Repository navigation
chore: bump version 2.10.0 → 2.11.0 - #9182
Conversation
Sync the app version across the package manifests, the Tauri desktop crate and the agent plugin manifests (package.json, package-lock.json, tauri.conf.json, Cargo.toml, Cargo.lock, plugin.json, public/plugin.json), and the repo-version row in docs/desktop-parity-matrix.md. Merging this lets the desktop release train tag v2.11.0 and dispatch the desktop build; publishing that release triggers the Docker image publish. v2.11.0 carries the fixes for GHSA-887j, GHSA-wf3p, GHSA-r2f7 and GHSA-jrxc, which no tagged release contains yet. Claude-Session: https://claude.ai/code/session_01Hxh5e3HfnS8MrGc18sEuGG
|
Preview deployment for your docs. Learn more about Mintlify Previews.
💡 Tip: Enable Automations to automatically generate PRs for you. |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Strix Security ReviewNo security issues found. Review summaryThis PR is a routine release-version bump from 2.10.0 to 2.11.0 across package.json, package-lock.json, plugin.json, public/plugin.json, src-tauri/Cargo.toml, src-tauri/Cargo.lock, src-tauri/tauri.conf.json, the repo-version row in docs/desktop-parity-matrix.md, and the version/date stamp in public/llms.txt and public/llms-full.txt. Every changed line is a version-field or metadata update with no functional, authentication, input-handling, secret, cryptographic, or other security-relevant logic change. No new endpoints, code paths, or dependencies are introduced. No security issues were identified. Updated for Reviewed by Strix |
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info
📝 Walkthrough
Merge Risk: ⚪ Minimal · up to
|
[Low impact] This version-only change appears safe to merge. SummaryUpdates the app version from
Reviews (1) · Last reviewed commit: "chore: bump version 2.10.0 → 2.11.0" · Reviewed by Greptile |
tests/llms-txt-mcp-tools.test.mjs requires public/llms.txt to name the package version; regenerate llms-full.txt to carry the same header. Claude-Session: https://claude.ai/code/session_01Hxh5e3HfnS8MrGc18sEuGG
Bumps the app version to 2.11.0 so the desktop release train can cut
v2.11.0.Why
No tagged release contains the fixes for GHSA-887j (#9038), GHSA-wf3p (#9030), GHSA-r2f7 (#9105) or GHSA-jrxc (#9099). The hosted service has them, but the published
v2.10.0desktop build and theghcr.io/koala73/worldmonitor:2.10.0and:latestimages do not. Those advisories cannot be published until a release ships the fixes.v2.10.0tags802eafbf0e, a commit from 2026-08-13, and its release was published on 2026-09-08. There are 2,881 commits onmainsince then, so this is a minor version.Changes
The version moves from 2.10.0 to 2.11.0 in every file that must agree:
package.json,package-lock.jsonsrc-tauri/tauri.conf.json,src-tauri/Cargo.toml,src-tauri/Cargo.lock(root crate only)plugin.json,public/plugin.json.tests/agent-plugins-manifest.test.mjsrequires these to matchpackage.json. The previous bump (chore: bump app version 2.8.0 → 2.10.0 #4767) did not touch them, because that test did not exist yet.The repo-version row in
docs/desktop-parity-matrix.mdpublic/llms.txtand the regeneratedpublic/llms-full.txt: the> Version:header line only.tests/llms-txt-mcp-tools.test.mjsrequires it to matchpackage.json.What merging does
mainthat touchespackage.json,desktop-release-train.ymlfinds that 2.11.0 is newer than the latest release,v2.10.0. It creates the tagv2.11.0and dispatchesbuild-desktop.yml.build-desktop.ymlbuilds all five platforms into a draft release and publishes it only if every build succeeds. If a build fails, the draft is never published,/releases/lateststays onv2.10.0, and no user receives a broken update.docker-publish.yml, which pushes2.11.0,2.11andlatestto GHCR.Verification
npm run version:check: package.json, tauri.conf.json and Cargo.toml are all 2.11.0.agent-plugins-manifest,desktop-release-train,deploy-config,agent-corpus-canonical-hostandagent-mode-view: 340 tests ran, 333 passed, none failed, and the remainder skipped.llms-txt-mcp-tools,agent-plugins-manifestandcli-package(every suite that reads the package version): 33/33 passed. The first CI run failedunit-shard (3)on thellms.txtversion check, which this commit fixes.Not verified: the desktop build itself. It last ran on 2026-09-08 for
v2.10.0, and five attempts failed before that run succeeded. PR CI does not build the desktop app, so the release run will be the first desktop build since then.https://claude.ai/code/session_01Hxh5e3HfnS8MrGc18sEuGG
Summary by CodeRabbit