chore(release): 2.2.1

[wyre-agent-fleet]

Automated release PR. Merging this (any merge method) publishes 2.2.1 to npm and creates the GitHub release — see CHANGELOG.md in this diff for the notes.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

Summary by CodeRabbit

• Security

  • Resolved a vulnerability affecting YAML processing, improving application security.

• Release

  • Updated the package to version 2.2.1.
  • Added release documentation for the 2.2.1 update.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 49ef223a-956a-4b89-97a5-a33319228482

📥 Commits

Reviewing files that changed from the base of the PR and between a6d9584 and 8eb23ff.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json, !**/package-lock.json

📒 Files selected for processing (2)

• CHANGELOG.md
• package.json

Included review availability: Your plan provides up to 10 included reviews per hour; 6 remain after this review.

---

📝 Walkthrough

Walkthrough

The package version changed from 2.2.0 to 2.2.1. The changelog documents the release and the js-yaml CVE-2026-84375 dependency vulnerability fix.

Changes

Release metadata

Layer / File(s)	Summary
Version and changelog update package.json, CHANGELOG.md	The package version is now 2.2.1. The changelog records the js-yaml CVE-2026-84375 fix.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: asachs01

Merge Risk: ⚪ Minimal · up to 8eb23

The release metadata and dependency fix are aligned with the package being published, so no merge-blocking risk remains.

🚥 Pre-merge checks | ✅ 6

✅ Passed checks (6 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies this as the 2.2.1 release preparation, which matches the version update and changelog entry.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Changelog Entry	✅ Passed	PASS: The reviewed diff contains only the release entry in CHANGELOG.md, version metadata in package.json, and matching version fields in package-lock.json. It does not change runtime code, a pu…

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/next

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch release/next

---

_{Comment @coderabbitai help to get the list of available commands.}

[asachs01]

Code Review Summary — automated release PR

Verdict: Approve

Reviewed via gh pr diff. Changes are exactly what the title claims: a patch version bump (2.2.0 → 2.2.1) plus the standard package.json/package-lock.json/CHANGELOG.md triplet generated by semantic-release.

Checklist

• Correctness: version bumped consistently in package.json and package-lock.json; CHANGELOG entry matches (js-yaml CVE-2026-84375 dependency fix referenced by commit).
• Security: no hardcoded secrets/credentials introduced. This release itself is a security fix (resolves a known js-yaml CVE) — good.
• Code quality: no source changes, purely metadata/version files.
• Tests: N/A — no logic changed; CI (Test (22)) is green on the PR.
• Docs: CHANGELOG entry is accurate and correctly links back to the fixing commit/issue.

No issues found. Safe to merge — merging publishes 2.2.1 to npm per the PR description.

---

Reviewed by Hermes Agent

[asachs01]

Code Review Summary — Claude Code

Verdict: Approve

Critical

None

Warnings

None

Suggestions

None

Looks Good

• Standard automated semantic-release version bump (2.2.0 → 2.2.1) fixing js-yaml CVE-2026-84375
• CHANGELOG, package.json, and package-lock.json are consistent with each other
• No functional/source code changes, low risk

[asachs01]

Reviewed by Hermes Agent. Clean 2.2.0→2.2.1 bump (package.json/lock + CHANGELOG) for js-yaml CVE-2026-84375 fix; no unintended changes.

[asachs01]

Hermes Agent Review

Verdict: Approve

Auto-generated semantic-release version bump (CHANGELOG.md, package.json, package-lock.json only — a patch release resolving the js-yaml CVE-2026-84375 dependency vulnerability). No source code changes. Nothing to flag.

---

Reviewed by Hermes Agent

[asachs01]

Review: trivial, low-risk release chore — approve

Standard semantic-release version bump: package.json/package-lock.json 2.2.0 → 2.2.1, CHANGELOG entry documents a js-yaml CVE-2026-84375 dependency fix. No source/logic changes in this diff. Nothing to flag.

Reviewed by Hermes Agent