v0.11.0

What's Changed

• feat: prepare CWB Preflight for GitHub Marketplace by @kohli217 in #162
• feat: surface instruction findings as GitHub Check annotations by @kohli217 in #164
• feat: annotate tracked secret-risk files in GitHub and SARIF by @kohli217 in #166
• feat: add safe repository-level suppressions by @kohli217 in #168
• feat: recognize common Python validation commands by @kohli217 in #170
• test: add multi-agent Python validation demo by @kohli217 in #172
• test: add plexe Poetry/Ruff public regression fixture by @kohli217 in #174
• chore: prepare v0.11.0 release by @kohli217 in #176

Full Changelog: v0.10.0...v0.11.0

v0.10.0

What's Changed

• fix: resolve exact pnpm path filters by @kohli217 in #145
• fix: honor safe cd context for package validation by @kohli217 in #147
• fix: resolve npm post-script prefix targets by @kohli217 in #149
• fix: resolve pnpm post-script filter targets by @kohli217 in #151
• fix: avoid root script checks for pnpm recursive commands by @kohli217 in #153
• fix: avoid root script checks for npm workspaces by @kohli217 in #155
• fix: resolve npm workspace directory selectors by @kohli217 in #158
• chore: prepare v0.10.0 release by @kohli217 in #160

Full Changelog: v0.9.0...v0.10.0

v0.9.0

What's Changed

• docs: publish live CWB Preflight App links by @kohli217 in #130
• fix: validate scripts against targeted workspaces by @kohli217 in #132
• fix: resolve directory-targeted package scripts by @kohli217 in #134
• fix: parse inline Yarn cwd options by @kohli217 in #136
• fix: resolve npm post-script workspace flags by @kohli217 in #138
• fix: recognize safe Claude AGENTS aliases by @kohli217 in #140
• fix: recognize safe Gemini AGENTS aliases by @kohli217 in #141
• chore: prepare v0.9.0 release by @kohli217 in #143

Full Changelog: v0.8.0...v0.9.0

v0.8.0

What's Changed

• Explain the adoption value at the top of the README by @kohli217 in #95
• Sync examples and roadmap with v0.7 behavior by @kohli217 in #96
• feat: add stable integration contract for future GitHub App and skills by @kohli217 in #97
• feat: add GitHub Check adapter for future App service by @kohli217 in #98
• feat: add GitHub webhook verification and event normalization by @kohli217 in #99
• feat: codify minimum GitHub App registration settings by @kohli217 in #100
• feat: add repository-only preflight for remote GitHub App scans by @kohli217 in #101
• feat: add network-free GitHub App service core by @kohli217 in #102
• feat: add deterministic GitHub App delivery contract by @kohli217 in #103
• feat: securely check out exact GitHub webhook revisions by @kohli217 in #104
• fix: include required User-Agent in GitHub API requests by @kohli217 in #105
• feat: add least-privilege GitHub App worker runtime by @kohli217 in #106
• feat: add GitHub App Manifest registration flow contract by @kohli217 in #107
• feat: deploy GitHub App with Cloud Run and Pub/Sub by @kohli217 in #108
• feat: deduplicate completed GitHub App deliveries by @kohli217 in #109
• security: harden Cloud Run setup and container context by @kohli217 in #110
• security: expire setup tokens before GitHub App deployment by @kohli217 in #111
• feat: add completely free GitHub App deployment by @kohli217 in #112
• ux: streamline zero-cost GitHub App setup by @kohli217 in #113
• fix: isolate Wrangler from Windows Node libuv crashes by @kohli217 in #114
• fix: handle harmless native stderr in Windows PowerShell by @kohli217 in #115
• fix: reuse existing Cloudflare KV namespace by @kohli217 in #116
• fix: guide one-time workers.dev onboarding by @kohli217 in #117
• fix: use current Cloudflare Workers dashboard for subdomain setup by @kohli217 in #118
• fix: reuse persisted Cloudflare GitHub token by @kohli217 in #119
• fix: remove GitHub Variables permission from free deploy by @kohli217 in #120
• fix: make GitHub App manifest callback cookie-independent by @kohli217 in #121
• fix: recover Cloudflare manifest callback exceptions by @kohli217 in #122
• fix: make live GitHub App worker import the src package by @kohli217 in #123
• fix: authenticate Git fetch with GitHub App installation tokens by @kohli217 in #124
• docs: add scoped monorepo usage demo by @kohli217 in #125
• docs: mark GitHub App integration as shipped by @kohli217 in #126
• test: add public Gemini AGENTS pattern by @kohli217 in #127
• docs: add GitHub App public promotion runbook by @kohli217 in #128
• chore: prepare v0.8.0 release by @kohli217 in #129

Full Changelog: v0.7.0...v0.8.0

v0.7.0

What's Changed

• Publish the exact artifacts built by the Release workflow by @kohli217 in #84
• Deduplicate root package-manager conflicts in preflight by @kohli217 in #85
• Keep tracked secret-risk filenames visible inside pruned directories by @kohli217 in #87
• Keep the PowerShell installer aligned with releases by @kohli217 in #88
• Handle brace-wrapped scoped instruction selectors by @kohli217 in #86
• Detect common Go, Rust, JVM, and .NET project roots by @kohli217 in #89
• Detect environment-specific .env secret-risk files by @kohli217 in #90
• Add a CI gate that requires READY preflight state by @kohli217 in #92
• Handle undecodable Git filenames in tracked-file scanning by @kohli217 in #93
• Prepare v0.7.0 release by @kohli217 in #94

Full Changelog: v0.6.1...v0.7.0

v0.6.1

What's Changed

• Use repository package-manager evidence in tooling checks by @kohli217 in #73
• Prune generated directories during audit traversal by @kohli217 in #74
• Add package-manager-specific doctor guidance by @kohli217 in #75
• Validate scripts behind package-manager workspace flags by @kohli217 in #76
• Surface conflicting Node package-manager evidence in preflight by @kohli217 in #80
• build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in #77
• build(deps): bump actions/download-artifact from 5.0.0 to 8.0.1 by @dependabot[bot] in #78
• build(deps): bump github/codeql-action/upload-sarif from 4.37.7 to 4.38.1 by @dependabot[bot] in #79
• Ignore symlinked repository markers by @kohli217 in #81
• Add package-manager-specific SARIF remediation help by @kohli217 in #82
• Prepare v0.6.1 release by @kohli217 in #83

Full Changelog: v0.6.0...v0.6.1

v0.6.0

What's Changed

• Guard release metadata and Action docs against drift by @kohli217 in #58
• Run the reusable Action preflight only once by @kohli217 in #59
• Refresh roadmap to match current project state by @kohli217 in #60
• Support multiline frontmatter scope lists by @kohli217 in #61
• Prune generated directories during instruction discovery by @kohli217 in #62
• Avoid false script findings for workspace package-manager commands by @kohli217 in #63
• Detect nested Claude Code instructions by @kohli217 in #64
• Detect nested Gemini CLI context files by @kohli217 in #65
• Honor Gemini CLI custom context filenames by @kohli217 in #66
• Expose structured outputs from the reusable Action by @kohli217 in #67
• Extract chained validation commands separately by @kohli217 in #68
• Test the reusable Action integrity gate end to end by @kohli217 in #69
• Generate AGENTS validation commands with the detected package manager by @kohli217 in #70
• Refuse symlinked repository inputs and AGENTS targets by @kohli217 in #71
• Prepare v0.6.0 release by @kohli217 in #72

Full Changelog: v0.5.2...v0.6.0

v0.5.2

What's Changed

• Hash-pin Python workflow tooling by @kohli217 in #56
• Prepare v0.5.2 release by @kohli217 in #57

Full Changelog: v0.5.1...v0.5.2

v0.5.1

What's Changed

• Add a reproducible Before → After first-run demo by @kohli217 in #40
• Add a direct try-it and usage-report adoption path by @kohli217 in #42
• Improve newcomer and false-positive reporting paths by @kohli217 in #46
• Add OpenSSF Scorecard security health reporting by @kohli217 in #48
• Clarify private vulnerability reporting by @kohli217 in #49
• Pin GitHub Actions to exact commits by @kohli217 in #50
• Add dependency review to pull requests by @kohli217 in #51
• Scope workflow token permissions to jobs by @kohli217 in #52
• Add provenance attestations to releases by @kohli217 in #53
• Prepare v0.5.1 release by @kohli217 in #54
• Publish to PyPI after successful releases by @kohli217 in #55

Full Changelog: v0.5.0...v0.5.1

v0.5.0

What's Changed

• Add cross-agent instruction integrity and safe fix planning by @kohli217 in #38

Full Changelog: v0.4.0...v0.5.0