v1.3.9

Bug Fixes

• Critical: Fix cline.js writeMcpServers interface mismatch — was corrupting Cline config files by overwriting with {"ok":true}
• High: Fix JSON injection in shell no-jq fallback — control characters now properly escaped
• Medium: Clean up .bak files after successful config writes
• Medium: Cache registry tool modules and add error handling for broken modules
• Low: Add type guard in cursor.js parseMcpServers
• Low: Detect 1.2.x/1.2.X/1.2.* semver range patterns

Other Improvements

• Biome lint auto-fixes applied across codebase

Full Changelog: v1.3.8...v1.3.9

What's Changed

• fix: resolve all code audit findings by @kianwoon in #18

Full Changelog: v1.3.8...v1.3.9

v1.3.8

Full Changelog: v1.3.7...v1.3.8

Full Changelog: v1.3.7...v1.3.8

v1.3.7

Full Changelog: v1.3.6...v1.3.7

v1.3.6

Full Changelog: v1.3.5...v1.3.6

v1.3.5

Full Changelog: v1.3.4...v1.3.5

v1.3.4

Bug fixes and improvements

Critical Fixes

• Fix uninitialized before_sha crash when marketplace has no upstream branch (set -u compatible)
• Fix version replace corrupting unrelated MCP server args via loose substring matching
• Fix mtime false-positive on APFS silently discarding valid writes
• Fix JSON injection in no-jq fallback JSON output

High Fixes

• Wire --force flag to writeConfig - was dead code
• Fix filename collision from tr sanitization (hash-based naming)
• Detect semver range operators (^, ~, etc.) - silently converting ranges to pinned
• Resolve relative XDG_CONFIG_HOME against HOME (NixOS/containers)
• Fix roo-code.js writeMcpServers misleading JSDoc and unused import

Also

• Add missing mp_names file initialization
• Add git availability check at startup

v1.3.3

Bug Fix

• Fix bootstrap deadlock: Auto-reinstall now triggers in --check mode, so users on old cached versions can self-recover. Previously, --check skipped the auto-reinstall step entirely — trapping users on broken versions (e.g., v1.1.0 which used the now-removed --force flag).

Installation

claude plugin install update-all-plugins@cc-update-all --scope user

v1.3.2

Bug Fix

• Linux/XDG config discovery: Cline and Roo Code MCP config files are now found on Linux ($XDG_CONFIG_HOME) and Windows (%APPDATA%), not just macOS. Previously, discover() only checked macOS paths, leaving Linux users unable to use MCP server updates for these tools.
• Improved test isolation: Tests now use temp directories and env stubs instead of touching real filesystem paths.

What's Changed

• scripts-mcp/lib/tools/cline.js — Multi-platform config path discovery (macOS, Linux/XDG, Windows)
• scripts-mcp/lib/tools/roo-code.js — Same multi-platform discovery for Roo Code
• scripts-mcp/lib/tools/cline.test.js — Cross-platform test coverage
• scripts-mcp/lib/tools/roo-code.test.js — Cross-platform test coverage

Co-authored-by: @ratatulieoi (#4)

Installation

claude plugin install update-all-plugins@cc-update-all --scope user

v1.3.1

Bug Fix

• Fixed self-update hook failure: Removed unsupported --force flag from claude plugin install command that was causing "unknown option '--force'" errors during plugin self-update.

Installation

claude plugin install update-all-plugins@cc-update-all --scope user

v1.3.0 — Extension Update Checker

Extension Update Checker (Issue #2)

New /update-extensions slash command that checks Cursor and Windsurf extensions against the VS Code Marketplace API and reports which are outdated.

What's New

• /update-extensions — check extension versions across Cursor and Windsurf
• Marketplace API client — batch queries to VS Code Marketplace API (zero new dependencies)
• Gallery-only filtering — only checks marketplace-sourced extensions (skips .vsix and unknown sources)

Flags

Flag	Behavior
--tool NAME	Only process named tool (cursor-extensions, windsurf-extensions)
--json	Output as JSON
--include-prerelease	Consider pre-release versions

Architecture

• marketplace-resolver.js — VS Code Marketplace API client
• cursor-extensions.js — Cursor extensions.json parser
• windsurf-extensions.js — Windsurf extensions.json parser
• update-extensions.js — CLI entry point
• Reuses existing registry.js, config-io.js, and reporter.js infrastructure

Test Coverage

152 tests across 12 test files, all passing.

Note

This is check-only — Cursor and Windsurf don't expose a CLI for extension installation. Updates must be applied manually through the editor's extension panel.