v0.4.10

What's Changed

• [log] Add debug logging to isRateLimitToolResult control flow by @github-actions[bot] in #10949
• [test-improver] Improve tests for Guard (LabelAgent/LabelResource success paths) by @github-actions[bot] in #10950
• [log] Add debug logging to buildHTTPServer in internal/cmd/startup.go by @github-actions[bot] in #11028
• [test-improver] Improve tests for cmd.registerFlagCompletions by @github-actions[bot] in #11029
• Document go-sdk retry sentinel baseline by @lpcox with @Copilot in #11066
• [test] Add tests for cmd.applyTracingOverrides by @github-actions[bot] in #11027
• [rust-guard] Extract shared PR fork-detection helper across label paths by @lpcox with @Copilot in #11061
• Add gojq v0.12.19 builtin-semantics regression coverage for tool-response filters by @lpcox with @Copilot in #11064
• [test] Add tests for server.guardBackendCaller.CallTool by @github-actions[bot] in #10990
• [test-improver] Improve tests for DIFC pipeline decisions by @github-actions[bot] in #10993
• Docs: reconcile config guidance for containerRuntimeArgs and optional JSON gateway by @lpcox with @Copilot in #11062
• Deduplicate Rust Guard PR repository lookups by @lpcox with @Copilot in #11065
• Bump OpenTelemetry to v1.45.0 and codify semconv/SDK lockstep in tracing by @lpcox with @Copilot in #11060
• Close GitHub guard coverage gaps for CLI issue/PR state-transition writes by @lpcox with @Copilot in #11063
• rust-guard: centralize PR fork detection into helpers::is_forked_pr by @lpcox with @Copilot in #11067
• [log] Add debug logging to JSONL logger init and error paths by @github-actions[bot] in #10992
• [rust-guard] Extract duplicated read-sub-method skip check into helpers::is_non_get_read_sub_method by @lpcox with @Copilot in #11140
• [test-improver] Improve tests for internal/server (registerToolsFromBackendContext) by @github-actions[bot] in #11107
• Add regression test guarding tool_rules.rs / tools.rs write-classification drift by @lpcox with @Copilot in #11142
• Document otel semconv upgrade path and panic-recording decision by @lpcox with @Copilot in #11141
• [log] Add debug logging to DIFC violation error formatting by @github-actions[bot] in #11106
• [test] Add tests for proxy.streamArtifactResponse by @github-actions[bot] in #11159
• [log] Add debug logging to WasmGuard LabelResource/LabelResponse by @github-actions[bot] in #11166
• 🔄 chore: bump schema URL to v0.86.2 by @github-actions[bot] in #11183
• [test-improver] Improve tests for server (hmac nonce cache) by @github-actions[bot] in #11167
• [test] Add tests for server.registerPromptsFromBackend by @github-actions[bot] in #11207
• Fold internal/util/toolname.go into internal/util/format.go by @lpcox with @Copilot in #11224
• [rust-guard] Centralize JSON method field key via field_names::METHOD by @lpcox with @Copilot in #11227
• Refactor duplicated proxy rate-limit tracing into a shared helper by @lpcox with @Copilot in #11225
• Config schema validation: support remote custom $ref and expand structured error context by @lpcox with @Copilot in #11226
• [log] Add debug logging to mcptest ValidatorClient methods by @github-actions[bot] in #11233
• [test-improver] Improve tests for Middleware by @github-actions[bot] in #11238
• Recompile workflows with latest gh-aw pre-release by @lpcox in #11275
• [test] Add tests for proxy.New by @github-actions[bot] in #11272
• [log] Add debug logging to WASM guard execution path by @github-actions[bot] in #11285
• Upgrade workflows to gh-aw v0.87.0 pre-release by @lpcox in #11316
• [test-improver] Improve tests for guard package (WASM alloc/dealloc/call error paths) by @github-actions[bot] in #11286
• Fix README claim that the gateway config section is optional by @lpcox with @Copilot in #11296
• Refactor DIFC collection label aggregation by @lpcox with @Copilot in #11297
• [Repo Assist] fix(guard): classify create_project in Projects v2 DIFC write arm by @github-actions[bot] in #11326
• Fix readonly-stress test methodology gap: correct tool names, clarify gateway vs. backend read-only enforcement by @lpcox with @Copilot in #11342
• [test] Add tests for cmd.initTracingProviderWithFallback by @github-actions[bot] in #11346
• [log] Add debug logging to internal/difc/flow_labels.go by @github-actions[bot] in #11355
• Add regression coverage for GitHub guard write operations by @lpcox with @Copilot in #11371
• Upgrade workflows to latest gh-aw pre-release by @lpcox in #11385
• [Repo Assist] refactor(rust-guard): centralize pull_request_read/issue_read tool-name literals by @github-actions[bot] in #11395
• [test] Add tests for proxy.writePEM by @github-actions[bot] in #11403
• [test-improver] Improve tests for guard package (ConfigureGlobalCompilationCache) by @github-actions[bot] in #11415
• Upgrade workflows with gh-aw v0.87.0 pre-release by @lpcox in #11440
• Extract shared tag-scope-splitting helper in internal/difc/violations.go by @lpcox with @Copilot in #11433
• [Repo Assist] refactor(rust-guard): use field_names constants for full_name/fullName literals by @github-actions[bot] in #11450
• [log] Add debug logging to tracing HTTP handler wrapper by @github-actions[bot] in #11414
• Use cobra's MarkFlagsMutuallyExclusive for AllowOnly scope flags by @lpcox with @Copilot in #11408
• Split GitHub guard write inventory by source by @lpcox with @Copilot in #11432
• [log] Add debug logging to registerCoreFlags in internal/cmd/flags_core.go by @github-actions[bot] in #11468
• [test-improver] Improve tests for internal/config (remote schema $ref byte budget) by @github-actions[bot] in #11469
• [Repo Assist] refactor(guard): consolidate wazero interpreter runtime construction in tests by @github-actions[bot] in #11500
• Consolidate wazero guard runtime/module config and disable DWARF debug info by default by @lpcox with @Copilot in #11505

Full Changelog: v0.4.9...v0.4.10