v1.0.0

1.0.0 (2026-01-14)

Bug Fixes

• add bounded retry logic for LLM rate limit handling (#205) (6ecb786), closes #104
• Add comprehensive subprocess security guardrails (fixes #57) (#66) (454b80e)
• Add comprehensive YAML validation to prevent attacks (fixes #56) (#63) (31ecb3a)
• add repository checkout step to Claude Code Action workflow (17aa0cf)
• add uv.lock to recognized lockfiles (#143) (a98dc87), closes #137
• address P1 code quality issues from code review (#36) (5976332)
• address P1 code quality issues from code review (#37) (4be1d5e)
• address P1 code quality issues from code review (#38) (77f2300)
• assessors: search recursively for OpenAPI specification files (#127) (e2a5778)
• correct Assessment field name in demo command (#41) (b48622d), closes #12
• Correct datetime import pattern in RepomixService (#65) (517aa6e)
• correct GitHub repository link in site navigation (5492278)
• correct Liquid syntax in developer-guide (elif -> elsif) (75f3b1d)
• Create shared test fixtures and fix Assessment schema issues (#114) (46baa13)
• disable attestations for Test PyPI to avoid conflict (#155) (a33e3cd), closes pypa/#action-pypi-publish
• downgrade docker/metadata-action to v5 and fix shellcheck warnings (12f5509)
• enable Harbor task filtering for smoketest support (#222) (f780188)
• exclude DEPLOYMENT.md and SETUP_SUMMARY.md from Jekyll build (9611207)
• Improve report metadata display with clean table format (ca361a4)
• leaderboard workflow and SSH URL support (#147) (de28cd0)
• make E2E test timeouts configurable and add sensitive directory test (#206) (27e87e5), closes #104 #192
• P0 security and logic bugs from code review (2af2346)
• Prevent API key exposure in environment and logs (fixes #55) (#64) (4d1d001)
• Prevent command injection in CommandFix.apply() (fixes #52) (#60) (49be28e)
• Prevent path traversal in LLM cache (fixes #53) (#61) (2bf052d)
• Prevent XSS in HTML reports (fixes #54) (#62) (7c60c69)
• rename research report in data directory (b8ddfdc)
• replace all remaining elif with elsif in developer-guide (73f16fc)
• Resolve 35 pytest failures through model validation and path sanitization improvements (#115) (4fbfee0)
• resolve all test suite failures - achieve zero failures (#180) (990fa2d), closes #148 #147 #145
• resolve broken links and workflow failures (#160) (fbf5cf7)
• Resolve merge conflicts in CLI main module (#59) (9e0bf2d)
• resolve YAML syntax error in continuous-learning workflow (#172) (3d40fcc)
• resolve YAML syntax error in update-docs workflow and add actionlint (#173) (97b06af)
• Sanitize sensitive data in HTML reports (fixes #58) (#67) (6fbac76)
• set correct baseurl for GitHub Pages subdirectory deployment (c4db765)
• skip PR comments for external forks to prevent permission errors (#163) (2a29fb8)
• update --version flag to show correct version and research report date (#221) (5a85abb)
• Update Claude workflow to trigger on @claude mentions (#35) (a8a3fab)
• workflows: ensure post-comment step runs after Claude Code Action (b087e5c)
• workflows: handle all event types in agentready-dev workflow (9b942bf)
• workflows: improve error handling and logging for comment posting (9ea1e6b)
• workflows: improve issue number extraction and add debug step (ecd896b)
• workflows: remove if:always() to test step execution (ff0bb12)
• workflows: simplify post-comment step condition ([1bbf40a](https://github.com/chambridge/agen...