Merge pull request #100 from cosai-oasis/release/1.4.0

thomas-bartlett · web-flow · commit fe294ae1cf19 · 2026-06-29T15:49:50.000-04:00
Prepare v1.4.0 release
diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
@@ -13,7 +13,7 @@
       "name": "codeguard-security",
       "source": "./",
       "description": "Comprehensive security rules for AI coding agents",
-      "version": "1.3.1",
+      "version": "1.4.0",
       "repository": "https://github.com/cosai-oasis/project-codeguard.git",
       "tags": [
         "security",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "codeguard-security",
   "description": "Security code review skill based on Project CodeGuard's comprehensive security rules. Helps AI coding agents write secure code and prevent common vulnerabilities.",
-  "version": "1.3.1",
+  "version": "1.4.0",
   "skills": [
     "./skills/",
     "./sources/skills/"
diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "project-codeguard"
-version = "1.3.1"
+version = "1.4.0"
 description = "AI Coding Rules for Security and Best Practices"
 requires-python = ">=3.11"
 dependencies = [
diff --git a/skills/codeguard/SKILL.md b/skills/codeguard/SKILL.md
@@ -1,7 +1,7 @@
 ---
 name: codeguard
 description: A CodeGuard security skill that helps AI coding agents write secure code and prevent common vulnerabilities. Use this skill when writing, reviewing, or modifying code to ensure secure-by-default practices are followed.
-codeguard-version: "1.3.1"
+codeguard-version: "1.4.0"
 framework: "Project CodeGuard"
 purpose: "Embed secure-by-default practices into AI coding workflows"
 ---
diff --git a/src/codeguard-mcp/pyproject.toml b/src/codeguard-mcp/pyproject.toml
@@ -16,15 +16,19 @@ classifiers = [
 ]
 dependencies = [
     "fastmcp>=2.0.0",
-    "pydantic-settings>=2.0",
+    "pydantic-settings>=2.14.2",
     "pyyaml>=6.0",
 ]
 
 [tool.uv]
 # CVE floors for transitive deps (remove once upstream raises its floor).
 constraint-dependencies = [
     "authlib>=1.6.12",  # via fastmcp
+    "cryptography>=48.0.1",  # via authlib and pyjwt
     "idna>=3.15",  # via httpx
+    "pyjwt>=2.13.0",  # via mcp
+    "python-multipart>=0.0.31",  # via mcp
+    "starlette>=1.3.1",  # via mcp and sse-starlette
 ]
 
 [dependency-groups]
diff --git a/src/codeguard-mcp/uv.lock b/src/codeguard-mcp/uv.lock
diff --git a/uv.lock b/uv.lock

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "codeguard-security",`
`3`	`3`	`"description": "Security code review skill based on Project CodeGuard's comprehensive security rules. Helps AI coding agents write secure code and prevent common vulnerabilities.",`
`4`		`- "version": "1.3.1",`
	`4`	`+ "version": "1.4.0",`
`5`	`5`	`"skills": [`
`6`	`6`	`"./skills/",`
`7`	`7`	`"./sources/skills/"`
Original file line number	Diff line number	Diff line change
`@@ -16,15 +16,19 @@ classifiers = [`
`16`	`16`	`]`
`17`	`17`	`dependencies = [`
`18`	`18`	`"fastmcp>=2.0.0",`
`19`		`- "pydantic-settings>=2.0",`
	`19`	`+ "pydantic-settings>=2.14.2",`
`20`	`20`	`"pyyaml>=6.0",`
`21`	`21`	`]`
`22`	`22`
`23`	`23`	`[tool.uv]`
`24`	`24`	`# CVE floors for transitive deps (remove once upstream raises its floor).`
`25`	`25`	`constraint-dependencies = [`
`26`	`26`	`"authlib>=1.6.12", # via fastmcp`
	`27`	`+ "cryptography>=48.0.1", # via authlib and pyjwt`
`27`	`28`	`"idna>=3.15", # via httpx`
	`29`	`+ "pyjwt>=2.13.0", # via mcp`
	`30`	`+ "python-multipart>=0.0.31", # via mcp`
	`31`	`+ "starlette>=1.3.1", # via mcp and sse-starlette`
`28`	`32`	`]`
`29`	`33`
`30`	`34`	`[dependency-groups]`