docs: ROADMAP Done table omits the #201 and #210 completions (PRs #207, #211) #212

Evidence

Verified on origin/main 4173d091de (current HEAD):

• git show origin/main:ROADMAP.md | grep -c "207" = 0, grep -c "211" = 0, grep -c "#201" = 0, grep -c "#210" = 0.
• The Done table's newest rows are #205 (2026-10-21, MCP SDK 2.3.0) and #198 (2026-10-20, Dependabot bun setup) — both recorded by PR docs: record the #196 and #199 completions in ROADMAP Done #209.
• Missing, gh-verified MERGED + CLOSED:
  • PR chore(ci): group @modelcontextprotocol/* Dependabot updates into one PR #207 MERGED 2026-10-21T01:14:40Z (de44000233), closes dependabot.yml needs a group for @modelcontextprotocol/* — future bumps will arrive split, but client/server/core must move as one #201 — dependabot.yml mcp-sdk group for @modelcontextprotocol/* version updates.
  • PR chore(ci): group MCP security updates into one Dependabot PR #211 MERGED 2026-10-21T02:50:55Z (4173d091de, current HEAD), closes dependabot: mcp-sdk group covers version updates only — a @modelcontextprotocol/* security update will still arrive split (PR #207) #210 — mcp-sdk-security group (security-updates) on the bun entry plus a security-only npm entry for /packages/core.

Dedup

Open-issue search for ROADMAP in this repo returns nothing. Closed #208 covered up to #196/#199 only (recorded by PR #209).

Why it matters

ROADMAP.md's Done table is this fork's completion ledger; the sweeps and creator lane rely on it to avoid re-triaging finished work. Two Dependabot-grouping completions from today are invisible there.

Acceptance criteria

• Done table gains one row per completion, in date order at the top (newest first, matching existing style):
  • dependabot: mcp-sdk group covers version updates only — a @modelcontextprotocol/* security update will still arrive split (PR #207) #210 / PR chore(ci): group MCP security updates into one Dependabot PR #211 — MCP security updates grouped into one Dependabot PR (2026-10-21)
  • dependabot.yml needs a group for @modelcontextprotocol/* — future bumps will arrive split, but client/server/core must move as one #201 / PR chore(ci): group @modelcontextprotocol/* Dependabot updates into one PR #207 — @modelcontextprotocol/* Dependabot updates grouped into one PR (2026-10-21)
• No other rows changed; existing rows byte-identical apart from table padding if needed.
• ROADMAP self-recording PRs (docs: record the #196 and #199 completions in ROADMAP Done #209 etc.) stay unrecorded, per the established pattern.

Single-repo: this fork's ROADMAP only (no ROADMAP Done table for these issues exists in code/openchamber/nix).