[ddallabenetta]

Prepares the v0.5.1 patch release after merging #134.

Changes

• Bump version to 0.5.1.
• Refresh dependencies with bun update. Direct ranges moved for js-yaml (^5.4.3 → ^5.5.0), react / react-dom (^19.3.0 → ^19.3.1), @tauri-apps/cli (^2.12.2 → ^2.12.3) and postcss (^8.5.30 → ^8.5.31), plus transitive updates in bun.lock. The @oh-my-pi/* packages stay on ~18.10.4.
• Relax the /goal wiring assertion in lib/goal-mode.wiring.test.mjs.

Why the test change

#134 added an optional runtime argument to sendAgentCommand:

sendAgentCommand<GoalCommandResponse>(sid, { type: "goal", args }, runtimeIdRef)

That test asserts against the hook's source text, and its regex required the call to close right after args, so the extra argument made it fail even though the wiring is correct. The pattern now tolerates the optional third argument. This test is not modified by #134 and passed before it, so the failure was a regression introduced by that merge; bun test is not part of ci.yml, which is why it went unnoticed.

Verification

Run on this branch, after bun update:

• bun install --frozen-lockfile — clean, no lockfile drift.
• bun run typecheck — passes.
• bun run build — passes (warnings only).
• bun test — 616 pass, 1 skip, 0 fail across 617 tests in 98 files.

bun run lint still reports pre-existing errors; it already fails on main and is not part of CI.

The GitNexus impact / detect_changes steps required by CLAUDE.md could not be run: the GitNexus MCP server is not connected in this session.

---

Generated by Claude Code

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​postcss@​8.5.25 ⏵ 8.5.31			+1
	npm/​react@​19.3.0 ⏵ 19.3.1
	npm/​js-yaml@​4.3.0 ⏵ 5.5.0		+22	-13	+1
	npm/​@​tauri-apps/​cli@​2.12.2 ⏵ 2.12.3			+1
	npm/​react-dom@​19.3.0 ⏵ 19.3.1			+1

View full report