---
summary: "Patch maintenance — drop misleading 'legacy' label from the shared-workspace shape; adopt framework 0.8.19 (engines bump, Docker base 1.3, api-telemetry skill)."
breaking: false
---

# 0.5.4 — 2026-05-08

## Changed

- **Engines bumped:** `node >=22.0.0 → >=24.0.0`, `bun >=1.2.0 → >=1.3.0` — tracks the `@cyanheads/mcp-ts-core` 0.8.19 floor.
- **Dockerfile base:** `oven/bun:1 → oven/bun:1.3` (build and slim-runtime stages).
- **README prerequisite line:** Node.js v22+ → v24+.
- **`scripts/build-changelog.ts` synced** — adds optional `security: boolean` frontmatter; pairs with the `## Security` body section to render a `🛡️ Security` badge in the rollup. Existing per-version files stay valid (the field defaults to `false`).
- **`changelog/template.md` synced** (pristine reference) — bold-the-symbol bullet style, Keep-a-Changelog section order, scaffolded Deprecated / Removed / Security sections (commented out by default).
- **`CLAUDE.md` / `AGENTS.md` skill table** — added `api-telemetry`; `api-utils` description now mentions telemetry helpers.
- **Skills resynced from `@cyanheads/mcp-ts-core@0.8.19`** — `api-telemetry` (NEW v1.0; full OTel catalog of spans, metrics, completion-log fields, env config, cardinality rules), `api-utils` 2.1 → 2.2, `maintenance` 2.0 → 2.1 (Phase C now also resyncs pristine reference files), `report-issue-framework` 1.5 → 1.6, `report-issue-local` 1.4 → 1.5, `setup` 1.6 → 1.7. Phase B mirrored into `.claude/skills/` and `.agents/skills/`.

## Fixed

- **Dropped misleading "legacy" label from the shared-workspace deployment shape** — `README.md` table row + env-var description + multi-agent workflows section, `src/services/canvas-bridge/canvas-bridge.ts` comments, `tests/services/server-registry.test.ts` test comment. The shape (`MCP_AUTH_MODE=none + BRAPI_SESSION_ISOLATION=false`) remains a first-class supported deployment mode — only non-default since 0.5.3.

## Dependencies

- **`@cyanheads/mcp-ts-core` `^0.8.17 → ^0.8.19`** — `ctx.auth.token` reaches handlers ([#121](https://github.com/cyanheads/mcp-ts-core/issues/121); not used by this server), new `api-telemetry` skill, `security: boolean` changelog frontmatter, hono `^4.12.18` security floor, OTel SDK `^0.217.0`, engines + Docker base bumps.
- **`@types/node` `^25.6.0 → ^25.6.2`**.