v0.9.1

What's Changed

• ci: add PyPI publish workflow with trusted publishing
• fix: update version badge to 0.9.1 (matches pyproject.toml and CHANGELOG)
• chore: add stale bot config for issue/PR lifecycle management

Full Changelog: v0.9.0...v0.9.1

v0.9.0

What's Changed

• Implement Phases 1–4: Core framework (schemas, tools, client, git isolation, agents, orchestrator, CLI) by @devin-ai-integration[bot] in #1
• v0.2.0: Production-ready harness — config, security, resilience, CI, 66 tests by @devin-ai-integration[bot] in #2
• v0.2.1: Production polish — security hardening, type safety, cleanup by @devin-ai-integration[bot] in #4
• Add testing skill for no-slop-harness by @devin-ai-integration[bot] in #5
• Harden context sanitization with defense-in-depth path escape check by @devin-ai-integration[bot] in #6
• Update testing skill: clarify safe-command execution warning by @devin-ai-integration[bot] in #7
• fix(security): replace shell=True, add path validation, worktree sanitization by @iknowkungfubar in #8
• fix(security): restrict pipeline state file permissions by @iknowkungfubar in #9
• fix: second-pass review fixes by @iknowkungfubar in #14
• fix: second-pass review fixes by @iknowkungfubar in #25
• fix: resolve all open issues by @iknowkungfubar in #26
• chore(deps): bump actions/setup-python from 5 to 6 by @dependabot[bot] in #17
• chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #16
• chore(deps): bump actions/cache from 4 to 5 by @dependabot[bot] in #15

New Contributors

• @devin-ai-integration[bot] made their first contribution in #1
• @iknowkungfubar made their first contribution in #8
• @dependabot[bot] made their first contribution in #17

Full Changelog: https://github.com/iknowkungfubar/no-slop-harness/commits/v0.9.0