Skip to content

chore(release): v0.28.0 - #325

Merged
ralyodio merged 1 commit into
mainfrom
release/v0.28.0
Aug 8, 2026
Merged

chore(release): v0.28.0#325
ralyodio merged 1 commit into
mainfrom
release/v0.28.0

Conversation

@ralyodio

@ralyodio ralyodio commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

Bump to v0.28.0, releasing the rename of ticker to stocks (#324).

Breaking, and the first release in this series that is: moshcode ticker and /ticker no longer dispatch. The verb is moshcode stocks / /stocks, and advisor remains an alias.

Minor rather than major because the project is pre-1.0, where a minor is the conventional place for a breaking change — and because the break is one verb, one release old, that answers with where it went rather than a bare "unknown command":

$ moshcode ticker NVDA
✗ unknown command "ticker" — did you mean stocks?

ticker@moshcode keeps its plugin id and installs unchanged; its command is now /stocks, which existing installs pick up on the next plugin update.

Why the release is necessary rather than optional

install.sh serves the latest release tarball, not main — so until a release carries it, every installed binary still answers to ticker and not to stocks.

Verification

Full suite on this exact tree: 1386 tests, 0 failures.

Merging this and publishing the v0.28.0 release triggers publish.yml, which re-runs the tests and pushes to npm with provenance.

🤖 Generated with Claude Code

Bump to v0.28.0, releasing the rename of `ticker` to `stocks` (#324).

Breaking, and the first release in this series that is: `moshcode ticker` and
`/ticker` no longer dispatch. The verb is `moshcode stocks` / `/stocks`, and
`advisor` remains an alias. Minor rather than major because the project is
pre-1.0, where a minor is the conventional place for a breaking change — and
because the break is one verb, one release old, that answers with where it went
rather than a bare "unknown command".

`ticker@moshcode` keeps its plugin id and installs unchanged; its command is
now `/stocks`, which existing installs pick up on the next plugin update.

The rename is what makes the release necessary rather than optional: install.sh
serves the latest release tarball, so until a release carries it every installed
binary still answers to `ticker` and not to `stocks`.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown

ThreatCrush Security Scan

91 finding(s)

HIGH/CRITICAL: 2 | MEDIUM: 41 | LOW: 48

Severity Rule Location
HIGH manifest-typosquat apps/pwa/package.json:19
HIGH js-ssrf-outbound-request apps/pwa/public/sw.js:45
MEDIUM tls-verification-disabled apps/pwa/src/lib/moshpit-gateway.mjs:299
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:61
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:75
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:101
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:265
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:269
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:314
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:499
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:675
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:677
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:736
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:782
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:852
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:955
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:1063
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:1199
MEDIUM js-unescaped-html-sink apps/pwa/src/routes/moshpit.mjs:1419
MEDIUM js-dynamic-code-execution apps/pwa/test/apikey-mask.test.mjs:129
MEDIUM sql-template-interpolation apps/pwa/test/credits-webhook-event-match.test.mjs:111
MEDIUM sql-template-interpolation apps/pwa/test/credits-webhook-event-match.test.mjs:131
MEDIUM sql-template-interpolation apps/pwa/test/moshpit-terms.test.mjs:192
MEDIUM sql-template-interpolation src/dns.mjs:2439
MEDIUM sql-template-interpolation src/selfupdate.mjs:166
MEDIUM sql-template-interpolation src/selfupdate.mjs:170
MEDIUM sql-template-interpolation src/selfupdate.mjs:208
MEDIUM sql-template-interpolation src/selfupdate.mjs:209
MEDIUM insecure-temp-file test/dns-disable-restore.test.mjs:93
MEDIUM insecure-temp-file test/dns-disable-restore.test.mjs:310
MEDIUM insecure-temp-file test/plugins.test.mjs:92
MEDIUM insecure-temp-file test/pty.test.mjs:28
MEDIUM insecure-temp-file test/pty.test.mjs:31
MEDIUM insecure-temp-file test/pty.test.mjs:40
MEDIUM insecure-temp-file test/pty.test.mjs:42
MEDIUM insecure-temp-file test/pty.test.mjs:47
MEDIUM insecure-temp-file test/pty.test.mjs:48
MEDIUM insecure-temp-file test/pty.test.mjs:49
MEDIUM insecure-temp-file test/tabs.test.mjs:8
MEDIUM insecure-temp-file test/tabs.test.mjs:13
MEDIUM insecure-temp-file test/tabs.test.mjs:14
MEDIUM insecure-temp-file test/tabs.test.mjs:22
MEDIUM insecure-temp-file test/trust.test.mjs:240
LOW secret-generic-credential apps/pwa/test/apikey-bearer-scheme.test.mjs:30
LOW secret-generic-credential apps/pwa/test/apikey-mask.test.mjs:38
LOW secret-generic-credential apps/pwa/test/apikey-reveal.test.mjs:35
LOW secret-generic-credential apps/pwa/test/approvals-context.test.mjs:28
LOW secret-generic-credential apps/pwa/test/approvals-credits.test.mjs:28
LOW secret-generic-credential apps/pwa/test/approvals-notify.test.mjs:26
LOW secret-generic-credential apps/pwa/test/approvals-resolve-race.test.mjs:20

…and 41 more. Full results in the Security tab.

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit 8aca7d2 into main Aug 8, 2026
4 checks passed
@ralyodio
ralyodio deleted the release/v0.28.0 branch August 8, 2026 17:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant