v0.79.0

Changelog

Fixes

• 5a446ef fix(claude-code): allowed_tools does not mask unasked refusals (#676 review)
• a3999ec fix(claude-code): fail a node when Claude Code refuses unasked tool calls (#676)
• 47b34ac fix(examples): bring every subgraph to an A from dippin doctor
• 5488efb fix(make): run test-scripts through the hermetic Go harness (#675)
• 687e31f fix(make): test-scripts fails when no suite ran (#675 review)
• 06fd4d8 fix(security): drop git config pairs with credential keys; cap the count (#679 review)
• 82434e5 fix(security): keep URL sub-delims and git config pairs intact (#679 review)
• 0e66a9f fix(security): strip credential-bearing env values, not just names (#679)

Other

• 744a2aa Merge pull request #687 from 2389-research/fix/676-claude-permission-denials
• 37119d1 Merge pull request #688 from 2389-research/fix/675-test-scripts-hermetic
• 4910926 Merge pull request #689 from 2389-research/fix/subgraph-doctor-grades
• 04b9f31 Merge pull request #690 from 2389-research/fix/679-credential-values
• 3d58ced Merge pull request #692 from 2389-research/deps/dippin-v0.78.0
• bc3b79c Merge pull request #693 from 2389-research/release/v0.79.0
• 4c575cf Merge remote-tracking branch 'origin/main' into fix/679-credential-values
• cb24460 deps: bump dippin-lang v0.76.0 → v0.78.0 (#691)
• c701729 docs: cover v0.79.0 changes in README and the website
• 5ce7100 docs: qualify the #676 refusal note in ROADMAP.md (#693 review)
• d9058c0 docs: state when a Claude Code refusal fails the node (#693 review)
• ec4ff63 release: v0.79.0 — credential-value filter (#679), claude-code refusals (#676), dippin v0.78.0