v0.21.0

What's Changed

🔧 Other Changes

• Add OpenClaw integration documentation page by @sergio-sisternes-epam in #1769
• Delete skill folders for removed packages by @sergio-sisternes-epam in #1767
• Remove apm marketplace publish and marketplace doctor alias (#1134) by @sergio-sisternes-epam in #1766
• Add allowExecutables approval gate for dependency executables by @sergio-sisternes-epam in #1723
• feat(install): experimental Copilot canvas extensions by @sergio-sisternes-epam in #1689
• Fix managed_section ignored in distributed and single-agents compile paths by @sergio-sisternes-epam in #1768
• fix: restore devDependencies.mcp on apm install (closes #1780) by @danielmeppiel in #1787
• Add integration tests for executables approval gate by @sergio-sisternes-epam in #1785
• test: raise integration coverage to 75% by @sergio-sisternes-epam in #1788
• fix(policy): carry all ApmPolicy fields through inheritance merge by @danielmeppiel in #1791
• test(integration): fix merge-queue failures from removed publish/doctor modules by @danielmeppiel in #1797
• docs(policy): clarify what apm-policy.yml governs by @danielmeppiel in #1792
• docs(governance): surface install-vs-runtime plane boundary on travelled paths by @danielmeppiel in #1796
• feat(policy): declarable integrity keys (require_hashes, fail_on_drift) by @danielmeppiel in #1794
• fix(ci): spec-conformance Mode B gate fails closed on unresolvable merge-base by @danielmeppiel in #1801
• fix(marketplace): resolve marketplace check against each entry's host + token by @leocamello in #1763
• feat: add Google Antigravity CLI (agy) as first-class APM target by @sergio-sisternes-epam in #1770
• test(marketplace): pin ADO sourceBase authoring->consume e2e + docs (#1010) by @danielmeppiel in #1810
• feat(audit): surface unmanaged artifacts with reason, type, and deny-conflict by @danielmeppiel in #1793
• feat(export): SBOM export + declared-license recorder (U5 + U6) by @danielmeppiel in #1820
• test(integration): fix 3 semantic-merge test breakages in merge queue by @danielmeppiel in #1834
• fix(outdated): degrade per-dep check failures instead of crashing; stabilize e2e teardown by @danielmeppiel in #1836
• docs(cli): list kiro in update target help by @WilliamK112 in #1821
• fix: emit required "version": 1 in .cursor/hooks.json by @sergio-sisternes-epam in #1840
• Fix {name} placeholder ignored in apm pack marketplace version resolution (#1822) by @sergio-sisternes-epam in #1841
• docs: restore "What to commit" guidance (fix #1837) by @sergio-sisternes-epam in #1839
• Fix marketplace --ref not propagated to relative plugin sources (#1811) by @sergio-sisternes-epam in #1824
• feat(install): route CLI shorthands to default registry when configured by @nadav-y in #1816
• Add extra passthrough for harness-specific MCP keys (#1670) by @sergio-sisternes-epam in #1765
• fix: correct stale tar.gz and --tarball references after zip default by @nadav-y in #1779
• Fix --skill to merge additively with existing skills in apm.yml by @sergio-sisternes-epam in #1786
• feat: add APM Contributor Dashboard canvas package by @sergio-sisternes-epam in #1825
• chore: release v0.21.0 by @danielmeppiel in #1851

New Contributors

• @leocamello made their first contribution in #1763
• @WilliamK112 made their first contribution in #1821

Full Changelog: v0.20.0...v0.21.0