v0.17.2

What's Changed

• chore(tools): absorb golangci-lint 2.13.1 by @kyle-sexton in #508

Full Changelog: v0.17.1...v0.17.2

v0.17.1

What's Changed

• build: bump anthropics/claude-code-action from 1.0.195 to 1.0.198 by @dependabot[bot] in #505
• build: bump the github-actions group across 3 directories with 1 update by @dependabot[bot] in #497
• chore(tools): absorb biome fallback-version 2.5.9 by @kyle-sexton in #506
• chore(tools): absorb OSV-Scanner 2.5.1 by @kyle-sexton in #507

Full Changelog: v0.17.0...v0.17.1

v0.17.0

What's Changed

• chore(standards-sync): drop the reusables' yq installs; advance the guard ref by @kyle-sexton in #504

Full Changelog: v0.16.0...v0.17.0

v0.16.0

What's Changed

• chore: re-pin the pr-issue-linkage self-caller to v0.14.2 by @kyle-sexton in #496
• build: bump anthropics/claude-code-action from 1.0.193 to 1.0.195 by @dependabot[bot] in #495
• feat(standards-sync): prep the reusables and guard for the Node engine by @kyle-sexton in #500
• fix(standards-sync): gate Node prep on the pinned ref carrying the engine by @kyle-sexton in #502

Full Changelog: v0.15.0...v0.16.0

v0.15.0

What's Changed

• build: bump anthropics/claude-code-action from 1.0.191 to 1.0.192 by @dependabot[bot] in #462
• feat(claude-review): declare the lane's execution verdict as workflow outputs by @kyle-sexton in #465
• feat(claude-lane-incident): escalate rate-limit storms across three distinct pull requests by @kyle-sexton in #469
• chore(claude): enable the melodic-software plugin marketplace at project scope by @kyle-sexton in #472
• build: bump anthropics/claude-code-action from 1.0.192 to 1.0.193 by @dependabot[bot] in #473
• chore(tools): absorb ruff 0.16.3 and govulncheck 1.7.0 by @kyle-sexton in #474
• chore(claude): install enabled plugins from a SessionStart hook by @kyle-sexton in #475
• refactor(claude): split cloud bootstrap out of the SessionStart hook by @kyle-sexton in #476
• feat(claude): install the pinned .NET SDK in cloud sessions by @kyle-sexton in #477
• chore: sync standards components by @melodic-standards-sync[bot] in #479
• chore: sync standards components by @melodic-standards-sync[bot] in #482
• docs: sweep renumbered standards ADR refs; mark REVIEW-CREDENTIAL grep count historical by @kyle-sexton in #486
• chore: sync standards components by @melodic-standards-sync[bot] in #484
• ci: adopt node-version-file for direct pins; tie composite defaults to .node-version by @kyle-sexton in #488
• ci: run Node-consuming contract jobs when only .node-version changes by @kyle-sexton in #489
• feat(watchdog): test mode with synthetic candidates and a test-only marker by @kyle-sexton in #492

Full Changelog: v0.14.2...v0.15.0

v0.14.2

What's Changed

• feat(claude-security-review): declare the lane's execution verdict as workflow outputs by @kyle-sexton in #461

Full Changelog: v0.14.1...v0.14.2

v0.14.1

What's Changed

• docs(claude-review-lanes): amend ledger — security-review-gate is disabled, not active by @kyle-sexton in #450
• fix(actions): ride out release-asset outages instead of failing the fleet by @kyle-sexton in #453
• fix(release): make published Releases the single source of truth for the version by @kyle-sexton in #451
• feat(release-gap-check): alarm when main outruns the newest Release by @kyle-sexton in #454
• fix(gates): validate for real on a cancelled prerequisite instead of failing closed by @kyle-sexton in #452
• fix(claude-lanes): gate bot actors on PR author association by @kyle-sexton in #456
• docs(claude-security-review): align two-tier posture with disabled gate by @kyle-sexton in #457
• fix(gates): fail closed on timed-out prerequisites mistaken for cancelled by @kyle-sexton in #459

Full Changelog: v0.14.0...v0.14.1

v0.14.0

What's Changed

• ci: close #122 — main-push burst collapse + hygiene lane by @kyle-sexton in #434
• feat(claude-assistant): V1 org @claude mention-responder by @kyle-sexton in #435
• ci: hygiene timeout margin + ADR checklist pin (#122 follow-up) by @kyle-sexton in #438
• feat(approval-agent): live APPROVE behind opt-in guardrails (#256) by @kyle-sexton in #436
• fix(claude-security-review): mitigate absent required check (#227) by @kyle-sexton in #440
• feat(claude-review): V2 move review logic to org plugin commands by @kyle-sexton in #437
• feat(select-runner): prefer-hosted-while-free billing-aware routing by @kyle-sexton in #439
• fix(claude-lanes): allow cursor[bot] to trigger both review lanes by @kyle-sexton in #442

Full Changelog: v0.13.0...v0.14.0

v0.12.0

What's Changed

• fix(claude-security-review): rule on an in-scope non-run in two tiers by @kyle-sexton in #397
• docs(claude-security-review): correct three claims the two-tier ruling falsified by @kyle-sexton in #398

Full Changelog: v0.11.0...v0.12.0

v0.11.0

What's Changed

• chore(ci): repin PR linkage self-check to v0.10.2 by @kyle-sexton in #356
• fix(claude-lane-incident): upload the dot-prefixed incident body by @kyle-sexton in #359
• test(claude-lane-incident): pin the coverage copy to the gate, not to its own wording by @kyle-sexton in #358
• test(claude-lane-incident): pin the whole body-artifact round trip by @kyle-sexton in #367
• docs(plan): record the Phase 4 acceptance run and hold the tag at DOING by @kyle-sexton in #362
• test(claude-lane-incident): narrow the table-vocabulary backstop's scope instead of widening its pattern by @kyle-sexton in #368
• fix(claude-lane-incident): state the real counting condition, drop the false recovery promise, and gate the body budget at the shape that binds by @kyle-sexton in #369
• chore(ruff): pin the action to 0.16.0, matching the fleet by @kyle-sexton in #373
• chore(zizmor): pin the lane to 1.28.0, matching the fleet by @kyle-sexton in #376
• chore(biome): pin the action to 2.5.6, matching the fleet's own consumer pin by @kyle-sexton in #378
• fix(tool-version-drift): record the absorb order for fleet-led pins by @kyle-sexton in #381
• build: bump anthropics/claude-code-action from 1.0.185 to 1.0.187 by @dependabot[bot] in #371
• chore(ruff): follow the fleet pin to 0.16.2 by @kyle-sexton in #384
• fix(claude-review): make a workflow-validation skip visible, and stop crediting it by @kyle-sexton in #387
• fix(claude-review): count only reviews that ran (A2: repoint + gate flip) by @kyle-sexton in #389
• feat(claude-lane-incident): route the incident issue to the attended queue by @kyle-sexton in #385
• docs(claude-review-lanes): advance Phase 4 to DONE with full disposition ledger by @kyle-sexton in #390
• docs(claude-review-lanes): correct stale present-tense claim about #331 by @kyle-sexton in #391
• fix(claude-security-review): fail closed on a validation self-skip by @kyle-sexton in #392
• chore: sync standards components by @melodic-standards-sync[bot] in #393
• fix(claude-security-review): make the inline-comment grant drop-proof by @kyle-sexton in #395

Full Changelog: v0.10.2...v0.11.0