---
summary: "Adopt @cyanheads/mcp-ts-core ^0.10.9 — fresh-scaffold devcheck guards, the check-dependency-specifiers gate, and plugin-manifest packaging checks; re-sync framework scripts and skills."
breaking: false
security: false
---

# 0.1.10 — 2026-06-20

## Added

- **`check-dependency-specifiers` devcheck step** (`scripts/check-dependency-specifiers.ts`) — hard-fails on floating specifiers (`latest`, `*`, pre-release dist-tags) in `package.json`'s dependency sections and `bun.lock`'s `workspaces` map, catching a `bun update --latest` writing a dist-tag into the lock that would re-resolve a held dependency on the next install. (cyanheads/mcp-ts-core#246)
- **Plugin-manifest checks in `lint:packaging`** — `scripts/lint-packaging.ts` now validates `.claude-plugin/plugin.json` and `.codex-plugin/plugin.json` for non-empty descriptions, unscoped display fields, and a full-name `npx -y` install arg. Gated by the new `devcheck.config.json` `packaging.pluginManifests` flag (default on); `.codex-plugin/plugin.json` gains a `longDescription` to satisfy it. (cyanheads/mcp-ts-core#240)

## Changed

- **Fresh-scaffold devcheck guards** — `scripts/devcheck.ts` skips git-dependent checks (TODOs/FIXMEs, Tracked Secrets, Framework Antipatterns) via a shared `isGitRepo()` guard; `scripts/build-changelog.ts` and `scripts/check-framework-antipatterns.ts` self-skip outside a git repo; `scripts/check-skill-versions.ts` skips a `SKILL.md` deleted from the worktree instead of crashing. (cyanheads/mcp-ts-core#237, cyanheads/mcp-ts-core#242, cyanheads/mcp-ts-core#243)
- **Synced framework skills** — `skills/**` re-synced to `^0.10.9`: `api-context` documents the new `ctx.content` media-block collector; `git-wrapup` v1.4 and `orchestrations` v1.4 adopt the reworded tag-annotation and isolation guidance; `add-tool`, `api-canvas`, `api-config`, `api-telemetry`, and `polish-docs-meta` re-synced.

## Dependencies

- `@cyanheads/mcp-ts-core` ^0.10.6 → ^0.10.9
- `@types/node` ^25.9.3 → ^26.0.0
- `vitest` ^4.1.8 → ^4.1.9