v2.2.2

Security maintenance release.

Security

• Resolved all 24 open Dependabot alerts (8 unique advisories, 21 high / 3 moderate) by bumping three transitive dependencies in the dlt-dbt-motherduck-project reference lockfile. Direct deps (dbt-duckdb, dlt, duckdb) unchanged. (#43)

Package	Before → After	Advisories
GitPython	3.1.46 → 3.1.50	GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, GHSA-7545-fcxq-7j24, GHSA-v87r-6q3f-2j67, GHSA-mv93-w799-cj2w
urllib3	2.6.3 → 2.7.0	GHSA-mf9v-mfxr-j63j, GHSA-qccp-gfcp-xxvc
idna	3.11 → 3.18	GHSA-65pc-fj4g-8rjx

Release engineering

• Version bumped to 2.2.2 across all manifests, INTEGRATION_VERSION, and agent-skills/<version> watermarks. (#44)

Full changelog: v2.2.1...v2.2.2

v2.2.1

This release adds first-class support for MotherDuck Flights plus documentation polish.

New skills

• motherduck-create-flight — create, schedule, run, and debug MotherDuck Flights (Python jobs that run on MotherDuck compute) for scheduled ingestion and transformation. Ships a condensed flights reference (anatomy, runtime limits, config vs secrets, scheduling, versioning, the full MCP tool surface, and troubleshooting) and three ready-to-deploy templates: dlt ingestion, Postgres mirror, and scheduled S3 partition refresh. (#41)

Docs

• README now leads with install, dedupes the catalog listing, and adds a release badge. (#40)

Release engineering

• Version bumped to 2.2.1 across all manifests, INTEGRATION_VERSION, and agent-skills/<version> watermarks. (#42)

Full changelog: v2.2.0...v2.2.1

v2.2.0

First tagged, multi-host release of MotherDuck Skills for AI Agents — the curated skill catalog packaged for Claude Code, Codex, Cursor, Copilot, and the Gemini CLI. This note backfills the arc from the initial repo through the introduction of tag-driven releases.

Skill catalog

• Full three-layer catalog (utility / workflow / use-case) covering connect, explore, query, DuckDB SQL, load-data, model-data, share-data, create-dive, ducklake, security-governance, pricing-roi, and the use-case skills (CFA app, dashboard, data pipeline, migration, self-serve analytics, partner delivery). (#1, #4)
• All skill names prefixed with motherduck- for namespace clarity. (#14)
• Added the REST API administration skill for service accounts, tokens, and Duckling config. (#15)
• motherduck-connect reworked with opinionated DuckDB runtime selection guidance. (#22)
• All 18 skills tuned for current frontier models — tighter routers, MotherDuck-specific behavior over general concepts. (#38)
• motherduck-model-data now emits a file-based project scaffold; motherduck-create-dive handles namespace conflicts. (#11, #9)

Packaging & distribution

• Gemini CLI extension support and hardened plugin packaging. (#2, #7)
• README split into human- and agent-facing docs, with Cursor and Copilot install paths. (#7, #19)

Release engineering

• Added the repo-wide version bump script and tag-driven release CI (workflow_dispatch opens a release PR; pushing vX.Y.Z publishes the GitHub release and attaches the Gemini archive). (#39)
• CI updated for Node 24. (#37)

Version surfaces aligned at 2.2.0 across all manifests, INTEGRATION_VERSION, and agent-skills/<version> watermarks. (#20)