v0.4.28

What's Changed

• [Repo Assist] perf(difc): pre-allocate Accessible slice capacity in FilterCollection by @github-actions[bot] in #14066
• Upgrade agentic workflows to latest gh-aw pre-release by @lpcox in #14073
• Adopt bound testify assertions in config tests by @lpcox with @Copilot in #14067
• Skip port-mapping validation for host-networked gateway containers by @lpcox with @Copilot in #14068
• Rewrite CLI proxy pagination URLs by @lpcox with @Copilot in #14069
• [Repo Assist] fix(config): skip port-mapping check for host-networked containers in --validate-env by @github-actions[bot] in #14065
• [test] Add tests for server.authorizeDelegatedToolCall by @github-actions[bot] in #14080
• Rust guard: use is_some_and instead of map/unwrap_or, drop redundant .iter() in loops by @lpcox with @Copilot in #14089
• Prevent a canceled client from disabling the shared WASM guard by @lpcox with @Copilot in #14094
• [log] Add debug logging to difc/resource.go by @github-actions[bot] in #14102
• Inline Rust format arguments and remove redundant closures by @lpcox with @Copilot in #14135
• Add a wazero trap-detection upgrade canary by @lpcox with @Copilot in #14134
• Upgrade workflows to gh-aw v0.90.0 by @lpcox in #14136
• 🔄 chore: pin gh-aw schema URL to v0.89.21 by @github-actions[bot] in #14117
• [test] Add tests for server.logFilteredItems enclave redaction by @github-actions[bot] in #14151
• [log] Add debug logging to guard/guard.go by @github-actions[bot] in #14156
• Verify workflows with gh-aw v0.90.0 pre-release by @lpcox in #14177
• Simplify Rust guard conditional branches by @lpcox with @Copilot in #14189
• [test] Add tests for cmd.postRun and cmd.SetVersion by @github-actions[bot] in #14196
• Upgrade gh-aw workflows to v0.90.1 by @lpcox in #14228
• [Repo Assist] refactor(rust-guard): centralize id/tag_name/type literals and unknown fallback by @github-actions[bot] in #14237
• Upgrade agentic workflows to gh-aw v0.90.1 by @lpcox in #14244
• [log] Add debug logging to session auto-init skip paths by @github-actions[bot] in #14205
• [test] Add tests for server.UnifiedServer.ControlHandler by @github-actions[bot] in #14247
• [test-improver] Improve tests for syncutil by @github-actions[bot] in #14206
• Clarify wazero’s unchanged Go module path by @lpcox with @Copilot in #14248
• Classify update_issue_comment as an upstream read-write tool by @lpcox with @Copilot in #14249
• [test-improver] Improve tests for mountspec by @github-actions[bot] in #14265

Full Changelog: v0.4.27...v0.4.28