This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+8 more
Summary
AI summaryUpdates bundle, LED-1938, and opsec across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds always‑on scheduled author-audit in CI that cannot be bypassed even with --admin. Adds always‑on scheduled author-audit in CI that cannot be bypassed even with --admin. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Fixes auto session-end capture in hooks by installing SessionEnd hook. Fixes auto session-end capture in hooks by installing SessionEnd hook. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Fixes classification of outreach_submit and wiring as INTERNAL in bundle. Fixes classification of outreach_submit and wiring as INTERNAL in bundle. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Refactor | Low |
Synchronizes gateway bundle for version 4.16.3 to address heartbeat.py drift. Synchronizes gateway bundle for version 4.16.3 to address heartbeat.py drift. Source: llm_adapter@2026-07-18 Confidence: high |
— |
Full changelog
What's Changed
- fix(bundle): classify outreach_submit + wiring INTERNAL (LED-1938) by @infracore in https://github.com/delimit-ai/delimit-mcp-server/pull/176
- ci(opsec): always-on scheduled author-audit — un-bypassable by --admin (LED-3830) by @infracore in https://github.com/delimit-ai/delimit-mcp-server/pull/177
- fix(hooks): auto session-end capture — install SessionEnd hook in nested shape by @infracore in https://github.com/delimit-ai/delimit-mcp-server/pull/178
- release: v4.16.3 by @infracore in https://github.com/delimit-ai/delimit-mcp-server/pull/179
- chore(bundle): sync gateway bundle for 4.16.3 (heartbeat.py drift) by @infracore in https://github.com/delimit-ai/delimit-mcp-server/pull/180
Full Changelog: https://github.com/delimit-ai/delimit-mcp-server/compare/v4.16.2...v4.16.3
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About delimit-ai/delimit
API governance server that detects breaking changes in OpenAPI specs. Diffs two spec versions, applies configurable policy rules (strict/default/relaxed), and returns structured pass/fail verdicts. 23 change types, 10 breaking. Supports OpenAPI 3.0, 3.1, and Swagger 2.0.
Related context
Beta — feedback welcome: [email protected]