chore(main): release 2.11.4

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "2.11.3"
+  ".": "2.11.4"
 }

CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [2.11.4](https://github.com/chrischall/fetchproxy/compare/v2.11.3...v2.11.4) (2026-09-12)
+
+
+### Bug Fixes
+
+* **cli:** a cookie value off the command line, hostname-matched profiles, and profile writes that survive an interrupt ([#360](https://github.com/chrischall/fetchproxy/issues/360)) ([c49b81a](https://github.com/chrischall/fetchproxy/commit/c49b81a1481ccc55950af463ce374efad7f4c4a8))
+* **cli:** check the profile before draining stdin, and match a profile's domains the way the server does ([#366](https://github.com/chrischall/fetchproxy/issues/366)) ([da063e7](https://github.com/chrischall/fetchproxy/commit/da063e71aa99cf3224fbd8be1df401b4b416c82c))
+* **server,extension:** refuse a public-suffix domain and a local Origin, and surface only the self-derived pair code ([#364](https://github.com/chrischall/fetchproxy/issues/364)) ([1c457c7](https://github.com/chrischall/fetchproxy/commit/1c457c74c1615efe07c878384f1852251148e8b7))
+* **server:** authenticate before advancing the replay counter, and implement the handshake timeout the docs already claim ([#356](https://github.com/chrischall/fetchproxy/issues/356)) ([a4c940b](https://github.com/chrischall/fetchproxy/commit/a4c940babd54d5cda4f1da47cb897352f6df0124))
+* **server:** refuse a public-suffix domain at the constructor, where it fails loudly ([#367](https://github.com/chrischall/fetchproxy/issues/367)) ([e8ebf09](https://github.com/chrischall/fetchproxy/commit/e8ebf09133143158d3015563525d37ed149424ab))
+
+
+### Documentation
+
+* **plans:** the protocol v4 wire break — forward secrecy, AAD over the frame's identity, and the cohort choreography ([#361](https://github.com/chrischall/fetchproxy/issues/361)) ([21197c3](https://github.com/chrischall/fetchproxy/commit/21197c3e3848feca1a871d5fa0ff9595a3843f34))
+
 ## [2.11.3](https://github.com/chrischall/fetchproxy/compare/v2.11.2...v2.11.3) (2026-09-11)
 
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "fetchproxy",
-  "version": "2.11.3",
+  "version": "2.11.4",
   "private": true,
   "type": "module",
   "workspaces": [

packages/bootstrap/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fetchproxy/bootstrap",
-  "version": "2.11.3",
+  "version": "2.11.4",
   "description": "One-shot session-bootstrap helper for MCPs using fetchproxy: declare your scope, read it once, then operate from Node.",
   "type": "module",
   "main": "./dist/index.js",
@@ -27,7 +27,7 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@fetchproxy/protocol": "^2.11.3",
-    "@fetchproxy/server": "^2.11.3"
+    "@fetchproxy/protocol": "^2.11.4",
+    "@fetchproxy/server": "^2.11.4"
   }
 }

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fetchproxy/cli",
-  "version": "2.11.3",
+  "version": "2.11.4",
   "description": "One-shot CLI for the fetchproxy bridge: authenticated fetches and session reads through the user's signed-in browser tab, scoped by per-service profiles.",
   "type": "module",
   "bin": {
@@ -30,11 +30,11 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@fetchproxy/bootstrap": "^2.11.3",
-    "@fetchproxy/protocol": "^2.11.3",
-    "@fetchproxy/server": "^2.11.3"
+    "@fetchproxy/bootstrap": "^2.11.4",
+    "@fetchproxy/protocol": "^2.11.4",
+    "@fetchproxy/server": "^2.11.4"
   },
   "devDependencies": {
-    "@fetchproxy/test-helpers": "^2.11.3"
+    "@fetchproxy/test-helpers": "^2.11.4"
   }
 }

packages/cli/src/version.ts

@@ -1,2 +1,2 @@
 // Managed by release-please (generic updater) — do not hand-edit.
-export const VERSION = '2.11.3'; // x-release-please-version
+export const VERSION = '2.11.4'; // x-release-please-version

packages/extension-chrome/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Transporter",
-  "version": "2.11.3",
+  "version": "2.11.4",
   "description": "Bridge local MCP servers to your signed-in browser tabs — let agentic tools hit authenticated APIs without copying credentials.",
   "icons": {
     "16": "icons/16.png",

packages/extension-chrome/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@fetchproxy/extension-chrome",
-  "version": "2.11.3",
+  "version": "2.11.4",
   "private": true,
   "type": "module",
   "scripts": {
     "build": "tsx build.ts",
     "build:dev": "tsx build.ts --dev"
   },
   "dependencies": {
-    "@fetchproxy/extension-core": "^2.11.3",
-    "@fetchproxy/protocol": "^2.11.3"
+    "@fetchproxy/extension-core": "^2.11.4",
+    "@fetchproxy/protocol": "^2.11.4"
   },
   "devDependencies": {
     "esbuild": "^0.28.2",

packages/extension-core/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@fetchproxy/extension-core",
-  "version": "2.11.3",
+  "version": "2.11.4",
   "private": true,
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
     "build": "tsc -b"
   },
   "dependencies": {
-    "@fetchproxy/protocol": "^2.11.3"
+    "@fetchproxy/protocol": "^2.11.4"
   },
   "devDependencies": {
     "@types/chrome": "^0.2.9",

packages/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fetchproxy/protocol",
-  "version": "2.11.3",
+  "version": "2.11.4",
   "description": "WebSocket frame types + runtime validators for fetchproxy.",
   "type": "module",
   "main": "./dist/index.js",

packages/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fetchproxy/server",
-  "version": "2.11.3",
+  "version": "2.11.4",
   "description": "Localhost WebSocket bridge an MCP server uses to relay fetches through the user's signed-in browser via the fetchproxy extension.",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,7 +28,7 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@fetchproxy/protocol": "^2.11.3",
+    "@fetchproxy/protocol": "^2.11.4",
     "ws": "^8.21.3"
   },
   "devDependencies": {

packages/test-helpers/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fetchproxy/test-helpers",
-  "version": "2.11.3",
+  "version": "2.11.4",
   "description": "Vitest mock helpers for @fetchproxy/server — drop-in FetchproxyServer mock that captures constructor opts and exposes spy-able request/fetch/captureRequestHeader/bridgeHealth methods.",
   "type": "module",
   "main": "./dist/index.js",
@@ -27,7 +27,7 @@
   },
   "license": "MIT",
   "peerDependencies": {
-    "@fetchproxy/server": "^2.11.3",
+    "@fetchproxy/server": "^2.11.4",
     "vitest": ">=1.0.0"
   }
 }