Release Notes

v3.1.3 — 2026-08-15

ops-merge no longer scans or merges repos the owner cannot push to. The registry lists every locally cloned project, including upstreams we only read, so the queue filled with unrelated contributors' PRs in repos we do not own. Push access is now checked fail-closed immediately before every create, merge and push, --repo is no longer exempt, the scanner accepts both --repo and a bare slug, and OPS_MERGE_INCLUDE_EXTERNAL takes a single slug instead of acting as a global bypass.

v3.1.2 — 2026-08-10

Runtime-first ops-speedup: CPU/RAM/GPU/PID/DNS/TCP health scoring, safer demotion defaults, and CI harness fixes.

v3.1.1 — 2026-08-03

• Update the Telegram server's transitive Hono dependency to 4.13.0, fixing GHSA-8j4g-w8fx-2239 (CORS middleware ReDoS).

v3.1.0 — 2026-08-03

• Added a portable CLIProxyAPI account provider with health, account inventory, and utilization support in ops-accounts.
• Standardized CLIProxyAPI discovery across CLIPROXYAPI_AUTH_DIR, CLIPROXYAPI_HOME, and XDG_CONFIG_HOME, with explicit environment configuration for optional proxy endpoints.
• Hardened release automation with required CI and CodeQL checks, bounded GitHub queries, stable-head verification, and exact-SHA squash merges without branch-protection bypass.
• Updated ip-address from 10.2.0 to 10.4.0 in the plugin and Telegram server dependency trees.
• Updated Telegram server fast-uri from 3.1.4 to 3.1.5, including the upstream security fix.
• Preserved existing release notes during first-time and interrupted GitHub wiki synchronization.
• Fixed gateway execution through symlinked or canonical paths and added a clear 503 response when the optional Grok endpoint is not configured.
• Removed ShellCheck warnings from the touched account and release commands.
• Removed deployment-specific browser login, CAPTCHA, reauthentication, and subscription automation from the public plugin.

v3.0.0 — 2026-08-03

Upgraded @hono/node-server to 2.0.12 for security and performance fixes, and aligned the Telegram server minimum runtime to Node.js 20+ (#771).