1.2.0

What's Changed

• chore: optimise repo for agentic development by @edjchapman in #1
• chore(actions): bump DavidAnson/markdownlint-cli2-action from 17 to 23 by @dependabot[bot] in #2
• chore(actions): bump peter-evans/create-pull-request from 6 to 8 by @dependabot[bot] in #3
• chore(actions): bump actions/setup-python from 5 to 6 by @dependabot[bot] in #4
• chore(actions): bump actions/setup-node from 4 to 6 by @dependabot[bot] in #7
• docs: codify main-branch protection settings by @edjchapman in #9
• chore(actions): bump actions/checkout from 4 to 6 by @dependabot[bot] in #5
• feat: detect drift between $HOME and chezmoi source on the live machine by @edjchapman in #10
• chore(brewfile): replace deprecated tldr with tlrc by @edjchapman in #11
• chore: weekly brew outdated report by @github-actions[bot] in #8
• chore: bump oh-my-zsh pin to e64912e0c1eaa32181c3b5e5e4bf8042ecd0e8a7 by @edjchapman in #6
• fix/gpg path and brewfile extras by @edjchapman in #12
• feat: brew→Brewfile loop via journaled events + interactive sync (1/6) by @edjchapman in #16
• feat: chezmoi-fix as the single remediation entry point (2/6) by @edjchapman in #17
• feat: macOS defaults drift via chezmoi-defaults-audit (3/6) by @edjchapman in #18
• feat: chezmoi-security-audit — FileVault, SIP, firewall, keys, perms (4/6) by @edjchapman in #19
• feat: weekly VS Code + mas health checks; broader brew audit (5/6) by @edjchapman in #20
• feat: --alert mode for clickable remediation from notification (6/6) by @edjchapman in #21
• chore(actions): bump mfinelli/setup-shfmt from 3 to 4 by @dependabot[bot] in #13
• chore: bump oh-my-zsh pin to a07126330b9f56f12f1e00ddd29786d35d6e64d9 by @github-actions[bot] in #15
• chore: declare poppler in Brewfile to clear brew-extra drift by @edjchapman in #22
• feat(git): add git sync alias by @edjchapman in #25
• refactor: collapse day-to-day surface behind 'mac' alias by @edjchapman in #26
• refactor(mac): rework banner + chezmoi-fix UX, add bats harness by @edjchapman in #27
• fix(brew): detect cask vs formula per-name in chezmoi-brew-record by @edjchapman in #28
• chore(actions): bump gitleaks/gitleaks-action from 2 to 3 by @dependabot[bot] in #29
• chore(brewfile): regroup zoom under Productivity by @edjchapman in #30
• feat(ci): validate plist templates with xmllint by @edjchapman in #31
• fix(pre-commit): preserve ggshield exit code so detected secrets block commits by @edjchapman in #32
• feat(defaults-audit): list unreadable entries under --drift by @edjchapman in #33
• docs: add plist XML validation to required-checks list (11 -> 12) by @edjchapman in #34
• chore(brewfile): rename windsurf cask to devin-desktop by @edjchapman in #35
• docs: clarify self-update paths and silent-degradation diagnostic by @edjchapman in #36
• feat(git): make 'git sync' alias squash-merge aware by @edjchapman in #37
• fix(drift): silence brew-extras false positives and ignore oh-my-zsh cache by @edjchapman in #38
• chore(ci): retire update-brew workflow (superseded by local brewup) by @edjchapman in #39
• feat(ci): auto-rebase open PRs when main advances by @edjchapman in #40
• chore(ci): swap GITHUB_TOKEN for BOT_PAT in bot-driven workflows by @edjchapman in #41
• docs(standups): seed daily log + chezmoi-ignore the directory by @edjchapman in #42
• chore: bump oh-my-zsh pin to df34d2b8d575777465aed8ae9b7cd90d63fdcd6e by @github-actions[bot] in #24
• chore: delete orphan brew-outdated report (#39 follow-up) by @edjchapman in #43
• docs(runbook): add 'Back up the age key' section by @edjchapman in #45
• chore(secrets): rotate age recipient key by @edjchapman in #44

New Contributors

• @edjchapman made their first contribution in #1
• @dependabot[bot] made their first contribution in #2
• @github-actions[bot] made their first contribution in #8

Full Changelog: 1.1.0...1.2.0