This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryRe-signs the shipped manifest to resolve GCP signing secret access issue.
Full changelog
Metadata-only patch closing the #2593 loop.
3.25.3 shipped the CI guard for stale helpers.manifest.json but couldn't self-repair its own release because the GCP signing secret wasn't accessible from the publish environment. 3.25.4 ships a properly-signed manifest at version 3.25.4 that matches the package version.
No source or dependency changes. All fixes from 3.25.3 remain — this only re-signs the shipped manifest.
Install
npx [email protected]
npx ruflo@latest
npx claude-flow@v3alpha
npx @claude-flow/cli@alpha
All three legacy dist-tags (latest, alpha, v3alpha) point to 3.25.4.
Packages
🤖 Generated with RuFlo
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]