v2.3.9

• Docs: clarify in SECURITY.md that Go is not required on supported prebuilt platforms; only needed for developer/fallback scenarios.
• Docs: expand "older tags" support policy — security fixes are released as new versions only.
• Chore: add comment to .gitignore explaining why /.mcp.json is root-level only (prevents accidental **/.mcp.json breakage).

v2.3.8

• Docs: remove Go requirement from README — prebuilt binary is the only supported install path; Go fallback remains silent for developers.
• Docs: add telemetry disclosure block in the Installation section with opt-out example (COREZOID_ANALYTICS_DISABLED=1).
• Feat: run.sh — add COREZOID_MCP_DEV=1 override and prefer local ./convctl binary for developer workflows.
• Fix: gitignore .mcp.json to prevent local MCP config from being committed.

v2.3.7

• Feat: --version flag injected at build time via ldflags; defaults to "dev" for local builds.
• CI: validate run.sh syntax with sh -n on every push/PR; run go run . --version as a smoke test after build.
• Security: GitHub Artifact Attestations (actions/attest-build-provenance) for all release binaries, providing verifiable supply-chain provenance beyond SHA256 checksums.

v2.3.6

• Feat: prebuilt MCP server binaries (darwin/linux × amd64/arm64) distributed via GitHub Releases; run.sh downloads and caches the binary on first start, falls back to go run . when unavailable.
• Security: SHA256 checksum verification against release checksums.txt before executing a downloaded binary.
• Security: remove workspace_id and stage_id from anonymous telemetry events.
• Fix: logout confirmation message now shows ~/.corezoid/credentials instead of project .env.
• Fix: mid-session environment switching — login/logout now correctly reload and persist changed account URL, workspace ID, and stage ID.
• Docs: add Telemetry section to README with opt-out instructions (COREZOID_ANALYTICS_DISABLED=1).
• Docs: clarify Go 1.24+ is required only as a fallback, not when a prebuilt binary is available.
• CI: attach per-platform SHA256 checksums.txt to every GitHub Release.

v2.3.5

• Feat: store ACCESS_TOKEN in ~/.corezoid/credentials instead of project .env to prevent accidental git leaks.
• Feat: add anonymous tool-call analytics (opt-out via COREZOID_ANALYTICS_DISABLED=1).
• Fix: sync version and license across all four manifests (.agents/plugins/marketplace.json was missing both fields).
• Fix: replace conv_id with process_id in pull-process examples across four skill files.
• Docs: update SECURITY.md with two-layer credential model, network activity, and analytics disclosure.
• Docs: update corezoid-init/SKILL.md and README to reflect new credential file location.

v2.3.4

• Fix: always ask user to choose workspace/project/stage on login instead of auto-selecting.
• Codex plugin version bumped to 2.3.4.
• Add project-level commit skill with automatic version bump.