v4.4.0

MontFerret/ferretv4.4.0May 12, 2026by sinewaveai

AI Summary

Fixes missing source files in the published tarball that caused runtime module not found errors during global installation and the composite Security Scan action. Includes dependency updates.

Key Highlights

Fixed missing source files (`semantic-integration.js`, `semantic-analyzer.js`, etc.) causing `ERR_MODULE_NOT_FOUND` errors.
Updated dependencies including `fast-uri`, `hono`, `ip-address`, and `express-rate-limit`.
Resolves issues with the agent-security-scanner-mcp package on version 4.3.0.

Full Release Notes

## Bug fix

Prior releases imported four files at runtime that were not declared in the published tarball, causing `ERR_MODULE_NOT_FOUND` when the package was installed globally and invoked via the composite Security Scan action. The following are now shipped:

- `src/semantic-integration.js` (imported by `src/tools/scan-security.js`)
- `src/semantic-analyzer.js` (imported by `src/semantic-integration.js`)
- `src/utils/github-clone.js` (imported by `src/cli/scan-clawhub-full.js`)
- `src/utils/npm-download.js` (imported by `src/cli/scan-clawhub-full.js`)

If you were hitting `Cannot find module '.../src/semantic-integration.js'` on `agent-security-scanner-mcp@4.3.0`, upgrade to `4.4.0`.

## Dependency updates

Merged via dependabot rollup:

- `fast-uri` 3.1.0 → 3.1.2 — root, `scanner-lite/`, `mcp-server-full/`, `prooflayer-scanner/` (#82, #84, #83, #86)
- `hono` 4.12.16 → 4.12.18 (root, #85); 4.12.14 → 4.12.18 (`scanner-lite/`, `mcp-server-full/`, `prooflayer-scanner/`, #80/#79/#81)
- `ip-address` 10.1.0 → 10.2.0, `express-rate-limit` 8.3.0 → 8.5.1 (`mcp-server-full/`, `prooflayer-scanner/`, #77, #78)

## Install

```sh
npm install -g agent-security-scanner-mcp@4.4.0
```

**Full Changelog**: https://github.com/sinewaveai/agent-security-scanner-mcp/compare/v4.3.0...v4.4.0