[PR #1058] [MERGED] chore(release/6.0.0): release rea-agents 6.0.0 #2612

New issue

Closed

opened 2026-10-17 21:08:13 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-17 21:08:13 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/morluto/rea/pull/1058
Author: @github-actions[bot]
Created: 10/8/2026
Status: ✅ Merged
Merged: 10/8/2026
Merged by: @N0zoM1z0

Base: release/6.0.0 ← Head: release-please--branches--release/6.0.0--components--rea-agents

📝 Commits (3)

bc70efb chore(release/6.0.0): release rea-agents 5.1.0
b30ee7f chore: normalize release product catalog
d21ec17 chore(release): correct 6.0.0 candidate and migration notes

📊 Changes

12 files changed (+112 additions, -13 deletions)

View changed files

📝 .release-please-manifest.json (+1 -1)
📝 CHANGELOG.md (+99 -0)
📝 README_ar.md (+1 -1)
📝 README_ja.md (+1 -1)
📝 README_ko.md (+1 -1)
📝 README_zh.md (+1 -1)
📝 docs/installation.md (+1 -1)
📝 docs/product-catalog.json (+1 -1)
📝 package-lock.json (+2 -2)
📝 package.json (+1 -1)
📝 server.json (+2 -2)
📝 src/generatedPackageMetadata.ts (+1 -1)

📄 Description

🤖 I have created a release beep boop

6.0.0 (2026-10-08)

⚠ BREAKING CHANGES

contracts: MCP filesystem inputs now require absolute host paths, including target/snapshot paths, evidence bundle paths, managed and firmware inputs, browser/Electron launch paths and expected server paths. Calls such as open_binary({"path":"./app"}) must send an absolute path such as /home/analyst/app or C:\analysis\app. Optional paths remain optional. CLI operator-relative paths continue to work. See #948 and #1004.

Features

artifacts: trace Mach-O dylib resolution in bundles (78d594c)
browser: inspect historical web network captures (#992) (2bf3663)
evm: inspect offline bytecode interfaces through EVMole (#1051) (7af7bc8)
ghidra: support native x86 PE applications on Windows (#1030) (c6dad93)
native: inspect offline ELF layout through pwntools (#1037) (4fc6565)
native: inspect recorded crashes through pwntools and pwndbg (#1054) (163ee09)
native: observe function and Objective-C method calls under LLDB (1d13cef)

Bug Fixes

dotnet: validate managed metadata and CIL boundaries (#938) (bda4ada)
build: clarify generated-file check hint and drop redundant catalog step (#998) (6f0ef16)
release: extend npm propagation window and improve diagnostics (#943) (06b047a)
contracts: require absolute local paths for session filesystem inputs (#948) (5b172b1)
ci: generate source catalog before shard tests (#1002) (eb8f649)
contracts: require absolute local paths for remaining caller-supplied file inputs (#1004) (cbc0dd1)
cli: classify ENOTDIR JSON input failures (#1000) (a6132be)
browser: preserve authorized redirect hops (#986) (ae0f725)
mcp: reject unknown MCP tool inputs (#975) (fe64fd6)
release: publish from explicit source checkpoints (#1003) (64c7188)
release: publish from explicit source checkpoints (#1006) (b4fc0ec)
javascript: bound semantic node projection for resource safety (#966) (96a46ad)
ci: avoid slow Azure archive for the native cross compiler (#1016) (51956c1)
ci: decouple stdio smoke tests from Linux display probes (#1014) (93731e1)
cli: stream large JavaScript JSON results (#1024) (0e25bef)
javascript: complete large-ASAR analysis with file-local projection (#1055) (b9fb438)
javascript: recognize digits in artifact URI schemes (#1045) (03424ae)
javascript: reconstruct HTML script loads accurately (#1042) (1154f2f)
javascript: report application analysis progress on the CLI (#1008) (7b18c58)
javascript: resolve module URLs and reject invalid exports targets (#1031) (8d5c88f)
javascript: resolve root package exports arrays (#1046) (53409ab)
mcp: advertise JSON values without recursive schemas (#995) (7425f70), closes #919
mcp: bound capture comparison input schema depth (#1005) (6b55de0)
process: preserve partial evidence and verify detached cleanup (#1011) (63cf28f)
release: support built-in credentials and refresh release boundary (6a278a6)
release: support default credentials and record 5.0.0 boundary (#1012) (6a278a6)
release: sync 5.0.0 checkpoint back to main (966cca8)
snapshot: replay validated workflow evidence (#984) (1d62e54)
windows: allow Java to read retained target snapshots (#1027) (28d5c39)

Performance Improvements

artifacts: replace quadratic ZIP overlap checks (#1013) (76e7e51)
javascript: cache canonical export comparison sort keys (#1028) (63ba742)

Code Refactoring

build: generate MCP tool catalog at build time instead of committing it (#997) (35a4e18)
process: separate capture implementation from analyst workflows (#988) (6aa9afb)
artifacts: move inventory and extraction into provider owners (#1032) (6e4535c)
remove abandoned test-only analysis scaffolding (c93422a)

Documentation

improve Korean wording and particles (#1047) (c5d165b)
simplify the English README and organize guides (#1043) (28f10cf)

Tests

process: wait for observable snapshot ctime changes (#999) (161ed91)
browser: consolidate CDP workflows and colocate parser coverage (2682904)
ci: stabilize browser source identity fixture delivery (#1023) (ed725da)
cli: reduce repeated startup and filesystem setup (d88d6c1)
consolidate service and process fixtures (f8a53a8)
javascript: consolidate source analysis and export regressions (f517a5a)
javascript: cover plain long-line loader identities (#1025) (984fc27)
mcp: consolidate SDK schema checks and scenario ports (9c3479e)
providers: verify framing through client socket boundaries (1fd1989)
prune redundant conformance checks and document test priorities (aafdf8a)

This PR was generated with Release Please. See documentation.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/morluto/rea/pull/1058 **Author:** [@github-actions[bot]](https://github.com/apps/github-actions) **Created:** 10/8/2026 **Status:** ✅ Merged **Merged:** 10/8/2026 **Merged by:** [@N0zoM1z0](https://github.com/N0zoM1z0) **Base:** `release/6.0.0` ← **Head:** `release-please--branches--release/6.0.0--components--rea-agents` --- ### 📝 Commits (3) - [`bc70efb`](https://github.com/morluto/rea/commit/bc70efbd13e19ff2c3aaf306586ee1243f84aaa5) chore(release/6.0.0): release rea-agents 5.1.0 - [`b30ee7f`](https://github.com/morluto/rea/commit/b30ee7fa96c83ff30b6b6f1e9195004faf8d8dbd) chore: normalize release product catalog - [`d21ec17`](https://github.com/morluto/rea/commit/d21ec171347d78aab026a06fb9d24a19169726e6) chore(release): correct 6.0.0 candidate and migration notes ### 📊 Changes **12 files changed** (+112 additions, -13 deletions) <details> <summary>View changed files</summary> 📝 `.release-please-manifest.json` (+1 -1) 📝 `CHANGELOG.md` (+99 -0) 📝 `README_ar.md` (+1 -1) 📝 `README_ja.md` (+1 -1) 📝 `README_ko.md` (+1 -1) 📝 `README_zh.md` (+1 -1) 📝 `docs/installation.md` (+1 -1) 📝 `docs/product-catalog.json` (+1 -1) 📝 `package-lock.json` (+2 -2) 📝 `package.json` (+1 -1) 📝 `server.json` (+2 -2) 📝 `src/generatedPackageMetadata.ts` (+1 -1) </details> ### 📄 Description :robot: I have created a release *beep* *boop* --- ## [6.0.0](https://github.com/morluto/rea/compare/rea-agents-5.0.0...rea-agents-6.0.0) (2026-10-08) ### ⚠ BREAKING CHANGES * **contracts:** MCP filesystem inputs now require absolute host paths, including target/snapshot paths, evidence bundle paths, managed and firmware inputs, browser/Electron launch paths and expected server paths. Calls such as `open_binary({"path":"./app"})` must send an absolute path such as `/home/analyst/app` or `C:\analysis\app`. Optional paths remain optional. CLI operator-relative paths continue to work. See [#948](https://github.com/morluto/rea/pull/948) and [#1004](https://github.com/morluto/rea/pull/1004). ### Features * **artifacts:** trace Mach-O dylib resolution in bundles ([78d594c](https://github.com/morluto/rea/commit/78d594cacd376725f833a99402069c103aae9aac)) * **browser:** inspect historical web network captures ([#992](https://github.com/morluto/rea/issues/992)) ([2bf3663](https://github.com/morluto/rea/commit/2bf3663f654386c9fd8c1437c49659df97bd4697)) * **evm:** inspect offline bytecode interfaces through EVMole ([#1051](https://github.com/morluto/rea/issues/1051)) ([7af7bc8](https://github.com/morluto/rea/commit/7af7bc88ce0e8f084eaa0db1e8f834d495440fd9)) * **ghidra:** support native x86 PE applications on Windows ([#1030](https://github.com/morluto/rea/issues/1030)) ([c6dad93](https://github.com/morluto/rea/commit/c6dad932084032bcb32acc61e8066a7784497710)) * **native:** inspect offline ELF layout through pwntools ([#1037](https://github.com/morluto/rea/issues/1037)) ([4fc6565](https://github.com/morluto/rea/commit/4fc6565b0ffb36d7105b3524e08d0c5d603ae07d)) * **native:** inspect recorded crashes through pwntools and pwndbg ([#1054](https://github.com/morluto/rea/issues/1054)) ([163ee09](https://github.com/morluto/rea/commit/163ee09a7425479385e0ed0b5d74043e2587eab2)) * **native:** observe function and Objective-C method calls under LLDB ([1d13cef](https://github.com/morluto/rea/commit/1d13cef5f46f5e07f594bde7b1a4725f189b9a5e)) ### Bug Fixes * **dotnet:** validate managed metadata and CIL boundaries ([#938](https://github.com/morluto/rea/pull/938)) ([bda4ada](https://github.com/morluto/rea/commit/bda4ada7fb6bd7dd70a444bb3c57e34f7f5cc00b)) * **build:** clarify generated-file check hint and drop redundant catalog step ([#998](https://github.com/morluto/rea/pull/998)) ([6f0ef16](https://github.com/morluto/rea/commit/6f0ef160501ea3b24dfa2939dfcd3eea0dc13ee7)) * **release:** extend npm propagation window and improve diagnostics ([#943](https://github.com/morluto/rea/pull/943)) ([06b047a](https://github.com/morluto/rea/commit/06b047a0929369d5b8635b3651da115c8fcd53a7)) * **contracts:** require absolute local paths for session filesystem inputs ([#948](https://github.com/morluto/rea/pull/948)) ([5b172b1](https://github.com/morluto/rea/commit/5b172b1042fc09a4e12d956018f15d86cf397ffe)) * **ci:** generate source catalog before shard tests ([#1002](https://github.com/morluto/rea/pull/1002)) ([eb8f649](https://github.com/morluto/rea/commit/eb8f6491a88bfa79d13f7923e4ef94d791f6ba4d)) * **contracts:** require absolute local paths for remaining caller-supplied file inputs ([#1004](https://github.com/morluto/rea/pull/1004)) ([cbc0dd1](https://github.com/morluto/rea/commit/cbc0dd1e7ca36fa3504a9ea8eae303a0876b176b)) * **cli:** classify ENOTDIR JSON input failures ([#1000](https://github.com/morluto/rea/pull/1000)) ([a6132be](https://github.com/morluto/rea/commit/a6132be0546d6a9e3fa83426c8b59b1280b3e5bd)) * **browser:** preserve authorized redirect hops ([#986](https://github.com/morluto/rea/pull/986)) ([ae0f725](https://github.com/morluto/rea/commit/ae0f725fad368730c6198d49716ccc410bca0536)) * **mcp:** reject unknown MCP tool inputs ([#975](https://github.com/morluto/rea/pull/975)) ([fe64fd6](https://github.com/morluto/rea/commit/fe64fd65d93eff202ad90145544dc9ff84651974)) * **release:** publish from explicit source checkpoints ([#1003](https://github.com/morluto/rea/pull/1003)) ([64c7188](https://github.com/morluto/rea/commit/64c71880ae4f7bc658ffce46eb729c4141dbdf19)) * **release:** publish from explicit source checkpoints ([#1006](https://github.com/morluto/rea/pull/1006)) ([b4fc0ec](https://github.com/morluto/rea/commit/b4fc0ecaa1f6b912dc27880e6b6127ace47abc2e)) * **javascript:** bound semantic node projection for resource safety ([#966](https://github.com/morluto/rea/pull/966)) ([96a46ad](https://github.com/morluto/rea/commit/96a46ada0a36f0349f2b0fc20b4c932401b4ad84)) * **ci:** avoid slow Azure archive for the native cross compiler ([#1016](https://github.com/morluto/rea/issues/1016)) ([51956c1](https://github.com/morluto/rea/commit/51956c1a49a7dc9ed70a6fba480a670a7e7b2b9b)) * **ci:** decouple stdio smoke tests from Linux display probes ([#1014](https://github.com/morluto/rea/issues/1014)) ([93731e1](https://github.com/morluto/rea/commit/93731e17ddea76db86dfa84bb54536dcf8ebfa0b)) * **cli:** stream large JavaScript JSON results ([#1024](https://github.com/morluto/rea/issues/1024)) ([0e25bef](https://github.com/morluto/rea/commit/0e25befe78f220691abe5d0291cc04a75c9cc877)) * **javascript:** complete large-ASAR analysis with file-local projection ([#1055](https://github.com/morluto/rea/issues/1055)) ([b9fb438](https://github.com/morluto/rea/commit/b9fb43883570bef7cb29fd16f27c25d5a7e5bb54)) * **javascript:** recognize digits in artifact URI schemes ([#1045](https://github.com/morluto/rea/issues/1045)) ([03424ae](https://github.com/morluto/rea/commit/03424ae91ef22efd57db1bdde9379a3ac450b8f7)) * **javascript:** reconstruct HTML script loads accurately ([#1042](https://github.com/morluto/rea/issues/1042)) ([1154f2f](https://github.com/morluto/rea/commit/1154f2f03c0b0bb6cb6c5da09b8d8e1c837febc4)) * **javascript:** report application analysis progress on the CLI ([#1008](https://github.com/morluto/rea/issues/1008)) ([7b18c58](https://github.com/morluto/rea/commit/7b18c581409848077de7a9cb6d7d1a0b91a02e12)) * **javascript:** resolve module URLs and reject invalid exports targets ([#1031](https://github.com/morluto/rea/issues/1031)) ([8d5c88f](https://github.com/morluto/rea/commit/8d5c88f17cde4ab4fa54c5142f0a45e612619a53)) * **javascript:** resolve root package exports arrays ([#1046](https://github.com/morluto/rea/issues/1046)) ([53409ab](https://github.com/morluto/rea/commit/53409ab1968d60c77f98feedefe237a08859a95c)) * **mcp:** advertise JSON values without recursive schemas ([#995](https://github.com/morluto/rea/issues/995)) ([7425f70](https://github.com/morluto/rea/commit/7425f70fd0247a7ea7192deb959fd6f48ba83a21)), closes [#919](https://github.com/morluto/rea/issues/919) * **mcp:** bound capture comparison input schema depth ([#1005](https://github.com/morluto/rea/issues/1005)) ([6b55de0](https://github.com/morluto/rea/commit/6b55de017badc9066642e1ff2561eb1da0ff93f8)) * **process:** preserve partial evidence and verify detached cleanup ([#1011](https://github.com/morluto/rea/issues/1011)) ([63cf28f](https://github.com/morluto/rea/commit/63cf28fd8f8acaf656e993300a2a24280b2fd692)) * **release:** support built-in credentials and refresh release boundary ([6a278a6](https://github.com/morluto/rea/commit/6a278a68dd4fa69b9153697ecb7bba7de4c55c32)) * **release:** support default credentials and record 5.0.0 boundary ([#1012](https://github.com/morluto/rea/issues/1012)) ([6a278a6](https://github.com/morluto/rea/commit/6a278a68dd4fa69b9153697ecb7bba7de4c55c32)) * **release:** sync 5.0.0 checkpoint back to main ([966cca8](https://github.com/morluto/rea/commit/966cca8efe5ed08b3285cd06409688d871eb5e6b)) * **snapshot:** replay validated workflow evidence ([#984](https://github.com/morluto/rea/issues/984)) ([1d62e54](https://github.com/morluto/rea/commit/1d62e54e1f976e64130e4e9b651c3180aa4fa727)) * **windows:** allow Java to read retained target snapshots ([#1027](https://github.com/morluto/rea/issues/1027)) ([28d5c39](https://github.com/morluto/rea/commit/28d5c397c83f901e4086083868041711371ad32a)) ### Performance Improvements * **artifacts:** replace quadratic ZIP overlap checks ([#1013](https://github.com/morluto/rea/issues/1013)) ([76e7e51](https://github.com/morluto/rea/commit/76e7e510bb2d7d37728ca50749d524beb5890cf8)) * **javascript:** cache canonical export comparison sort keys ([#1028](https://github.com/morluto/rea/issues/1028)) ([63ba742](https://github.com/morluto/rea/commit/63ba7424c0ab69b94397e8913f8e231de111583f)) ### Code Refactoring * **build:** generate MCP tool catalog at build time instead of committing it ([#997](https://github.com/morluto/rea/pull/997)) ([35a4e18](https://github.com/morluto/rea/commit/35a4e18d3028014e24d2e209ec99a590fde63152)) * **process:** separate capture implementation from analyst workflows ([#988](https://github.com/morluto/rea/pull/988)) ([6aa9afb](https://github.com/morluto/rea/commit/6aa9afb5493a97801eb1126a0dcf11f9705165db)) * **artifacts:** move inventory and extraction into provider owners ([#1032](https://github.com/morluto/rea/issues/1032)) ([6e4535c](https://github.com/morluto/rea/commit/6e4535c1011f1982e9ab07b7ebcd600c19cd494d)) * remove abandoned test-only analysis scaffolding ([c93422a](https://github.com/morluto/rea/commit/c93422a898fdbedb7d28709144b4337a2669440b)) ### Documentation * improve Korean wording and particles ([#1047](https://github.com/morluto/rea/issues/1047)) ([c5d165b](https://github.com/morluto/rea/commit/c5d165bd03fed95a0b0105661d3ba7e0efbfa449)) * simplify the English README and organize guides ([#1043](https://github.com/morluto/rea/issues/1043)) ([28f10cf](https://github.com/morluto/rea/commit/28f10cf2bc7b7c590700b50d47072015f3e3c66e)) ### Tests * **process:** wait for observable snapshot ctime changes ([#999](https://github.com/morluto/rea/pull/999)) ([161ed91](https://github.com/morluto/rea/commit/161ed9157134d5c3b0fbae19ceb756ac58a26c04)) * **browser:** consolidate CDP workflows and colocate parser coverage ([2682904](https://github.com/morluto/rea/commit/26829045d0f0e744bb60d6babc2dc3312f4bfa53)) * **ci:** stabilize browser source identity fixture delivery ([#1023](https://github.com/morluto/rea/issues/1023)) ([ed725da](https://github.com/morluto/rea/commit/ed725dace4a689e4e5c804dc6bf06c7fc663c7c9)) * **cli:** reduce repeated startup and filesystem setup ([d88d6c1](https://github.com/morluto/rea/commit/d88d6c1897740ccbd6c57f4ba01861fc751fb3a8)) * consolidate service and process fixtures ([f8a53a8](https://github.com/morluto/rea/commit/f8a53a8c065f1ccbdaa051a4e1ef267a2047d759)) * **javascript:** consolidate source analysis and export regressions ([f517a5a](https://github.com/morluto/rea/commit/f517a5a1d7c0766ed50f8dfd5ee69e65525ac744)) * **javascript:** cover plain long-line loader identities ([#1025](https://github.com/morluto/rea/issues/1025)) ([984fc27](https://github.com/morluto/rea/commit/984fc27ce19d57f708bdae688a258cf8663cdea6)) * **mcp:** consolidate SDK schema checks and scenario ports ([9c3479e](https://github.com/morluto/rea/commit/9c3479ed95100d8ee5ed4d9158a4550e4ac2a752)) * **providers:** verify framing through client socket boundaries ([1fd1989](https://github.com/morluto/rea/commit/1fd1989d342375a01b6d14b282ad58001b7d1800)) * prune redundant conformance checks and document test priorities ([aafdf8a](https://github.com/morluto/rea/commit/aafdf8a01b42fb6fd927c0f2a66e758e1a510abc)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-17 21:08:13 +00:00