This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+12 more
Affected surfaces
Summary
AI summaryUpdates Summary, Test plan, and Summary by CodeRabbit across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Dependency | Medium |
Upgrades npm in-place to version 11 before publishing. Upgrades npm in-place to version 11 before publishing. Source: llm_adapter@2026-05-27 Confidence: low |
— |
Full changelog
Summary
- Node 22 ships with npm 10.x, which lacks OIDC tokenless publishing support
- npm 11+ is required for the
--provenanceflag to exchange GitHub OIDC tokens with the npm registry - Upgrades npm in-place before the publish step; the rest of the job (build, test) keeps the Node 22 tree-sitter ABI
Test plan
- [ ] Merge triggers release workflow
- [ ] Publish job upgrades npm to 11 before
npm publish --provenance - [ ] v0.7.56 appears on npmjs.com with Sigstore provenance badge
Summary by CodeRabbit
- Chores
- Updated the release workflow to improve package publishing process with enhanced security and Node-22 compatibility.
Breaking Changes
- Requires npm 11+ for `--provenance` flag; older npm versions lack OIDC tokenless support.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Track Hivemind turns agent traces into skills and shares with your team
Get notified when new releases ship.
Sign up freeAbout Hivemind turns agent traces into skills and shares with your team
All releases →Related context
Related tools
Earlier breaking changes
- v0.7.52 Removes `hivemind tasks` CLI and related code surfaces.
- v0.7.51 Removes `hivemind tasks` CLI and related code surfaces.
- v0.7.19 Module name skilify replaced with skillify; affects all imports
- v0.7.19 CLI command skilify removed; renamed to skillify without deprecation alias
- v0.7.18 CLI subcommand renamed from `skilify` to `skillify`; no deprecation alias.
Beta — feedback welcome: [email protected]