From 2e9d3983ff010cd1bb0d3b581fc0a053fb25a969 Mon Sep 17 00:00:00 2001 From: Jordan Hochenbaum Date: Mon, 7 Sep 2026 16:14:16 -0400 Subject: [PATCH] chore(release): prepare 0.2.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Patch rather than minor: the plugin's own surface is unchanged. What users get is the pinned hunkdiff moving 0.19.0 -> 0.20.1 (#19), which carries an upstream security fix — 0.20.1 rejects option-like Git ranges and refs in session reloads, closing a path where a broker caller could inject Git flags and write diff output to arbitrary paths. v0.2.0's release notes advertise hunkdiff 0.19.0, so anyone reading the latest release cannot tell the hardened hunk is what now installs. Tagging is what corrects that, same as it was for the platform list in 0.2.0. The plugin only ever hands hunk git-derived refs as positionals (base branch, commit SHA, stash@{0}) and already excludes stash from session reload, so nothing here needed changing for the stricter ref parsing. min_herdr_version stays at 0.8.0; no herdr API changed. Also in this release, both dev-only: typescript-eslint 8.68.0 (#18) and vitest 5.0.0 (#17). Dependabot's rebase retargeted #17 from the announced 4.1.11 patch to the 5.0.0 major while leaving its metadata claiming a patch; kept deliberately after check, build and 668 tests passed on it. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01KoevCj4pPggPW2YMcpKMGJ --- herdr-plugin.toml | 2 +- package-lock.json | 4 ++-- package.json | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/herdr-plugin.toml b/herdr-plugin.toml index 144faf1..6a650ba 100644 --- a/herdr-plugin.toml +++ b/herdr-plugin.toml @@ -1,6 +1,6 @@ id = "jhochenbaum.hunkdiff" name = "hunk" -version = "0.2.0" +version = "0.2.1" # Requires plugin-root-relative action commands and reliable agent prompt submission from Herdr 0.8. min_herdr_version = "0.8.0" diff --git a/package-lock.json b/package-lock.json index 7ea8fdd..3f3d1a0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "herdr-hunk-diff", - "version": "0.2.0", + "version": "0.2.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "herdr-hunk-diff", - "version": "0.2.0", + "version": "0.2.1", "license": "MIT", "dependencies": { "hunkdiff": "0.20.1", diff --git a/package.json b/package.json index 82ed182..fbc95e1 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "herdr-hunk-diff", - "version": "0.2.0", + "version": "0.2.1", "description": "A herdr plugin that reviews agent-authored diffs in hunk and sends your inline comments back to the agent that wrote them.", "license": "MIT", "author": "Jordan Hochenbaum",