Skip to content

chore(release): 2.10.1 step 1 — audit, bump to 2.10.1 - #2655

Merged
cliffhall merged 1 commit into
v2/mainfrom
v2/chore/2653-bump-2-10-1
Oct 8, 2026
Merged

cliffhall merged 1 commit into
v2/mainfrom
v2/chore/2653-bump-2-10-1

Conversation

@cliffhall

Copy link
Copy Markdown
Member

Closes #2653

Step 1 of the v2.10.1 release, per the release skill: the audit report, the fixes it forced, and the version bump, in one PR. Step 2 (the milestone merge into main) is #2654.

2.10.1 is a patch release for #2651: npx @modelcontextprotocol/inspector failing on 2.10.0 with "could not determine executable to run". The fix landed in #2652.

npm audit --audit-level=high: report

Run against origin/v2/main in all six installs (root, web, cli, tui, launcher, mcpdo): 0 vulnerabilities in each.

Fixes

None needed.

Bump

npm version patch --no-git-tag-version: 2.10.0 → 2.10.1. No tag was created; the release tag goes on the merge commit on main in step 2. The diff is package.json plus the root package-lock.json's two version fields.

Verification

  • npm run local:gate: green through every stage up to smoke:web:firefox. That stage fails on this macOS 27 machine because Playwright's Firefox cannot launch (smoke:web:firefox cannot launch Playwright's Firefox on macOS 27 #2625). I ran smoke:web:firefox in the mcr.microsoft.com/playwright:v1.62.1-noble container from a clean git archive of this commit, and it was green.
  • local:storybook, which the && chain skipped, was run separately: 529/529 passed.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: cliffhall <cliff@futurescale.com>
@cliffhall cliffhall added the v2 Issues and PRs for v2 label Oct 8, 2026
@cliffhall cliffhall linked an issue Oct 8, 2026 that may be closed by this pull request
@cliffhall
cliffhall requested a balanced review from Copilot October 8, 2026 03:59

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

All three version fields agree, and the metadata-only diff matches the release-preparation scope.

0 open findings

What changed in this PR

Prepares release 2.10.1, which will ship the previously merged fix for the default npx launch failure.

Changes:

  • Bumps the root package version from 2.10.0 to 2.10.1.
  • Updates both root lockfile version fields; no dependency or runtime changes.
File Description
package.json Sets the release version to 2.10.1.
package-lock.json Synchronizes both version fields with the manifest.

🧠 Review effort: Balanced


Give feedback about Copilot approvals in this survey to enter a drawing for a $150 gift card.

@cliffhall

Copy link
Copy Markdown
Member Author

Copilot review loop closed: round 1 was clean (0 inline comments, nothing in the headline or a suppressed block).

@cliffhall
cliffhall merged commit 369a570 into v2/main Oct 8, 2026
8 checks passed
@cliffhall
cliffhall deleted the v2/chore/2653-bump-2-10-1 branch October 8, 2026 04:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

v2 Issues and PRs for v2

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Release 2.10.1 step 1: bump version to 2.10.1 on v2/main

2 participants