chore(main): pre-release 4.1.133

[hve-core-release-please]

Pre-Release 4.1.133

✨ Features

• add Get-StandardTimestamp utility to CIHelpers module (feat(scripts): add Get-StandardTimestamp utility to CIHelpers module #1126)
• add -OutputPath parameter to Validate-MarkdownFrontmatter.ps1 (feat: add -OutputPath parameter to Validate-MarkdownFrontmatter.ps1 #1134)
• MVE Experiment Designer (feat(agent): MVE Experiment Designer #976)
• add basic security reviewer agent with owasp skills (feat(security): add basic security reviewer agent with owasp skills #1008)
• enhance pr-reference skill with flexible filtering and base branch detection (feat(skills): enhance pr-reference skill with flexible filtering and base branch detection #1095)
• add enterprise artifact hub configuration (feat(devcontainer,security): add enterprise artifact hub configuration #1032)
• add dynamic Python skill discovery for lint/test (feat(scripts): add dynamic Python skill discovery for lint/test #957)
• add symmetric cross-system handoff to GitHub Backlog Manager (feat(agents): add symmetric cross-system handoff to GitHub Backlog Manager #952)
• add Python linting CI workflow with Ruff (feat(workflows): add Python linting CI workflow with Ruff #951)
• add meeting analyst agent for transcript analysis using work-iq (feat(agents): add meeting analyst agent for transcript analysis using work-iq #502)
• add Python testing CI workflow with pytest and Codecov (feat(workflows): add Python testing CI workflow with pytest and Codecov #934)
• add ms.date documentation freshness checking (feat(workflows): add ms.date documentation freshness checking #969)
• add declarative label management (feat(github): add declarative label management #953)
• add quick-reference line to RPI Phase 5 suggestions (feat(agents): add quick-reference line to RPI Phase 5 suggestions #897)
• add PowerPoint automation skill with YAML-driven deck generation (feat(skills): add PowerPoint automation skill with YAML-driven deck generation #868)
• add uv and Python package sync to copilot-setup-steps (feat(workflows): add uv and Python package sync to copilot-setup-steps #921)
• add uv ecosystem to Dependabot configuration (feat(build): add uv ecosystem to Dependabot configuration #913)
• add Python extensions and uv 0.10.8 to devcontainer (feat(build): add Python extensions and uv 0.10.8 to devcontainer #920)
• add Python copyright header validation (feat(scripts): add Python copyright header validation #905)
• add Python skill support to Validate-SkillStructure (feat(scripts): add Python skill support to Validate-SkillStructure #903)
• add devcontainer infrastructure change log workflow (feat(workflows): add devcontainer infrastructure change log workflow #899)
• add Microsoft logo icon to VS Code Marketplace listings (feat(extension): add Microsoft logo icon to VS Code Marketplace listings #906)
• convert hve-core-installer agent to self-contained skill (feat(skills): convert hve-core-installer agent to self-contained skill #846)
• add four new validator checks (orphan, duplicate, companion, coverage) (feat(collections): add four new validator checks (orphan, duplicate, companion, coverage) #869)
• enable npm pinning enforcement in dependency scan (feat(build): enable npm pinning enforcement in dependency scan #838)
• add shared story quality conventions and sprint planning (feat(instructions): add shared story quality conventions and sprint planning #803)
• add ADO Backlog Manager orchestrator agent (feat(agents): add ADO Backlog Manager orchestrator agent #800)
• add ADO discovery and work item prompts with agent routing (feat(prompts): add ADO discovery and work item prompts with agent routing #790)
• add ADO backlog sprint planning and capacity tracking (feat(instructions): add ADO backlog sprint planning and capacity tracking #788)
• add ADO triage workflow and prompt (feat(instructions): add ADO triage workflow and prompt #787)
• add ADO backlog shared infrastructure (feat(instructions): add ADO backlog shared infrastructure #786)
• add Rust coding standards and guidelines (feat(docs): add Rust coding standards and guidelines #809)
• add workflow npm command scanning to dependency pinning (feat(scripts): add workflow npm command scanning to dependency pinning #837)
• migrate attestation actions to v4.1.0 and add SBOM verification docs (feat(build): migrate attestation actions to v4.1.0 and add SBOM verification docs #841)
• add milestone auto-close on stable and pre-release publishes (feat(workflows): add milestone auto-close on stable and pre-release publishes #834)
• add PowerShell coding standards, Pester testing conventions, and bash copyright headers (feat(instructions): add PowerShell coding standards, Pester testing conventions, and bash copyright headers #836)
• Functional Code Review Agent — pre-PR functional correctness reviewer (feat(agents): Functional Code Review Agent — pre-PR functional correctness reviewer #733)
• add Docusaurus 3 documentation site with GitHub Pages deployment (feat(docs): add Docusaurus 3 documentation site with GitHub Pages deployment #680)
• add workflow permissions validation for OpenSSF Scorecard compliance (feat(workflows): add workflow permissions validation for OpenSSF Scorecard compliance #759)
• add DT coach return path handoff to task-researcher (feat(agents): Add researcher return path handoff #591) (feat(agents): add DT coach return path handoff to task-researcher (#591) #758)
• add DT subagent handoff workflow instructions (feat(instructions): Subagent handoff workflow specification #592) (feat(instructions): add DT subagent handoff workflow instructions (#592) #757)
• create dt-method-06-deep.instructions.md (feat(instructions): Create dt-method-06-deep.instructions.md #602) (feat(instructions): create dt-method-06-deep.instructions.md (#602) #748)
• create dt-method-05-deep.instructions.md (feat(instructions): create dt-method-05-deep.instructions.md #747)
• add DT-aware task-implementor context instructions (feat(instructions): add DT-aware task-implementor context instructions #755)
• extract embedded PowerShell from workflows into testable scripts (feat(scripts): extract embedded PowerShell from workflows into testable scripts #738)
• add gitleaks binary-based secret scanning as PR gate (feat(workflows): add gitleaks binary-based secret scanning as PR gate #734)
• add SBOM generation, attestation, and diff tooling to release pipeline (feat(workflows): add SBOM generation, attestation, and diff tooling to release pipeline #730)
• add dt-learning-tutor agent for DT education (feat(agents): add dt-learning-tutor agent for DT education #662)
• add DT image prompt generation guidance for Method 5 (feat(instructions): add DT image prompt generation guidance for Method 5 #726)
• add DT-aware task-reviewer review context (feat(instructions): add DT-aware task-reviewer review context #714)
• add dt-method-next routing prompt (feat(prompts): add dt-method-next routing prompt #713)
• create dt-method-04-deep.instructions.md (feat(design-thinking): create dt-method-04-deep.instructions.md #709)
• add Implementation Space exit handoff prompt for DT workflows (feat(prompts): add Implementation Space exit handoff prompt for DT workflows #708)
• add Write-CIStepSummary markdown table to Test-SHAStaleness github output (feat(scripts): add Write-CIStepSummary markdown table to Test-SHAStaleness github output #660)
• add dt-handoff-solution-space prompt for Solution Spac… (feat(prompts): add dt-handoff-solution-space prompt for Solution Spac… #707)

🐛 Bug Fixes

• close Codecov integration gaps for Pester and pytest flags (fix(workflows): close Codecov integration gaps for Pester and pytest flags #1106)
• harden XML parsing and blob writes in powerpoint extract (fix(skills): harden XML parsing and blob writes in powerpoint extract #1053)
• cover .github/ skill files in copyright header validation (Fix copyright/license header validation to cover .github/ skill files #1055) (fix(scripts): cover .github/ skill files in copyright header validation (#1055) #1098)
• add uv.lock dependencies submission have fork-skip condition (fix(workflows): add uv.lock dependencies submission have fork-skip condition #1109)
• eliminate phantom git changes from plugin generation (fix(scripts): eliminate phantom git changes from plugin generation #1035)
• enable JSON log output for lint:version-consistency (fix(scripts): enable JSON log output for lint:version-consistency #1033)
• resolve ruff lint and format violations in powerpoint skill (fix(skills): resolve ruff lint and format violations in powerpoint skill #1048)
• resolve release-please skip cascade and Python project discovery (fix(workflows): resolve release-please skip cascade and Python project discovery #1043)
• add depth limits to recursive PowerPoint processing functions (fix(skills): add depth limits to recursive PowerPoint processing functions #1028)
• add AST validation and namespace restriction for content-extra.py (fix(skills): add AST validation and namespace restriction for content-extra.py #1027)
• update undici and yauzl overrides for security audit (fix(build): update undici and yauzl overrides for security audit #1030)
• use actual clone paths instead of folder display names in multi-root workspace settings (fix(docs): use actual clone paths instead of folder display names in multi-root workspace settings #984)
• propagate uv sync errors in copilot-setup-steps (fix(workflows): propagate uv sync errors in copilot-setup-steps #961)
• calculate compliance score from total scanned dependencies (fix(security): calculate compliance score from total scanned dependencies #930)
• include project-planning in UX Designer install guidance (fix(docs): include project-planning in UX Designer install guidance #908)
• add CLI Plugins to install.md navigation surfaces (fix(docs): add CLI Plugins to install.md navigation surfaces #902)
• replace black with ruff in uv-projects (fix(instructions): replace black with ruff in uv-projects #898)
• override serialize-javascript to >=7.0.3 for RCE fix (fix(build): override serialize-javascript to >=7.0.3 for RCE fix #876)
• remediate writing-style convention violations (fix(docs): remediate writing-style convention violations #865)
• add sidebar ordering for Design Thinking documentation (fix(docs): add sidebar ordering for Design Thinking documentation #832)
• graduate design-thinking to preview and correct stale collection references (fix(docs): graduate design-thinking to preview and correct stale collection references #831)
• remove draft content announcement banner (fix(docs): remove draft content announcement banner #825)
• resolve Pinned-Dependencies alerts for vsce npm commands in extension workflows (fix(build): resolve Pinned-Dependencies alerts for vsce npm commands in extension workflows #782)
• update prerelease publish to use even/odd convention (fix(workflows): update prerelease publish to use even/odd convention #822)
• update sidebar link color to meet WCAG AA contrast requirements (fix(docs): update sidebar link color to meet WCAG AA contrast requirements #814)
• harden even/odd versioning against regression and syntax errors (fix(workflows): harden even/odd versioning against regression and syntax errors #816)
• replace even/odd versioning with SemVer -rc.N suffixes (fix(workflows): replace even/odd versioning with SemVer -rc.N suffixes #811)
• ensure prerelease label exists before PR creation (fix(workflows): ensure prerelease label exists before PR creation #806)
• replace Docusaurus favicons with Microsoft logo (fix(docs): replace Docusaurus favicons with Microsoft logo #808)
• add missing subagents and shared instructions to collection manifests (fix(build): add missing subagents and shared instructions to collection manifests #804)
• standardize file path conventions for copilot-tracking output (fix(agents): standardize file path conventions for copilot-tracking output #784)
• enforce project-scoped artifact isolation across DT files (fix(instructions): enforce project-scoped artifact isolation across DT files #766)
• add top-level permissions to copilot-setup-steps.yml (fix(workflows): add top-level permissions to copilot-setup-steps.yml #760)
• update broken file directives and markdown links after collection directory reorg (fix(instructions): update broken file directives and markdown links after collection directory reorg #743)
• add pre-release companion pipeline with even/odd versioning (fix(workflows): add pre-release companion pipeline with even/odd versioning #735)
• exclude auto-generated CHANGELOG.md from spell check (fix(settings): exclude auto-generated CHANGELOG.md from spell check #756)
• add job-level permissions to extension-publish.yml (fix(workflows): add job-level permissions to extension-publish.yml #729)
• resolve handoff dependencies using display names (fix(extension): resolve handoff dependencies using display names #727)
• add job-level permissions to validate-version in extension-publish-prerelease (fix(workflows): add job-level permissions to validate-version in extension-publish-prerelease #731)
• replace parent-directory VS Code settings paths with per-subdirectory enumeration (fix(docs): replace parent-directory VS Code settings paths with per-subdirectory enumeration #732)

📚 Documentation

• overhaul marketplace onboarding and documentation site (docs(onboarding): overhaul marketplace onboarding and documentation site #982)
• add Project Planning agent documentation (docs(docs): add Project Planning agent documentation #936)
• clarify HVE Core Extension vs Installer messaging across documentation (docs: clarify HVE Core Extension vs Installer messaging across documentation #965)
• add ADO integration user documentation (docs(docs): add ADO integration user documentation #935)
• add Design Thinking documentation and DT-to-RPI handoff (docs(design-thinking): add Design Thinking documentation and DT-to-RPI handoff #789)
• add customization guides for HVE Core artifacts (docs(docs): add customization guides for HVE Core artifacts #772)
• reconcile documentation against implementation (docs: reconcile documentation against implementation #771)
• document accepted Token-Permissions risks and add lint:dependency-pinning (docs(security): document accepted Token-Permissions risks and add lint:dependency-pinning #763)
• add Design Thinking section to hve-core-all collection description (docs(build): add Design Thinking section to hve-core-all collection description #762)

♻️ Refactoring

• merge code-review collection into coding-standards (refactor(build): merge code-review collection into coding-standards #863)
• rename release pipeline workflows and add marketplace automation triggers (refactor(workflows): rename release pipeline workflows and add marketplace automation triggers #829)
• move collection scripts from plugins to collections (refactor(scripts): move collection scripts from plugins to collections #728)
• remove duplicate git diff logic in frontmatter validator (refactor: remove duplicate git diff logic in frontmatter validator #473)

🔧 Maintenance

• add JSON reporter for cspell (chore(build): add JSON reporter for cspell #1123)
• add clean:logs npm script (chore(build): add clean:logs npm script #1122)
• correct New-MsDateReport table rendering and refresh stale docs (chore(docs): correct New-MsDateReport table rendering and refresh stale docs #1114)
• bump the github-actions group across 1 directory with 4 updates (chore(deps): bump the github-actions group across 1 directory with 4 updates #1100)
• bump cairosvg from 2.8.2 to 2.9.0 in /.github/skills/experimental/powerpoint (chore(deps): bump cairosvg from 2.8.2 to 2.9.0 in /.github/skills/experimental/powerpoint #1025)
• add multi-arch support to copilot-setup-steps binary downloads (chore(ci): add multi-arch support to copilot-setup-steps binary downloads #955)
• bump actions/dependency-review-action from 4.8.3 to 4.9.0 in the github-actions group across 1 directory (chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 in the github-actions group across 1 directory #942)
• bump dompurify from 3.3.1 to 3.3.2 in /docs/docusaurus (chore(deps): bump dompurify from 3.3.1 to 3.3.2 in /docs/docusaurus #924)
• remove orphaned Checkov config and stale gitignore entries (chore(settings): remove orphaned Checkov config and stale gitignore entries #870)
• bump svgo from 3.3.2 to 3.3.3 in /docs/docusaurus (chore(deps): bump svgo from 3.3.2 to 3.3.3 in /docs/docusaurus #880)
• bump the github-actions group with 6 updates (chore(deps): bump the github-actions group with 6 updates #840)
• bump cspell from 9.6.4 to 9.7.0 in the npm-dependencies group (chore(deps-dev): bump cspell from 9.6.4 to 9.7.0 in the npm-dependencies group #839)
• pre-release 3.1.46 (chore(main): pre-release 3.1.46 #823)
• pre-release 3.1.44 (chore(main): pre-release 3.1.44 #819)
• bump basic-ftp from 5.0.5 to 5.2.0 (chore(deps-dev): bump basic-ftp from 5.0.5 to 5.2.0 #780)
• standardize script path references in SKILL.md files (chore(skills): standardize script path references in SKILL.md files #768)
• bump the github-actions group across 1 directory with 2 updates (chore(deps): bump the github-actions group across 1 directory with 2 updates #752)

---

Managed automatically by pre-release workflow.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.90%. Comparing base (b273a4b) to head (8f02536).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1140      +/-   ##
==========================================
- Coverage   86.91%   86.90%   -0.02%     
==========================================
  Files          59       59              
  Lines        8752     8752              
==========================================
- Hits         7607     7606       -1     
- Misses       1145     1146       +1     

Flag	Coverage Δ
pester	85.34% <ø> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.