chore(main): release hve-core 3.2.0

[hve-core-release-please]

🤖 I have created a release beep boop

3.2.0 (2026-03-20)

✨ Features

• add -OutputPath parameter to Validate-MarkdownFrontmatter.ps1 (#1134) (fdf1bcf), closes #1006
• add action version consistency scan workflow (#1127) (4229df1)
• agent: MVE Experiment Designer (#976) (70f86ca)
• agents: add ADO Backlog Manager orchestrator agent (#800) (fae3987)
• agents: add meeting analyst agent for transcript analysis using work-iq (#502) (5345b5b)
• agents: add quick-reference line to RPI Phase 5 suggestions (#897) (9a90f39)
• agents: add RAI Planner, enhance SSSC Planner, and redesign Security Planner (#979) (06f826c)
• agents: add symmetric cross-system handoff to GitHub Backlog Manager (#952) (ba34a35)
• agents: Functional Code Review Agent — pre-PR functional correctness reviewer (#733) (9cf63b7)
• build: add Python extensions and uv 0.10.8 to devcontainer (#920) (9ca0579)
• build: add uv ecosystem to Dependabot configuration (#913) (2a4bd39)
• build: enable npm pinning enforcement in dependency scan (#838) (4e9e31f)
• build: migrate attestation actions to v4.1.0 and add SBOM verification docs (#841) (ca1e65b)
• collections: add four new validator checks (orphan, duplicate, companion, coverage) (#869) (1a96b73)
• devcontainer,security: add enterprise artifact hub configuration (#1032) (1d56d25)
• docs: add Rust coding standards and guidelines (#809) (d4c4899)
• extension: add Microsoft logo icon to VS Code Marketplace listings (#906) (82aca41)
• github: add declarative label management (#953) (a1a6845)
• instructions: add ADO backlog shared infrastructure (#786) (1914078)
• instructions: add ADO backlog sprint planning and capacity tracking (#788) (d6fb77d)
• instructions: add ADO triage workflow and prompt (#787) (cde0190)
• instructions: add shared story quality conventions and sprint planning (#803) (a2f18e3)
• prompts: add ADO discovery and work item prompts with agent routing (#790) (7e74523)
• prompts: add security review prompts (#1118) (ad30967)
• scripts: add dynamic Python skill discovery for lint/test (#957) (0a90f57)
• scripts: add Get-StandardTimestamp utility to CIHelpers module (#1126) (b273a4b)
• scripts: add Python copyright header validation (#905) (67df902)
• scripts: add Python skill support to Validate-SkillStructure (#903) (68479d9)
• scripts: add workflow npm command scanning to dependency pinning (#837) (6b5ae06)
• security: add basic security reviewer agent with owasp skills (#1008) (cb1fd05)
• security: add sigstore attestation bundles and fix component-detection action (#1148) (f79c272)
• skills: add Atheris fuzz harness with CI workflow integration (#1102) (d337e1d)
• skills: add PowerPoint automation skill with YAML-driven deck generation (#868) (00465cd)
• skills: convert hve-core-installer agent to self-contained skill (#846) (1d821fb)
• skills: enhance pr-reference skill with flexible filtering and base branch detection (#1095) (26a32ea)
• workflows: add devcontainer infrastructure change log workflow (#899) (8aca446)
• workflows: add milestone auto-close on stable and pre-release publishes (#834) (79362b1)
• workflows: add ms.date documentation freshness checking (#969) (3ed441c)
• workflows: add Python linting CI workflow with Ruff (#951) (f89f0eb)
• workflows: add Python testing CI workflow with pytest and Codecov (#934) (5e8306f)
• workflows: add uv and Python package sync to copilot-setup-steps (#921) (45d517d)

🐛 Bug Fixes

• build: override Linguist vendored flag for Python skill files (#1155) (0eee5b6)
• build: override serialize-javascript to >=7.0.3 for RCE fix (#876) (e49039a)
• build: resolve Pinned-Dependencies alerts for vsce npm commands in extension workflows (#782) (89dad9d)
• build: update undici and yauzl overrides for security audit (#1030) (2c2f92f)
• docs: add CLI Plugins to install.md navigation surfaces (#902) (79d6595)
• docs: add sidebar ordering for Design Thinking documentation (#832) (551fddc), closes #830
• docs: graduate design-thinking to preview and correct stale collection references (#831) (5110e35)
• docs: include project-planning in UX Designer install guidance (#908) (e7aa9bc)
• docs: remediate writing-style convention violations (#865) (68b04bc)
• docs: remove draft content announcement banner (#825) (b45de80)
• docs: remove unbounded path-to-regexp override breaking SSG (#1153) (d810018)
• docs: use actual clone paths instead of folder display names in multi-root workspace settings (#984) (5dbab82)
• instructions: replace black with ruff in uv-projects (#898) (b0c06d9)
• scripts: cover .github/ skill files in copyright header validation (#1055) (#1098) (27fbd33)
• scripts: eliminate phantom git changes from plugin generation (#1035) (e49a1b5)
• scripts: enable JSON log output for lint:version-consistency (#1033) (52b0885)
• security: calculate compliance score from total scanned dependencies (#930) (c112c3d)
• skills: add AST validation and namespace restriction for content-extra.py (#1027) (c50c7a3)
• skills: add depth limits to recursive PowerPoint processing functions (#1028) (bf08994)
• skills: harden XML parsing and blob writes in powerpoint extract (#1053) (89d24b1)
• skills: resolve ruff lint and format violations in powerpoint skill (#1048) (17bbe7a)
• workflows: add uv.lock dependencies submission have fork-skip condition (#1109) (dec56ac)
• workflows: automate weekly SHA staleness check with issue creation (#975) (1ea4caa)
• workflows: close Codecov integration gaps for Pester and pytest flags (#1106) (cca29b7)
• workflows: propagate uv sync errors in copilot-setup-steps (#961) (df88d7c)
• workflows: resolve release-please skip cascade and Python project discovery (#1043) (79993e2)
• workflows: scan only commit subjects for breaking change detection (#1157) (a38a657)

📚 Documentation

• clarify HVE Core Extension vs Installer messaging across documentation (#965) (0fceb8f)
• docs: add ADO integration user documentation (#935) (ec89302)
• docs: add Project Planning agent documentation (#936) (3a3a0fd)
• onboarding: overhaul marketplace onboarding and documentation site (#982) (4309e10)

♻️ Refactoring

• build: merge code-review collection into coding-standards (#863) (8027e7b)
• workflows: rename release pipeline workflows and add marketplace automation triggers (#829) (b6397f4)

🔧 Maintenance

• build: add clean:logs npm script (#1122) (f85fe02), closes #988
• build: add JSON reporter for cspell (#1123) (6d59f67)
• ci: add multi-arch support to copilot-setup-steps binary downloads (#955) (8d0c706)
• deps-dev: bump cspell from 9.6.4 to 9.7.0 in the npm-dependencies group (#839) (3fa16ff)
• deps: bump actions/dependency-review-action from 4.8.3 to 4.9.0 in the github-actions group across 1 directory (#942) (1a9b858)
• deps: bump cairosvg from 2.8.2 to 2.9.0 in /.github/skills/experimental/powerpoint (#1025) (f4deda7)
• deps: bump dompurify from 3.3.1 to 3.3.2 in /docs/docusaurus (#924) (d2060d6)
• deps: bump svgo from 3.3.2 to 3.3.3 in /docs/docusaurus (#880) (6dc2406)
• deps: bump the github-actions group across 1 directory with 4 updates (#1100) (2290dc0)
• deps: bump the github-actions group with 6 updates (#840) (f57bc01)
• docs: correct New-MsDateReport table rendering and refresh stale docs (#1114) (c2b806f)
• settings: remove orphaned Checkov config and stale gitignore entries (#870) (98fcd74)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.89%. Comparing base (a38a657) to head (9a9cb77).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1050      +/-   ##
==========================================
- Coverage   86.90%   86.89%   -0.02%     
==========================================
  Files          59       59              
  Lines        8774     8774              
==========================================
- Hits         7625     7624       -1     
- Misses       1149     1150       +1     

Flag	Coverage Δ
pester	85.32% <ø> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[auyidi1]

Looks fine. nit: Low — missing newline at EOF in all plugin.json files (existed before).

[hve-core-release-please]

🤖 Created releases:

• hve-core-v3.2.0

🌻