From 2d4b43a20001ed389e1247761d2a564cd272360e Mon Sep 17 00:00:00 2001
From: Zhijie Shen <zjshen14@gmail.com>
Date: Sun, 16 Aug 2026 08:56:47 -0700
Subject: [PATCH] chore(release): bump version to 0.1.4

Security release backing the seven advisories fixing: repo-supplied
settings.json auto-approve (GHSA-3g98), symlink/read-path exfiltration
(GHSA-5v6f), web_fetch SSRF (GHSA-9gqj), sandbox-exec profile injection
(GHSA-99pr), --yes deny bypass (GHSA-hx58), session-log secrets
(GHSA-x245), and prompt-injection framing (GHSA-v5f9).

Publish steps after merge: npm run release (requires 2FA).
---
 package-lock.json | 4 ++--
 package.json      | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index fcf7e7e..81d834a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@zjshen/opencli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@zjshen/opencli",
-      "version": "0.1.3",
+      "version": "0.1.4",
       "license": "MIT",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.112.3",
diff --git a/package.json b/package.json
index f4f99cc..b9bcce3 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@zjshen/opencli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "An open-source, model-agnostic AI coding agent CLI — works with any LLM provider",
   "type": "module",
   "bin": {