Skip to content

chore: upstream dependency sync 2026-04-27#12

Merged
impravin22 merged 1 commit intomainfrom
chore/upstream-sync-2026-04-27
May 7, 2026
Merged

chore: upstream dependency sync 2026-04-27#12
impravin22 merged 1 commit intomainfrom
chore/upstream-sync-2026-04-27

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

Upstream Dependency Sync

Upstream changes detected by the daily tracker workflow.

Changes Detected

lightrag

  • New release: v1.5.0rc1 (was v1.4.15)
  • Release notes:
## Breaking Changes

* The `ENTITY_TYPES` environment variable has been deprecated; Please replace it with ENTITY_TYPE_PROMPT_FILE before launching this new version.

## Major Improvements

* Implement **role-specific LLM** configuration support, introducing four distinct roles—EXTRACT, QUERY, KEYWORDS, and VLM—each with independent LLM settings.
* Enable **task-aware embedding** support for asymmetric models, including `voyage-3`, `text-embedding-004`, `embed-multilingual-v3.0`, and `jina-embeddings-v3`.
* Add optional **JSON-formatted LLM** output to enhance stability in the entity and relation extraction pipeline.
* Introduce `ENTITY_TYPE_PROMPT_FILE` to empower users with enhanced guidance for LLM-driven **entity type recognition** and extraction.
* Fully support Amazon and Anthropic models on **AWS Bedrock API*.

## What's Changed
* feat: explicit voyageai embed support by @laszukdawid in https://github.com/HKUDS/LightRAG/pull/2484
* feat: Add **task-aware embedding** support by @StoreksFeed in https://github.com/HKUDS/LightRAG/pull/2560
* feat: **integrate structured extraction** and **multimodal processing pipeline** by @MrGidea in https://github.com/HKUDS/LightRAG/pull/2830 
* ♻️ refactor(documentManager): reorganize document status filtering by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2851
* feat: enhance entity extraction stability dev by @yunzhongxiaxi in https://github.com/HKUDS/LightRAG/pull/2864
* Remove config.ini from compose samples by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2906
* fix: handle OpenAI length finish reason fallback by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2913
  • 39 new commit(s) since last check
  • Latest: 221fcb0 — Merge branch 'embedding-prefixes'
  • Recent commits:
  • 221fcb0 Merge branch 'embedding-prefixes'
  • fff2720 Bump API version to 0290
  • fe6fa34 📝 docs(embedding): add comprehensive asymmetric embedding configuration documentation
  • 689ae8b 🐛 fix(utils): fix shared state bug in embedding decorator reuse
  • 213e53d 🐛 fix(logging): correct directory creation path in configure_logging

voicemode

  • 50 new commit(s) since last check
  • Latest: 6afff77 — Merge branch 'cora/clone-voices' (clone-model defaults + template)
  • Recent commits:
  • 6afff77 Merge branch 'cora/clone-voices' (clone-model defaults + template)
  • a4c82d6 feat(voices): default clone-model to 1.7B-Base-4bit + document quants in template
  • 278a328 Merge branch 'cora/clone-voices'
  • 58e3df2 Merge branch 'cora/clone-base-url-env' into cora/clone-voices
  • a25d670 feat(voices): default clone-voice base URL to local mlx-audio

Review Checklist

  • Check for breaking API changes in updated dependencies
  • Update SKILL.md if upstream capabilities changed
  • Update install.sh if install methods changed
  • Update checklists if needed
  • Bump version in plugin.json if changes made
  • Run install.sh --dry-run to verify

This PR was automatically created by the upstream tracker workflow.

@github-actions github-actions Bot added the upstream-update Automated: upstream dependency has new changes label Apr 27, 2026
@github-actions
Copy link
Copy Markdown
Contributor Author

New upstream changes detected (2026-04-28)

context7

  • New release: @upstash/context7-mcp@2.2.1 (was @upstash/context7-mcp@2.2.0)
  • Release notes:
### Patch Changes

-   1b0c211: Add endpoint for OpenAI Apps SDK domain verification.
  • 4 new commit(s) since last check
  • Latest: b4bf49f — chore(release): version packages (#2518)
  • Recent commits:
  • b4bf49f chore(release): version packages (#2518)
  • 1b0c211 feat(openai-apps): add OpenAI Apps SDK domain verification endpoint (#2517)
  • 8bf305b feat(metrics): add endpoint for retrieving library usage metrics (#2511) (#2516)
  • d448744 feat(metrics): add endpoint for retrieving library usage metrics (#2511)
  • 5d284f2 chore(release): version packages (#2489)

lightrag

  • New release: v1.5.0rc1 (was v1.4.15)
  • Release notes:
## Breaking Changes

* The `ENTITY_TYPES` environment variable has been deprecated; Please replace it with ENTITY_TYPE_PROMPT_FILE before launching this new version.

## Major Improvements

* Implement **role-specific LLM** configuration support, introducing four distinct roles—EXTRACT, QUERY, KEYWORDS, and VLM—each with independent LLM settings.
* Enable **task-aware embedding** support for asymmetric models, including `voyage-3`, `text-embedding-004`, `embed-multilingual-v3.0`, and `jina-embeddings-v3`.
* Add optional **JSON-formatted LLM** output to enhance stability in the entity and relation extraction pipeline.
* Introduce `ENTITY_TYPE_PROMPT_FILE` to empower users with enhanced guidance for LLM-driven **entity type recognition** and extraction.
* Fully support Amazon and Anthropic models on **AWS Bedrock API*.

## What's Changed
* feat: explicit voyageai embed support by @laszukdawid in https://github.com/HKUDS/LightRAG/pull/2484
* feat: Add **task-aware embedding** support by @StoreksFeed in https://github.com/HKUDS/LightRAG/pull/2560
* feat: **integrate structured extraction** and **multimodal processing pipeline** by @MrGidea in https://github.com/HKUDS/LightRAG/pull/2830 
* ♻️ refactor(documentManager): reorganize document status filtering by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2851
* feat: enhance entity extraction stability dev by @yunzhongxiaxi in https://github.com/HKUDS/LightRAG/pull/2864
* Remove config.ini from compose samples by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2906
* fix: handle OpenAI length finish reason fallback by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2913
  • 40 new commit(s) since last check
  • Latest: bd02691 — 📝 docs(AdvancedFeatures): expand TokenTracker documentation with usage patterns
  • Recent commits:
  • bd02691 📝 docs(AdvancedFeatures): expand TokenTracker documentation with usage patterns
  • 221fcb0 Merge branch 'embedding-prefixes'
  • fff2720 Bump API version to 0290
  • fe6fa34 📝 docs(embedding): add comprehensive asymmetric embedding configuration documentation
  • 689ae8b 🐛 fix(utils): fix shared state bug in embedding decorator reuse

n8n-mcp

  • 2 new commit(s) since last check
  • Latest: d0f66d7 — ci: collapse agentic triage to single approval gate (#748)
  • Recent commits:
  • d0f66d7 ci: collapse agentic triage to single approval gate (#748)
  • aa83780 ci: add agentic issue-triage workflow (#745)
  • 9639f75 Merge commit from fork
  • 59b665b Merge commit from fork
  • 29f4d43 chore: remove automated n8n update workflow, fix manual update script (#742)

claude-mem

  • New release: v12.4.8 (was v12.4.7)
  • Release notes:
## Bug Fixes

- **timeline tool:** Coerce stringified numeric anchors (e.g. `"123"`) into the observation-ID dispatch path so they no longer fall through to ISO-timestamp parsing and return wrong-epoch windows. The HTTP layer always sends anchor as a string, so this fixes anchor lookups via MCP and HTTP across the board. (#2176)

## Tests

- Added a 7-case regression suite covering JS-number anchors, stringified-number anchors (incl. whitespace-padded), session-ID anchors (`S<n>`), ISO-timestamp anchors, garbage anchors, and explicit numeric-not-found behavior. The suite runs against a real in-memory SQLite `SessionStore` to exercise the full dispatch path.

## Refactors

- Extracted `parseNumericAnchor` helper in `SearchManager` to centralize anchor coercion across timeline handlers.
  • 4 new commit(s) since last check
  • Latest: 7e2da10 — docs: update CHANGELOG.md for v12.4.8
  • Recent commits:
  • 7e2da10 docs: update CHANGELOG.md for v12.4.8
  • 594becf chore: bump version to 12.4.8
  • ff0793f fix: coerce stringified numeric anchor in timeline() MCP tool (#2176)
  • 5458dd2 docs: add openclaw manifest to version-bump skill
  • bb1f869 docs: update CHANGELOG.md for v12.4.7

voicemode

  • 50 new commit(s) since last check
  • Latest: 6afff77 — Merge branch 'cora/clone-voices' (clone-model defaults + template)
  • Recent commits:
  • 6afff77 Merge branch 'cora/clone-voices' (clone-model defaults + template)
  • a4c82d6 feat(voices): default clone-model to 1.7B-Base-4bit + document quants in template
  • 278a328 Merge branch 'cora/clone-voices'
  • 58e3df2 Merge branch 'cora/clone-base-url-env' into cora/clone-voices
  • a25d670 feat(voices): default clone-voice base URL to local mlx-audio

playwright-mcp

  • New release: v0.0.71 (was v0.0.70)
  • Release notes:
## What's New

### New Tools

- **`browser_drop`** — Expose `Locator.drop` as an MCP tool for completing drag-and-drop operations onto a target ([#40367](https://github.com/microsoft/playwright/pull/40367))

### Tool Improvements

- **`browser_network_requests`** — Added `responseBody` and `responseHeaders` options; binary bodies are rendered as a placeholder using mime-type detection ([microsoft/playwright@f0be0b17](https://github.com/microsoft/playwright/commit/f0be0b1728))
- **`browser_evaluate`** — Accept plain expressions in addition to function bodies ([#39979](https://github.com/microsoft/playwright/pull/39979))

### Browser Extension

- **Tab group syncing** — Connected tabs are grouped into a green "Playwright" tab group ([#1514](https://github.com/microsoft/playwright-mcp/pull/1514), [#1551](https://github.com/microsoft/playwright-mcp/pull/1551))

## Bug Fixes

- Disable CDP timeout for extension connection so long handshakes don't fail ([#40265](https://github.com/microsoft/playwright/pull/40265))
- Ensure `--proxy-server` overrides the proxy set in the config file ([#40212](https://github.com/microsoft/playwright/pull/40212))
- Merge user-supplied `ignoreDefaultArgs` with persistent mode defaults instead of replacing them ([#40026](https://github.com/microsoft/playwright/pull/40026))
  • 3 new commit(s) since last check
  • Latest: aec213a — docs: add release notes preparation guide (#1575)
  • Recent commits:
  • aec213a docs: add release notes preparation guide (#1575)
  • f27ff15 chore: mark v0.0.71 (#1576)
  • b06304e chore: roll 1.60.0-alpha-2026-04-27 (#1574)
  • 9a1eaa6 chore: flatten repo to single-package layout (#1567)
  • 72d3a4d chore(extension): drop packages/extension, moved to microsoft/playwright (#1564)

Updated by the upstream tracker workflow.

@github-actions
Copy link
Copy Markdown
Contributor Author

New upstream changes detected (2026-04-29)

context7

  • New release: @upstash/context7-mcp@2.2.2 (was @upstash/context7-mcp@2.2.0)
  • Release notes:
### Patch Changes

-   8274bd0: Add missing tool annotations
-   ff6c1be: Remove the `researchMode` parameter from the `query-docs` tool's input schema. The underlying API still supports research mode, but several MCP clients hit per-request timeouts (60s defaults) on long-running research calls in ways that can't always be solved server-side. Hiding the parameter prevents agents from invoking it through MCP until the timeout story is reliable across clients.
  • 7 new commit(s) since last check
  • Latest: 04b70c4 — chore(release): version packages (#2522)
  • Recent commits:
  • 04b70c4 chore(release): version packages (#2522)
  • ff6c1be chore(mcp): remove researchMode from query-docs tool params (#2524)
  • 8274bd0 feat(annotations): add missing tool annotations and enhance hints (#2521)
  • b4bf49f chore(release): version packages (#2518)
  • 1b0c211 feat(openai-apps): add OpenAI Apps SDK domain verification endpoint (#2517)

lightrag

  • New release: v1.5.0rc1 (was v1.4.15)
  • Release notes:
## Breaking Changes

* The `ENTITY_TYPES` environment variable has been deprecated; Please replace it with ENTITY_TYPE_PROMPT_FILE before launching this new version.

## Major Improvements

* Implement **role-specific LLM** configuration support, introducing four distinct roles—EXTRACT, QUERY, KEYWORDS, and VLM—each with independent LLM settings.
* Enable **task-aware embedding** support for asymmetric models, including `voyage-3`, `text-embedding-004`, `embed-multilingual-v3.0`, and `jina-embeddings-v3`.
* Add optional **JSON-formatted LLM** output to enhance stability in the entity and relation extraction pipeline.
* Introduce `ENTITY_TYPE_PROMPT_FILE` to empower users with enhanced guidance for LLM-driven **entity type recognition** and extraction.
* Fully support Amazon and Anthropic models on **AWS Bedrock API*.

## What's Changed
* feat: explicit voyageai embed support by @laszukdawid in https://github.com/HKUDS/LightRAG/pull/2484
* feat: Add **task-aware embedding** support by @StoreksFeed in https://github.com/HKUDS/LightRAG/pull/2560
* feat: **integrate structured extraction** and **multimodal processing pipeline** by @MrGidea in https://github.com/HKUDS/LightRAG/pull/2830 
* ♻️ refactor(documentManager): reorganize document status filtering by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2851
* feat: enhance entity extraction stability dev by @yunzhongxiaxi in https://github.com/HKUDS/LightRAG/pull/2864
* Remove config.ini from compose samples by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2906
* fix: handle OpenAI length finish reason fallback by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2913
  • 46 new commit(s) since last check
  • Latest: 568c007 — Merge pull request #2991 from LantaoJin/pr/issues/2975
  • Recent commits:
  • 568c007 Merge pull request #2991 from LantaoJin/pr/issues/2975
  • 5a01729 Fix linting
  • fc49c11 ♻️ refactor(opensearch): rename doc_id to __mirrored_id and add fail-fast validation
  • 4cfdce3 Add a new field doc_id as sort tiebreaker on < 3.3.0
  • bb6a012 Use composite fields as tiebreaker in graph edges

everything-claude-code

  • 12 new commit(s) since last check
  • Latest: c7c7d37 — Merge remote-tracking branch 'origin/main' into feat/ecc2-rc1-preview-surface
  • Recent commits:
  • c7c7d37 Merge remote-tracking branch 'origin/main' into feat/ecc2-rc1-preview-surface
  • b6b5b6d test: cover CI catalog validator
  • f6acf6e Merge pull request #1606 from affaan-m/fix/1598-observer-sigusr1-wait
  • 46aa301 Merge remote-tracking branch 'origin/main' into feat/ecc2-rc1-preview-surface
  • fd95cf6 fix: retry observer wait after signal

n8n-mcp

  • New release: v2.49.0 (was v2.47.14)
  • Release notes:
# Release v2.49.0

Generating release notes from v2.48.3 to HEAD
### 🔧 Maintenance

- Update n8n to 2.18.4 and bump version to 2.49.0 (#761) (7c9ca1a)

---

**Release Statistics:**
- 1 commit
- 1 contributor
- Contributors: Romuald Członkowski

---

## Installation

### NPM Package
```bash
  • 8 new commit(s) since last check
  • Latest: 7c9ca1a — chore: update n8n to 2.18.4 and bump version to 2.49.0 (#761)
  • Recent commits:
  • 7c9ca1a chore: update n8n to 2.18.4 and bump version to 2.49.0 (#761)
  • 7cd5d51 fix: validator warning for __rl fields missing cachedResultName (#715) (#760)
  • f6ab3d5 fix: surface HTTP status in audit errors + workaround oAuth2 schema bug (#736, #740) (#759)
  • 7fc714d fix: validateOnly path consistency + Zod 4 record-key compatibility (#744) (#757)
  • 1445332 ci(docker): pre-build test image in workflow, drop in-test build flake (#758)

claude-mem

  • New release: v12.4.8 (was v12.4.7)
  • Release notes:
## Bug Fixes

- **timeline tool:** Coerce stringified numeric anchors (e.g. `"123"`) into the observation-ID dispatch path so they no longer fall through to ISO-timestamp parsing and return wrong-epoch windows. The HTTP layer always sends anchor as a string, so this fixes anchor lookups via MCP and HTTP across the board. (#2176)

## Tests

- Added a 7-case regression suite covering JS-number anchors, stringified-number anchors (incl. whitespace-padded), session-ID anchors (`S<n>`), ISO-timestamp anchors, garbage anchors, and explicit numeric-not-found behavior. The suite runs against a real in-memory SQLite `SessionStore` to exercise the full dispatch path.

## Refactors

- Extracted `parseNumericAnchor` helper in `SearchManager` to centralize anchor coercion across timeline handlers.
  • 4 new commit(s) since last check
  • Latest: 7e2da10 — docs: update CHANGELOG.md for v12.4.8
  • Recent commits:
  • 7e2da10 docs: update CHANGELOG.md for v12.4.8
  • 594becf chore: bump version to 12.4.8
  • ff0793f fix: coerce stringified numeric anchor in timeline() MCP tool (#2176)
  • 5458dd2 docs: add openclaw manifest to version-bump skill
  • bb1f869 docs: update CHANGELOG.md for v12.4.7

voicemode

  • 50 new commit(s) since last check
  • Latest: 6afff77 — Merge branch 'cora/clone-voices' (clone-model defaults + template)
  • Recent commits:
  • 6afff77 Merge branch 'cora/clone-voices' (clone-model defaults + template)
  • a4c82d6 feat(voices): default clone-model to 1.7B-Base-4bit + document quants in template
  • 278a328 Merge branch 'cora/clone-voices'
  • 58e3df2 Merge branch 'cora/clone-base-url-env' into cora/clone-voices
  • a25d670 feat(voices): default clone-voice base URL to local mlx-audio

playwright-mcp

  • New release: v0.0.71 (was v0.0.70)
  • Release notes:
## What's New

### New Tools

- **`browser_drop`** — Expose `Locator.drop` as an MCP tool for completing drag-and-drop operations onto a target ([#40367](https://github.com/microsoft/playwright/pull/40367))

### Tool Improvements

- **`browser_network_requests`** — Added `responseBody` and `responseHeaders` options; binary bodies are rendered as a placeholder using mime-type detection ([microsoft/playwright@f0be0b17](https://github.com/microsoft/playwright/commit/f0be0b1728))
- **`browser_evaluate`** — Accept plain expressions in addition to function bodies ([#39979](https://github.com/microsoft/playwright/pull/39979))

### Browser Extension

- **Tab group syncing** — Connected tabs are grouped into a green "Playwright" tab group ([#1514](https://github.com/microsoft/playwright-mcp/pull/1514), [#1551](https://github.com/microsoft/playwright-mcp/pull/1551))

## Bug Fixes

- Disable CDP timeout for extension connection so long handshakes don't fail ([#40265](https://github.com/microsoft/playwright/pull/40265))
- Ensure `--proxy-server` overrides the proxy set in the config file ([#40212](https://github.com/microsoft/playwright/pull/40212))
- Merge user-supplied `ignoreDefaultArgs` with persistent mode defaults instead of replacing them ([#40026](https://github.com/microsoft/playwright/pull/40026))
  • 3 new commit(s) since last check
  • Latest: aec213a — docs: add release notes preparation guide (#1575)
  • Recent commits:
  • aec213a docs: add release notes preparation guide (#1575)
  • f27ff15 chore: mark v0.0.71 (#1576)
  • b06304e chore: roll 1.60.0-alpha-2026-04-27 (#1574)
  • 9a1eaa6 chore: flatten repo to single-package layout (#1567)
  • 72d3a4d chore(extension): drop packages/extension, moved to microsoft/playwright (#1564)

Updated by the upstream tracker workflow.

@github-actions
Copy link
Copy Markdown
Contributor Author

New upstream changes detected (2026-04-30)

context7

  • New release: @upstash/context7-mcp@2.2.3 (was @upstash/context7-mcp@2.2.0)
  • Release notes:
### Patch Changes

-   772da3a: Stream MCP tool responses over SSE so HTTP headers flush before client `fetch` timeouts. Switching `enableJsonResponse` to `false` makes the SDK return the HTTP response synchronously after request validation, so headers are sent in milliseconds instead of being buffered until the tool completes. This fixes clients that cap the underlying `fetch` waiting for headers (e.g., Claude Code's 60s `wrapFetchWithTimeout`).
  • 10 new commit(s) since last check
  • Latest: d0e4a48 — Fix/mcp stream tool responses (#2526)
  • Recent commits:
  • d0e4a48 Fix/mcp stream tool responses (#2526)
  • 8782725 chore(release): version packages (#2525)
  • 772da3a fix(mcp): stream tool-call responses so headers flush before 60s (#2520)
  • 04b70c4 chore(release): version packages (#2522)
  • ff6c1be chore(mcp): remove researchMode from query-docs tool params (#2524)

lightrag

  • New release: v1.5.0rc1 (was v1.4.15)
  • Release notes:
## Breaking Changes

* The `ENTITY_TYPES` environment variable has been deprecated; Please replace it with ENTITY_TYPE_PROMPT_FILE before launching this new version.

## Major Improvements

* Implement **role-specific LLM** configuration support, introducing four distinct roles—EXTRACT, QUERY, KEYWORDS, and VLM—each with independent LLM settings.
* Enable **task-aware embedding** support for asymmetric models, including `voyage-3`, `text-embedding-004`, `embed-multilingual-v3.0`, and `jina-embeddings-v3`.
* Add optional **JSON-formatted LLM** output to enhance stability in the entity and relation extraction pipeline.
* Introduce `ENTITY_TYPE_PROMPT_FILE` to empower users with enhanced guidance for LLM-driven **entity type recognition** and extraction.
* Fully support Amazon and Anthropic models on **AWS Bedrock API*.

## What's Changed
* feat: explicit voyageai embed support by @laszukdawid in https://github.com/HKUDS/LightRAG/pull/2484
* feat: Add **task-aware embedding** support by @StoreksFeed in https://github.com/HKUDS/LightRAG/pull/2560
* feat: **integrate structured extraction** and **multimodal processing pipeline** by @MrGidea in https://github.com/HKUDS/LightRAG/pull/2830 
* ♻️ refactor(documentManager): reorganize document status filtering by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2851
* feat: enhance entity extraction stability dev by @yunzhongxiaxi in https://github.com/HKUDS/LightRAG/pull/2864
* Remove config.ini from compose samples by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2906
* fix: handle OpenAI length finish reason fallback by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2913
  • 46 new commit(s) since last check
  • Latest: 568c007 — Merge pull request #2991 from LantaoJin/pr/issues/2975
  • Recent commits:
  • 568c007 Merge pull request #2991 from LantaoJin/pr/issues/2975
  • 5a01729 Fix linting
  • fc49c11 ♻️ refactor(opensearch): rename doc_id to __mirrored_id and add fail-fast validation
  • 4cfdce3 Add a new field doc_id as sort tiebreaker on < 3.3.0
  • bb6a012 Use composite fields as tiebreaker in graph edges

everything-claude-code

  • 63 new commit(s) since last check
  • Latest: 2fd8dfc — docs: clarify MCP disable guidance
  • Recent commits:
  • 2fd8dfc docs: clarify MCP disable guidance
  • 158cbd8 docs: sync zh-cn rc1 release heading
  • 3e18127 test: require canonical rc1 launch link
  • 63c97b4 docs: align rc1 social launch copy
  • 70cc2bb fix: accept crlf command frontmatter

n8n-mcp

  • New release: v2.49.0 (was v2.47.14)
  • Release notes:
# Release v2.49.0

Generating release notes from v2.48.3 to HEAD
### 🔧 Maintenance

- Update n8n to 2.18.4 and bump version to 2.49.0 (#761) (7c9ca1a)

---

**Release Statistics:**
- 1 commit
- 1 contributor
- Contributors: Romuald Członkowski

---

## Installation

### NPM Package
```bash
  • 8 new commit(s) since last check
  • Latest: 7c9ca1a — chore: update n8n to 2.18.4 and bump version to 2.49.0 (#761)
  • Recent commits:
  • 7c9ca1a chore: update n8n to 2.18.4 and bump version to 2.49.0 (#761)
  • 7cd5d51 fix: validator warning for __rl fields missing cachedResultName (#715) (#760)
  • f6ab3d5 fix: surface HTTP status in audit errors + workaround oAuth2 schema bug (#736, #740) (#759)
  • 7fc714d fix: validateOnly path consistency + Zod 4 record-key compatibility (#744) (#757)
  • 1445332 ci(docker): pre-build test image in workflow, drop in-test build flake (#758)

claude-mem

  • New release: v12.4.9 (was v12.4.7)
  • Release notes:
Patches in 7 critical fixes from PR #2219 (integration/critical-fixes-april):

- #2211 build/bundle drift — remove stale macOS binary + regen artifacts (closes #2158, #2200, #2154)
- #2204 strip privacy tags before summarization (closes #2149)
- #2205 preserve relevance order in semantic search (closes #2153)
- #2208 restore Windows spawn (PR #751 re-apply) + Windows CI
- #2209 Codex transcript ingestion + queue self-deadlock on Windows (closes #2192)
- #2206 isolate SDK boundary — close 6 issues at 3 call sites
- #2210 standalone batch — npm peer deps, marketplace self-heal, cache prune
  • 7 new commit(s) since last check
  • Latest: 28b40c0 — docs: update CHANGELOG.md for v12.4.9
  • Recent commits:
  • 28b40c0 docs: update CHANGELOG.md for v12.4.9
  • 58a4131 chore: bump version to 12.4.9
  • 46d204e Integration: 7 critical fixes (post band-aid strip) (#2219)
  • 7e2da10 docs: update CHANGELOG.md for v12.4.8
  • 594becf chore: bump version to 12.4.8

voicemode

  • 50 new commit(s) since last check
  • Latest: 6afff77 — Merge branch 'cora/clone-voices' (clone-model defaults + template)
  • Recent commits:
  • 6afff77 Merge branch 'cora/clone-voices' (clone-model defaults + template)
  • a4c82d6 feat(voices): default clone-model to 1.7B-Base-4bit + document quants in template
  • 278a328 Merge branch 'cora/clone-voices'
  • 58e3df2 Merge branch 'cora/clone-base-url-env' into cora/clone-voices
  • a25d670 feat(voices): default clone-voice base URL to local mlx-audio

playwright-mcp

  • New release: v0.0.71 (was v0.0.70)
  • Release notes:
## What's New

### New Tools

- **`browser_drop`** — Expose `Locator.drop` as an MCP tool for completing drag-and-drop operations onto a target ([#40367](https://github.com/microsoft/playwright/pull/40367))

### Tool Improvements

- **`browser_network_requests`** — Added `responseBody` and `responseHeaders` options; binary bodies are rendered as a placeholder using mime-type detection ([microsoft/playwright@f0be0b17](https://github.com/microsoft/playwright/commit/f0be0b1728))
- **`browser_evaluate`** — Accept plain expressions in addition to function bodies ([#39979](https://github.com/microsoft/playwright/pull/39979))

### Browser Extension

- **Tab group syncing** — Connected tabs are grouped into a green "Playwright" tab group ([#1514](https://github.com/microsoft/playwright-mcp/pull/1514), [#1551](https://github.com/microsoft/playwright-mcp/pull/1551))

## Bug Fixes

- Disable CDP timeout for extension connection so long handshakes don't fail ([#40265](https://github.com/microsoft/playwright/pull/40265))
- Ensure `--proxy-server` overrides the proxy set in the config file ([#40212](https://github.com/microsoft/playwright/pull/40212))
- Merge user-supplied `ignoreDefaultArgs` with persistent mode defaults instead of replacing them ([#40026](https://github.com/microsoft/playwright/pull/40026))
  • 3 new commit(s) since last check
  • Latest: aec213a — docs: add release notes preparation guide (#1575)
  • Recent commits:
  • aec213a docs: add release notes preparation guide (#1575)
  • f27ff15 chore: mark v0.0.71 (#1576)
  • b06304e chore: roll 1.60.0-alpha-2026-04-27 (#1574)
  • 9a1eaa6 chore: flatten repo to single-package layout (#1567)
  • 72d3a4d chore(extension): drop packages/extension, moved to microsoft/playwright (#1564)

Updated by the upstream tracker workflow.

@github-actions
Copy link
Copy Markdown
Contributor Author

github-actions Bot commented May 1, 2026

New upstream changes detected (2026-05-01)

context7

  • New release: @upstash/context7-mcp@2.2.3 (was @upstash/context7-mcp@2.2.0)
  • Release notes:
### Patch Changes

-   772da3a: Stream MCP tool responses over SSE so HTTP headers flush before client `fetch` timeouts. Switching `enableJsonResponse` to `false` makes the SDK return the HTTP response synchronously after request validation, so headers are sent in milliseconds instead of being buffered until the tool completes. This fixes clients that cap the underlying `fetch` waiting for headers (e.g., Claude Code's 60s `wrapFetchWithTimeout`).
  • 11 new commit(s) since last check
  • Latest: 795d5da — CTX7-1567: Add Microsoft Entra SSO setup guide for on-premise (#2496)
  • Recent commits:
  • 795d5da CTX7-1567: Add Microsoft Entra SSO setup guide for on-premise (#2496)
  • d0e4a48 Fix/mcp stream tool responses (#2526)
  • 8782725 chore(release): version packages (#2525)
  • 772da3a fix(mcp): stream tool-call responses so headers flush before 60s (#2520)
  • 04b70c4 chore(release): version packages (#2522)

lightrag

  • New release: v1.5.0rc1 (was v1.4.15)
  • Release notes:
## Breaking Changes

* The `ENTITY_TYPES` environment variable has been deprecated; Please replace it with ENTITY_TYPE_PROMPT_FILE before launching this new version.

## Major Improvements

* Implement **role-specific LLM** configuration support, introducing four distinct roles—EXTRACT, QUERY, KEYWORDS, and VLM—each with independent LLM settings.
* Enable **task-aware embedding** support for asymmetric models, including `voyage-3`, `text-embedding-004`, `embed-multilingual-v3.0`, and `jina-embeddings-v3`.
* Add optional **JSON-formatted LLM** output to enhance stability in the entity and relation extraction pipeline.
* Introduce `ENTITY_TYPE_PROMPT_FILE` to empower users with enhanced guidance for LLM-driven **entity type recognition** and extraction.
* Fully support Amazon and Anthropic models on **AWS Bedrock API*.

## What's Changed
* feat: explicit voyageai embed support by @laszukdawid in https://github.com/HKUDS/LightRAG/pull/2484
* feat: Add **task-aware embedding** support by @StoreksFeed in https://github.com/HKUDS/LightRAG/pull/2560
* feat: **integrate structured extraction** and **multimodal processing pipeline** by @MrGidea in https://github.com/HKUDS/LightRAG/pull/2830 
* ♻️ refactor(documentManager): reorganize document status filtering by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2851
* feat: enhance entity extraction stability dev by @yunzhongxiaxi in https://github.com/HKUDS/LightRAG/pull/2864
* Remove config.ini from compose samples by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2906
* fix: handle OpenAI length finish reason fallback by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2913
  • 46 new commit(s) since last check
  • Latest: 568c007 — Merge pull request #2991 from LantaoJin/pr/issues/2975
  • Recent commits:
  • 568c007 Merge pull request #2991 from LantaoJin/pr/issues/2975
  • 5a01729 Fix linting
  • fc49c11 ♻️ refactor(opensearch): rename doc_id to __mirrored_id and add fail-fast validation
  • 4cfdce3 Add a new field doc_id as sort tiebreaker on < 3.3.0
  • bb6a012 Use composite fields as tiebreaker in graph edges

everything-claude-code

  • 88 new commit(s) since last check
  • Latest: 841beea — fix: handle dotted reserved snapshot names
  • Recent commits:
  • 841beea fix: handle dotted reserved snapshot names
  • 61992f7 fix: harden loop-status snapshot writes
  • 2715315 fix: avoid loop-status index snapshot collision
  • 7627926 fix: preserve loop-status output on snapshot errors
  • 20154dd feat: write loop-status snapshots

superpowers

  • 1 new commit(s) since last check
  • Latest: e7a2d16 — Require session transcript for new-harness PRs
  • Recent commits:
  • e7a2d16 Require session transcript for new-harness PRs
  • 6efe32c Use committed Codex plugin files in sync script
  • b557648 formatting
  • 9f42444 formatting
  • 99e4c65 reorder installs

n8n-mcp

  • New release: v2.49.0 (was v2.47.14)
  • Release notes:
# Release v2.49.0

Generating release notes from v2.48.3 to HEAD
### 🔧 Maintenance

- Update n8n to 2.18.4 and bump version to 2.49.0 (#761) (7c9ca1a)

---

**Release Statistics:**
- 1 commit
- 1 contributor
- Contributors: Romuald Członkowski

---

## Installation

### NPM Package
```bash
  • 11 new commit(s) since last check
  • Latest: b98876d — docs: head-to-head competitive analysis (n8n official MCP) (#765)
  • Recent commits:
  • b98876d docs: head-to-head competitive analysis (n8n official MCP) (#765)
  • ad7c52d Revert "docs: head-to-head competitive analysis vs n8n official MCP (#763)" (#764)
  • 09142eb docs: head-to-head competitive analysis vs n8n official MCP (#763)
  • 7c9ca1a chore: update n8n to 2.18.4 and bump version to 2.49.0 (#761)
  • 7cd5d51 fix: validator warning for __rl fields missing cachedResultName (#715) (#760)

claude-mem

  • New release: v12.4.9 (was v12.4.7)
  • Release notes:
Patches in 7 critical fixes from PR #2219 (integration/critical-fixes-april):

- #2211 build/bundle drift — remove stale macOS binary + regen artifacts (closes #2158, #2200, #2154)
- #2204 strip privacy tags before summarization (closes #2149)
- #2205 preserve relevance order in semantic search (closes #2153)
- #2208 restore Windows spawn (PR #751 re-apply) + Windows CI
- #2209 Codex transcript ingestion + queue self-deadlock on Windows (closes #2192)
- #2206 isolate SDK boundary — close 6 issues at 3 call sites
- #2210 standalone batch — npm peer deps, marketplace self-heal, cache prune
  • 7 new commit(s) since last check
  • Latest: 28b40c0 — docs: update CHANGELOG.md for v12.4.9
  • Recent commits:
  • 28b40c0 docs: update CHANGELOG.md for v12.4.9
  • 58a4131 chore: bump version to 12.4.9
  • 46d204e Integration: 7 critical fixes (post band-aid strip) (#2219)
  • 7e2da10 docs: update CHANGELOG.md for v12.4.8
  • 594becf chore: bump version to 12.4.8

voicemode

  • 50 new commit(s) since last check
  • Latest: 6afff77 — Merge branch 'cora/clone-voices' (clone-model defaults + template)
  • Recent commits:
  • 6afff77 Merge branch 'cora/clone-voices' (clone-model defaults + template)
  • a4c82d6 feat(voices): default clone-model to 1.7B-Base-4bit + document quants in template
  • 278a328 Merge branch 'cora/clone-voices'
  • 58e3df2 Merge branch 'cora/clone-base-url-env' into cora/clone-voices
  • a25d670 feat(voices): default clone-voice base URL to local mlx-audio

caveman

  • New release: v1.7.0 (was v1.6.0)
  • Release notes:
## v1.7.0 — Stats receipts, smart installer, cavecrew, MCP-shrink

The biggest release since v1.0. Caveman now has measurement (real token receipts, not vibes), an installer that detects 30+ agents and runs each one's native install, three caveman-mode subagents that emit ~60% fewer handoff tokens than vanilla, an MCP middleware that shrinks tool descriptions in flight, and a one-command rule-file dropper for any repo.

Plus a critical macOS installer fix that was silently breaking detection for **every compound-spec provider** (cursor / windsurf / continue / 28 others).

---

### 🆕 New: `/caveman-stats` — real receipts, not vibes

Caveman Stats
──────────────────────────────────
Session: ...projects/my-app/abc123.jsonl
Turns: 47
──────────────────────────────────
Output tokens: 3,210
Cache-read tokens: 128,400
──────────────────────────────────
Est. tokens saved: 5,961 (~65%)

  - **15 new commit(s)** since last check
  - Latest: `ef6050c` — chore: sync SKILL.md copies and auto-activation rules [skip ci]
  - Recent commits:
  - `ef6050c` chore: sync SKILL.md copies and auto-activation rules [skip ci]
  - `e031c1e` fix(installer): re-enable --with-mcp-shrink default ON, npm probe stays
  - `83ec61c` fix(release): production-ready installer + cavecrew refinements
  - `ec7ce36` Better install docs+scripts
  - `47cd8d7` merge: stats receipts, smart installer, cavecrew, cavepack, MCP-shrink

### [playwright-mcp](https://github.com/microsoft/playwright-mcp)

  - **New release:** `v0.0.72` (was `v0.0.70`)
  - Release notes:

What's New

Tool Improvements

  • browser_network_requests — Now returns a numbered list of requests; use the new browser_network_request tool with the index to fetch full details (headers/body) or a single part. Both tools accept a filename option to write the output to a file (#40447, #40454)
  • browser_run_codebrowser_run_code_unsafe — Renamed to make the sandbox-escape implication explicit (#40496)

Bug Fixes

  • Surface unhandled rejections in browser_run_code_unsafe instead of crashing the server (#40452)
  • Detect the installed extension in non-default Chrome profiles (#40471)
  • Ignore browser config (channel, headless, viewport, etc.) when attaching to the extension (#40475)
  - **9 new commit(s)** since last check
  - Latest: `3046230` — fix(publish): drop OCI package entry from server.json (#1587)
  - Recent commits:
  - `3046230` fix(publish): drop OCI package entry from server.json (#1587)
  - `f41a129` feat(publish): allow manual workflow_dispatch for MCP Registry publish (#1586)
  - `2ec36c1` feat(publish): publish to the official MCP Registry on release (#1585)
  - `97e82bd` docs: revise contributing guidelines for clarity
  - `5ae9c9e` chore: mark v0.0.72 (#1584)


*Updated by the upstream tracker workflow.*

@github-actions
Copy link
Copy Markdown
Contributor Author

github-actions Bot commented May 2, 2026

New upstream changes detected (2026-05-02)

context7

  • New release: @upstash/context7-mcp@2.2.3 (was @upstash/context7-mcp@2.2.0)
  • Release notes:
### Patch Changes

-   772da3a: Stream MCP tool responses over SSE so HTTP headers flush before client `fetch` timeouts. Switching `enableJsonResponse` to `false` makes the SDK return the HTTP response synchronously after request validation, so headers are sent in milliseconds instead of being buffered until the tool completes. This fixes clients that cap the underlying `fetch` waiting for headers (e.g., Claude Code's 60s `wrapFetchWithTimeout`).
  • 11 new commit(s) since last check
  • Latest: 795d5da — CTX7-1567: Add Microsoft Entra SSO setup guide for on-premise (#2496)
  • Recent commits:
  • 795d5da CTX7-1567: Add Microsoft Entra SSO setup guide for on-premise (#2496)
  • d0e4a48 Fix/mcp stream tool responses (#2526)
  • 8782725 chore(release): version packages (#2525)
  • 772da3a fix(mcp): stream tool-call responses so headers flush before 60s (#2520)
  • 04b70c4 chore(release): version packages (#2522)

lightrag

  • 46 new commit(s) since last check
  • Latest: 568c007 — Merge pull request #2991 from LantaoJin/pr/issues/2975
  • Recent commits:
  • 568c007 Merge pull request #2991 from LantaoJin/pr/issues/2975
  • 5a01729 Fix linting
  • fc49c11 ♻️ refactor(opensearch): rename doc_id to __mirrored_id and add fail-fast validation
  • 4cfdce3 Add a new field doc_id as sort tiebreaker on < 3.3.0
  • bb6a012 Use composite fields as tiebreaker in graph edges

everything-claude-code

  • 88 new commit(s) since last check
  • Latest: 841beea — fix: handle dotted reserved snapshot names
  • Recent commits:
  • 841beea fix: handle dotted reserved snapshot names
  • 61992f7 fix: harden loop-status snapshot writes
  • 2715315 fix: avoid loop-status index snapshot collision
  • 7627926 fix: preserve loop-status output on snapshot errors
  • 20154dd feat: write loop-status snapshots

superpowers

  • 1 new commit(s) since last check
  • Latest: e7a2d16 — Require session transcript for new-harness PRs
  • Recent commits:
  • e7a2d16 Require session transcript for new-harness PRs
  • 6efe32c Use committed Codex plugin files in sync script
  • b557648 formatting
  • 9f42444 formatting
  • 99e4c65 reorder installs

n8n-mcp

  • New release: v2.49.0 (was v2.47.14)
  • Release notes:
# Release v2.49.0

Generating release notes from v2.48.3 to HEAD
### 🔧 Maintenance

- Update n8n to 2.18.4 and bump version to 2.49.0 (#761) (7c9ca1a)

---

**Release Statistics:**
- 1 commit
- 1 contributor
- Contributors: Romuald Członkowski

---

## Installation

### NPM Package
```bash
  • 11 new commit(s) since last check
  • Latest: b98876d — docs: head-to-head competitive analysis (n8n official MCP) (#765)
  • Recent commits:
  • b98876d docs: head-to-head competitive analysis (n8n official MCP) (#765)
  • ad7c52d Revert "docs: head-to-head competitive analysis vs n8n official MCP (#763)" (#764)
  • 09142eb docs: head-to-head competitive analysis vs n8n official MCP (#763)
  • 7c9ca1a chore: update n8n to 2.18.4 and bump version to 2.49.0 (#761)
  • 7cd5d51 fix: validator warning for __rl fields missing cachedResultName (#715) (#760)

claude-mem

  • New release: v12.4.9 (was v12.4.7)
  • Release notes:
Patches in 7 critical fixes from PR #2219 (integration/critical-fixes-april):

- #2211 build/bundle drift — remove stale macOS binary + regen artifacts (closes #2158, #2200, #2154)
- #2204 strip privacy tags before summarization (closes #2149)
- #2205 preserve relevance order in semantic search (closes #2153)
- #2208 restore Windows spawn (PR #751 re-apply) + Windows CI
- #2209 Codex transcript ingestion + queue self-deadlock on Windows (closes #2192)
- #2206 isolate SDK boundary — close 6 issues at 3 call sites
- #2210 standalone batch — npm peer deps, marketplace self-heal, cache prune
  • 7 new commit(s) since last check
  • Latest: 28b40c0 — docs: update CHANGELOG.md for v12.4.9
  • Recent commits:
  • 28b40c0 docs: update CHANGELOG.md for v12.4.9
  • 58a4131 chore: bump version to 12.4.9
  • 46d204e Integration: 7 critical fixes (post band-aid strip) (#2219)
  • 7e2da10 docs: update CHANGELOG.md for v12.4.8
  • 594becf chore: bump version to 12.4.8

voicemode

  • 69 new commit(s) since last check
  • Latest: baa4352 — Merge branch 'fix/VM-1138-test-isolation-provider-tests-fail-when-user'
  • Recent commits:
  • baa4352 Merge branch 'fix/VM-1138-test-isolation-provider-tests-fail-when-user'
  • 2378bd9 fix(VM-1138): isolate provider tests from user voicemode.env
  • 12aa249 Merge branch 'cora/gitignore-voices-symlink'
  • fa88e4a skill(voicemode): require lowercase voice names
  • 392b688 docs: simplify parallel tool calls section while preserving key teaching content

caveman

  • New release: v1.7.0 (was v1.6.0)
  • Release notes:
## v1.7.0 — Stats receipts, smart installer, cavecrew, MCP-shrink

The biggest release since v1.0. Caveman now has measurement (real token receipts, not vibes), an installer that detects 30+ agents and runs each one's native install, three caveman-mode subagents that emit ~60% fewer handoff tokens than vanilla, an MCP middleware that shrinks tool descriptions in flight, and a one-command rule-file dropper for any repo.

Plus a critical macOS installer fix that was silently breaking detection for **every compound-spec provider** (cursor / windsurf / continue / 28 others).

---

### 🆕 New: `/caveman-stats` — real receipts, not vibes

Caveman Stats
──────────────────────────────────
Session: ...projects/my-app/abc123.jsonl
Turns: 47
──────────────────────────────────
Output tokens: 3,210
Cache-read tokens: 128,400
──────────────────────────────────
Est. tokens saved: 5,961 (~65%)

  - **15 new commit(s)** since last check
  - Latest: `ef6050c` — chore: sync SKILL.md copies and auto-activation rules [skip ci]
  - Recent commits:
  - `ef6050c` chore: sync SKILL.md copies and auto-activation rules [skip ci]
  - `e031c1e` fix(installer): re-enable --with-mcp-shrink default ON, npm probe stays
  - `83ec61c` fix(release): production-ready installer + cavecrew refinements
  - `ec7ce36` Better install docs+scripts
  - `47cd8d7` merge: stats receipts, smart installer, cavecrew, cavepack, MCP-shrink

### [playwright-mcp](https://github.com/microsoft/playwright-mcp)

  - **New release:** `v0.0.73` (was `v0.0.70`)
  - Release notes:

What's New

Distribution

  • Playwright MCP is now published to the official MCP Registry on each release (#1585)

Bug Fixes

  • Resolve extension channel and executablePath from CLI flags and environment variables (#40572)
  • Propagate --browser channel on the --extension path (#40567)
  • Handle null viewport in dashboard annotate-screenshot (#40569)
  - **12 new commit(s)** since last check
  - Latest: `4c76659` — chore: mark v0.0.73 (#1593)
  - Recent commits:
  - `4c76659` chore: mark v0.0.73 (#1593)
  - `d3c528d` chore(ci): bump actions to Node 24 versions (#1592)
  - `f41b275` chore: roll Playwright to 1.60.0-alpha-1777669338000 (#1591)
  - `3046230` fix(publish): drop OCI package entry from server.json (#1587)
  - `f41a129` feat(publish): allow manual workflow_dispatch for MCP Registry publish (#1586)


*Updated by the upstream tracker workflow.*

@github-actions
Copy link
Copy Markdown
Contributor Author

github-actions Bot commented May 3, 2026

New upstream changes detected (2026-05-03)

context7

  • New release: @upstash/context7-mcp@2.2.3 (was @upstash/context7-mcp@2.2.0)
  • Release notes:
### Patch Changes

-   772da3a: Stream MCP tool responses over SSE so HTTP headers flush before client `fetch` timeouts. Switching `enableJsonResponse` to `false` makes the SDK return the HTTP response synchronously after request validation, so headers are sent in milliseconds instead of being buffered until the tool completes. This fixes clients that cap the underlying `fetch` waiting for headers (e.g., Claude Code's 60s `wrapFetchWithTimeout`).
  • 11 new commit(s) since last check
  • Latest: 795d5da — CTX7-1567: Add Microsoft Entra SSO setup guide for on-premise (#2496)
  • Recent commits:
  • 795d5da CTX7-1567: Add Microsoft Entra SSO setup guide for on-premise (#2496)
  • d0e4a48 Fix/mcp stream tool responses (#2526)
  • 8782725 chore(release): version packages (#2525)
  • 772da3a fix(mcp): stream tool-call responses so headers flush before 60s (#2520)
  • 04b70c4 chore(release): version packages (#2522)

lightrag

  • 46 new commit(s) since last check
  • Latest: 568c007 — Merge pull request #2991 from LantaoJin/pr/issues/2975
  • Recent commits:
  • 568c007 Merge pull request #2991 from LantaoJin/pr/issues/2975
  • 5a01729 Fix linting
  • fc49c11 ♻️ refactor(opensearch): rename doc_id to __mirrored_id and add fail-fast validation
  • 4cfdce3 Add a new field doc_id as sort tiebreaker on < 3.3.0
  • bb6a012 Use composite fields as tiebreaker in graph edges

everything-claude-code

  • 88 new commit(s) since last check
  • Latest: 841beea — fix: handle dotted reserved snapshot names
  • Recent commits:
  • 841beea fix: handle dotted reserved snapshot names
  • 61992f7 fix: harden loop-status snapshot writes
  • 2715315 fix: avoid loop-status index snapshot collision
  • 7627926 fix: preserve loop-status output on snapshot errors
  • 20154dd feat: write loop-status snapshots

superpowers

  • 1 new commit(s) since last check
  • Latest: e7a2d16 — Require session transcript for new-harness PRs
  • Recent commits:
  • e7a2d16 Require session transcript for new-harness PRs
  • 6efe32c Use committed Codex plugin files in sync script
  • b557648 formatting
  • 9f42444 formatting
  • 99e4c65 reorder installs

n8n-mcp

  • New release: v2.50.0 (was v2.47.14)
  • Release notes:
# Release v2.50.0

Generating release notes from v2.49.0 to HEAD
### ✨ Features

- Local LLM template metadata + refresh template store (v2.50.0) (#766) (1ca40ce)

### 📚 Documentation

- Head-to-head competitive analysis (n8n official MCP) (#765) (b98876d)
- Head-to-head competitive analysis vs n8n official MCP (#763) (09142eb)

### 📝 Other Changes

- Revert "docs: head-to-head competitive analysis vs n8n official MCP (#763)" (#764) (ad7c52d)

---

**Release Statistics:**
- 4 commits
  • 12 new commit(s) since last check
  • Latest: 1ca40ce — feat: local LLM template metadata + refresh template store (v2.50.0) (#766)
  • Recent commits:
  • 1ca40ce feat: local LLM template metadata + refresh template store (v2.50.0) (#766)
  • b98876d docs: head-to-head competitive analysis (n8n official MCP) (#765)
  • ad7c52d Revert "docs: head-to-head competitive analysis vs n8n official MCP (#763)" (#764)
  • 09142eb docs: head-to-head competitive analysis vs n8n official MCP (#763)
  • 7c9ca1a chore: update n8n to 2.18.4 and bump version to 2.49.0 (#761)

claude-mem

  • New release: v12.5.0 (was v12.4.7)
  • Release notes:
## Highlights

**Observation pipeline cleanup — kill the per-message retry counter.** The AI's parseable response is the only success signal; any other response (unparseable, empty, transport error) is a no-op. No more silent data loss after 3 retries.

## What changed

- **Parser:** collapsed to binary `{ valid: true, observations, summary } | { valid: false }`. No more `kind`/`skipped` enum dispatch in callers.
- **ResponseProcessor:** two branches only — parseable → store + clear pending → broadcast; not parseable → reset claimed-but-unprocessed messages to pending. Removed per-message FIFO popping and the summarize-special-case best-effort confirm.
- **PendingMessageStore:** 226 → 165 lines. Removed `markFailed` (the retry counter that silently dropped data after 3 attempts), `transitionMessagesTo`, `confirmProcessed`, `clearFailedOlderThan`, plus four other dead methods.
- **Provider cleanup:** removed `processingMessageIds` tracking from Claude, Gemini, OpenRouter providers. The session-scoped clear handles the success path; no per-message in-flight tracking needed.
- **GeneratorExitHandler:** drain-in-flight loop deleted; hard-stop / restart-guard paths now just clear pending for the session.
- **Schema migration v31 + v32:** dropped four dead columns from `pending_messages` — `retry_count`, `failed_at_epoch`, `completed_at_epoch`, `worker_pid`. Status enum reduced to `'pending' | 'processing'` (the unreachable `'processed'` and `'failed'` are gone).

## Bug fixes / polish

- **`SessionQueueProcessor`:** removed two arbitrary 1-second recovery sleeps after error in `claimNextMessage`/`waitForMessage`; let the iterator end cleanly so `GeneratorExitHandler` can restart it.
- **`Server.ts` + `SettingsRoutes.ts`:** unified four magic-number `setTimeout` exit-flush patterns (100ms × 2, 1000ms × 2) into one `flushResponseThen` helper using `res.on('finish', ...)`.
- **PR review feedback (21+ threads):** install.ts argument fixes, settings cache TTL, Dockerfile login-banner sourcing, docs port-model + Node version updates, regex whitespace fix, Date.UTC for year-mismatch test, sync-marketplace port range guard, banner inflate fail-open, version-bump arg validation.

## Net diff
  • 10 new commit(s) since last check
  • Latest: 794745b — docs: update CHANGELOG.md for v12.5.0
  • Recent commits:
  • 794745b docs: update CHANGELOG.md for v12.5.0
  • a81a1f6 chore: bump version to 12.5.0
  • 9e29730 UX redesign: installer + provider rename + /learn-codebase + welcome card + SessionStart hint (#2255)
  • 28b40c0 docs: update CHANGELOG.md for v12.4.9
  • 58a4131 chore: bump version to 12.4.9

voicemode

  • 75 new commit(s) since last check
  • Latest: 279d271 — Merge remote-tracking branch 'origin/feat/VM-1166-echo-userassistant-messages-from-converse-to-keep'
  • Recent commits:
  • 279d271 Merge remote-tracking branch 'origin/feat/VM-1166-echo-userassistant-messages-from-converse-to-keep'
  • 75b39dd skill(voicemode): asymmetric echo gate + no-truncation default
  • 13d4751 skill(voicemode): progressive disclosure for Transcript visibility
  • 85266c3 skill(voicemode): flip echo label to SPEAKER (voicemode) format
  • d3a9e35 skill(voicemode): add verbatim vs companion echo modes (VM-1166 D6)

caveman

  • New release: v1.7.0 (was v1.6.0)
  • Release notes:
## v1.7.0 — Stats receipts, smart installer, cavecrew, MCP-shrink

The biggest release since v1.0. Caveman now has measurement (real token receipts, not vibes), an installer that detects 30+ agents and runs each one's native install, three caveman-mode subagents that emit ~60% fewer handoff tokens than vanilla, an MCP middleware that shrinks tool descriptions in flight, and a one-command rule-file dropper for any repo.

Plus a critical macOS installer fix that was silently breaking detection for **every compound-spec provider** (cursor / windsurf / continue / 28 others).

---

### 🆕 New: `/caveman-stats` — real receipts, not vibes

Caveman Stats
──────────────────────────────────
Session: ...projects/my-app/abc123.jsonl
Turns: 47
──────────────────────────────────
Output tokens: 3,210
Cache-read tokens: 128,400
──────────────────────────────────
Est. tokens saved: 5,961 (~65%)

  - **15 new commit(s)** since last check
  - Latest: `ef6050c` — chore: sync SKILL.md copies and auto-activation rules [skip ci]
  - Recent commits:
  - `ef6050c` chore: sync SKILL.md copies and auto-activation rules [skip ci]
  - `e031c1e` fix(installer): re-enable --with-mcp-shrink default ON, npm probe stays
  - `83ec61c` fix(release): production-ready installer + cavecrew refinements
  - `ec7ce36` Better install docs+scripts
  - `47cd8d7` merge: stats receipts, smart installer, cavecrew, cavepack, MCP-shrink

### [playwright-mcp](https://github.com/microsoft/playwright-mcp)

  - **New release:** `v0.0.73` (was `v0.0.70`)
  - Release notes:

What's New

Distribution

  • Playwright MCP is now published to the official MCP Registry on each release (#1585)

Bug Fixes

  • Resolve extension channel and executablePath from CLI flags and environment variables (#40572)
  • Propagate --browser channel on the --extension path (#40567)
  • Handle null viewport in dashboard annotate-screenshot (#40569)
  - **12 new commit(s)** since last check
  - Latest: `4c76659` — chore: mark v0.0.73 (#1593)
  - Recent commits:
  - `4c76659` chore: mark v0.0.73 (#1593)
  - `d3c528d` chore(ci): bump actions to Node 24 versions (#1592)
  - `f41b275` chore: roll Playwright to 1.60.0-alpha-1777669338000 (#1591)
  - `3046230` fix(publish): drop OCI package entry from server.json (#1587)
  - `f41a129` feat(publish): allow manual workflow_dispatch for MCP Registry publish (#1586)


*Updated by the upstream tracker workflow.*

@github-actions
Copy link
Copy Markdown
Contributor Author

github-actions Bot commented May 4, 2026

New upstream changes detected (2026-05-04)

context7

  • New release: @upstash/context7-mcp@2.2.3 (was @upstash/context7-mcp@2.2.0)
  • Release notes:
### Patch Changes

-   772da3a: Stream MCP tool responses over SSE so HTTP headers flush before client `fetch` timeouts. Switching `enableJsonResponse` to `false` makes the SDK return the HTTP response synchronously after request validation, so headers are sent in milliseconds instead of being buffered until the tool completes. This fixes clients that cap the underlying `fetch` waiting for headers (e.g., Claude Code's 60s `wrapFetchWithTimeout`).
  • 11 new commit(s) since last check
  • Latest: 795d5da — CTX7-1567: Add Microsoft Entra SSO setup guide for on-premise (#2496)
  • Recent commits:
  • 795d5da CTX7-1567: Add Microsoft Entra SSO setup guide for on-premise (#2496)
  • d0e4a48 Fix/mcp stream tool responses (#2526)
  • 8782725 chore(release): version packages (#2525)
  • 772da3a fix(mcp): stream tool-call responses so headers flush before 60s (#2520)
  • 04b70c4 chore(release): version packages (#2522)

lightrag

  • 46 new commit(s) since last check
  • Latest: 568c007 — Merge pull request #2991 from LantaoJin/pr/issues/2975
  • Recent commits:
  • 568c007 Merge pull request #2991 from LantaoJin/pr/issues/2975
  • 5a01729 Fix linting
  • fc49c11 ♻️ refactor(opensearch): rename doc_id to __mirrored_id and add fail-fast validation
  • 4cfdce3 Add a new field doc_id as sort tiebreaker on < 3.3.0
  • bb6a012 Use composite fields as tiebreaker in graph edges

everything-claude-code

  • 88 new commit(s) since last check
  • Latest: 841beea — fix: handle dotted reserved snapshot names
  • Recent commits:
  • 841beea fix: handle dotted reserved snapshot names
  • 61992f7 fix: harden loop-status snapshot writes
  • 2715315 fix: avoid loop-status index snapshot collision
  • 7627926 fix: preserve loop-status output on snapshot errors
  • 20154dd feat: write loop-status snapshots

superpowers

  • 1 new commit(s) since last check
  • Latest: e7a2d16 — Require session transcript for new-harness PRs
  • Recent commits:
  • e7a2d16 Require session transcript for new-harness PRs
  • 6efe32c Use committed Codex plugin files in sync script
  • b557648 formatting
  • 9f42444 formatting
  • 99e4c65 reorder installs

n8n-mcp

  • New release: v2.50.2 (was v2.47.14)
  • Release notes:
# Release v2.50.2

Generating release notes from v2.50.1 to HEAD
### 📝 Other Changes

- Merge commit from fork (bcaba83)

---

**Release Statistics:**
- 1 commit
- 1 contributor
- Contributors: Romuald Członkowski

---

## Installation

### NPM Package
```bash
  • 15 new commit(s) since last check
  • Latest: bcaba83 — Merge commit from fork
  • Recent commits:
  • bcaba83 Merge commit from fork
  • 1cfe9c6 Merge commit from fork
  • fefa2d9 docs: address n8n team feedback on competitive analysis (#772)
  • 1ca40ce feat: local LLM template metadata + refresh template store (v2.50.0) (#766)
  • b98876d docs: head-to-head competitive analysis (n8n official MCP) (#765)

claude-mem

  • New release: v12.6.0 (was v12.4.7)
  • Release notes:
## Highlights

**17 issues fixed** and **4 new foundations** introduced via PR #2282 — a 24-cycle review-loop landed across 33 commits.

### New capabilities

- **OAuth keychain reader** (#2215) — `readClaudeOAuthToken()` reads from platform-native credential stores (macOS keychain, Windows DPAPI, Linux libsecret) at worker spawn-time. JWT exp / sidecar `expiresAt` validation refuses stale tokens. Re-login hint surfaced via SessionStart `additionalContext`.
- **Quota-aware wall-clock guard** (#2234) — new `RateLimitStore` with auth-type gate: `api_key` never aborts; cli/oauth aborts at per-window thresholds (5h:0.95, 7d_opus:0.93, 7d_sonnet:0.92). 15min reset-grace buffer with 0.85 utilization floor. `rateLimits` exposed on `/api/health`.
- **Network retry helper** (#2254) — `withRetry` honors `ClassifiedProviderError.kind`, exponential backoff with jitter, request-id capture for dedup logging.

### Foundations (new public modules)

- **F1 `spawnHidden`** (`src/shared/spawn.ts`) — `windowsHide: true` default; 8 spawn sites adopted.
- **F2 `paths`** (`src/shared/paths.ts`) — 24 hardcoded `homedir() + '.claude-mem'` sites collapsed into 18 named accessors. `CLAUDE_MEM_DATA_DIR` flows through 100% of runtime. Self-extending invariant test.
- **F3 `getUptimeSeconds`** (`src/shared/uptime.ts`) — fixes ms-bug at `Server.ts:165`.
- **F4 `ClassifiedProviderError`** (`src/services/worker/provider-errors.ts`) — `kind` union (`transient | unrecoverable | rate_limit | quota_exhausted | auth_invalid`); per-provider classifiers; `unrecoverablePatterns` allowlist deleted.

### Bug fixes

- #2188 — empty stdin no longer falls back to `'{}'`; diagnostic log + `CAPTURE_BROKEN` marker
  • 16 new commit(s) since last check
  • Latest: 4303778 — docs: regenerate CHANGELOG for v12.6.0
  • Recent commits:
  • 4303778 docs: regenerate CHANGELOG for v12.6.0
  • a3b161f chore: bump version to 12.6.0
  • d384d3c fix: bug-batch — 17 issues + 4 foundations (chroma, opencode, parser, OAuth, paths, uptime, classification) (#2282)
  • 7fb0745 docs: update CHANGELOG.md for v12.5.1
  • 9f9fbd7 chore: bump version to 12.5.1

voicemode

  • 87 new commit(s) since last check
  • Latest: 1735c88 — Merge branch 'fix/VM-1182-voicemode-cloneimpressions-add-hardcoded-to'
  • Recent commits:
  • 1735c88 Merge branch 'fix/VM-1182-voicemode-cloneimpressions-add-hardcoded-to'
  • e8eb59e Merge branch 'fix/VM-1184-clone-add-hardening'
  • b625ce1 VM-1184: document clone add in impressions SKILL.md
  • 2a74a80 VM-1184: per-voice directory layout (/default.wav + voice.md)
  • 63e7d2f VM-1184: normalise clone-add audio via ffmpeg loudnorm

caveman

  • New release: v1.7.0 (was v1.6.0)
  • Release notes:
## v1.7.0 — Stats receipts, smart installer, cavecrew, MCP-shrink

The biggest release since v1.0. Caveman now has measurement (real token receipts, not vibes), an installer that detects 30+ agents and runs each one's native install, three caveman-mode subagents that emit ~60% fewer handoff tokens than vanilla, an MCP middleware that shrinks tool descriptions in flight, and a one-command rule-file dropper for any repo.

Plus a critical macOS installer fix that was silently breaking detection for **every compound-spec provider** (cursor / windsurf / continue / 28 others).

---

### 🆕 New: `/caveman-stats` — real receipts, not vibes

Caveman Stats
──────────────────────────────────
Session: ...projects/my-app/abc123.jsonl
Turns: 47
──────────────────────────────────
Output tokens: 3,210
Cache-read tokens: 128,400
──────────────────────────────────
Est. tokens saved: 5,961 (~65%)

  - **15 new commit(s)** since last check
  - Latest: `ef6050c` — chore: sync SKILL.md copies and auto-activation rules [skip ci]
  - Recent commits:
  - `ef6050c` chore: sync SKILL.md copies and auto-activation rules [skip ci]
  - `e031c1e` fix(installer): re-enable --with-mcp-shrink default ON, npm probe stays
  - `83ec61c` fix(release): production-ready installer + cavecrew refinements
  - `ec7ce36` Better install docs+scripts
  - `47cd8d7` merge: stats receipts, smart installer, cavecrew, cavepack, MCP-shrink

### [playwright-mcp](https://github.com/microsoft/playwright-mcp)

  - **New release:** `v0.0.73` (was `v0.0.70`)
  - Release notes:

What's New

Distribution

  • Playwright MCP is now published to the official MCP Registry on each release (#1585)

Bug Fixes

  • Resolve extension channel and executablePath from CLI flags and environment variables (#40572)
  • Propagate --browser channel on the --extension path (#40567)
  • Handle null viewport in dashboard annotate-screenshot (#40569)
  - **12 new commit(s)** since last check
  - Latest: `4c76659` — chore: mark v0.0.73 (#1593)
  - Recent commits:
  - `4c76659` chore: mark v0.0.73 (#1593)
  - `d3c528d` chore(ci): bump actions to Node 24 versions (#1592)
  - `f41b275` chore: roll Playwright to 1.60.0-alpha-1777669338000 (#1591)
  - `3046230` fix(publish): drop OCI package entry from server.json (#1587)
  - `f41a129` feat(publish): allow manual workflow_dispatch for MCP Registry publish (#1586)


*Updated by the upstream tracker workflow.*

@github-actions
Copy link
Copy Markdown
Contributor Author

github-actions Bot commented May 5, 2026

New upstream changes detected (2026-05-05)

context7

  • New release: @upstash/context7-mcp@2.2.4 (was @upstash/context7-mcp@2.2.0)
  • Release notes:
### Patch Changes

-   d0e4a48: Create a fresh `McpServer` per HTTP request. Sharing one across requests let any concurrent `transport.close` clear the shared `Protocol._transport`, which broke `sendNotification` for in-flight long-running tool calls.
-   1aa3430: Remove research mode entirely from the MCP server and CLI. The `query-docs` MCP tool no longer accepts or forwards a `researchMode` parameter, and the CLI no longer exposes a `--research` flag on `ctx7 docs`.
  • 13 new commit(s) since last check
  • Latest: 85c3a0c — chore(release): version packages (#2533)
  • Recent commits:
  • 85c3a0c chore(release): version packages (#2533)
  • 1aa3430 feat: remove research mode (#2554)
  • 795d5da CTX7-1567: Add Microsoft Entra SSO setup guide for on-premise (#2496)
  • d0e4a48 Fix/mcp stream tool responses (#2526)
  • 8782725 chore(release): version packages (#2525)

lightrag

  • 46 new commit(s) since last check
  • Latest: 568c007 — Merge pull request #2991 from LantaoJin/pr/issues/2975
  • Recent commits:
  • 568c007 Merge pull request #2991 from LantaoJin/pr/issues/2975
  • 5a01729 Fix linting
  • fc49c11 ♻️ refactor(opensearch): rename doc_id to __mirrored_id and add fail-fast validation
  • 4cfdce3 Add a new field doc_id as sort tiebreaker on < 3.3.0
  • bb6a012 Use composite fields as tiebreaker in graph edges

everything-claude-code

  • 88 new commit(s) since last check
  • Latest: 841beea — fix: handle dotted reserved snapshot names
  • Recent commits:
  • 841beea fix: handle dotted reserved snapshot names
  • 61992f7 fix: harden loop-status snapshot writes
  • 2715315 fix: avoid loop-status index snapshot collision
  • 7627926 fix: preserve loop-status output on snapshot errors
  • 20154dd feat: write loop-status snapshots

superpowers

  • New release: v5.1.0 (was v5.0.7)
  • Release notes:

### Removals

- **Legacy slash commands removed** — `/brainstorm`, `/execute-plan`, and `/write-plan` are gone. They were deprecated stubs that did nothing but tell the user to invoke the corresponding skill. Invoke `superpowers:brainstorming`, `superpowers:executing-plans`, and `superpowers:writing-plans` directly instead. (#1188)
- **`superpowers:code-reviewer` named agent removed** — the agent was the plugin's only named agent and was used by exactly two skills, while every other reviewer/implementer subagent in the repo dispatches `general-purpose` with a prompt template alongside its skill. The agent's persona and checklist have been merged into `skills/requesting-code-review/code-reviewer.md` as a self-contained Task-dispatch template. Anyone dispatching `Task (superpowers:code-reviewer)` should switch to `Task (general-purpose)` with the prompt template instead. (PR #1299)
- **Integration sections removed from skills** — these were a legacy of the time before agents had native skills systems and didn't help with steering.

### Worktree Skills Rewrite

`using-git-worktrees` and `finishing-a-development-branch` now detect when the agent is already running inside an isolated worktree and prefer the harness's native worktree controls before falling back to `git worktree`. Behavior was TDD-validated and cross-platform-checked across five harnesses. (PRI-974, PR #1121)

- **Environment detection** — both skills check `GIT_DIR != GIT_COMMON` before doing anything; if already in a linked worktree, creation is skipped entirely. A submodule guard prevents false detection.
- **Consent before creating worktrees** — `using-git-worktrees` no longer creates worktrees implicitly; the skill asks the user first. Fixes #991 (subagent-driven-development was auto-creating worktrees without consent).
- **Native tool preference (Step 1a)** — when the harness exposes its own worktree tool (e.g. Codex), the skill defers to it. The user's stated preference is respected when expressed.
- **Provenance-based cleanup** — `finishing-a-development-branch` only cleans up worktrees inside `.worktrees/` (created by superpowers); anything outside is left alone. Fixes #940 (Option 2 was incorrectly cleaning up worktrees), #999 (merge-then-remove ordering), and #238 (`cd` to repo root before `git worktree remove`).
- **Detached HEAD handling** — the finishing menu collapses to two options when there is no branch to merge from.
- **Hardcoded `/Users/jesse` paths** in skill examples replaced with generic placeholders. (#858, PR #1122)

### Contributor Guidelines for AI Agents
  • 2 new commit(s) since last check
  • Latest: f2cbfbe — Release v5.1.0 (#1468)
  • Recent commits:
  • f2cbfbe Release v5.1.0 (#1468)
  • e7a2d16 Require session transcript for new-harness PRs
  • 6efe32c Use committed Codex plugin files in sync script
  • b557648 formatting
  • 9f42444 formatting

n8n-mcp

  • New release: v2.50.3 (was v2.47.14)
  • Release notes:
# Release v2.50.3

Generating release notes from v2.50.2 to HEAD
### 📝 Other Changes

- fix(workflow-diff): roll back to prior state when n8n PUT fails post-save (#769) (fe3a41f)

---

**Release Statistics:**
- 1 commit
- 1 contributor
- Contributors: pybe

---

## Installation

### NPM Package
```bash
  • 16 new commit(s) since last check
  • Latest: fe3a41f — fix(workflow-diff): roll back to prior state when n8n PUT fails post-save (#769)
  • Recent commits:
  • fe3a41f fix(workflow-diff): roll back to prior state when n8n PUT fails post-save (#769)
  • bcaba83 Merge commit from fork
  • 1cfe9c6 Merge commit from fork
  • fefa2d9 docs: address n8n team feedback on competitive analysis (#772)
  • 1ca40ce feat: local LLM template metadata + refresh template store (v2.50.0) (#766)

claude-mem

  • New release: v12.6.2 (was v12.4.7)
  • Release notes:
## Fix: `npx claude-mem@latest install` no longer hangs on tree-sitter-swift

### What broke in 12.6.1

PR #2300 moved 21 tree-sitter grammar packages from root `devDependencies` → root `dependencies`. As a result, `npx claude-mem@12.6.1 install` started fetching all 21 grammars at npx time. `tree-sitter-swift`'s postinstall pulled a nested `tree-sitter-cli` that downloads a Rust binary from GitHub and SIGINT'd the install:

npm error path .../node_modules/claude-mem/node_modules/tree-sitter-swift/node_modules/tree-sitter-cli
npm error command failed
npm error signal SIGINT
npm error Downloading https://github.com/tree-sitter/tree-sitter/releases/download/v0.23.2/tree-sitter-macos-arm64.gz


npm doesn't honor the bun-only `trustedDependencies` allowlist, so postinstalls always run on a bare `npx` fetch.

### Fix (PR #2305)

Move the 21 grammar packages back to root `devDependencies`. The marketplace plugin install path is untouched — `plugin/package.json` keeps them as runtime deps and `bun install` (in `installPluginDependencies`) honors `trustedDependencies: ["tree-sitter-cli"]` to skip the harmful postinstalls on every other grammar. Smart-search/smart-outline/smart-unfold continue to work end-to-end.

PR #2300's `--legacy-peer-deps` and `--omit=dev` install.ts changes are kept — they fix a separate, valid marketplace ERESOLVE.
  • 24 new commit(s) since last check
  • Latest: 9a2818f — docs: regenerate CHANGELOG for v12.6.2
  • Recent commits:
  • 9a2818f docs: regenerate CHANGELOG for v12.6.2
  • ec97813 chore: bump version to 12.6.2
  • 1981f9b fix(install): revert tree-sitter grammars to devDependencies (#2300 regression) (#2305)
  • 53cdccd docs: regenerate CHANGELOG for v12.6.1
  • 1a8432f chore: bump version to 12.6.1

voicemode

  • 100 new commit(s) since last check
  • Latest: 039433c — Merge branch 'cora/VM-1190-path-traversal-with-tests'
  • Recent commits:
  • 039433c Merge branch 'cora/VM-1190-path-traversal-with-tests'
  • dfdc363 VM-1190: regression tests for path-traversal fix in audio file resource
  • 5ea2053 fix(security): path traversal in audio file resource
  • ada0d51 Merge branch 'cora/VM-1172-fix-version-test-grown-hash'
  • 4cf14d7 VM-1172: fix test_get_git_commit_hash for grown abbreviation length

caveman

  • New release: v1.7.0 (was v1.6.0)
  • Release notes:
## v1.7.0 — Stats receipts, smart installer, cavecrew, MCP-shrink

The biggest release since v1.0. Caveman now has measurement (real token receipts, not vibes), an installer that detects 30+ agents and runs each one's native install, three caveman-mode subagents that emit ~60% fewer handoff tokens than vanilla, an MCP middleware that shrinks tool descriptions in flight, and a one-command rule-file dropper for any repo.

Plus a critical macOS installer fix that was silently breaking detection for **every compound-spec provider** (cursor / windsurf / continue / 28 others).

---

### 🆕 New: `/caveman-stats` — real receipts, not vibes

Caveman Stats
──────────────────────────────────
Session: ...projects/my-app/abc123.jsonl
Turns: 47
──────────────────────────────────
Output tokens: 3,210
Cache-read tokens: 128,400
──────────────────────────────────
Est. tokens saved: 5,961 (~65%)

  - **15 new commit(s)** since last check
  - Latest: `ef6050c` — chore: sync SKILL.md copies and auto-activation rules [skip ci]
  - Recent commits:
  - `ef6050c` chore: sync SKILL.md copies and auto-activation rules [skip ci]
  - `e031c1e` fix(installer): re-enable --with-mcp-shrink default ON, npm probe stays
  - `83ec61c` fix(release): production-ready installer + cavecrew refinements
  - `ec7ce36` Better install docs+scripts
  - `47cd8d7` merge: stats receipts, smart installer, cavecrew, cavepack, MCP-shrink

### [playwright-mcp](https://github.com/microsoft/playwright-mcp)

  - **New release:** `v0.0.73` (was `v0.0.70`)
  - Release notes:

What's New

Distribution

  • Playwright MCP is now published to the official MCP Registry on each release (#1585)

Bug Fixes

  • Resolve extension channel and executablePath from CLI flags and environment variables (#40572)
  • Propagate --browser channel on the --extension path (#40567)
  • Handle null viewport in dashboard annotate-screenshot (#40569)
  - **13 new commit(s)** since last check
  - Latest: `6dc3470` — docs: clarify persistent profile single-instance limitation (#1601)
  - Recent commits:
  - `6dc3470` docs: clarify persistent profile single-instance limitation (#1601)
  - `4c76659` chore: mark v0.0.73 (#1593)
  - `d3c528d` chore(ci): bump actions to Node 24 versions (#1592)
  - `f41b275` chore: roll Playwright to 1.60.0-alpha-1777669338000 (#1591)
  - `3046230` fix(publish): drop OCI package entry from server.json (#1587)


*Updated by the upstream tracker workflow.*

@github-actions
Copy link
Copy Markdown
Contributor Author

github-actions Bot commented May 6, 2026

New upstream changes detected (2026-05-06)

Updated by the upstream tracker workflow.

@impravin22 impravin22 merged commit 9c94627 into main May 7, 2026
@impravin22 impravin22 deleted the chore/upstream-sync-2026-04-27 branch May 7, 2026 06:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

upstream-update Automated: upstream dependency has new changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant