v1.5.0

1.5.0 (2026-07-07)

Features

• ci: add unsafe-shell-pattern scanner + wire into CI (M3 #154, #155) (#210) (f281707)
• integrations: relax usai-provider permissions for sandbox use (#201) (6cb6cde)
• integrations: vendor git-ssh-sign sbx mixin kit (#200) (b791e04)
• sbx-kits: usai kit merges into global opencode config (#216) (5de0f3b)
• schema: add name field + tighten skill schema (additionalProperties: false) (#202) (3f298d1)
• skills: add Security Skills Pack M2 — 7 security review/authoring skills (#205) (c736287)
• skills: Security Skills Pack M2 updates — secure-code-review + dependency-analysis (#206) (f5e6898)
• test: security-skill fixtures + runner assertions (M3 #156/#157/#158, #203) (#212) (ecde334)

Bug Fixes

• ci: suppress low adhoc-packages zizmor findings in frontend-skills-qa (#215) (259ea27)