v0.10.3

[0.10.3] - 2026-08-12

Added

• feat: add an agent demo and fix the grant handoff output

Documentation

• docs: link murk-action's marketplace listing
• docs: regenerate man pages for clap_mangen 0.3.1
• docs: split semicolon clauses into plain sentences
• docs: unpin example versions from the release verification steps
• docs: document required scopes for the automation secrets

Fixed

• fix: include scoped-only keys in recipient-revoke exposure report

Other

• ci: fix npm publish by skipping napi gh-release and add manual dispatch
• ci: fix npm publish and add manual dispatch
• ci: distribute native artifacts into npm dirs before publish
• ci: distribute native artifacts into npm dirs before publish
• ci: publish npm via OIDC trusted publishing, drop bootstrap token
• ci: publish npm via OIDC trusted publishing, drop bootstrap token
• build(deps): bump rmcp from 3.0.0 to 3.1.0
• build(deps): bump napi-build from 2.3.2 to 2.4.0
• build(deps): bump clap from 4.6.4 to 4.6.5
• build(deps): bump actions/setup-node from 6.4.0 to 7.0.0
• build(deps): bump the codeql-action group with 3 updates
• build(deps): bump napi from 3.11.0 to 3.12.0
• build(deps): bump postcss from 8.5.21 to 8.5.25 in /docs-site
• build(deps): update js-yaml in node bindings
• ci: pin build image and toolchain dependencies
• build(deps): bump i18n-embed-fl to drop proc-macro-error2
• ci: make Linux and Windows release builds reproducible
• ci: verify reproducibility across separate build trees
• ci: handle Windows paths in reproducibility check
• ci: align release path remapping with reproducibility check
• ci: fix fuzz target and gate reproducibility check to main
• ci: make the reproducibility check compare two fresh builds
• build(deps): bump js-yaml from 4.3.0 to 4.3.1 in /docs-site
• test: mutation-cover env, export, and agent-connect config generation
• test: mutation-cover agent grant creation and revoke scope
• test: mutation-cover recipients, policy, and merge vault modules
• test: mutation-cover strict-mode and agent gates in hardening
• ci: add manual fuzz-coverage report workflow
• test: mutation-cover secret add, rotate, and group-scoping
• ci: add tracked fuzz seed corpus for the coverage workflow
• test: mutation-cover the plugin decrypt and meta-resolve paths
• build(deps): bump pyo3 from 0.29.0 to 0.29.1
• build(deps): bump napi-derive from 3.6.1 to 3.6.2
• build(deps): bump base64 from 0.23.0 to 0.23.1
• build(deps): bump rmcp from 3.1.0 to 3.1.1
• build(deps): bump the codeql-action group with 3 updates
• build(deps): bump clap_mangen from 0.3.0 to 0.3.1
• chore(deps): bump nanoid in the docs site
• test: cover SSH key rejection and commit-signature paths
• chore: release 0.10.3