This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Summary
AI summaryMinor fixes and improvements.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Dependency | Low |
Updates plugin version to 1.11.1; `/plugin update` refreshes `plugin.json` and rebuilds standalone‑skills ZIPs with new stamp. Updates plugin version to 1.11.1; `/plugin update` refreshes `plugin.json` and rebuilds standalone‑skills ZIPs with new stamp. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Low |
Fixes missing `doc-graph.svg` entry in README "Produces" file list. Fixes missing `doc-graph.svg` entry in README "Produces" file list. Source: llm_adapter@2026-05-29 Confidence: high |
— |
Full changelog
Docs-only patch
No plugin payload change — /plugin update will refresh plugin.json to 1.11.1 and the standalone-skills ZIPs get rebuilt with the new version stamp, but skills, agents, and commands are byte-identical to v1.11.0. Two docs landings since v1.11.0:
README leads with the doc-navigability graph (#42)
- The node graph is the more visually striking of the two
/assessoutputs and makes the "is the map honest?" framing legible at a glance (orphan rim, disconnected islands, vivid-red stale hubs all visible without reading the caption). The heatmap now sits second as the technical "where's the migration risk" view. - "What
/assessproduces" copy reworked so the two artifacts read as one paired view (can an agent find its way? → what's risky to change?) instead of two independent images with technical captions. - Fixed the "Produces" file list (was missing
doc-graph.svg; said "both files" when it's now three) and mirrored the swap in "Why this matters".
PRD for dismiss-false-positives (#43)
- Planning artifact for a future MINOR feature: let users mark and re-evaluate false positives across all four
/assessfinding kinds (dead_code,hotspot,stale_hub,broken_link) via a single.assess/dismissed.yaml. - Load-bearing decisions documented: expiry is mandatory (no fossilized dismissals), filtering happens in the deterministic core before
run-context.jsonwrites, single central YAML beats inline source comments across 14 languages. - Out-of-scope items named explicitly (inline annotations, severity tiers, cross-repo sharing, auto-dismissal heuristics) so future contributors don't re-litigate them.
- No implementation in this release — that's a follow-up.
Both the Claude Code plugin and the standalone Desktop/Cowork ZIPs are updated (ZIPs on the standalone-skills-latest rolling release).
What's Changed
Documentation
- docs: Lead README with the doc-navigability graph by @bjcoombs in https://github.com/bjcoombs/ai-native-toolkit/pull/42
- docs: PRD for /assess dismiss-false-positives mechanism by @bjcoombs in https://github.com/bjcoombs/ai-native-toolkit/pull/43
Other Changes
- chore: Bump plugin to 1.11.1 (docs-only patch) by @bjcoombs in https://github.com/bjcoombs/ai-native-toolkit/pull/44
Full Changelog: https://github.com/bjcoombs/ai-native-toolkit/compare/v1.11.0...v1.11.1
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About AI readiness toolkit
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]