Skip to content

v0.7.1

Choose a tag to compare

@github-actions github-actions released this 27 Sep 19:01
· 5 commits to main since this release

Fixes found in the 0.6.1 review (#11), carried over to 0.7.

Security

  • Published provenance never contains credentials or local paths. PROVENANCE.md and the Tricks-Source: commit trailer name the source repo by its origin remote with any user:token@ removed, or local:<folder> when there is no remote. Before, a credentialed remote URL was published as is, and a source repo without a remote published its local path. If you published from a repo whose origin URL contains a token, check your distribution repository's history and rotate that token.

Fixes

  • tricks update exits 1 when it stops on conflicts or a skill fails (--dry-run still exits 0), so scripts and CI notice.
  • Inside an experiment's worktree, tricks diff <skill> compares that checkout: working and head are the experiment's.
  • Links that are copies say copy instead of live in link, list --links and the VS Code Links view.
  • VS Code: tricks.toml completion and validation now match the configuration New Tricks reads (policies review, pinned, paused; lint.strict-spec; removed keys such as use dropped). A unit test keeps them in step.

Full Changelog: v0.7.0...v0.7.1