Release v0.7.2

Highlights

• Maintenance release — rolls up ~25 rg hardening fixes, a CoW subshell-snapshot perf landmark (#1767), security tightening (FD cap #1780, tool-hook enforcement for command #1781), a BuiltinHelper refactor (#1788), and test/build hygiene work.

What's Changed

• chore(tests): move OverlayFs path-validation tests inline (#1795) by @chaliy
• chore(tests): consolidate integration test binaries into one (#1794) by @chaliy
• chore(build): slim test binaries, document cargo test --all-features hazard (#1793) by @chaliy
• feat(site): add homepage markdown negotiation by @chaliy
• fix(interpreter): isolate bash -c / sh -c from parent shell state (#1791) by @chaliy
• fix(interpreter): resolve array elements in arithmetic param expansion (#1790) by @chaliy
• refactor(builtins): BuiltinHelper trait, centralized limits, split ls/awk (#1788) by @chaliy
• fix(rg): resolve type filters after type db mutations (#1787) by @chaliy
• chore: normalize Bashkit capitalization (#1786) by @chaliy
• fix(rg): apply global sort for explicit path sets (#1785) by @chaliy
• fix(rg): harden hyperlink URL interpolation (#1784) by @chaliy
• fix(rg): bound color match amplification for dense patterns (#1783) by @chaliy
• fix(rg): bound --colors parsing and sanitize invalid spec echo (#1782) by @chaliy
• fix(interpreter): enforce tool hooks for command host-builtins (#1781) by @chaliy
• fix(security): cap persistent file descriptors (#1780) by @chaliy
• chore(bench): refresh runtime comparison + add in-proc reminder (#1778) by @chaliy
• chore(bench): move criterion results to crates/bashkit/benches/results (#1774) by @chaliy
• chore(eval): refresh model lineup with Opus 4.7 and GPT-5.5 (#1773) by @chaliy
• chore(skills): hide private workflow skills (#1772) by @chaliy
• test(bench): cover VarAttrs/BashFlags + add VFS/rg/glob benches (#1770) by @chaliy
• chore(deps): bump serde_json to 1.0.150 and reqwest to 0.13.4 (#1769) by @dependabot
• chore(ci): bump pnpm/action-setup from 4 to 6 (#1768) by @dependabot
• perf(interpreter): CoW subshell snapshots, attribute bitset, flag cache (#1767) by @chaliy
• chore(js): migrate packages to pnpm (#1766) by @chaliy
• fix(rg): honor explicit file path parity (#1765) by @chaliy
• chore(deps): bump turso_core from 0.6.0 to 0.6.1 (#1764) by @dependabot
• ci(nightly): raise ASAN timeout to 90 minutes (#1761) by @chaliy
• fix(tac): preserve unterminated last line on reversal (#1760) by @chaliy
• fix(rg): match output mode precedence (#1759) by @chaliy
• chore(site): allow AI content signals (#1758) by @chaliy
• fix(docs-grep-agent): stop mounting lockfile-bearing example dirs (#1757) by @chaliy
• test(rg): cover binary default reporting for explicit inputs and stdin (#1756) by @chaliy
• fix(rg): preserve collected diagnostics in quiet match paths (#1755) by @chaliy
• fix(rg): count unrestricted flags independently (#1754) by @chaliy
• fix(rg): skip indexed prefilter for --crlf searches (#1753) by @chaliy
• fix(rg): apply max-count after multiline invert (#1752) by @chaliy
• fix(rg): align -u ignore classes with --no-ignore (#1751) by @chaliy
• fix(rg): clear explicit line-number state on negation (#1750) by @chaliy
• fix(rg): honor --no-context-separator between files (#1749) by @chaliy
• fix(rg): avoid false --generate detection in value arguments (#1748) by @chaliy
• fix(rg): skip indexed prefilter for --no-unicode non-literal queries (#1747) by @chaliy
• fix(rg): keep parent dot-ignore active for --no-ignore-vcs (#1746) by @chaliy
• fix(rg): bound ignore rule parsing and traversal memory (#1745) by @chaliy
• fix(rg): avoid quadratic glob toggle recompilation (#1744) by @chaliy
• fix(rg): cap brace alternation recursion depth (#1743) by @chaliy
• fix(rg): avoid eager match vector allocation (#1742) by @chaliy
• fix(ci): close DOPPLER_AVAILABLE bypass in examples workflow (#1741) by @chaliy
• feat(site): negotiate markdown docs by @chaliy
• docs(site): add agent development quickstart by @chaliy
• docs(readme): remove stale install version pins by @chaliy

Full Changelog: v0.7.1...v0.7.2