cli-v3.4.0

modelcontextprotocol/registrycli-v3.4.0Jul 28, 2026by pbakaus

AI Summary

The CLI introduces a new ban rule for kickers, adds a radial spotlight glow rule, improves scanning performance by skipping hidden/vendor directories, and fixes false positives.

Key Highlights

New `kicker-above-heading` rule replaces the old advisory.
New `radial-spotlight-glow` rule detects chromatic glows.
Stripe patterns are now caught in standalone CSS files.
Scans skip hidden directories and vendored paths for speed.
Fixes false positives for shadowed form IDs and non-rendered text.

New Features

Kicker ban rule.
Radial spotlight glow rule.
Stripe pattern detection in standalone CSS.
Optimized scanning (skip hidden/vendored).
False positive fixes.

Full Release Notes

- **Kickers are banned.** New `kicker-above-heading` rule flags the first eyebrow label above any heading, replacing the old advisory that waited for three repeats. Breadcrumbs, datelines, card metadata, form labels, and document numbering all stay exempt.

- **New rule: `radial-spotlight-glow`.** The soft chromatic glow fading to transparent behind content, a favorite AI default, is now a named finding, distinct from the existing halo rule.

- **Stripes hiding in stylesheets.** Pseudo-element stripe patterns are now caught in standalone CSS files and style blocks, not just inline styles, and findings carry their source lines.

- **Scans skip what they should.** Hidden directories and vendored paths are out of the walk, while conventional UI source dirs like `.vuepress` stay in; scans get faster and quieter at once.

- **Fewer false positives.** Forms whose `id` shadows the DOM API no longer crash element checks, `background-clip: text` gradients stop tripping contrast, and non-rendered text is excluded from tiny-text findings.

- **OpenCode installs land where OpenCode looks.** Global skill installs write to the config directory OpenCode actually reads, with the legacy location migrated safely.