chore(release): 3.1.1

[wyre-agent-fleet]

Automated release PR. Merging this (any merge method) publishes 3.1.1 to npm and creates the GitHub release — see CHANGELOG.md in this diff for the notes.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

Summary by CodeRabbit

• Chores
  • Updated the package version to 3.1.1.
  • Documented the resolution of a security vulnerability in the YAML parsing dependency.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: b170869d-5ed4-4efa-b388-45e00a79ce8c

📥 Commits

Reviewing files that changed from the base of the PR and between 5f0c234 and ed7ea63.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json, !**/package-lock.json

📒 Files selected for processing (2)

• CHANGELOG.md
• package.json

Included review availability: Your plan provides up to 10 included reviews per hour; 5 remain after this review.

---

📝 Walkthrough

Walkthrough

The package version changes from 3.1.0 to 3.1.1. CHANGELOG.md adds the 3.1.1 release entry and documents the js-yaml CVE-2026-84375 resolution.

Changes

Release metadata

Layer / File(s)	Summary
Version and changelog update package.json, CHANGELOG.md	The package version changes to 3.1.1. The changelog records the release and the documented js-yaml vulnerability resolution.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: asachs01

Merge Risk: ⚪ Minimal · up to ed7ea

The release metadata is consistent and no actionable merge-blocking issue was established.

🚥 Pre-merge checks | ✅ 6

✅ Passed checks (6 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies this as the 3.1.1 release preparation. It matches the version update and publication objective.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Changelog Entry	✅ Passed	PASS. The authoritative diff changes only the release metadata: the package.json and package-lock.json versions, plus a dated 3.1.1 release note in CHANGELOG.md. It does not change runtime cod…

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/next

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch release/next

---

_{Comment @coderabbitai help to get the list of available commands.}

[asachs01]

Code Review — PR #90 (chore(release): 3.1.1)

Verdict: Approve

Automated semantic-release PR. Diff is limited to:

• CHANGELOG.md: new 3.1.1 entry documenting deps: resolve js-yaml CVE-2026-84375, linked to issue #89 and the fix commit.
• package.json / package-lock.json: version bump 3.1.0 → 3.1.1, consistent across both files.

Correctness

• Version bump is consistent between package.json and package-lock.json.
• Changelog entry matches the security-fix intent and title.

Security

• No hardcoded secrets/credentials. Release ships a js-yaml CVE fix.

Code Quality / Docs

• No source changes, consistent with "chore(release)" scope. Already has a coderabbit "Approved" review.
• Minor nit (non-blocking): the new changelog entry has a few extra blank lines before the next version header compared to the tighter spacing elsewhere in the file — purely cosmetic, no functional impact.

No blocking issues.

[asachs01]

Code Review Summary — Claude Code

Verdict: Approve

Critical

None

Warnings

None

Suggestions

• Minor: the CHANGELOG diff introduces extra blank lines before the previous 3.1.0 entry - cosmetic only, not blocking.

Looks Good

• Automated semantic-release version bump (3.1.0 -> 3.1.1) resolving a js-yaml CVE (CVE-2026-84375) in a dependency.
• Changes are scoped to CHANGELOG.md, package.json, and package-lock.json only - no source changes to review.
• Standard, low-risk release-automation PR.

[asachs01]

Reviewed by Hermes Agent. Clean 3.1.0→3.1.1 bump (package.json/lock + CHANGELOG) for js-yaml CVE-2026-84375 fix; no unintended changes.