v2.30.0

2.30.0 (2026-10-11)

Bug Fixes

• ci-check: read the git config through one descriptor (4c48878)
• ci-check: round-2 review batch 1, hostile input and a throw that read as clean (1b69198)
• ci-check: round-2 review batch 2, nine shapes the round-2 code let through (d82555e)
• ci-check: round-2 review batch 3a, spellings that hid an open agent (a459dd7)
• ci-check: round-2 review batch 3b, logic and interactions (cace7ff)
• ci-check: round-2 review batch 3c, false positives the round-2 rules added (6d60617)
• ci-check: T.6 gate and input semantics for agent workflows (caf8246)

Features

• ci-check: T.1 judge a local reusable workflow by its callers (baabca6)
• ci-check: T.10 Latin words spelled with Cyrillic or Greek look-alike letters (efff3aa)
• ci-check: T.2a agents run as a command, and labels issue forms apply (bc0c334)
• ci-check: T.2b agents behind wrapper and local actions (8673a73)
• ci-check: T.3 unpinned MCP servers for every launcher, and unpinned plugin marketplaces (8383130)
• ci-check: T.4 reach through the triggering run's artifacts and earlier step outputs (f4e7aaa)
• ci-check: T.5 scheduled agents that read what strangers write, and labels issue forms apply (754cbac)
• ci-check: T.7 fork code in a gated agent job (6fcc40e)
• ci-check: T.8 a skill grant counts when it meets text strangers write (e361de3)
• ci-check: T.9 more settings grants that run code without a prompt (1c0877f)