v6.1.4

6.1.4 (2026-08-23)

---

Schema: v6.1.4/agent-permissions.schema.json

v6.1.3

6.1.3 (2026-08-23)

---

Schema: v6.1.3/agent-permissions.schema.json

v6.1.2

6.1.2 (2026-08-23)

---

Schema: v6.1.2/agent-permissions.schema.json

v6.1.1

6.1.1 (2026-08-23)

Bug Fixes

• ci: capture gh pr checks and age-check exit codes without aborting under -e (9e7a443), closes #16

---

Schema: v6.1.1/agent-permissions.schema.json

v6.1.0

6.1.0 (2026-08-23)

Features

• ci: let Dependabot see the actions pinned inside the composite (f13e056)

---

Schema: v6.1.0/agent-permissions.schema.json

v6.0.4

6.0.4 (2026-08-23)

Tests

• add a harmless comment to the composite setup action (bcd4300)
• check out the repo before the probe attempts its merge (9ba3383)
• probe whether GITHUB_TOKEN can merge a PR touching only .github/actions (3808815)

Chores

• ci: remove the token-scope diagnostic workflow (08f4a1c)

---

Schema: v6.0.4/agent-permissions.schema.json

v6.0.3

6.0.3 (2026-08-23)

Bug Fixes

• ci: dispatch a release run after a GITHUB_TOKEN dependency-bump merge (c96f6de)

---

Schema: v6.0.3/agent-permissions.schema.json

v6.0.2

6.0.2 (2026-08-23)

Bug Fixes

• build: exempt the release-rewritten plugin manifest from format gating (f367144)
• ci: carry the npm registry through the shared setup action (21a7512)

---

Schema: v6.0.2/agent-permissions.schema.json

v6.0.1

6.0.1 (2026-08-23)

Bug Fixes

• ci: publish the MCP entry through agent-perms and authenticate the registry guard (a1d7c7c)

---

Schema: v6.0.1/agent-permissions.schema.json

v6.0.0

6.0.0 (2026-08-23)

⚠ BREAKING CHANGES

• engines.node is now >=24; consumers on Node 18-23 can
  no longer install this package.

Features

• build: complete the turbo graph and make pre-push the full gate (1257f1a)
• build: one eslint gate for every file type, plus knip and package checks (10182f0)
• build: prettier coverage for the YAML, JSON, and Markdown surface (1e9cdc6)
• build: raise lint to the full strictness set and eliminate every type assertion (cb42ad1)
• ci: prune inert security overrides instead of accumulating them (cc750c8)
• ci: rebuild the pipeline around a shared setup action and real gates (37b737b)
• dogfood the product with a committed .agents/permissions.json (d757900)
• require Node 24, the current LTS, as the baseline (2825ddc)

Bug Fixes

• build: cover plain-JS files, type to the runtime floor, and close the turbo cache gaps (e525c1a)
• ci: align action pins and repair output plumbing in the pipeline (7010001)
• ci: judge override inertness by the selector and roll back prunes honestly (c7ac3e9)
• ci: scope the turbo cache key per node version (ef40087)
• cli: treat an explicit --help as a successful invocation (ea0b3ec)
• pkg: point the MCP registry entry at the alias that exists (745bcb4)
• pkg: restore bare-package resolution with a root exports entry (3dea947)
• release: accept the pkg scope for package-manifest commits (f54eccd)
• release: drive commitlint and semantic-release from one commitTypes source (bd27df2)
• release: stamp server.json's version fields on every release (c20a625)

Documentation

• add a security policy, contributing guide, and LF normalisation (71aaf07)

Tests

• ci: unit-test the CI helper scripts' pure logic (91a66a0)
• cli: run every CLI invocation from a throwaway cwd (3453086)
• schema: hold the committed JSON schema against the schema source (ffc0cee)

---

Schema: v6.0.0/agent-permissions.schema.json