v0.13.1

What's Changed

• fix: auto-scaffold Fact Checker agent during init and cast (#1222) by @tamirdresher in #1223
• fix(permissions): use 'approve-once' for Copilot CLI v1.0.54+ contract by @bradygaster in #1192
• feat: Squad.Agents.AI - Microsoft Agent Framework adapter for the Squad CLI by @tamirdresher in #1207
• ci(Squad.Agents.AI): switch NuGet publish to Trusted Publishing (OIDC) by @tamirdresher in #1240
• fix(Squad.Agents.AI): expose SessionConfig + default OnPermissionRequest by @tamirdresher in #1252
• Squad.Agents.AI 0.2.0: bump to MAF 1.10.0-rc1 / SDK 1.0.0 GA — file-IO works by @tamirdresher in #1259
• fix: address pre-existing Copilot review comments from PR #1212 by @bradygaster in #1258
• fix: expose memory tools via MCP + route writes through governed pipeline (#1244, #1247, #1246) by @bradygaster in #1251
• docs(skills): update path from .squad/skills/ to .copilot/skills/ by @bradygaster in #1260
• feat(init): prompt to add @copilot as a team member during squad init by @bradygaster in #1262
• docs: align skills path + state-backend upgrade flow (#1241, #1226) by @bradygaster in #1249
• Squad.Agents.AI 0.3.0: first-class subagent observability (OnSubagentTrace + OTel ActivitySource) by @tamirdresher in #1265
• chore(lockfile): sync package-lock with package.json after v0.10.0 bump by @tamirdresher in #1266
• fix(bump-build): also update package-lock workspace entries (root cause of #1266) by @tamirdresher in #1267
• fix: release pipeline version pinning (#1203, #1204) by @bradygaster in #1250
• chore: include CHANGELOG.md in published npm tarball by @bradygaster in #1257
• Squad.Agents.AI 0.4.0: default-on subagent observability + Aspire-style connection-string lookup by @tamirdresher in #1271
• Squad.Agents.AI 0.5.0: auto-inject --agent squad (CLI parity by default) by @tamirdresher in #1275
• Squad.Agents.AI 0.5.1: fix 0.5.0 regression — use --agent CLI flag (not SessionConfig.Agent) by @tamirdresher in #1277
• feat(cli): add squad registry add/list/remove for discovery-only peer squads (#1290) by @tamirdresher in #1291
• fix(cli): stop writing squad_state to ~/.copilot/mcp-config.json on every init/upgrade (#1296) by @tamirdresher in #1298
• fix(sdk): wire team.md/routing.md/casting state on \squad preset apply\ (#1288) by @tamirdresher in #1293
• fix(docs): tell coordinator to roster Fact Checker on first-time cast (#1299) by @tamirdresher in #1300
• fix(sdk): plumb Fact Checker like Rai — rich charter at init + .squad/fact-checker/ state dir (#1299 deep) by @tamirdresher in #1301
• fix(skills): rename squad disambiguation skill to squad-help (supersedes #1297) by @tamirdresher in #1302
• fix(prompt): coordinator must probe for squad_state/memory tools before mutating state (closes #1305) by @tamirdresher in #1306
• feat(skills): make /squad a real slash command (user-invocable: true + rename squad-commands → squad) by @tamirdresher in #1303
• fix(skills): install bundled skills to .github/skills/ (closes #1126) by @tamirdresher in #1304
• feat(sdk): bundle cross-squad-communication skill (#5 cross-squad protocols) by @tamirdresher in #1295
• fix(coordinator): route "spawn a squad" / "another squad" prompts through the cross-squad skill by @tamirdresher in #1307
• fix(sdk,cli): bundle missing skills on init + strip fabricated tiered-memory provenance (#1289, #1264) by @tamirdresher in #1292
• docs: add feature pages for preset, cross-squad discover/delegate, and coordinator-as-agent export by @tamirdresher in #1274
• docs: add feature pages for remaining 8 v0.10 features (tiered-memory, reflect, error-recovery, teams-comms, fleet-dispatch, mcp-frontmatter, dual-mode, skill-security-scanner) + export-import --repo/--branch by @tamirdresher in #1276
• docs(state-backends): document pre-commit hook, post-upgrade flow, and recovery by @tamirdresher in #1227
• docs: clarify that .squad/casting/* files are identity, not two-layer state by @tamirdresher in #1230
• fix(state-backend): conditional .gitignore for two-layer/orphan state files by @tamirdresher in #1229
• feat(sdk): thread reasoningEffort through agent spawning pipeline by @ahhlun in #1148
• deps: Bump xunit from 2.9.2 to 2.9.3 by @dependabot[bot] in #1237
• fix(test): anchor docs fence-parity regex to line start by @tamirdresher in #1319
• deps: Bump Microsoft.Extensions.Configuration and 8 others by @dependabot[bot] in #1317
• ci(dependabot): add npm ecosystem coverage for JS workspaces by @tamirdresher in #1320
• deps: Bump GitHub.Copilot.SDK from 1.0.0 to 1.0.1 by @dependabot[bot] in #1316
• ci: bump the github-actions group across 1 directory with 8 updates by @dependabot[bot] in #1234
• deps: Bump xunit.runner.visualstudio from 2.8.2 to 3.1.5 by @dependabot[bot] in #1238
• deps: bump the minor-patch group in /docs with 7 updates by @dependabot[bot] in #1330
• deps: Bump Microsoft.Extensions.AI from 10.6.0 to 10.7.0 by @dependabot[bot] in #1331
• deps: bump eslint-plugin-n from 17.24.0 to 18.1.0 by @dependabot[bot] in #1336
• deps: bump astro from 5.18.0 to 6.4.7 in /docs by @dependabot[bot] in #1332
• chore(deps): bump flask from 2.3.0 to 3.1.3 in /test-fixtures/dogfood/python-flask by @dependabot[bot] in #1341
• chore(deps): bump black from 23.3.0 to 26.3.1 in /test-fixtures/dogfood/python-flask by @dependabot[bot] in #1340
• chore(deps): bump pytest from 7.3.0 to 9.0.3 in /test-fixtures/dogfood/mixed-lang/backend by @dependabot[bot] in #1339
• fix(docs): migrate to astro 6 content collection config by @tamirdresher in #1345
• chore(deps-dev): bump vite from 7.3.1 to 7.3.5 in /samples/streaming-chat by @dependabot[bot] in #1344
• chore(deps): bump esbuild, tsx and vitest in /samples/streaming-chat by @dependabot[bot] in #1343
• deps: bump typedoc-plugin-markdown from 4.11.0 to 4.12.0 in /packages/squad-sdk by @dependabot[bot] in #1329
• deps: bump markdown-it from 14.1.1 to 14.2.0 by @dependabot[bot] in #1346
• deps: bump the minor-patch group across 1 directory with 13 updates by @dependabot[bot] in #1348
• chore: bump @types/node to 25.9.3 (cli + sdk) by @tamirdresher in #1349
• chore: adapt CLI to ink 7 by @tamirdresher in #1350
• deps: bump vscode-jsonrpc from 8.2.1 to 9.0.0 in /packages/squad-cli by @dependabot[bot] in #1327
• chore: upgrade to TypeScript 6 (cli + sdk + root) and align @typescript-eslint by @tamirdresher in #1351
• chore: upgrade vitest to v4 (coordinated with @vitest/coverage-v8 v4) by @tamirdresher in #1352
• deps: bump vscode-jsonrpc from 8.2.1 to 9.0.0 in /packages/squad-sdk by @dependabot[bot] in #1324
• deps: bump sharp from 0.35.1 to 0.35.2 in /docs in the minor-patch group by @dependabot[bot] in #1367
• deps: bump the minor-patch group with 2 updates by @dependabot[bot] in #1360
• deps: Bump GitHub.Copilot.SDK from 1.0.1 to 1.0.3 by @dependabot[bot] in #1359
• deps: bump hono from 4.12.22 to 4.12.26 by @dependabot[bot] in #1355
• fix(coordinator): restore always-on inline-dispatch gate by @tamirdresher in #1378
• chore(deps): bump flask from 2.3.0 to 3.1.3 in /test-fixtures/dogfood/mixed-lang/backend by @dependabot[bot] in #1375
• chore(deps): bump pytest from 7.3.0 to 9.0.3 in /test-fixtures/dogfood/python-flask by @dependabot[bot] in #1376
• fix(docs): rephrase backtick-in-table cell that breaks docs-build CI on dev by @tamirdresher in #1312
• docs(Squad.Agents.AI): update README header to 0.5.1 and multi-target net8/9/10 by @tamirdresher in #1354
• ci(release): stop publishing on test-only dep bumps by @bradygaster in #1342
• ci: bump actions/checkout from 6 to 7 in the github-actions group by @dependabot[bot] in #1358
• fix: respect SQUAD_HOME env var, implement SQUAD_PERSONAL_DIR, fix Windows loop preflight by @bradygaster in #1382
• docs: fix platform paths and explain global squad.agent.md by @bradygaster in #1381
• fix: CLI and upgrade bug fixes (#1050, #1048, #1047, #1052, #1029, #1353) by @bradygaster in #1383
• fix(sdk): export gitignore-state helpers to unblock release (refs #1386) by @bradygaster in #1387
• feat(tracing): capture task-tool dispatch + tool requests for subagent OTel by @tamirdresher in #1384
• fix: escape args for cmd.exe shell on Windows (DEP0190) by @tamirdresher in #1388
• feat(coordinator): spawn cast members as sub-sessions in Copilot App by @bradygaster in #1385
• fix(coordinator): address #1385 review follow-ups (fallback, slot-leak, timeouts, sanitization) by @bradygaster in #1390
• Rename .NET Aspire references to Aspire by @Meir017 in #1239
• chore: simplify workflow files by removing .ai-team fallback logic by @bradygaster in #1263
• fix(routing): strip surrounding quotes from routing.md examples by @duongau in #1357
• fix(cli): add externalize/internalize to top-level squad --help (#1050) by @primetimetank21 in #1232
• deps: bump @types/node from 25.9.4 to 26.0.0 in /packages/squad-cli by @dependabot[bot] in #1365
• deps: bump @types/node from 25.9.4 to 26.0.0 in /packages/squad-sdk by @dependabot[bot] in #1366
• ci: bump esbuild and tsx in /samples/storage-provider-sqlite by @dependabot[bot] in #1380
• deps: bump @opentelemetry/sdk-trace-base from 1.30.1 to 2.8.0 in /packages/squad-sdk by @dependabot[bot] in #1368
• deps: bump @opentelemetry/resources from 1.30.1 to 2.8.0 in /packages/squad-sdk by @dependabot[bot] in #1369
• deps: bump @github/copilot-sdk from 0.3.0 to 1.0.4 by @dependabot[bot] in #1361
• deps: bump @github/copilot-sdk from 0.3.0 to 1.0.4 in /packages/squad-sdk by @dependabot[bot] in #1371
• deps: bump cspell from 9.7.0 to 10.0.1 by @dependabot[bot] in #1362
• Add spoiler-awareness to casting/naming rules by @obit91 in #1196
• feat(prompt): slim squad.agent.md by extracting 3 sections to satellite skills (#1308 phase 1) by @tamirdresher in #1311
• feat(cli): rename hire to cast in CLI help and documentation by @bradygaster in #1394
• Add OSS release checklist files by @bradygaster in #1217
• feat: add 'squad preset install ' for sharing presets via repo URL (#1224) by @tamirdresher in #1225
• fix: update adapter/client.ts for @github/copilot-sdk 1.0.4 API changes by @bradygaster in #1403
• deps: bump @opentelemetry/sdk-metrics and sdk-trace-node to 2.8.0 by @bradygaster in #1404
• fix(cli): pin squad-sdk to workspace:* (fixes prerelease build crash) by @bradygaster in #1406
• Fix green test suite by @bradygaster in #1416
• Stage 0.11.0 release: CHANGELOG + version bump by @bradygaster in #1420
• Guard symlink test for Windows/restricted environments by @bradygaster in #1418
• Add tools: ["*"] to Squad coordinator agent template (fixes empty toolset on Copilot CLI 1.0.66+) by @lygav in #1424
• fix(sdk): allow identity/* state writes and widen squad_decide author validation by @primetimetank21 in #1419
• fix: remove duplicate cast entry in squad -h output by @bradygaster in #1428
• fix(presets): round-trip routing.md in preset save/apply by @bradygaster in #1429
• fix(cli): pin squad-sdk dependency by @serbrech in #1431
• deps: bump astro from 6.4.7 to 7.0.3 in /docs by @dependabot[bot] in #1409
• feat(sdk,cli): thread contextTier through agent spawning pipeline by @tamirdresher in #1448
• Fix doctor decisions check for two-layer state by @serbrech in #1434
• chore: auto-promote dev version after release (#1455) by @tamirdresher in #1457
• fix(templates): resolve GitHub API host from env in ralph-triage.js by @omercangumus in #1438
• fix(cli): resolve externalized state in squad export by @omercangumus in #1443
• fix(init): include proposed roster in confirmation prompt by @kartikkabadi in #1460
• Refresh model catalog to CLI-reachable IDs and prune dead fallback chains by @primetimetank21 in #1444
• feat(platform): add setAssignee() to PlatformAdapter (GitHub + ADO) by @babonet in #1413
• refactor(cli): consolidate duplicated agent-spawn logic across watch capabilities by @omercangumus in #1437
• ci: pin GitHub Actions references to full-length commit SHAs by @omercangumus in #1442
• fix(cli): upgrade patches repo-local node_modules; doctor verifies two-layer commit hooks by @omercangumus in #1463
• fix(cli,sdk): follow externalized state in squad cast agent discovery by @omercangumus in #1465
• docs: align external-state page with actual externalize/internalize behavior by @omercangumus in #1466
• docs/models: prefer newest per series (Opus 4.8), add GPT-5.6 IDs, fix Ralph free-model wording by @primetimetank21 in #1469
• deps: bump the minor-patch group across 1 directory with 22 updates by @dependabot[bot] in #1451
• ci: refresh GitHub Actions with immutable pins by @tamirdresher in #1475
• fix(release): correct package name in rename-hire-to-cast changeset by @yeshurin in #1468
• feat(cli): add squad update-check --json for tooling/CI by @omercangumus in #1440
• fix(cli): follow externalized state in squad copilot and squad rc by @omercangumus in #1464
• fix(cli): externalize/internalize corrupt binary files under .squad/ by @Sanjays2402 in #1492
• fix(sdk): recursive deleteDir + rename 'external' stub to 'external-stub' by @omercangumus in #1487
• docs: add PATH fix instructions to installation troubleshooting by @johnazariah in #1459
• fix(release): promote insider dist-tag when latest is newer by @tamirdresher in #1495
• test(memory): characterization baselines for #1309 (research, not closing) by @tamirdresher in #1499
• docs(templates): warn before parallel background spawns in a shared worktree by @omercangumus in #1484
• ci: fail when unreleased changesets accumulate by @omercangumus in #1481
• docs: Add Squad overview and comprehensive installation guide by @ElazarK in #1453
• deps: upgrade Microsoft.Agents.AI.GitHub.Copilot to 1.14.0-rc1 + GitHub.Copilot.SDK to 1.0.7 by @tamirdresher in #1519
• deps: bump fast-uri from 3.1.2 to 3.1.4 by @dependabot[bot] in #1524
• deps: bump hono from 4.12.26 to 4.12.31 by @dependabot[bot] in #1521
• deps: bump brace-expansion from 5.0.5 to 5.0.7 by @dependabot[bot] in #1513
• deps: bump the minor-patch group across 1 directory with 7 updates by @dependabot[bot] in #1456
• deps: bump body-parser from 2.2.2 to 2.3.0 by @dependabot[bot] in #1512
• deps: bump svgo from 4.0.1 to 4.0.2 in /docs by @dependabot[bot] in #1520
• deps: Bump Microsoft.Extensions.Configuration and 7 others by @dependabot[bot] in #1509
• chore(deps): bump esbuild and tsx in /samples/storage-provider-azure by @dependabot[bot] in #1474
• deps: Bump Microsoft.NET.Test.Sdk from 17.14.1 to 18.8.1 by @dependabot[bot] in #1510
• chore(deps): bump protobufjs from 7.5.4 to 7.6.5 in /samples/cost-aware-router by @dependabot[bot] in #1516
• deps: bump js-yaml and markdownlint-cli2 by @dependabot[bot] in #1539
• fix: three-state coordinator canary + HEAD canary (Closes #1461) by @bradygaster in #1517
• feat(models): category-based cost policy + live catalog/pricing refresh (#1080/#1183) by @primetimetank21 in #1445
• chore(deps-dev): bump picomatch from 4.0.3 to 4.0.5 in /samples/autonomous-pipeline by @dependabot[bot] in #1553
• deps: bump @grpc/grpc-js from 1.14.3 to 1.14.4 by @dependabot[bot] in #1552
• deps: bump @protobufjs/utf8 from 1.1.0 to 1.1.2 by @dependabot[bot] in #1551
• chore(deps): bump @grpc/grpc-js from 1.14.3 to 1.14.4 in /samples/cost-aware-router by @dependabot[bot] in #1549
• chore(deps): bump @github/copilot and @github/copilot-sdk in /samples/cost-aware-router by @dependabot[bot] in #1548
• chore(deps-dev): bump picomatch from 4.0.3 to 4.0.5 in /samples/hook-governance by @dependabot[bot] in #1546
• chore(deps): bump ws from 8.19.0 to 8.21.1 in /samples/cost-aware-router by @dependabot[bot] in #1545
• chore(deps): bump fast-xml-parser from 5.5.9 to 5.10.1 in /samples/storage-provider-azure by @dependabot[bot] in #1544
• chore(deps): bump fast-xml-builder from 1.1.4 to 1.3.0 in /samples/storage-provider-azure by @dependabot[bot] in #1542
• chore(deps): bump uuid and @azure/msal-node in /samples/storage-provider-azure by @dependabot[bot] in #1541
• deps: bump postcss from 8.5.16 to 8.5.23 in /docs by @dependabot[bot] in #1538
• ci: bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in #1536
• deps: Bump GitHub.Copilot.SDK from 1.0.7 to 1.0.8 by @dependabot[bot] in #1534
• deps: Bump the microsoft-packages group with 1 update by @dependabot[bot] in #1533
• deps: bump @playwright/test from 1.61.1 to 1.62.0 in /docs in the minor-patch group by @dependabot[bot] in #1532
• deps: bump astro from 7.1.1 to 7.1.3 in /docs in the astro-minor-patch group by @dependabot[bot] in #1531
• feat(platform): hydrate WorkItem.body; route two-pass scan through adapter by @babonet in #1414
• chore(deps-dev): bump postcss from 8.5.6 to 8.5.23 in /samples/hello-squad by @dependabot[bot] in #1540
• deps: bump the minor-patch group across 1 directory with 18 updates by @dependabot[bot] in #1554
• fix(ci): quote GITHUB_OUTPUT/STEP_SUMMARY redirects (SC2086) + add actionlint/shellcheck gate for workflow templates by @serbrech in #1557
• fix(security): stop unsafe-git scanner flagging prose in append-only squad logs by @serbrech in #1559
• chore(squad): merge decision inbox and summarize oversized agent histories by @serbrech in #1558
• fix(sdk): normalize dotted ToolRegistry names at Copilot external-tool boundary by @jagilber in #1563
• feat(init): default VS Code chat sessions to Squad by @tamirdresher in #1485
• Add dispatch enforcement (Layer A + B + C) to prevent coordinator from doing domain work inline by @tamirdresher in #1537
• docs: blog voice pass — banner removal, hire→cast, autonomous→background (WS-A) by @bradygaster in #1570
• docs: concepts banner removal, nav restructure, build test sync (WS-B) by @bradygaster in #1571
• docs: issue truth fixes — PRD mode ingestion, state storage, ralph escape hatch (WS-C) by @bradygaster in #1572
• docs: get-started cleanup — installation fix, squad init, interface canonical (WS-D) by @bradygaster in #1573
• feat: ship ralph-instructions.md template and install pipeline (#1314) by @bradygaster in #1576
• docs: Squad.Agents.AI + Microsoft Agent Framework integration guide by @bradygaster in #1574
• docs: Azure hosting guides — Dockerfile contract, ACA, and AKS runbook by @bradygaster in #1575
• docs: production security hardening — threat model, prompt injection defense, and credential hygiene by @bradygaster in #1578
• docs: production operations — observability, state backend selection, troubleshooting runbook by @bradygaster in #1579
• docs: wire nav-wave-1564 pages into navigation by @bradygaster in #1580
• deps: bump hono from 4.12.31 to 4.13.0 by @dependabot[bot] in #1594
• deps: bump ip-address from 10.2.0 to 10.4.0 by @dependabot[bot] in #1590
• deps: bump the minor-patch group with 2 updates by @dependabot[bot] in #1583
• ci: bump the github-actions group with 2 updates by @dependabot[bot] in #1586
• deps: Bump the microsoft-packages group with 2 updates by @dependabot[bot] in #1585
• deps: bump astro from 7.1.3 to 7.1.6 in /docs in the astro-minor-patch group by @dependabot[bot] in #1581
• deps: bump the minor-patch group in /docs with 2 updates by @dependabot[bot] in #1582
• deps: bump markdown-it from 14.3.0 to 15.0.0 by @dependabot[bot] in #1584
• deps: bump fast-uri from 3.1.4 to 3.1.5 by @dependabot[bot] in #1599
• deps: bump postcss from 8.5.18 to 8.5.25 by @dependabot[bot] in #1601
• chore(deps-dev): bump postcss from 8.5.15 to 8.5.25 in /samples/streaming-chat by @dependabot[bot] in #1600
• feat(dist): standalone npm-free bundles for squad-cli (#1593) by @tamirdresher in #1595
• Upgrade Squad.Agents.AI Copilot SDK (rebased from #1560) by @bradygaster in #1602
• fix(ci): unblock gh-aw generated workflows in lint + agents guard by @bradygaster in #1596
• feat(dist): npm-free MCP spec, squad-init action, and container image (#1593) by @tamirdresher in #1610
• feat(dist): Homebrew and winget packaging, plus a real squad.exe (#1593) by @tamirdresher in #1611
• chore(gh-aw): Create workflows/ directory structure (#1620) by @bradygaster in #1621
• feat(gh-aw): ship Squad modes with verified consumer bootstrap (#1613-#1618) by @bradygaster in #1622
• feat(gh-aw): use parent issue as casting brief for /squad cast by @bradygaster in #1635
• docs: add gh-aw slash commands and setup guide by @bradygaster in #1636
• docs: fix broken gh-aw guide link in README by @bradygaster in #1642
• feat(casting): support custom universes and descriptive default naming by @bradygaster in #1643
• feat(workflows): add /squad research and /squad plan modes by @bradygaster in #1644
• fix(workflows): revert issues permission to read by @bradygaster in #1645
• feat(workflows): descriptive run names for Squad actions by @bradygaster in #1646
• docs: add research/plan commands and naming modes to gh-aw guide by @bradygaster in #1647
• fix(cli): watch's self-pull no longer abandons stashed local changes on pull failure by @omercangumus in #1640
• fix(release): pin squad-sdk to the exact published version in publish-cli by @omercangumus in #1638
• feat: Evolve Squad planning into executable SDLC lifecycle (#1648) by @bradygaster in #1658
• chore(gh-aw): add gh aw init tooling (skills, MCP, setup + maintenance workflows) by @bradygaster in #1592
• fix: assign unique colors to squad member labels from a curated palette by @bradygaster in #1663
• fix(workflow): add triage breadcrumb and next-action to lifecycle state by @bradygaster in #1669
• docs: clarify gh-aw files to commit by @tamirdresher in #1675
• fix(workflows): restore planning imports, remove fragile runtime cat instructions by @bradygaster in #1685
• fix(workflow): forward-port safe-output reliability hardening from #1683 by @bradygaster in #1686
• fix(workflow): atomic task-call contract in Plan Activate Step 2c (#1678) by @bradygaster in #1687
• feat(gh-aw): auto-cast and guide resumable work from one issue by @bradygaster in #1690
• feat(sdk): add "max" to SquadReasoningEffort — unblocks Dependabot PR #1671 by @bradygaster in #1693
• deps: bump the minor-patch group across 1 directory with 7 updates by @dependabot[bot] in #1694
• feat(workflows): add Squad implementation mode by @tamirdresher in #1682
• deps: bump @hono/node-server from 1.19.14 to 2.1.0 by @dependabot[bot] in #1692
• chore: ignore gh-aw run artifacts and local MCP config by @bradygaster in #1688
• chore(release): prepare v0.12.0 by @tamirdresher in #1691
• fix(test): correct gh-aw compile test workspace layout for dispatch-workflow validation by @tamirdresher in #1697
• docs(changelog): reconcile 0.12.0 entry with final dev contents by @tamirdresher in #1696
• chore: restore shared ancestry between dev and main by @tamirdresher in #1699
• docs(gh-aw): clarify Auto-Cast first-run UX, add canonical fallback, Cast PR return guidance (#1700) by @bradygaster in #1702
• chore: bump dev to 0.13.0 for next cycle by @tamirdresher in #1705
• fix(labels): add agentic-detection-failed to Squad label taxonomy (#1701) by @bradygaster in #1706
• docs(gh-aw): comprehensive guide update — slash commands, fast-path risks, implement vs @copilot, review gap by @bradygaster in #1722
• docs: fix unrendered ::: asides across docs and blog by @bradygaster in #1737
• perf(workflows): load shipped mode playbooks as inline skills by @bradygaster in #1739
• fix(workflows): quote squad-cast skill description so its frontmatter parses by @bradygaster in #1742
• fix(workflows): interpolate dispatch inputs so merge continuation resolves the epic by @bradygaster in #1741
• fix(workflows): allow nested source files and package-registry egress by @bradygaster in #1744
• fix(worker): use fallback-to-issue for protected files by @bradygaster in #1747
• Fix Squad continuation dispatch inputs by @bradygaster in #1752
• Prevent dispatch_workflow schema probes by @bradygaster in #1766
• Fix security review archive exclusions by @bradygaster in #1771
• docs(gh-aw): consolidate slash command reference into a single table by @bradygaster in #1755
• chore(squad): merge decision inbox and summarize agent histories by @bradygaster in #1754
• docs(decisions): rescue two orphaned decision records and drain the inbox by @bradygaster in #1773
• docs: fix gh-aw guide — correct git add paths, demote compile step, add restricted-secrets callout by @bradygaster in #1776
• fix(ci): wire gh aw compile as a real CI gate (#1732) by @bradygaster in #1775
• fix(dispatch): raise max to 2 and add schema static gate (#1772) by @bradygaster in #1777
• Fix long-path planning lifecycle defects + guard empty dispatch probe (squad.md) by @bradygaster in #1778
• fix(ci): force LF on *.mjs so shebanged scripts stay loadable by vitest by @bradygaster in #1790
• chore(squad): repair archival data loss and record gh-aw triage session state by @bradygaster in #1782
• fix(ci): stop splicing repo-health report content into github-script bodies by @bradygaster in #1786
• fix(gh-aw): refill dispatch slots from the root, not the parent epic by @bradygaster in #1787
• fix(squad.md): stop seeding Owner/Agent binding with the tokens it forbids by @bradygaster in #1789
• docs(e2e): add E4 agent-binding verification procedure for #1784 by @bradygaster in #1791
• docs(e2e): authoritative Windows test baseline at 369bba8 by @bradygaster in #1797
• fix(test): stop init-scaffolding from mutating tracked repo files (#1796) by @bradygaster in #1798
• fix(ci): enumerate the EOL blob check by rule, not by shebang by @bradygaster in #1805
• fix(squad): make Scribe archival incapable of destroying state (#1774, #1783, #1760) by @bradygaster in #1792
• fix(sdk): support command paths containing spaces in scheduler script tasks (#1794) by @bradygaster in #1802
• docs(e2e): correct the Windows baseline — retract a wrong prediction, flag the #1793 red herring by @bradygaster in #1808
• docs(e2e): make the renormalize selector attribute-driven, not glob-shaped by @bradygaster in #1810
• chore(gh-aw): ignore downloaded workflow logs under .github/aw/logs by @bradygaster in #1815
• docs(e2e): record E4 agent-binding verification result (PASS, n=1) by @bradygaster in #1813
• chore(squad): record agentic-workflows audit decisions and agent history by @bradygaster in #1816
• fix(gh-aw): bump activation CLI pin 0.11.0 → 0.12.0 (new-repo readiness) by @bradygaster in #1818
• docs(e2e): amend E4 for #1811/#1812, formalize E1 Rule D gate, add folder README by @bradygaster in #1819
• docs(e2e): PR #1819 review followup — fix false fail-open caveats, harden gate 3e (B), tighten E1 Rule D by @bradygaster in #1820
• docs(e2e): fix Phase 3b broken --arg query (P0) and sweep $LASTEXITCODE house rule across E4 + E1 by @bradygaster in #1821
• fix: repair CRLF working trees that .gitattributes cannot reach (#1793) by @bradygaster in #1831
• fix(gh-aw): fail loudly when /squad parses no command (#1824) by @bradygaster in #1832
• Certify roster set via emitting Team Guard Step TG-2 (Closes #1812) by @bradygaster in #1837
• deps: bump the minor-patch group with 2 updates by @dependabot[bot] in #1724
• deps: bump astro from 7.1.6 to 7.2.2 in /docs in the astro-minor-patch group across 1 directory by @dependabot[bot] in #1670
• ci: bump the github-actions group across 1 directory with 4 updates by @dependabot[bot] in #1673
• deps: Bump GitHub.Copilot.SDK from 1.0.8 to 1.0.11 by @dependabot[bot] in #1726
• deps: Bump the microsoft-packages group with 10 updates by @dependabot[bot] in #1727
• deps: Bump xunit.runner.visualstudio from 3.1.5 to 4.0.0 by @dependabot[bot] in #1728
• fix(gh-aw): scan the first non-empty line in PC-0, not record 1 (#1835) by @bradygaster in #1841
• chore(squad): gh-aw wave-1 session records + repair 3 lost history archives by @bradygaster in #1838
• fix(sdk): decode URL-encoded segments in Azure DevOps remote parsing by @omercangumus in #1637
• fix(cli): verify process identity before killing tracked watch PIDs by @omercangumus in #1665
• fix(sdk): wire FSStorageProvider rootDir in resolveSquadState, fix teamRoot='.' sentinel (#1555) by @bradygaster in #1695
• fix(ci): split insider tag promotion by package by @omercangumus in #1710
• fix(cli): route watch/loop capability state through the effective state dir by @omercangumus in #1660
• fix(cli): back up workflows during upgrade by @omercangumus in #1709
• feat(watch): support explicit prompt placement for custom agent commands by @mavaali in #1708
• fix: align model tier routing and catalog (#1749) by @Omzig in #1750
• docs: document .local-backup customization backups in squad upgrade by @bradygaster in #1843
• deps: Bump the microsoft-packages group with 2 updates by @dependabot[bot] in #1848
• ci: bump github/gh-aw-actions from 0.87.1 to 0.87.2 in the github-actions group by @dependabot[bot] in #1847
• deps: bump the minor-patch group with 4 updates by @dependabot[bot] in #1846
• deps: bump astro from 7.2.2 to 7.2.4 in /docs in the astro-minor-patch group by @dependabot[bot] in #1844
• fix(test): budget the delivered prompt, not authored source by @bradygaster in #1849
• fix(sdk): refuse consult when info/exclude resolves outside the project by @bradygaster in #1850
• test(e2e): gate the class of defect that let a broken query pass by @bradygaster in #1852
• fix(gh-aw): stop the validation schema from shipping its own verdict by @bradygaster in #1853
• fix(ci): lint gh-aw generated workflows instead of skipping them by @bradygaster in #1854
• docs(e2e): repoint E1/E4 to the live fixture, preserve evidence records by @bradygaster in #1856
• fix(ci): guard the activation CLI pin against silent release drift by @bradygaster in #1855
• Fail loudly instead of skipping when no POSIX shell resolves (#1833) by @bradygaster in #1857
• ci: move the Squad CLI activation pin when the release publishes by @bradygaster in #1858
• docs(e2e): correct five stale procedures found by the first full E4 run by @bradygaster in #1862
• fix(gh-aw): bind squad:{agent} labels to each issue's own plan row by @bradygaster in #1863
• fix(gh-aw): enforce activation agent bindings by @bradygaster in #1865
• test(gh-aw): enforce shell input security contract over compiled output (#1834) by @bradygaster in #1866
• fix(workflows): harden /squad router authorization by @bradygaster in #1868
• fix(workflows): harden implement relay provenance by @bradygaster in #1869
• feat(workflows): add advisory Squad reviewer by @bradygaster in #1871
• fix(workflows): give plan validation adversarial teeth by @bradygaster in #1870
• docs(gh-aw): ship advisory review by @bradygaster in #1874
• docs(readme): document gh-aw install surface by @bradygaster in #1872
• test(workflows): derive next hints from ontology by @bradygaster in #1873
• chore: clean up deferred M1 review nits by @bradygaster in #1875
• feat: add squad health readiness checks by @bradygaster in #1877
• test(gh-aw): enforce dispatcher-first install order by @bradygaster in #1879
• fix(watch): implement the documented stop signals (--sentinel-file and .squad/ralph-stop) by @swigerb in #1719
• feat(sdk): advertise real team capabilities in squad.agent.md by @bradygaster in #1881
• S1: scaffold squad-deps-worker (fail-closed dependency-manifest worker) by @bradygaster in #1882
• S2: add Wave 1 protected-files.exclude to squad-deps-worker (#1748) by @bradygaster in #1883
• ci: pin gh-aw v0.86.2 and add strict compile gate (all four workflows) by @bradygaster in #1886
• fix(gh-aw): preserve Squad CLI install contract by @bradygaster in #1887
• chore(release): prepare CHANGELOG for v0.13.0 by @bradygaster in #1885
• S3: route dependency tasks to squad-deps-worker (#1748) by @bradygaster in #1888
• docs(changelog): expand 0.13.0 release notes by @bradygaster in #1891
• fix: allow casting runtime state writes by @bradygaster in #1898
• fix: publish standalone bundles with releases by @tamirdresher in #1897
• fix(cli): preserve user env on squad_state entry in .mcp.json by @tamirdresher in #1894
• chore(release): prepare v0.13.1 by @bradygaster in #1899
• fix(gh-aw): activate from standalone releases by @bradygaster in #1901

New Contributors

• @ahhlun made their first contribution in #1148
• @dependabot[bot] made their first contribution in #1237
• @Meir017 made their first contribution in #1239
• @duongau made their first contribution in #1357
• @primetimetank21 made their first contribution in #1232
• @lygav made their first contribution in #1424
• @serbrech made their first contribution in #1431
• @omercangumus made their first contribution in #1438
• @kartikkabadi made their first contribution in #1460
• @babonet made their first contribution in #1413
• @yeshurin made their first contribution in #1468
• @Sanjays2402 made their first contribution in #1492
• @johnazariah made their first contribution in #1459
• @ElazarK made their first contribution in #1453
• @mavaali made their first contribution in #1708
• @Omzig made their first contribution in #1750
• @swigerb made their first contribution in #1719

Full Changelog: v0.11.0...v0.13.1