---
summary: "Adopt @cyanheads/mcp-ts-core ^0.10.9; re-sync 14 skills + 6 devcheck scripts; devcheck gains dependency-specifier and plugin-manifest packaging guards"
breaking: false
security: false
---

# 0.1.16 — 2026-06-20

## Changed

- **`@cyanheads/mcp-ts-core` ^0.10.6 → ^0.10.9.** Framework delta picked up: new `check-dependency-specifiers` devcheck step (hard-fails on `latest`/`*`/pre-release dist-tags floating in `package.json` deps and the `bun.lock` workspace map); `lint:packaging` check 10 validates the plugin manifests (`.claude-plugin/plugin.json`, `.codex-plugin/plugin.json`, `.codex-plugin/mcp.json`) for non-empty descriptions, unscoped display identity, and the full scoped install arg; `ctx.content` collector for image/audio content blocks; Canvas SQL gate now classifies prepare failures (mistyped column, unknown function) as `invalid_sql` with the DuckDB binder detail; fresh-scaffold robustness fixes to `build-changelog`, `devcheck`, `check-framework-antipatterns`, and `check-skill-versions`; `biome.json` schema migrated to the biome 2.5 `preset` form.
- **`devcheck.config.json`** — added `packaging.pluginManifests: true`, enabling the framework's new plugin-manifest packaging checks.
- **Re-synced 14 `skills/<name>/SKILL.md`** to their upstream framework versions, mirrored into `.claude/skills/` and `.agents/skills/`: `add-tool`, `api-auth`, `api-canvas`, `api-config`, `api-context`, `api-errors`, `api-services`, `api-telemetry`, `field-test`, `git-wrapup`, `orchestrations`, `polish-docs-meta`, `report-issue-local`, `tool-defs-analysis`.
- **Re-synced 6 `scripts/`** from the framework templates: `build-changelog.ts`, `check-framework-antipatterns.ts`, `check-skill-versions.ts`, `devcheck.ts`, `lint-packaging.ts`, and the new `check-dependency-specifiers.ts`.

### Dependency bumps

- `@cyanheads/mcp-ts-core` ^0.10.6 → ^0.10.9
- `@types/node` ^25.9.3 → ^26.0.0
- `hono` 4.12.25 → 4.12.26 (transitive)
- `@biomejs/biome` cli 2.4.16 → 2.5.0 (transitive)