v2.4.4 - Security Fixes & Optimization Guide

🚀 What's New

🔒 Security Fixes

• undici: 6.21.1 → 7.22.0 (fixes moderate vulnerability)
• qs: Override to 6.14.2 (fixes low vulnerability)
• semver: Override to 7.6.3+ (fixes transitive deps)
• All vulnerabilities: 0 confirmed (pnpm audit clean)

📦 Dependency Updates

• inquirer 8.2.6 → 9.3.8
• eventsource-parser 1.1.1 → 3.0.6
• express 4.18.2 → 4.21.2
• fs-extra 11.1.1 → 11.3.0
• @types/jest added for better TypeScript support

📚 New Documentation

• Claude Code Optimization Guide: Token savings tips (25-35% reduction)
• CLAUDE_OPTIMIZED.md: 90% token reduction with symbol-based communication
• pnpm-lock.yaml: Added for Dependabot security analysis

🔧 Configuration

• Removed GitHub registry from publishConfig (now uses npmjs.org)
• Better security monitoring with lockfile

📥 Installation

npm install -g @halilertekin/claude-code-router-config@2.4.4

🔄 Upgrade

npm update -g @halilertekin/claude-code-router-config

🙏 Thanks

Thanks to everyone who reported security issues and contributed to this release!

v2.4.3

v2.4.3 - GLM endpoints clarified:

• glm: GLM-4.7 (Coding Plan Pro)
• glm5: GLM-5 (Coding Plan Max)
• glmapi: GLM-5 (API Credits)

v2.4.2

Multi-provider Claude Code routing with GLM-5, Claude Pro, DeepSeek & more

v2.0.8

• GLM setup now installs direct z.ai glm wrapper by default and keeps glm-ccr for router usage.\n- Safer .env loading in ccc (ignores comments/invalid lines) and updated setup docs.

v2.0.7

• Security: enforce qs 6.14.1 (arrayLimit bypass DoS fix)

v2.0.6

• UI version label now reflects package version\n- Dashboard language fixes (env selector + providers list)\n- ccr activate now exports configured env file (CCR_ENV_PATH)\n- GLM wrapper: z.ai auth/timeout/model defaults + python3 fallback

v2.0.4

Full Changelog: v2.0.3...v2.0.4

v2.0.3

Full Changelog: v2.0.2...v2.0.3

v2.0.2

Full Changelog: v2.0.1...v2.0.2

v2.0.1

Full Changelog: v2.0.0...v2.0.1