v0.20.0

Changelog

• 506064a Merge pull request #21 from devs-group/20-ci-run-integration-tests-in-ci-postgres-backed-no-silent-skip
• d08f3cf feat(skills): backfill legacy 0.0.0 skills to 1.0.0 on boot

v0.19.0

Changelog

• 2f9edef Merge pull request #19 from devs-group/feat/skill-version-switcher
• 09a15aa feat(skills): version switcher, in-frontend editing, append-only intake, and delete
• 1e042f1 test(skills): integration harness and unit coverage for versioning

v0.18.0

Changelog

• 15d0de0 fix(marketplace): install robustness, decline-forever, inferred manifest, NULL scan bug (#18)

v0.17.0

Changelog

• c213223 Merge pull request #16 from devs-group/fix/marketplace-stars-sort
• a9ec363 fix(marketplace): sort by GitHub stars descending

v0.16.0

Changelog

• f1881b2 Merge pull request #15 from devs-group/14-featworkspace-allow-present_files-on-sandboxsessionuploads-to-display-user-uploaded-files
• f45737e feat(workspace): allow present_files on /sandbox/session/uploads/ to display user uploads in one tool call
• d078bd1 refactor(workspace): present_files takes {source, filenames} enum so adding new presentable dirs is one map entry

v0.15.0

Changelog

• 2abbbed Merge pull request #12 from devs-group/11-ci-build-dockerfilesandbox-and-smoke-test-expected-cli-tools-on-every-pr
• c083920 Merge pull request #13 from devs-group/feat/marketplace-sort-by-stars
• 6f50cef feat(marketplace): sort GitHub skill search by stars descending

v0.14.0

What's Changed

Sandbox session image: add standard JSON / text CLI tools (#9, #10)

The sandbox session image now ships `jq`, `ripgrep`, `fd`, and `curl` on top of the existing Python 3.12 + `uv` base. Agents no longer need to fall back to inline Python for basic JSON filtering and text search — a class of operation that previously round-tripped entire datasets through the LLM as tool output.

Image size delta: +10.9 MB (single apt layer).

Verified tools:

```
jq-1.7
ripgrep 14.1.1
fd 10.2.0 (symlinked from fdfind)
curl 8.14.1
uv 0.11.6
Python 3.12.13
```

Rollout

• `ghcr.io/devs-group/skillbox-sandbox:v0.14.0` and `:latest` will be published by `release.yml` on this tag push.
• Consumers (aigent, etc.) should bump their `SKILLBOX_SANDBOX_SESSION_IMAGE` pin and add `ghcr.io/devs-group/skillbox-sandbox:v0.14.0` to their image allowlist.

Full Changelog: v0.13.0...v0.14.0

v0.13.0

What's Changed

• fix(ci): align sqlmock columns with is_service migration by @segidev in #4
• refactor: namespace S3 paths under org and fix session/execution paths by @segidev in #8

New Contributors

• @segidev made their first contribution in #4

Full Changelog: v0.12.5...v0.13.0

v0.12.5

Changelog

• 2b67556 fix(sandbox): add ExecD readiness gate to prevent cold-start EOF errors

v0.12.4

Changelog

• a0b1693 Merge pull request #1 from devs-group/feat/security-scanner
• ac1950f Merge remote-tracking branch 'origin/main' into feat/security-scanner
• a3dde97 feat(scanner): add registry-level scan gate with async background worker
• c5fbf15 feat(scanner): add security scanner for uploaded skills
• f8e81eb feat: add is_service flag to API keys for cross-tenant access
• 1a8a938 fix(lint): resolve all golangci-lint and gosec findings
• 7f274b7 fix(lint): resolve remaining errcheck and staticcheck findings
• 1847e06 fix(security): resolve remaining P1 issues — file upload limits, recursive CTE, transaction boundaries
• 70eb01d improve(scanner): enrich LLM system prompt with full platform context