v1.16.1

1.16.1 (2026-07-18)

Bug Fixes

• deps: pin transitive adm-zip to 0.6.0 for CVE-2026-39244 (#268) (a4db980)

v1.16.0

1.16.0 (2026-07-18)

Features

• orchestrator: add CLOSE_WAIT socket-spin watchdog for #264 signature (#266) (8990ee0)

v1.15.0

1.15.0 (2026-07-02)

Features

• add env-var contract + CI gate for helm-charts sync (#258) (9aefe66)

Bug Fixes

• patch three HIGH CVEs blocking orchestrator Trivy scan (#254) (0cb6d12)

v1.14.0

1.14.0 (2026-06-30)

Bug Fixes

• agent-sdk: pass settingSources [] so SDK ignores cloned PR .claude/settings.json (#195) (153fef3)
• check: derive scoped-executor scan set from filesystem (dead guard) (#208) (8b0e8ef)
• daemon: sweep full workspace triple on startup and crash exit (#239) (56fa714)
• idempotency: gate side-effecting handlers with Valkey claim to prevent redelivery duplicates (#212) (68dacdb)
• infrastructure: patch krb5 HIGH CVE-2026-40356 in shared Docker base (#180) (1d1bc3b)
• mcp: redact Octokit error tool-results and widen GitHub token regex (#238) (675d610)
• mcp: wrap GitHub-touching MCP servers + state-fetchers in retryWithBackoff (#205) (319beb9)
• observability: canonicalise child-logger entity id under entityNumber (#178) (808ca46)
• security: gate LLM scanner redacted_body to deletion-only (#206) (d52cf78)
• security: set strictMcpConfig to block cloned-PR .mcp.json auto-load (#210) (2c58ec1)
• testing: run colocated src/**/*.test.ts in CI + add drift guard (#204) (5990e0d)

Features

• agent-sdk: block destructive Bash at runtime via PreToolUse hook (#241) (f3132f2)
• observability: add 12 structured Pino event families with Zod-strict schemas (#251) (eaad36b)
• observability: add queue_wait_ms to dispatcher offer/no-daemon logs (#207) (7a5cfb0)
• observability: add structured retry.* events (#225) (6713cbf)
• observability: emit failed_stage and failed_stage_delta_ms on pipeline.failed (#244) (4f2483c)
• observability: emit structured idempotency events on all 4 claimDelivery outcomes (#242) (e1e7f9e)
• observability: installationId on loggers + config-free MCP retry (#189) (ba09f76), closes #177 #184
• observability: log + persist SDK token usage on executions (#209) (5407dcd)
• observability: log octokit rate-limit headers via hook.after (#183) (30e1715)
• observability: periodic fleet-state gauge snapshot (#186) (7429460)
• observability: redact crash logs via uncaughtException/unhandledRejection handlers (#181) (d4248f4)
• observability: structured dispatcher + heartbeat log events (#188) (c615bc4)
• observability: structured pino logger for stdio MCP servers (#185) (5244e8a)
• observability: structured pipeline.stage timing events with delta_ms (#182) (4125971)

v1.13.0

1.13.0 (2026-05-21)

Bug Fixes

• deps: update dependency @anthropic-ai/bedrock-sdk to ^0.29.0 (#147) (eb95c64)
• deps: update dependency @anthropic-ai/claude-agent-sdk to ^0.3.0 (#154) (15add8e)
• docs: anchor-verify src citations to catch silent line-shift rot (#163) (5a67863)
• webhook: subscribe issue_comment.edited/.deleted for cache write-through (#131) (c84361d)
• webhook: write-through target_cache on issues/pull_request events (#130) (#132) (8b79c10)

Features

• prompt: opt-in cacheable system/user prompt split (#135) (bb80ca7)
• review-learnings: explicit @bot remember + autonomous capture (#160) (#162) (1c4c53a)
• review-learnings: persistent per-repo review-policy directives (#161) (ba50972)
• scheduler: scheduled actions via .github-app.yaml (#159) (142a5bc)
• workflows: comment-aware structured workflows via LLM discussion digest (#148) (7a6b315)

v1.12.2

1.12.2 (2026-05-10)

Bug Fixes

• mcp: bundle all stdio servers and resolve paths from any bundle (#125) (6e34790)
• security: close cross-session prompt injection via repo_memory (#124) (001990d)

v1.12.1

1.12.1 (2026-05-10)

Bug Fixes

• bot: restore inline review comments on PRs (#123) (a5d0990)

v1.12.0

1.12.0 (2026-05-10)

Bug Fixes

• security: sanitize attacker-controlled filenames in formatChangedFiles (#110) (bb7b91d)
• ship: reroute iteration-0 terminal-bad verdicts to chat-thread (#119) (#120) (403ec21)

Features

• ai: tool-driven LLM with github-state MCP server (#117) (#118) (2a3c1e3)
• security: harden bot against prompt-injection comment attacks (#121) (564d066)
• workflows: chat-thread executor + structured-output chokepoint + OAuth gate fix (#113) (698694b)

v1.11.1

1.11.1 (2026-05-08)

Bug Fixes

• tracking-mirror: idempotent setState with marker-based orphan adoption (#109) (#111) (7e44417)

v1.11.0

1.11.0 (2026-05-07)

Bug Fixes

• implement: match PR author by login in PAT mode (#108) (d325639)

Features

• resolve: gate handler success on post-fix CI state (#107) (eecdedc)