v0.10.1

v0.10.1

Released: June 30, 2026 · Download

---

🐛 Bug fixes / Improvements

Git subprocess calls resolve an absolute binary path

internal/shared/gitutil invoked git by name, letting the OS resolve the
executable by searching PATH at exec time. All three call sites now resolve
the absolute path once via exec.LookPath("git") before spawning the
subprocess, closing a SonarQube security hotspot (go:S4036 — PATH must only
be searched through a controlled API) in ChangedFilesSince, commitSHAs,
and commitFiles.

Removed duplicated string literals

• The "~/.claude/" prefix, repeated across four hook-command constants in
  the skills installer, is now defined once as homeClaudeDirPrefix.
• The "(none)" fallback literal in check-docs.sh, repeated four times, is
  now defined once as NO_RESULTS.

Shell scripts use safer [[ ]] conditionals

check-docs.sh and next-version.sh switched from POSIX [ ] tests to
bash's [[ ]] construct, and the version-bump case statement in
next-version.sh now has a default branch that fails loudly on an
unexpected $BUMP value instead of silently falling through.

Removed a duplicate test

TestServerDaemonService_Start_SucceedsWithoutIndex had a body identical to
TestServerDaemonService_Start_SpawnsAndSavesState. Since the service under
test is fully mocked, it never actually exercised the "no index" scenario its
name implied — removed as a no-op duplicate (SonarQube S4144).

---

🏗️ Architecture

No new architectural decisions in this release — all changes are
implementation-level fixes with no persistent design tradeoffs.