Skip to content

[compass] Anode 0.11.5 release record: .NET runtime 10.0.14, a security update (B-057) - #97

Merged
skulitom merged 2 commits into
mainfrom
compass/anode-deps-2026-11-01-dotnet-10.0.14
Nov 1, 2026
Merged

skulitom merged 2 commits into
mainfrom
compass/anode-deps-2026-11-01-dotnet-10.0.14

Conversation

@skulitom

@skulitom skulitom commented Nov 1, 2026

Copy link
Copy Markdown
Owner

Compass ANODE-BUGS B-057, LEDGER C-072 (advisor's decision of 2026-11-01: pin 10.0.14 now; 0.11.5 ships it at the owner's next live check).

Why

src/Anode/Anode.csproj pinned RuntimeFrameworkVersion 10.0.13, so every self-contained build, 0.11.4 included, ships the 10.0.13 runtime. Microsoft's release metadata (read 2026-11-01) lists 10.0.14 of 2026-10-25 as the latest 10.0 patch, security: true, fixing CVE-2026-111497, CVE-2026-70197, CVE-2026-102870 and CVE-2026-114148. CONTRIBUTING's release process asks for the current supported patch.

What changes

Tested (on 41ca958, scratch/compass-anode-fixer/Anode, separate output directory; no seat, no installed Anode touched)

  • build.ps1 -QuickTest -Package -Mcpb -OutputDirectory artifacts\pkg-build -ArchiveDirectory artifacts\pkg-release: 120/120 quick checks, documentation check 42 documents against 41 tools; restore pulled Microsoft.NETCore.App.Runtime.win-x64 [10.0.14] (and the matching host and desktop packs); anode version → 0.11.5.
  • registry-entry.ps1 -Tag v0.11.5, test-distribution.ps1 -Release (all checks passed, MCPB version 0.11.5), release-check.ps1 -DryRun ("the commit that set 0.11.5: yes") and test-release-check.ps1 all passed.
  • Zip SHA-256 1bade1a30adee2d695a480ef9ccec16963462dfaaea191bd4c58693f6329ed0e, MCPB 6cf608dd32d37d4d74fe304fdae1166759710d1aa057142014bd77574d53a95e (local candidate; the release workflow builds its own).

Merging server.json runs "Publish to MCP Registry", whose plan answers none until the v0.11.5 release exists.

🤖 Generated with Claude Code

…with #95's dependency bumps

Release builds pin RuntimeFrameworkVersion 10.0.14 (Microsoft's security
update of 25 Oct 2026, four CVEs; was 10.0.13). Version 0.11.5 in the
csproj, plugin, MCPB manifest, server.json and INSTALL.md; CHANGELOG,
release notes and the validation record's 0.11.5 section.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ⚠️ Failed 2026-11-01T23:19:53.924570Z
We couldn’t complete this review. Comment @codex review to try again.
41ca958 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.

…med by what it does)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@skulitom
skulitom merged commit 37355d8 into main Nov 1, 2026
2 checks passed
@skulitom
skulitom deleted the compass/anode-deps-2026-11-01-dotnet-10.0.14 branch November 1, 2026 23:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant