release: prepare Cockroach Browser 0.4.1 (#51)

Author: AjnasNB

.github/workflows/release.yml

@@ -60,6 +60,8 @@ jobs:
           dotnet build sdks/dotnet/CockroachBrowser/CockroachBrowser.csproj --configuration Release --nologo
           ruby -c sdks/ruby/lib/cockroach_browser.rb
           (cd sdks/go && go test ./...)
+      - name: Remove generated SDK outputs before packaging
+        run: npm run clean && npm run build && npm run check:package
       - name: Stage deterministic release assets
         shell: bash
         run: |

CHANGELOG.md

@@ -6,6 +6,21 @@ The format follows Keep a Changelog and the project uses Semantic Versioning.
 
 ## [Unreleased]
 
+## [0.4.1] - 2026-08-15
+
+### Fixed
+
+- npm packaging now removes Python bytecode, Java `target`, and .NET `bin`/`obj`
+  outputs created by the cross-language SDK verification lane before computing
+  or publishing the immutable package artifact
+- package validation rejects generated SDK build and cache paths so release
+  checks cannot silently attest a dirty post-build package
+
+### Verification
+
+- the tag workflow rebuilds and checks the package after all language SDK
+  builds, before computing npm SHA-1/SHA-512 identity and publishing provenance
+
 ## [0.4.0] - 2026-08-14
 
 ### Added
@@ -191,7 +206,8 @@ The format follows Keep a Changelog and the project uses Semantic Versioning.
 - deterministic capability catalog, JSON schemas, examples, Docker profile, and release checks
 - Node.js 22, 24, and 26 verification matrix
 
-[Unreleased]: https://github.com/AjnasNB/cockroach-browser/compare/v0.4.0...HEAD
+[Unreleased]: https://github.com/AjnasNB/cockroach-browser/compare/v0.4.1...HEAD
+[0.4.1]: https://github.com/AjnasNB/cockroach-browser/compare/v0.4.0...v0.4.1
 [0.4.0]: https://github.com/AjnasNB/cockroach-browser/compare/v0.4.0-rc.1...v0.4.0
 [0.4.0-rc.1]: https://github.com/AjnasNB/cockroach-browser/compare/v0.3.0...v0.4.0-rc.1
 [0.3.0]: https://github.com/AjnasNB/cockroach-browser/compare/v0.2.1...v0.3.0

CITATION.cff

@@ -6,8 +6,8 @@ authors:
   - family-names: "N B"
     given-names: "Ajnas"
     alias: "AjnasNB"
-version: 0.4.0
-date-released: 2026-08-14
+version: 0.4.1
+date-released: 2026-08-15
 license: AGPL-3.0-or-later
 repository-code: "https://github.com/AjnasNB/cockroach-browser"
 url: "https://cockroachbrowser.com"

README.md

@@ -41,7 +41,7 @@ These controls preserve the powerful operational workflows people expect from an
 
 ## Release status
 
-Current release line: **0.4.0**
+Current release line: **0.4.1**
 
 - License: AGPL-3.0-or-later
 - Runtime: maintained Node.js 22, 24, or 26
@@ -266,7 +266,7 @@ Start the daemon, load its token into the client process through a secret store,
   "mcpServers": {
     "cockroach-browser": {
       "command": "npx",
-      "args": ["-y", "cockroach-browser@0.4.0", "mcp"],
+      "args": ["-y", "cockroach-browser@0.4.1", "mcp"],
       "env": {
         "COCKROACH_BROWSER_URL": "http://127.0.0.1:43110",
         "COCKROACH_BROWSER_TOKEN": "<load from your secret store>"

docker-compose.yml

@@ -2,7 +2,7 @@ services:
   browser:
     build:
       context: .
-    image: cockroach-browser:0.4.0
+    image: cockroach-browser:0.4.1
     ports:
       - "127.0.0.1:43110:43111"
     restart: unless-stopped

docs/actions.md

@@ -83,4 +83,4 @@ emulation.set can apply bounded viewport, media, offline, geolocation, permissio
 
 ## Release status
 
-This manual targets Cockroach Browser 0.4.0. Check [the capability matrix](https://cockroachbrowser.com/docs/capabilities/) before relying on a surface. Available means implemented in this release. Adapter means another authority or package is required. Planned means the surface is not part of this release.
+This manual targets Cockroach Browser 0.4.1. Check [the capability matrix](https://cockroachbrowser.com/docs/capabilities/) before relying on a surface. Available means implemented in this release. Adapter means another authority or package is required. Planned means the surface is not part of this release.

docs/audits.md

@@ -32,4 +32,4 @@ Compare a current screenshot with an explicit baseline, store the diff, and emit
 
 ## Release status
 
-This manual targets Cockroach Browser 0.4.0. Check [the capability matrix](https://cockroachbrowser.com/docs/capabilities/) before relying on a surface. Available means implemented in this release. Adapter means another authority or package is required. Planned means the surface is not part of this release.
+This manual targets Cockroach Browser 0.4.1. Check [the capability matrix](https://cockroachbrowser.com/docs/capabilities/) before relying on a surface. Available means implemented in this release. Adapter means another authority or package is required. Planned means the surface is not part of this release.

docs/automation-platform.md

@@ -127,4 +127,4 @@ TypeScript is the native embedded and daemon SDK. Dependency-light Python, Java,
 
 ## Release status
 
-This manual targets Cockroach Browser 0.4.0. Check [the capability matrix](https://cockroachbrowser.com/docs/capabilities/) before relying on a surface. Available means implemented in this release. Adapter means another authority or package is required. Planned means the surface is not part of this release.
+This manual targets Cockroach Browser 0.4.1. Check [the capability matrix](https://cockroachbrowser.com/docs/capabilities/) before relying on a surface. Available means implemented in this release. Adapter means another authority or package is required. Planned means the surface is not part of this release.

docs/capabilities.md

@@ -131,6 +131,6 @@ This file is generated from `src/capabilities.ts`.
 
 ## Status model
 
-- **available**: implemented in Cockroach Browser 0.4.0
+- **available**: implemented in Cockroach Browser 0.4.1
 - **adapter**: integration contract is present, but another package or host authority is required
 - **planned**: documented direction, not part of the current release

docs/capture.md

@@ -41,4 +41,4 @@ The Qarinah adapter records canonical input and output digests, evidence IDs, th
 
 ## Release status
 
-This manual targets Cockroach Browser 0.4.0. Check [the capability matrix](https://cockroachbrowser.com/docs/capabilities/) before relying on a surface. Available means implemented in this release. Adapter means another authority or package is required. Planned means the surface is not part of this release.
+This manual targets Cockroach Browser 0.4.1. Check [the capability matrix](https://cockroachbrowser.com/docs/capabilities/) before relying on a surface. Available means implemented in this release. Adapter means another authority or package is required. Planned means the surface is not part of this release.