[kixelated]

Problem

Backports #6961 (@moq/flate), #6959 and #6967 (@moq/net) merged into release without a version bump, so Release JS (https://github.com/moq-dev/moq/actions/runs/40629824640) skipped publishing: 0.1.3 and 0.4.6 were already on npm.

Approach

Patch bump so Release JS publishes them, mirroring #6568.

Package	Version	Change that needs it
@moq/flate	0.1.3 -> 0.1.4	Bound inflation and own decoded frames (#6961)
@moq/net	0.4.6 -> 0.4.7	Close IETF peer violations with their error code (#6959); refuse partial lite groups (#6967)

bun.lock carries the matching workspace versions; bun install --frozen-lockfile passes. Neither package keeps a CHANGELOG.

Impact

• No public API change. Wire behavior is the backported fixes only.

Alternatives

None; publishing requires a new version.

Follow-ups

• Dependents (@moq/json, @moq/hang, @moq/watch, ...) use workspace:^, so they accept the new versions without a bump.
• @moq/publish 0.5.3 on release also carries an unpublished backport (Opus DTX off by default for voice, c2182a5); left for the maintainer, not bumped here.
• @moq/hang changed only a comment since its last publish; no bump needed.

(Written by Claude Opus 5.5)

🤖 Generated with Claude Code

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-28T05:27:03.199601Z	6356a4e	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[kixelated]

Automated review by review (OpenAI)

Reviewed commit: 6356a4e

No actionable bugs found in this version-only change. The @moq/flate 0.1.4 and @moq/net 0.4.7 manifests match bun.lock. Patch bumps are the minimal appropriate direction for publishing the already-backported fixes; the existing release workflow watches js/** and packaging derives npm/JSR versions from these manifests. No added implementation complexity or API changes in this diff.

Verification limits: static review of the complete diff, manifests, release workflow, and packaging/release scripts only. I did not run install/build/tests or verify registry publication; this is not a test-pass or publication confirmation.

[kixelated]

Summary: patch bumps @moq/flate 0.1.3 -> 0.1.4 and @moq/net 0.4.6 -> 0.4.7 (with bun.lock) so Release JS publishes the backports from #6961, #6959, and #6967. Codex and the automated review found nothing; all 19 checks pass. Merge approved by the maintainer. @moq/publish also carries an unpublished backport (Opus DTX, c2182a5) and is left for the maintainer.

(Written by Claude Opus 5.5)