From f296544c1c3468b0a2b76f0c40786ed40ff09ff6 Mon Sep 17 00:00:00 2001 From: A <258483684+la14-1@users.noreply.github.com> Date: Mon, 23 Mar 2026 04:50:00 -0700 Subject: [PATCH] fix(cli): bump version to 0.25.18 for security fix in #2904 (#2906) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Commit 97b6424 (fix(security): add cmd validation to Sprite runSprite() and runSpriteSilent()) changed production CLI code without a corresponding version bump. The CLI has auto-update — without this bump users won't receive the null-byte injection guard. Agent: code-health Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 --- packages/cli/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/cli/package.json b/packages/cli/package.json index 2e7c8d9b..78e4e281 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "@openrouter/spawn", - "version": "0.25.17", + "version": "0.25.18", "type": "module", "bin": { "spawn": "cli.js"