v1.35.0

What's Changed

• fix(skills): match keyword triggers on whole words only by @VascoSch92 in #4008
• fix(sdk): reconnect remote conversation websocket by @bozhnyukAlex in #3987
• ci(version-bump-prs): make PR-creation steps independent by @VascoSch92 in #4051
• Verify Claude Sonnet 5 model by @juanmichelini in #4041
• Verify GLM 5.2 model by @juanmichelini in #4040
• fix: isolate parallel example tests to remove infra flakiness by @VascoSch92 in #4050
• ci: add release security-scan by @smolpaws in #4042
• fix(security): add a secret-disclosure consent rule to the agent security policy by @warmjademe in #3823
• fix(sdk): keep legacy history on resume when the stored tail is a non-tree artifact by @VascoSch92 in #4068
• Verify GPT 5.6 model by @juanmichelini in #4055
• Add security scan to release PR labels by @enyst in #4069
• Push browser_use logging workaround cleanup deadline to v2.0.0 by @VascoSch92 in #4071
• feat(agent-server): expose repository metadata for workspace archives by @simonrosenberg in #3932
• test(agent-server): deflake conversation tree fork/navigate tests by @VascoSch92 in #4074
• fix: support GPT-5.6 across Codex authentication by @neubig in #4056
• fix: pick a display base ref that keeps committed work visible by @hieptl in #4065
• feat: commit-history API — list commits and per-commit diffs by @hieptl in #4075
• Release v1.35.0 by @all-hands-bot in #4070

New Contributors

• @warmjademe made their first contribution in #3823

Full Changelog: v1.34.0...v1.35.0