chore(main): release 4.0.6 (#711)

c9dd54ae61ce0d8d949dbed0257573194a536953 · 2026-05-08 00:41:15 -0700 · github-actions[bot]

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Files touched

M .claude-plugin/plugin.json
M .release-please-manifest.json
M CHANGELOG.md
M internal/version/version.go

Diff

commit c9dd54ae61ce0d8d949dbed0257573194a536953
Author: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Date:   Fri May 8 00:41:15 2026 -0700

    chore(main): release 4.0.6 (#711)
    
    Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 .claude-plugin/plugin.json    |  2 +-
 .release-please-manifest.json |  2 +-
 CHANGELOG.md                  | 13 +++++++++++++
 internal/version/version.go   |  2 +-
 4 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index b3739495..d25ab792 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "cli-printing-press",
-  "version": "4.0.5",
+  "version": "4.0.6",
   "description": "Generate production Go CLIs from API descriptions or OpenAPI specs",
   "repository": "mvanhorn/cli-printing-press"
 }
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 824fecd7..8a77bdac 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "4.0.5"
+  ".": "4.0.6"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 06163257..b6a06617 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,18 @@
 # Changelog
 
+## [4.0.6](https://github.com/mvanhorn/cli-printing-press/compare/v4.0.5...v4.0.6) (2026-05-08)
+
+
+### Bug Fixes
+
+* **cli:** close MCP sql tool exfiltration vector with allowlist + read-only handle ([#709](https://github.com/mvanhorn/cli-printing-press/issues/709)) ([b196bd8](https://github.com/mvanhorn/cli-printing-press/commit/b196bd813a0a4eb58f763b7d4d38563208c1a5d0))
+* **cli:** correct named-array envelope detection and api_key set-token slot ([#706](https://github.com/mvanhorn/cli-printing-press/issues/706)) ([c46cf01](https://github.com/mvanhorn/cli-printing-press/commit/c46cf0157409949d46b958836aadafa8fa281913))
+* **cli:** dedupe TypeField identifiers in same struct ([#705](https://github.com/mvanhorn/cli-printing-press/issues/705)) ([d1c3371](https://github.com/mvanhorn/cli-printing-press/commit/d1c3371e13f9f558ff359d3d320a80ebef46d77f)), closes [#697](https://github.com/mvanhorn/cli-printing-press/issues/697)
+* **cli:** gate orphan token scaffolding on auth surface ([#704](https://github.com/mvanhorn/cli-printing-press/issues/704)) ([35d7e84](https://github.com/mvanhorn/cli-printing-press/commit/35d7e842f618b0abcaa7127960344267e9f79c71))
+* **cli:** parse x-mcp extension in OpenAPI parser ([#702](https://github.com/mvanhorn/cli-printing-press/issues/702)) ([41c87cf](https://github.com/mvanhorn/cli-printing-press/commit/41c87cf866eaff009988036b73dc62a30b9d0738))
+* **cli:** shard sub-resource tables per parent on collision ([#707](https://github.com/mvanhorn/cli-printing-press/issues/707)) ([1023054](https://github.com/mvanhorn/cli-printing-press/commit/102305421d740138e3e5a740af3b47a5bc32b7b1))
+* **cli:** source store columns from response schema, not query params ([#708](https://github.com/mvanhorn/cli-printing-press/issues/708)) ([9e039c0](https://github.com/mvanhorn/cli-printing-press/commit/9e039c0be787abf49242b668397155f6940525f7))
+
 ## [4.0.5](https://github.com/mvanhorn/cli-printing-press/compare/v4.0.4...v4.0.5) (2026-05-08)
 
 
diff --git a/internal/version/version.go b/internal/version/version.go
index 6486d436..2d34c5e0 100644
--- a/internal/version/version.go
+++ b/internal/version/version.go
@@ -8,7 +8,7 @@ import (
 
 // Version is the current printing-press version. It is set at build time
 // via ldflags for tagged releases, or falls back to the hardcoded value.
-var Version = "4.0.5" // x-release-please-version
+var Version = "4.0.6" // x-release-please-version
 
 // pseudoVersionSuffix matches the trailing `yyyymmddhhmmss-abcdefabcdef`
 // (14-digit timestamp + 12-char commit hash) shared by every Go pseudo-version

← 10230542 fix(cli): shard sub-resource tables per parent on collision · back to Cli Printing Press · ci: add Main CI workflow for post-merge build+test+golden ga c9ebffaa →