chore(release): v0.4.4 — re-publish protobufjs override that was missing from npm 0.4.3 (#56)

unohee · web-flow · commit 4737b5d2c93d · 2026-05-07T20:57:08.000+09:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.4.4 — 2026-05-07
+
+### Security
+
+- Re-publish of 0.4.3 to ensure the `protobufjs` `^7.5.5` override (CVE-2026-41242 / GHSA-xq3m-2v4x-88gg, critical RCE, CVSS 9.8) is actually present in the npm tarball. The override was merged into `main` for 0.4.3 but was not included in the package that reached npm. No code changes beyond the version bump; the override entry already lives in `package.json`.
+
 ## 0.4.3 — 2026-05-07
 
 ### Fixed
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@intrect/openswarm",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "description": "Autonomous AI agent orchestrator — Claude, GPT, Codex, and local models (Ollama/LMStudio/llama.cpp)",
   "license": "GPL-3.0",
   "type": "module",

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@intrect/openswarm",`
`3`		`- "version": "0.4.3",`
	`3`	`+ "version": "0.4.4",`
`4`	`4`	`"description": "Autonomous AI agent orchestrator — Claude, GPT, Codex, and local models (Ollama/LMStudio/llama.cpp)",`
`5`	`5`	`"license": "GPL-3.0",`
`6`	`6`	`"type": "module",`