Skip to content

v0.4.2

  • v0.4.2
  • 44e3b63

  • Verified

    This commit was created on GitHub.com and signed with GitHub’s verified signature.
    GPG key ID: B5690EEEBB952194
    Verified
    Learn about vigilant mode

  • Choose a tag to compare

    View all tags
v0.4.2: chore: release 0.4.2 (#195)
  • v0.4.2
  • 44e3b63

  • Choose a tag to compare

    View all tags

  • Verified

    This commit was created on GitHub.com and signed with GitHub’s verified signature.
    GPG key ID: B5690EEEBB952194
    Verified
    Learn about vigilant mode
@github-actions github-actions tagged this 23 Mar 22:52 
:robot: I have created a release *beep* *boop*
---


## [0.4.2](https://github.com/PackWeave/weave/compare/v0.4.1...v0.4.2)
(2026-03-23)


### Features

* **cli:** implement `weave auth` for registry authentication (#147)
([012e40c](https://github.com/PackWeave/weave/commit/012e40c))
* **cli:** implement `weave publish` for registry pack publishing (#146)
([58c744a](https://github.com/PackWeave/weave/commit/58c744a))
* **hooks:** additive per-event merge with ownership tracking (#145)
([38ea033](https://github.com/PackWeave/weave/commit/38ea033))
* **release:** add Release Please for automated changelog and release
PRs (#43) ([94ddfae](https://github.com/PackWeave/weave/commit/94ddfae))
* validate MCP server headers for plaintext secrets (#141)
([46646bf](https://github.com/PackWeave/weave/commit/46646bf))


### Bug Fixes

* decouple `core::use_profile` from `GitHubRegistry` (#144)
([936d749](https://github.com/PackWeave/weave/commit/936d749))
* include source indicator in `Store::list_cached()` return type (#134)
([671d581](https://github.com/PackWeave/weave/commit/671d581))
* normalize local paths before hashing in store cache key (#133)
([8ed2ced](https://github.com/PackWeave/weave/commit/8ed2ced))
* replace `anyhow::Error` with `WeaveError` in core orchestration (#143)
([12e8286](https://github.com/PackWeave/weave/commit/12e8286))
* replace `MockComposite` with real `CompositeRegistry` in tests (#142)
([12b85bf](https://github.com/PackWeave/weave/commit/12b85bf))
* move `.claude/worktrees/` under its own comment in `.gitignore` (#194)
([51c98bb](https://github.com/PackWeave/weave/commit/51c98bb))
* enforce squash-merge rule in AGENTS.md (#206)
([e4eb1e5](https://github.com/PackWeave/weave/commit/e4eb1e5))
* **security:** harden auth token handling — host allowlist, symlink
rejection, format validation
([b916f6c](https://github.com/PackWeave/weave/commit/b916f6c))
* **security:** harden header secret detection per review findings
([e6aa680](https://github.com/PackWeave/weave/commit/e6aa680))
* **security:** use unpredictable temp files for credential writes
(#203, #204)
([b916f6c](https://github.com/PackWeave/weave/commit/b916f6c))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Assets 2
Loading