v1.46.0

1.46.0 (2026-05-22)

Features

• ci: add npm provenance to release workflow (c82cf2c)
• ci: add npm provenance to release workflow (f66ddc1)

Bug Fixes

• cache file read failures to avoid redundant filesystem access (a4f4299)
• security: address CodeRabbit review comments (1b1a637)
• security: address CodeRabbit review comments (58c7f12)
• security: harden path traversal validation and validate sources (22dbafd)
• security: harden path traversal validation and validate sources (60811c7)
• security: prevent path traversal in NestedGlob search root (4ab7550)
• test: escape backslashes in absolute path TOML string for Windows compatibility (b20a90f)

Performance

• optimize file extension discovery in technology detection (623a3e8)
• optimize technology detection with in-memory content caching (7cd33fe)
• optimized technology detection with in-memory content caching (111e0a7)
• unify nested project discovery and metadata collection in technology detection (b2248eb)

Documentation

• fix CLI reference drift and missing flags (dafd051)
• update combo evaluation status from deferred to active (5f8aed5)
• Update combo evaluation status from deferred to active (eee9b07)

Tests

• add unit tests for path validation and detect coverage (0b28ba9)

Chores

• deps: lock file maintenance (0492434)
• deps: update dependency @dallay/agentsync to v1.45.2 (d11678a)
• deps: update dependency @dallay/agentsync to v1.45.2 (73c95d2)
• Use revalidate_unlink_path for symlink removal (de50e8d)