From cb4bc85a8d4fdf9409e0a6211a6c5bd80b5825e6 Mon Sep 17 00:00:00 2001 From: Providex AI Date: Wed, 19 Aug 2026 10:26:01 -0700 Subject: [PATCH] chore(release): bump version to 0.2.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Patch release. Every change that ships in the wheel since v0.2.0 is a bug fix; no new public API and nothing breaking. #25 fix(security) log injection — `tool_name` off the MCP proxy wire reached two logger calls unescaped #27 fix(security) same guard reshaped so CodeQL can see it; output byte-identical #28 fix(sdk) BOTH console scripts were unusable on a bare install — `rootsign version`, `rootsign --help`, `rootsign verify --local` and every `rootsign-admin` command died on ModuleNotFoundError #30 fix(sdk) missing `postgres` extra now names the install command on every DB-backed path, not just some #33 fix(cli) single import style for importlib #29/#31/#32 (test + CI) and #26 (actions bump) change nothing in the distribution. README's Status headline moves to v0.2.1; the phase table's "✅ v0.2.0" row stays put — that records when 1.5 shipped, which is history, not the current version. `rootsign/_version.py` reads the version from installed distribution metadata, so pyproject.toml is the only place it is written. Reinstalled and verified it propagates to `rootsign.__version__`, `SDK_VERSION` (which lands in every envelope's `sdk_version`), and `rootsign version`. Built the artifacts and smoke-tested the wheel in a fresh no-extras venv — the #28 fix holds in the thing that would actually go to PyPI: rootsign version -> rootsign 0.2.1 rootsign --help -> exit 0 rootsign-admin --help -> exit 0 rootsign verify -> install hint, exit 1 DB packages resolved -> none Full suite: 500 passed, 6 skipped. Co-Authored-By: Claude Opus 5 --- README.md | 2 +- pyproject.toml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index b22a5ab..441c31e 100644 --- a/README.md +++ b/README.md @@ -27,7 +27,7 @@ Compliance-grade audit trails. Zero changes to your agent code. ## Status -**v0.2.0.** `pip install rootsign` → a verified hash chain in under a minute: no Docker, no database, no plumbing. LangGraph + CrewAI integrations, a framework-agnostic MCP proxy, `rootsign verify` CLI, PII redaction, human-in-the-loop checkpoints, opt-in decision capture (PRD-19 / ADR-008), and opt-in SDK micro-batching are all shipping. +**v0.2.1.** `pip install rootsign` → a verified hash chain in under a minute: no Docker, no database, no plumbing. LangGraph + CrewAI integrations, a framework-agnostic MCP proxy, `rootsign verify` CLI, PII redaction, human-in-the-loop checkpoints, opt-in decision capture (PRD-19 / ADR-008), and opt-in SDK micro-batching are all shipping. | Phase | Scope | Status | |---|---|---| diff --git a/pyproject.toml b/pyproject.toml index 6f33875..5ba48ba 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "rootsign" -version = "0.2.0" +version = "0.2.1" description = "RootSign — tamper-evident provenance logging for AI agents (powered by Providex AI)" readme = "README.md" requires-python = ">=3.11,<3.15"