diff --git a/package.json b/package.json
index d257321..ee1628a 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "node": ">=20.19.0"
   },
   "dependencies": {
-    "@deepseek-ai/dsh-mcp-client": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-skill-filesystem": "^0.1.0-rc.6"
+    "@deepseek-ai/dsh-mcp-client": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-skill-filesystem": "^0.2.0-rc.1"
   }
 }
diff --git a/tests/test_repository.py b/tests/test_repository.py
index 4e7da02..646f7a4 100644
--- a/tests/test_repository.py
+++ b/tests/test_repository.py
@@ -50,11 +50,15 @@ def test_manifest_declares_a_patch_bundle(self) -> None:
         self.assertIn("dsh-plugin", self.manifest["keywords"])
         self.assertEqual(self.manifest["main"], "index.js")
         self.assertEqual(self.manifest["engines"]["node"], ">=20.19.0")
+
+    def test_manifest_declares_harness_plugins_as_direct_dependencies(self) -> None:
+        # Dependency versions are maintained by Dependabot; enforce the package
+        # contract here and check compatibility with check_skill_entry.mjs in CI.
         self.assertEqual(
-            self.manifest["dependencies"],
+            set(self.manifest["dependencies"]),
             {
-                "@deepseek-ai/dsh-mcp-client": "^0.1.0-rc.6",
-                "@deepseek-ai/dsh-skill-filesystem": "^0.1.0-rc.6",
+                "@deepseek-ai/dsh-mcp-client",
+                "@deepseek-ai/dsh-skill-filesystem",
             },
         )