chore: release v1.1.1

CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## 1.1.1
+
+### Patch Changes
+
+- [#238](https://github.com/Hazzng/sql-fs/pull/238) Thanks [@Hazzng](https://github.com/Hazzng)! - Update HTTP and MCP dependencies, override vulnerable transitive pins, and remove unused SQL drivers and Drizzle tooling. Add isolated database/API verification and document unauthorized sandbox-list and file-media responses in OpenAPI.
+
+  Preserve primary execution and commit errors when rollback fails. Share script-scope completion across local execution, worker adapters, and file writes, retaining nested scope ownership and lease checks before commit. Observe asynchronous scope initialization and callback rejections; unexpected renewal failures mark the lease lost while preserving transient Redis retries.
+
+  Keep reservations within each worker pool and retain captured worker identities and generations during recovery so cleanup preserves replacement workers. Never automatically replay an execution with an unknown outcome.
+
+  After exec dispatch, coherence failures that previously returned `ECOHERENCE` now return `EEXEC_OUTCOME_UNKNOWN`. Writes may already have been applied. Inspect sandbox state before proceeding and do not automatically replay the execution. Clients matching `ECOHERENCE` must handle the new code. Recover the promoted coherence error before returning it so the affected worker is terminated and its durable identity is retired.
+
+- [#251](https://github.com/Hazzng/sql-fs/pull/251) Thanks [@dependabot](https://github.com/apps/dependabot)! - Update jose to 6.2.12 for JWT, JWS, JWE, and remote JWKS validation fixes.
+
+- [#239](https://github.com/Hazzng/sql-fs/pull/239) Thanks [@Hazzng](https://github.com/Hazzng)! - Modularize filesystem, PostgreSQL, session, and worker behavior around state owners. Preserve primary execution and commit errors when rollback fails, and reject worker sessions attached after shutdown begins.
+
+  Keep reservations and recovery tied to their worker pool and captured generation, preserving replacement residency. Treat post-exec coherence failures as unknown outcomes because writes may already have applied. Retire the affected worker without replaying execution; callers must inspect sandbox state and reconcile external effects before retrying.
+
+  Reject pending blob writes across script-scope transitions and cache reads from condemned scopes. Preserve both aliases when renaming between hard links to the same inode, reject file/directory rename mismatches, and report EISDIR when ingest targets the root directory.
+
+  Enable symbolic links by default, retaining `allowSymlinks: false` for callers that explicitly disable them and bounded cycle resolution. Resolve relative link targets from their containing directory in PostgreSQL, cap total traversal at 40 links, and include target strings in session metadata-cache estimates.
+
+- [#265](https://github.com/Hazzng/sql-fs/pull/265) Thanks [@Hazzng](https://github.com/Hazzng)! - Upgrade just-git to 1.10.0 for mode-only status, diff, checkout, and merge fixes, ls-tree support, and summary output.
+
 ## 1.1.0
 
 ### Minor Changes

README.md

@@ -3,7 +3,7 @@
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-1.1.0-blue" alt="Version" />
+  <img src="https://img.shields.io/badge/version-1.1.1-blue" alt="Version" />
   <img src="https://img.shields.io/badge/node-%3E%3D22-brightgreen?logo=node.js&logoColor=white" alt="Node.js" />
   <img src="https://img.shields.io/badge/TypeScript-strict-3178c6?logo=typescript&logoColor=white" alt="TypeScript" />
   <img src="https://img.shields.io/badge/just--bash-3.6.0-f59e0b" alt="just-bash" />

package.json

@@ -1,6 +1,6 @@
 {
 	"name": "sql-fs-api",
-	"version": "1.1.0",
+	"version": "1.1.1",
 	"description": "Persistent filesystem backend (Postgres) + HTTP/MCP API for just-bash sandboxes",
 	"type": "module",
 	"license": "MIT",

src/api/openapi-spec.ts

@@ -107,7 +107,7 @@ export const openapiSpec = {
 	openapi: "3.0.0",
 	info: {
 		title: "SQL-FS API",
-		version: "1.1.0",
+		version: "1.1.1",
 		description: "Persistent filesystem backend + HTTP/MCP API for just-bash sandboxes. Backed by Postgres.",
 	},
 	servers: [{ url: "/v1", description: "API v1" }],