-V3 benchmark
- #3177 bound two ReDoS patterns, stateless PII regexes, O(P) confidence pass
- #3204 fix two stale main-tree Test Suite failures
- #3203 add v3/@claude-flow/mcp to the root npm workspaces

3.38.22 is intentionally skipped: @claude-flow/cli's publish for that version
stuck in npm's "staged" state (published umbrellas, cli 404) and the registry
refused to republish over it even after unpublish, so all three packages moved
to .23 together to restore version lockstep.

Co-Authored-By: RuFlo <ruv@ruv.net>
Claude-Session: https://claude.ai/code/session_01Ff2xRKvYrqXJhefvcapfE1

2026-09-07 13:41:18 -04:00

..

agents

…

aidefence

fix(aidefence): bound two ReDoS patterns, stateless PII regexes, O(P) confidence pass (#3177)

2026-09-05 11:37:11 -04:00

browser

chore(deps): bump agentic-flow in /v3/@claude-flow/browser (#2907)

2026-08-13 17:02:07 -04:00

claims

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

cli

chore(release): 3.38.21 -> 3.38.23

2026-09-07 13:41:18 -04:00

cli-core

fix: resolve current runtime and verification defects for v3.32.36 (#2850)

2026-07-29 15:08:51 -04:00

codex

fix(codex): close worker stdin so codex exec doesn't hang waiting for EOF (#2947) (#2997)

2026-08-12 16:11:14 -04:00

deployment

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

embeddings

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

guidance

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

hooks

feat(security): implement ADR-377 — AgentDB Retrieval Security Layer (#2874)

2026-07-30 14:09:34 -04:00

integration

fix(test): stop asserting strict-positive task duration in agentic-flow-agent tests (#3059)

2026-09-02 09:35:21 -04:00

mcp

fix(mcp): rate-limit authenticated HTTP routes

2026-08-14 19:04:54 -04:00

memory

dream(memory): #3168 wire embedding-cosine into SmartRetrieval's MMR step (evaluated, ACCEPT) (#3169)

2026-09-05 11:57:23 -04:00

neural

release(alpha.43+44): pin neural→sona@0.1.5, republish modules w/ standalone READMEs, add npm download badges everywhere (#2022)

2026-05-16 16:46:34 -04:00

performance

dream(performance): #3183 wire real cold-start measurement, remove fabricated V2-vs-V3 benchmark (evaluated, ACCEPT-scoped) (#3184)

2026-09-05 11:38:56 -04:00

plugin-agent-federation

fix(release): ship Capability Brain as a self-contained 3.32.30 train (#2829)

2026-07-29 01:30:53 -04:00

plugin-iot-cognitum

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

plugins

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

providers

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

security

fix(security): compare candidate and prefix in the same canonical form (#3011)

2026-08-13 17:02:17 -04:00

shared

feat: ship adaptive swarm and resolve top runtime issues (#2848)

2026-07-29 13:25:22 -04:00

swarm

dream(swarm): #3061 bound MessageBus retry attempts, fix unreachable message.failed (evaluated, ACCEPT) (#3062)

2026-08-21 11:19:24 -04:00

testing

fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)

2026-06-29 22:41:24 -04:00

watermark

feat(watermark): add browser/Deno ESM entry (@claude-flow/watermark 0.2.0) (#3041)

2026-08-15 19:18:24 -04:00

tmp.json

…