Flowdular v0.6.5

Flowdular v0.6.5

Source commit: f25a805

Previous release: v0.6.4

Full comparison

Packages

Package	Version	Artifact
@flowdular/sdk	0.6.5	flowdular-sdk-0.6.5.tgz
flowdular	0.6.5	flowdular-0.6.5.tgz
create-flowdular	0.6.5	create-flowdular-0.6.5.tgz
@flowdular/sandbox	0.6.5	flowdular-sandbox-0.6.5.tgz

Changes

• fix(sandbox): keep the session agent selected while it is not offered (befd02dd)
• Merge pull request #153 from Flowdular/fix/sandbox-driver-select (2b2c6d98)
• fix(sandbox): route reviews after the handed-on specialist and back to their reviewer (1e35b70d)
• Merge pull request #154 from Flowdular/fix/sandbox-review-routing (ec15b722)
• fix(sandbox): fold a review report the gate cannot read (811eb8a1)
• Merge pull request #155 from Flowdular/fix/sandbox-unreadable-review-display (6a1d65ca)
• release: 0.6.5 (169bb4eb)
• Merge pull request #156 from Flowdular/release/0.6.5 (f25a8057)

All 8 commits, their complete messages and the file summary are included in the attached CHANGELOG.md.

Verify downloaded assets

Download all release assets into one directory. With Cosign installed, run:

cosign verify-blob SHA256SUMS --bundle SHA256SUMS.sigstore.json \
  --certificate-identity 'https://github.com/Flowdular/flowdular/.github/workflows/platform-release.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --certificate-github-workflow-sha 'f25a805735a888eb614b56e5dce3aea1126ac469'
sha256sum --check SHA256SUMS

Signatures cover the listed artifacts through SHA256SUMS. Git tags and GitHub-generated source downloads are not signed by this workflow; use the attached signed source archive. The release workflow publishes the verified npm packages in a later job for non-draft releases.