v0.3.0

[0.3.0] - 2026-06-28

• Commit Range: ➡️ c459581...c459581

✨ Features

• c459581 — ✨ [feat] Add Python strict development skill

✨ [feat] Adds python-strict-development with strict Ruff, mypy, Pyright, pytest, compileall, VS Code, and npm-script guidance based on the reference Python skill package.

📝 [docs] Adds skillcheck strict configuration references for skill creation and review workflows, including semantic graph-linting guidance for --semantic.

🧹 [chore] Registers the new skill in metadata sync so agents/openai.yaml and SVG assets are generated with the existing repository workflow.

[0.2.0] - 2026-06-27

• Commit Range: ➡️ c2193bc...a172d1d

✨ Features

• 02efe00 — ✨ [feat] Expand skill catalog and metadata sync

✨ [feat] Add Mermaid diagram, release publish loop, and Prettier plugin maintenance skills with generated OpenAI metadata and SVG assets.

🚜 [refactor] Rename the icon generator to sync-skill-metadata and make policy/dependencies metadata first-class for generated agents/openai.yaml files.

🎨 [style] Refresh generated skill icons with full titles, emoji badges, color updates, and explicit invocation policy for release, VSIcons, and workspace continuation.

🧪 [test] Verified with npm run release:verify before committing.

• c2193bc — ✨ [feat] Enhance local custom icon recommendation logic

• Update guidance for recommending local custom icons based on semantic matches

• Clarify conditions for using local icons when bundled options are unavailable

🛡️ Security

• a172d1d — 🔒️ [fix] Harden skill audit boundaries

🔒️ [fix] Treat CI logs and external VSIcons references as untrusted data, limiting them to diagnostics and verifiable facts instead of agent instructions.

🔧 [fix] Disable implicit invocation for ci-release-readiness in generated OpenAI metadata so log-reading workflows require explicit use.

🔨 [chore] Add an audit:skills CLI wrapper for checking every local skill against the skills.sh audit endpoint.

🧪 [test] Verify the release gate with npm run release:verify.

[0.1.2] - 2026-06-23

• Commit Range: ➡️ b3d3d90...9ecde09

✨ Features

• 9ecde09 — ✨ [feat] (github-actions-workflow-maintenance) Introduce GitHub Actions Workflow Maintenance skill

• 📝 Add SKILL.md documentation for creating, reviewing, and maintaining GitHub Actions workflows.

• 🧑‍💻 Create OpenAI agent configuration in openai.yaml for the new skill.

• 🎨 Add SVG icons for the skill in both small and large formats.

• 📝 Include a comprehensive review checklist in review-checklist.md for auditing GitHub Actions workflows.

• 🛠️ Update generate-skill-icons.mjs to include the new skill in the skill generation process.

• 🔧 Modify package.json to update remark-config-nick2bad4u dependency version.

• 11fb710 — ✨ [feat] Add VSIcons association recommender skill

Add a reusable skill for recommending copy-pasteable vscode-icons file and folder association snippets, including optional local custom icon handling.

Keep generated Codex metadata and SVG assets synchronized through the icon generator.

Validation: npm run release:verify; skillcheck skills/vsicons-association-recommender/SKILL.md

• feeb94c — ✨ [feat] Add agent skill and remark maintenance skills

Rename the agent instruction workflows to emphasize skill coverage and add a remark/remark-lint plugin maintenance workflow with generated Codex metadata and icons.

Validation: npm run release:verify; skillcheck skills/agent-skill-instruction-review/SKILL.md skills/agent-skill-instruction-creation/SKILL.md skills/remark-plugin-maintenance/SKILL.md

🛠️ Bug Fixes

• da9701c — 💚 [fix] Restore workflow lint formatting

🛡️ Security

• 3bb7a34 — 🔒 [fix] Pin reusable workflow callers

Pin all workflow-template reusable workflow references to an immutable commit SHA to satisfy Sonar githubactions:S7637 findings.

Validation: npm run release:verify

• b3d3d90 — 👷 [ci] Use shared workflow callers

👷 [ci] Switches the Dependabot auto-merge caller to workflow-templates@main and replaces local security and maintenance workflows with shared reusable callers.

⬆️ [build] Updates eslint-config-nick2bad4u to the published caller override version and records any peer dependency needed for the shared ESLint config to load.

[0.1.1] - 2026-06-19

• Commit Range: ➡️ 5fdf450...622d9c2

✨ Features

• d4212a5 — 🎨 [feat] Add skill icons and release notes

• 5fdf450 — ✨ [feat] Add consolidated Codex skills repo

🛡️ Security

• 622d9c2 — 🔒 [fix] Harden release workflow inputs

🔧 Build System

• f13cece — 📦 [build] Use typpi npm package scope

• c369ef6 — 🚀 [build] Prepare Codex skills package publishing

⭐ Contributors

Thanks to all the contributors for their hard work!

📜 License

This project license is here: Project License
This changelog was automatically generated with git-cliff.