v0.3.45

Highlights

• GitHub Copilot skills now use .github/skills/, supporting extensions and pull request reviews (#798).
• Add native Kiro skills propagation to .kiro/skills/ (#780).
• Preserve existing native skills, subagents and settings more reliably during apply and revert.
• Improve nested configuration, linked-worktree handling and nested revert behaviour.
• Harden symlink handling, backup restoration and generated-file provenance.
• Improve MCP configuration, remote headers and diagnostics, with updated dependencies and release safeguards.

What's Changed

• Clarify README precedence for legacy .ruler/instructions.md by @intellectronica with @Copilot in #636
• Harden managed path writes by @intellectronica in #659
• Preserve generated settings sidecars by @intellectronica in #660
• Harden workflow supply chain checks by @intellectronica in #661
• Harden CLI and package checks by @intellectronica in #662
• Harden MCP revert and transport handling by @intellectronica in #663
• Preserve native skills and subagents by @intellectronica in #664
• Fix linked worktree local ignore handling by @intellectronica in #670
• Write provenance for adapter MCP configs by @intellectronica in #671
• Verify backups before revert restore by @intellectronica in #673
• Harden auxiliary revert cleanup by @intellectronica in #675
• Validate singleton CLI string options by @intellectronica in #677
• Prevent .ruler markdown outputs from being re-ingested on subsequent applies by @intellectronica with @Copilot in #681
• Preserve third-party skills during Ruler apply by @intellectronica with @Copilot in #684
• Harden config source path handling by @intellectronica in #718
• Isolate package version npm subprocesses by @intellectronica in #719
• Clean up managed skills when disabled by @intellectronica in #720
• Remove stale tracked Copilot instructions by @intellectronica in #721
• Gate comprehensive integration test diagnostics by @intellectronica in #722
• Expand integration test script scope by @intellectronica in #723
• Drop unused Ruler workflow permission by @intellectronica in #724
• Disable persisted checkout credentials in read-only workflows by @intellectronica in #725
• Restrict Ruler manual dispatch to main by @intellectronica in #726
• Restrict WRITEME manual dispatch to main by @intellectronica in #727
• Pass remote MCP headers to mcp-remote by @intellectronica in #728
• Respect RooCode MCP enablement and strategy by @intellectronica in #729
• Reject invalid revert agent selectors by @intellectronica in #730
• Reject init roots inside ruler directories by @intellectronica in #731
• Clean agent directories during full revert by @intellectronica in #732
• Track only generated output paths by @intellectronica in #733
• Preserve unmanaged subagent files by @intellectronica in #734
• Verify release recovery commit SHA by @intellectronica in #736
• Revert nested apply outputs by @intellectronica in #738
• Track generated sidecar provenance by @intellectronica in #739
• Reject unsafe ruler symlinks in config loaders by @intellectronica in #740
• Build and chmod package install artifacts by @intellectronica in #735
• Copy unified integration fixture before mutation by @intellectronica in #742
• Surface apply MCP diagnostics by @intellectronica in #744
• Back up Zed settings before MCP updates by @intellectronica in #737
• Respect nested config default agents by @intellectronica in #741
• Protect critical coverage thresholds by @intellectronica in #743
• Guard CLI tests against missing build output by @intellectronica in #745
• Align README revert options with implemented nested flags by @intellectronica with @Copilot in #747
• Audit production dependencies in CI by @intellectronica in #764
• Harden GitHub Actions release safety by @intellectronica in #762
• Normalise MCP transport-specific fields by @intellectronica in #759
• Mark OpenCode generated AGENTS output by @intellectronica in #760
• Avoid recursive empty-directory cleanup during revert by @intellectronica in #763
• Fix nested config agent selection handling by @intellectronica in #758
• Preserve generated MCP provenance across revert by @intellectronica in #765
• build(deps): bump actions/setup-node from 6.5.0 to 7.0.0 by @dependabot[bot] in #766
• fix(readme): remove duplicate agents entry in skills workflow example by @intellectronica with @Copilot in #767
• chore(ci): remove codebase smells workflow by @intellectronica in #773
• Dangling subagent-output symlinks allow writes outside the project root by @intellectronica in #771
• Aider suppresses backup safety failures and overwrites the existing configuration by @intellectronica in #777
• Nested mode crosses linked-worktree and submodule repository boundaries by @intellectronica in #779
• feat(kiro): propagate skills to .kiro/skills by @Tiger-0512 in #780
• fix(deps): update js-yaml to resolve CI audit failure by @intellectronica in #800
• feat(agents): add dedicated entry for GitHub Copilot by @nerdyman in #798
• chore: release v0.3.45 by @intellectronica in #801

New Contributors

• @dependabot[bot] made their first contribution in #766
• @Tiger-0512 made their first contribution in #780

Full Changelog: v0.3.44...v0.3.45