chore: update version to 0.2.9 in package.json and package-lock.json

[X-iZhang]

What & why

Version bump for the 0.2.9 release: package.json and package-lock.json only (the same three-line shape as the previous bumps). No source changes.

0.2.9 contains #48 (approvals ask the backend's /api/policy first, so allow-listed commands no longer prompt), #49 (uuid 14 and react-syntax-highlighter 16 — npm audit --omit=dev reports 0) and #50 (tool calls that can no longer finish stop spinning). Same backend requirement as 0.2.2–0.2.8; the allow-list behaviour needs EvoScientist 0.3.1 or newer and older backends behave as in 0.2.8.

Manual testing

Must be tested against a real backend (EvoSci deploy, port 6174) — a green build is not enough.

• npm run lint && npm run format:check && npm run build all green (also typecheck; npm test: 481 passed under Node 20 and Node 25, run on main with feat(chat): ask the deployment's approval policy before prompting #48 + chore(deps): upgrade uuid to 14 and react-syntax-highlighter to 16 #49 + fix(chat): stop spinning on tool calls that can no longer finish #50 combined)
• Started the backend → configured the Deployment URL → chat works
• The feature(s) touched here were verified to work (Workspace / Skills / Memory / theme / chat …)
• Significant changes re-tested against the production build (npm run build && npm start; dev and standalone behave differently)

Test steps / screenshots

Nothing to exercise beyond the three merged PRs, each of which was tested against a live backend before merging. After the bump, npm run build produces dist/package.json at 0.2.9 and node bin/evoscientist-webui.mjs --version prints 0.2.9.

Checklist

• Self-tested, no obvious regressions
• Requested at least one teammate for peer review

---

Merging ≠ shipping: releases are handled solely by the maintainer (EvoScientist pulls the UI via @latest).

[coderabbitai]

Warning

Review limit reached

Next included review available in 51 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 27d6fee8-da86-4144-9668-2595af8166cb

📥 Commits

Reviewing files that changed from the base of the PR and between b31a550 and 78c728e.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (1)

• package.json

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}