4.33.1 (2026-10-06)
Bug Fixes
- cli: classify no-auth HTTP 403 as refusal or API error (#4922) (14aab33)
- cli: close generator gaps from 4.32.5 reprints (#4837) (d0075e6)
- cli: do not auto-send OpenAPI optional parameter defaults (#4884) (f0acc67)
- cli: exclude live search indexes from sync and read-only POSTs from import (#4920) (7f64f0c)
- cli: harden concurrent store writer test under load (#4901) (639a8b1)
- cli: honor per-operation security for split-token APIs (#4896) (63226c7)
- cli: keep authored example and happy_args ids (#4919) (d7d3132)
- cli: keep declared JSON types for anyOf nullable body scalars (#4881) (ae34afd)
- cli: make DeriveFlagCorrections idempotent across batch replay (#4880) (9acddff)
- cli: omit non-canonical live transcripts and credential-bearing sniff samples (#4918) (4c72a0d)
- cli: put dry_run at top level on promoted mutation JSON (#4883) (234c04e)
- cli: sanitize cobratree alternation MCP property names (#4924) (4d76b23)
- cli: send explicit false/0 on non-paginated GET and reject boolean stray positionals (#4882) (46e012d)
- skills: enforce min-binary-version before the version-check TTL (#4894) (10cf698)