From 71ff3eee06c4be447b2a3883d4d56a4f9cd05bd8 Mon Sep 17 00:00:00 2001 From: Steve <1407088+stevepridemore@users.noreply.github.com> Date: Sun, 10 May 2026 23:24:17 -0400 Subject: [PATCH] readme: bump current release to v0.3.0, add Releases table --- README.md | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index d638b58..0780e43 100644 --- a/README.md +++ b/README.md @@ -231,11 +231,24 @@ All planned phases shipped: - ✅ OAuth 2.1 hardening: PKCE-S256 mandatory, public clients only, RFC 7009 revocation, jti tracking, refresh-token TTL 30d, redirect-URI allowlist, optional email allowlist, body-size caps (64 KB OAuth / 4 MB MCP), structured event logging - ✅ Internal threat model fully resolved (16 of 16 findings closed) - ✅ npm audit clean (0 vulnerabilities) +- ✅ Pre-built GHCR images + curl-pipeable installers (no clone or local build required for end users) -Current release: [`v0.2.1`](https://github.com/stevepridemore/graph-memory/releases/tag/v0.2.1). +Current release: [`v0.3.0`](https://github.com/stevepridemore/graph-memory/releases/tag/v0.3.0). Currently steady-state. Active development is opportunistic; the system runs unattended via the nightly dream process. +## Releases + +Newest first. Each tag publishes `ghcr.io/stevepridemore/graph-memory-mcp:` and moves `:latest`. + +| Version | Date | Summary | +|---|---|---| +| [`v0.3.0`](https://github.com/stevepridemore/graph-memory/releases/tag/v0.3.0) | 2026-05-10 | Curl-pipeable primary/secondary device installers + pre-built GHCR image. Multi-stage Dockerfile, auto-cert generation on first run, vendored slash commands. End users no longer need to clone or build from source. | +| [`v0.2.1`](https://github.com/stevepridemore/graph-memory/releases/tag/v0.2.1) | 2026-05-09 | STRIDE threat model fully closed (16 of 16 findings). Hardens OAuth 2.1: PKCE-S256, RFC 7009 revocation, jti tracking, refresh-token TTL, redirect-URI allowlist, email allowlist, body-size caps. | +| [`v0.2.0`](https://github.com/stevepridemore/graph-memory/releases/tag/v0.2.0) | 2026-05-09 | OAuth 2.1 security hardening pass. Public clients only, mandatory PKCE, body-size caps, structured event logging. | +| [`v0.1.1`](https://github.com/stevepridemore/graph-memory/releases/tag/v0.1.1) | 2026-05-08 | Decay correctness + test coverage. Vitest in CI, decay function bug fixes. | +| [`v0.1.0`](https://github.com/stevepridemore/graph-memory/releases/tag/v0.1.0) | 2026-05-07 | Initial public release. MCP server, dream process, slash commands, bi-temporal modeling, semantic search, OAuth multi-device. | + ## Documentation - [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md) — system design, data flows, component responsibilities