v0.22.0

What's Changed

🔧 Other Changes

• Fix marketplace install ignoring GitLab host for url-type sources (#1848) by @sergio-sisternes-epam in #1853
• fix: honor CODEX_HOME for user-scope codex config (closes #1861) by @danielmeppiel in #1863
• Fix apm pack omitting version for INTERNAL/private github.com repos by @sergio-sisternes-epam in #1854
• Fix no-orphaned-packages false positive for local-path sub-package deps by @sergio-sisternes-epam in #1855
• Fix cross-package file protection in stale cleanup (#1831) by @sergio-sisternes-epam in #1856
• Add cascading policy repo discovery with ADO support by @sergio-sisternes-epam in #1830
• Remove daily test improver workflow by @danielmeppiel in #1870
• docs(changelog): reconcile [Unreleased] with PRs merged since v0.21.0 by @danielmeppiel in #1871
• feat(targets): converge windsurf skills onto .agents/skills/ by @danielmeppiel in #1802
• Expose apm-version as an import input on shared/apm.md by @danielmeppiel with @Copilot in #1842
• harden(executables): expand allowExecutables gate to mcp and canvas; store approvals user-local by @sergio-sisternes-epam in #1865
• Add configurable default install target (apm config target) with install-time fallback precedence by @danielmeppiel with @Copilot in #1881
• test(ci): empirical proof that the apm-version import-default pins non-opting consumers by @danielmeppiel in #1891
• ci(runtime): make live-inference smoke honestly non-blocking by @danielmeppiel in #1900
• feat(governance): Executable Trust Governance v1 - deny-wins resolver, vocab unification, audit fix by @danielmeppiel in #1875
• chore(gh-aw): upgrade compiler v0.76.1 -> v0.80.9 and recompile all locks by @danielmeppiel in #1903
• fix(install): make Windows pip fallback resilient to stderr under ErrorActionPreference=Stop (closes #1874) by @danielmeppiel in #1876
• feat(compile): explicit apm compile -g + install-time hint for global root context by @danielmeppiel in #1632
• ci: bump apm-action pin to v1.10.0 + pack-format drift trap by @danielmeppiel in #1907
• fix(install): persist --target into auto-bootstrapped apm.yml (#1743) by @danielmeppiel in #1901
• test(ci): repair merge-queue Integration Tests regressions by @danielmeppiel in #1909
• fix(self-update): improve update UX on macOS by @nadav-y in #1872
• fix(registry): registry deps as first-class citizens in display/UX surfaces by @nadav-y in #1908
• fix(tests): make Windows CI-failing tests platform-portable by @danielmeppiel in #1910
• fix(hooks): per-target hook manifest selection (closes #1892) by @danielmeppiel in #1902
• fix(install): write deployed files with LF on every platform by @danielmeppiel in #1913
• feat(lockfile): record installed package name + version per entry (#1888) by @danielmeppiel in #1904
• perf: ADO REST metadata fetcher to avoid clone-based fetch by @Aaryan-Dadu in #1852
• refactor(cowork): DRY internal hot-path cleanup (closes #922) by @danielmeppiel in #1914
• refactor(lockfile): sweep cross-target skill maps onto .agents/skills/ (closes #1805) by @danielmeppiel in #1912
• feat(config): persist non-secret installer prefs for self-update (closes #667) by @danielmeppiel in #1915
• fix(marketplace): propagate marketplace --ref to string sources; fix GitLab slash-ref proxy filenames by @chkp-roniz in #1880
• fix(install): adopt CRLF-source files against LF-deployed targets on Windows by @danielmeppiel in #1916
• docs(compile): document targets: to pin the committed generated set (#1342) by @danielmeppiel in #1583
• chore: release v0.22.0 by @danielmeppiel in #1920
• fix(tests): stub package name/version in MCP lockfile integration mocks by @danielmeppiel in #1922

Full Changelog: v0.21.0...v0.22.0