chore(main): release stackone-agent-plugins 2.6.0

[github-actions]

🤖 I have created a release beep boop

2.6.0 (2026-05-15)

Features

• add stackone-defender skill (#7) (26b432e)
• defender: daemon-backed scanner, balanced multihead, FP-feedback loop (v2.4.1) (#16) (3c0bf33)
• ENG-12256: add unified connector building skill (#4) (6e46e20)
• ENG-70: enable SFE preprocessing to reduce Bash false positives (#15) (b65ca10)
• extend PostToolUse matcher to cover MCP tools (#11) (9511434)
• validate marketplace.json using claude plugin validate (0962f31)
• validate marketplace.json using Zod schema mirroring Claude Code (5903c38)

Bug Fixes

• extract tool_response.result for WebFetch/WebSearch (#10) (87f2327)
• replace invalid "." source with github object in marketplace.json (9123204)
• replace invalid source in marketplace.json (706fc53)
• self-install Defender deps and load from plugin root (#8) (553f68b)
• self-install deps from script location, remove SessionStart hook (#13) (31c6f5a)
• use claude plugin validate instead of custom Zod script (2361c23)

---

This PR was generated with Release Please. See documentation.

---

Summary by cubic

Release stackone-agent-plugins v2.6.0 with the new stackone-defender skill, improved tool-result scanning, and broader MCP coverage. All plugin manifests and marketplace metadata are updated to 2.6.0.

• New Features

  • Add stackone-defender with a daemon-backed scanner, balanced multihead, FP feedback loop, and SFE preprocessing to cut Bash false positives.
  • Extend PostToolUse matcher to cover MCP tools.
  • Add unified connector building skill.

• Bug Fixes

  • Correctly extract tool_response.result for WebFetch/WebSearch.
  • Fix invalid sources in marketplace.json and switch validation to claude plugin validate.
  • Improve Defender install robustness: self-install deps from script location, load from plugin root, remove SessionStart hook.

^{Written for commit c699a3a. Summary will update on new commits. Review in cubic}

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[cubic-dev-ai]

1 issue found across 11 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="CHANGELOG.md">

<violation number="1" location="CHANGELOG.md:3">
P2: The v2.6.0 changelog section repeats every entry already released in v2.4.0 and v2.5.0 (identical commit SHAs). A changelog should only list changes introduced in that specific version. Determine the actual v2.6.0 changes or deduplicate prior sections.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.
Re-trigger cubic}

[cubic-dev-ai]

P2: The v2.6.0 changelog section repeats every entry already released in v2.4.0 and v2.5.0 (identical commit SHAs). A changelog should only list changes introduced in that specific version. Determine the actual v2.6.0 changes or deduplicate prior sections.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At CHANGELOG.md, line 3:

<comment>The v2.6.0 changelog section repeats every entry already released in v2.4.0 and v2.5.0 (identical commit SHAs). A changelog should only list changes introduced in that specific version. Determine the actual v2.6.0 changes or deduplicate prior sections.</comment>

<file context>
@@ -1,5 +1,28 @@
 # Changelog
 
+## [2.6.0](https://github.com/StackOneHQ/agent-plugins/compare/stackone-agent-plugins-v2.5.0...stackone-agent-plugins-v2.6.0) (2026-05-15)
+
+
</file context>