Skip to content

I4cTime/quantum_ring

v0.10.1 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 1mo Secrets & Credentials
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents claude-code cursor keyring mcp mcp-server
+2 more
secrets-management security

Summary

AI summary

Fixed publish pipeline bug that prevented v0.9.9 and v0.10.0 from being published to npm.

Full changelog

Patch release — unblock publish pipeline

This patch ships v0.10.0's refactor + security work to npm. The functional source code is unchanged from v0.10.0; the bump exists solely to push a new artifact through the now-fixed publish workflow.

Fix

  • publish.yml — removed npm install -g npm@latest step that crashed with Cannot find module 'promise-retry' on the Node 22 runner image. This bug had silently blocked v0.9.9 and v0.10.0 from reaching npm (both were tagged + GitHub-released but never published).
  • publish.yml — added workflow_dispatch trigger with optional ref input so a stuck release can be manually re-published from the Actions tab without re-tagging.

Highlights from v0.10.0 (now actually shipping)

  • CLI decomposed into nine themed modules under src/cli/commands/.
  • MCP tools decomposed into ten focused modules under src/mcp/tools/ plus shared _shared.ts.
  • Grouped qring --help with nine glyph-prefixed sections.
  • Approval HMAC widened to cover workspace and sessionId.
  • JIT HTTP SSRF fails closed on DNS errors.
  • Teleport AES-GCM uses 12-byte IVs.
  • 164 tests across 24 files.

Installation

npm install -g @i4ctime/q-ring
brew install i4ctime/tap/qring   # via the auto-update workflow

Full changelog: https://github.com/I4cTime/quantum_ring/blob/main/CHANGELOG.md

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track I4cTime/quantum_ring

Get notified when new releases ship.

Sign up free

About I4cTime/quantum_ring

Quantum-inspired keyring for AI coding agents. Secure secrets with superposition, entanglement, tunneling, and teleportation.

All releases →

Related context

Beta — feedback welcome: [email protected]