v0.4.0

[0.4.0] - 2026-06-17

Bug Fixes

• (PI-183) Upload only build artifacts; harden the pypi environment (#185)
• (PI-204) Install_hooks replaces a symlinked hook, not its referent (#223)
• (PI-206) Give start_issue a fallback slug for non-alphanumeric titles (#224)
• (PI-187) Parse multi-line YAML safety.allow lists, not just inline JSON (#233)
• (PI-197) Reject wrong-typed record fields with a clean UpgradeError (#217)
• (PI-196) Key first-scaffold on the record marker, not config existence (#218)
• (PI-188) Reject path traversal in load_preset (#225)
• (PI-205) Require matching {{/if name}} in the render engine (#226)
• (PI-199) Gather interactive input before creating the target dir (#227)
• (PI-201) Write planning metadata into the issue body (issue lifecycle) (#219)
• (PI-198) Block gh-api merges regardless of flag position (#220)
• (PI-202) Push wrapper refuses main/master for any push, not just force (#221)
• (PI-203) Resync root monitor_pr.sh — stop reporting false merge success (#222)
• (PI-207) Repair board automation on user-owned repos (resolver + repo pin) (#211)
• (PI-210) Set GH_REPO so validate-pr can resolve the repo for gh (#212)
• (PI-208) Stop pinning CI to Python 3.12; let uv resolve the version (#213)
• (PI-186) Bound the monitor_pr CI-wait loop so it can't hang forever (#216)
• (PI-209) Install CI dev deps via uv sync --group dev (PEP 735) (#215)

Documentation

• (PI-192) Add ADRs 005-012 and the usage guide to the docs nav (#228)
• (PI-193) Note ADR-006 supersession in ADR-003 and ADR-005 (#229)
• (PI-194) Fix README phantom examples/ and justfile test-cov comment (#230)

Features

• (PI-214) Derive scaffolded CI Python matrix from requires-python (#238)

Miscellaneous Tasks

• (PI-200) Validate-pr verifies title key matches the Closes number (#232)
• (PI-189) Share overlay_layers + _new_sibling across scaffold/upgrade (#235)
• (PI-190) ScaffoldInputs dataclass + one source for variable defaults (#237)
• Bump version to 0.4.0 (#239)

Testing

• (PI-195) Cover the interactive wizard leaf parsers and install.sh (#231)