v0.3.0

• Auto-merge for update PRs: the workflow from init merges update PRs when the
  largest change is within --automerge (default minor), after a separate read-only
  verify job runs your tests. Anything bigger is labelled needs-review. The gate
  fails closed: an unknown level or policy never merges.
• Minimum release age: --min-age <days> (config minReleaseAgeDays, MCP min_age_days)
  holds releases newer than N days. init defaults to 3.
• Lockfiles: the Action refreshes npm, pnpm, yarn, bun, uv, poetry, Cargo and Go
  lockfiles next to updated manifests, with install scripts disabled.
• Updates are classified as patch, minor or major. The Action outputs the largest as level.
• The generated workflow and the data feed both run once a day (feed at 05:17 UTC).
• Fixed the CodeQL findings: npm path escaping, markdown escaping, a regex ReDoS, and file races.

v0.2.0

• Coding companions: init detects Cursor, Windsurf, GitHub Copilot, Cline,
  Kilo Code, Roo Code, Continue, Junie, Kiro, Amazon Q, Zed, opencode, Aider,
  Gemini CLI, Codex and Claude Code. It writes each one's native rules file and,
  with --mcp, its MCP config (--for <ids|all|list>).
• Tracked tools: 29 total, adding Cursor, GitHub Copilot Chat, Kilo Code, Amp,
  Auggie, Factory Droid, Junie, CodeBuddy, Letta Code, Mistral Vibe, Grok CLI,
  Zed, gptme, SWE-agent and the Agent Client Protocol SDKs.
• Security: strict name and version validation, so manifests can't be
  injected into. Local MCP tools are confined to the project. The HTTP connector
  binds to localhost by default and has an origin allow-list, a rate limit and
  size caps. SHA-pinned actions and least-privilege workflows. Added SECURITY.md,
  CODEOWNERS and contributor docs.
• The Action generated by init is pinned to a release tag.