chore(release): v7.1.1

Author: actions-user

CHANGELOG.md

@@ -24,6 +24,30 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `@agent-relay/slack-primitive` bumps `@slack/web-api` to `^7.16.0`, which raises its transitive `axios` floor to `^1.16.0` and clears GHSA-q8qp-cvcw-x6jj (prototype pollution gadgets in HTTP adapter allowing credential injection) and GHSA-3w6x-2g7m-8v23 (invisible JSON response tampering via `parseReviver`).
 - `agent-relay-sdk` drops the `[swarms]` optional extra so `swarms` (and its pinned `litellm==1.76.1`) is no longer a transitive dependency, clearing the LiteLLM Dependabot alerts. The Swarms adapter still works for users who `pip install swarms` themselves.
 
+## [7.1.1] - 2026-05-25
+
+### Changed
+
+- Cache nested workspace node_modules
+- Update README to reflect new features and remove old content
+- Prune unused root dependencies
+- Add three-way demo and update README
+
+### Fixed
+
+- Bump relayfile-mount binary v0.1.6 -> v0.7.39
+- Externalize @slack/web-api in build:cjs + declare as root dep
+- Bump quinn-proto to 0.11.14 to address Dependabot alert
+- Drop swarms extra to clear litellm Dependabot alerts
+- Run package validation smoke before tarball cleanup
+
+### Security
+
+- Bump protobufjs and fast-xml-builder to clear high-severity alerts
+- Bump fast-uri to 3.1.2 to clear path-traversal & host-confusion
+- Bump ws to 8.21.0 to clear uninitialized memory disclosure
+- Bump @slack/web-api to ^7.16.0 to clear axios prototype pollution
+
 ## [7.1.0] - 2026-05-22
 
 ### Changed

package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-relay",
-  "version": "7.1.0",
+  "version": "7.1.1",
   "description": "Real-time agent-to-agent communication system",
   "type": "module",
   "main": "dist/index.cjs",
@@ -131,14 +131,14 @@
   },
   "homepage": "https://github.com/AgentWorkforce/relay#readme",
   "dependencies": {
-    "@agent-relay/cloud": "7.1.0",
-    "@agent-relay/config": "7.1.0",
-    "@agent-relay/hooks": "7.1.0",
-    "@agent-relay/memory": "7.1.0",
-    "@agent-relay/sdk": "7.1.0",
-    "@agent-relay/telemetry": "7.1.0",
-    "@agent-relay/trajectory": "7.1.0",
-    "@agent-relay/utils": "7.1.0",
+    "@agent-relay/cloud": "7.1.1",
+    "@agent-relay/config": "7.1.1",
+    "@agent-relay/hooks": "7.1.1",
+    "@agent-relay/memory": "7.1.1",
+    "@agent-relay/sdk": "7.1.1",
+    "@agent-relay/telemetry": "7.1.1",
+    "@agent-relay/trajectory": "7.1.1",
+    "@agent-relay/utils": "7.1.1",
     "@modelcontextprotocol/sdk": "^1.0.0",
     "@relayauth/core": "^0.1.2",
     "@relaycast/mcp": "1.0.0",

packages/acp-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/acp-bridge",
-  "version": "7.1.0",
+  "version": "7.1.1",
   "description": "ACP (Agent Client Protocol) bridge for Agent Relay - expose relay agents to ACP-compatible editors like Zed",
   "type": "module",
   "main": "dist/index.js",
@@ -46,7 +46,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@agent-relay/sdk": "7.1.0",
+    "@agent-relay/sdk": "7.1.1",
     "@agentclientprotocol/sdk": "^0.12.0"
   },
   "devDependencies": {

packages/agent/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/agent",
-  "version": "7.1.0",
+  "version": "7.1.1",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,7 +19,7 @@
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
-    "@agent-relay/events": "7.1.0",
+    "@agent-relay/events": "7.1.1",
     "@relaycast/sdk": "1.1.2",
     "@relayfile/sdk": "^0.7.2"
   },

packages/brand/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/brand",
-  "version": "7.1.0",
+  "version": "7.1.1",
   "description": "Shared brand tokens, CSS variables, and color system for Agent Relay and associated properties",
   "main": "brand.css",
   "style": "brand.css",

packages/broker-darwin-arm64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/broker-darwin-arm64",
-  "version": "7.1.0",
+  "version": "7.1.1",
   "description": "agent-relay-broker binary for darwin arm64. Installed automatically as an optional dependency of @agent-relay/sdk.",
   "files": [
     "bin"

packages/broker-darwin-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/broker-darwin-x64",
-  "version": "7.1.0",
+  "version": "7.1.1",
   "description": "agent-relay-broker binary for darwin x64. Installed automatically as an optional dependency of @agent-relay/sdk.",
   "files": [
     "bin"

packages/broker-linux-arm64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/broker-linux-arm64",
-  "version": "7.1.0",
+  "version": "7.1.1",
   "description": "agent-relay-broker binary for linux arm64. Installed automatically as an optional dependency of @agent-relay/sdk.",
   "files": [
     "bin"

packages/broker-linux-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/broker-linux-x64",
-  "version": "7.1.0",
+  "version": "7.1.1",
   "description": "agent-relay-broker binary for linux x64. Installed automatically as an optional dependency of @agent-relay/sdk.",
   "files": [
     "bin"

packages/broker-win32-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/broker-win32-x64",
-  "version": "7.1.0",
+  "version": "7.1.1",
   "description": "agent-relay-broker binary for win32 x64. Installed automatically as an optional dependency of @agent-relay/sdk.",
   "files": [
     "bin"