Skip to content

v0.18.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Aug 14:41
· 54 commits to main since this release
v0.18.0
0ec1e77

0.18.0 (2026-08-18)

Features

  • rook-maintainer: guard the fallback agent inside a rook checkout (5193e15), closes #55

Bug Fixes

  • rook-code-review: deny the review spine its in-place writer (4154fa7), closes #60
  • rook-code-review: fence the untrusted spans the inline spine reads (10bc0ce), closes #59
  • rook-code-review: pin authority docs on every path that reads them (d077514), closes #56
  • rook-code-review: stop the inline accuracy pass fetching unguarded (1b3aa89), closes #54
  • rook-maintainer: cut a truncated string on a rune boundary (0f78891)
  • rook-maintainer: escape the path validate-anchors prints (a3d5813), closes #58
  • rook-maintainer: fence the ref names the rebase notice injects (9ef79ea), closes #57
  • rook-maintainer: point the deny message at a tool that exists (41f789b)
  • rook-maintainer: surface a fetch the guard did not adjudicate (7aed828), closes #54
  • rook-maintainer: verify the cached tool binary before exec (49db402), closes #53
  • rook-maintainer: warn when the default branch is behind (1b43e8d)

Refactoring

  • rook-maintainer: give PR takeover its own skill (47c379d), closes #60

Documentation

  • rook-code-review: describe the fallback guard's checkout scope (ec9e014), closes #55
  • rook-code-review: name the apiserver audit log as an argv channel (03467ba), closes #69
  • rook-maintainer: diagram every procedure skill and keep it current (17fb345)

What's Changed

  • fix(rook-maintainer): close the open audit findings by @jhoblitt in #70

Resolved issues

  • #53 rook-code-review: tools/run.sh execs a cached binary with no integrity check
  • #54 rook-code-review: WebFetch guard does not bind on the inline path, and fails open silently
  • #55 rook-code-review: the general-purpose fallback escapes both the agent roster and the WebFetch guard
  • #56 rook-code-review: authority-order documents are read from the contributor's checkout
  • #57 rook-maintainer: rebase-notice.sh interpolates ref names raw into every prompt
  • #58 validate-anchors: path is interpolated unescaped, bypassing the package's own quote()
  • #59 rook-code-review: the treat-as-data rule ships without a delimiter
  • #60 rook-code-review: the skill declares no allowed-tools and inherits the session roster
  • #69 security.md: argv bullet omits the apiserver audit-log channel and can bless a literal env value

Contributors

jhoblitt
Assets 2
Loading