v0.3.9

What's Changed

• chore(deps): update dependency @electric-sql/pglite-socket to v0.2.5 by @renovate[bot] in #76
• chore(deps): update actions/cache action to v5.1.0 by @renovate[bot] in #78
• chore(deps): update dependency @playwright/test to v1.61.1 by @renovate[bot] in #77
• chore(deps): update dependency mermaid to v11.16.0 by @renovate[bot] in #81
• chore(deps): update dependency knip to v6.20.0 by @renovate[bot] in #80
• chore(deps): update dependency knip to v6.21.0 by @renovate[bot] in #83
• chore(deps): update eslint toolchain by @renovate[bot] in #84
• chore(deps): update dependency @electric-sql/pglite-socket to v0.2.6 by @renovate[bot] in #82
• perf(review): run agent review jobs on work:pi by @dydx in #75
• chore(deps): update actions/cache action to v6 by @renovate[bot] in #85
• Fix six review findings + add OpenWiki docs by @dydx in #86
• chore: purge legacy "pi-workflows" naming (PiWorkflowsConfig → WorkConfig) by @dydx in #87
• Fix five findings from the second review run (1 critical, 1 high, 1 medium, 2 low) by @dydx in #88
• Unify the clean-error contract + rename legacy PI_WF_PROG by @dydx in #89
• Structured path / hint / docs on user-facing errors by @dydx in #90
• chore(deps): update dependency knip to v6.24.0 by @renovate[bot] in #92
• chore(deps): update dependency @electric-sql/pglite-socket to v0.2.7 by @renovate[bot] in #91
• chore(deps): update opentelemetry-js monorepo by @renovate[bot] in #94
• chore(deps): update eslint toolchain by @renovate[bot] in #93
• chore(deps): lock file maintenance by @renovate[bot] in #95
• feat(agent): pin loopback model providers through sandbox egress by @dydx in #96
• docs: fix flagship example that couldn't run + two drift bugs by @dydx in #97
• release: v0.3.9 by @dydx in #98

Full Changelog: v0.3.8...v0.3.9

v0.3.8

What's Changed

• feat(scaffold): vendor-neutral JSONC starter work.json by @dydx in #73
• release: v0.3.8 by @dydx in #74

Full Changelog: v0.3.7...v0.3.8

v0.3.7

What's Changed

• refactor(tempo-trace): restructure the action for readability by @dydx in #67
• feat(observability): job sub-phase spans — stage / provision / teardown by @dydx in #68
• feat(observability): split agent step time into setup vs model loop by @dydx in #69
• feat(images): bundle work:pi as a core image; agents reuse the baked-in Pi by @dydx in #70
• docs(images): document work:pi for faster agent steps by @dydx in #71
• release: v0.3.7 by @dydx in #72

Full Changelog: v0.3.6...v0.3.7

v0.3.6

What's Changed

• feat(workflows): trace-analysis — diagnose a run by its Tempo trace by @dydx in #58
• chore(deps): lock file maintenance by @renovate[bot] in #60
• docs: add Trace analysis example page by @dydx in #61
• chore(deps): lock file maintenance by @renovate[bot] in #62
• docs: examples cleanup — Review page + datasource/egress framing fix by @dydx in #63
• chore(deps): lock file maintenance by @renovate[bot] in #64
• chore(deps): pin dependencies by @renovate[bot] in #59
• Remove datasources idea by @dydx in #65
• release: v0.3.6 by @dydx in #66

Full Changelog: v0.3.5...v0.3.6

v0.3.5

What's Changed

• chore(deps): lock file maintenance by @renovate[bot] in #46
• chore(deps): pin dependencies by @renovate[bot] in #47
• feat(cli): add work version and surface version in doctor by @dydx in #48
• docs: design draft — walk back egress wall, broker secrets via work.json by @dydx in #49
• feat(egress,secrets): open egress for every job; ${{ secrets.* }} passthrough by @dydx in #50
• feat(secrets): fail fast when a referenced secret can't be fulfilled by @dydx in #51
• fix(docs): vitepress build break + CI guards to catch it by @dydx in #52
• Add sloc structural report; resync dogfooding docs to current ci by @dydx in #53
• Test cleanup (slices A+B): consolidate helpers, prune verified-redundant tests by @dydx in #54
• docs: reframe egress as open, not "mediated" by @dydx in #56
• release: v0.3.5 by @dydx in #57

Full Changelog: v0.3.4...v0.3.5

v0.3.4

What's Changed

• docs: light-touch copy edit to reduce AI-agent cadence by @dydx in #36
• docs: de-emphasize the Node 23.6 requirement by @dydx in #37
• example(k8s-triage): static kubeconfig, drop per-job kubectl setup by @dydx in #38
• chore(deps): update actions/checkout action to v7 by @renovate[bot] in #39
• chore(deps): update dependency pg to v8.22.0 by @renovate[bot] in #41
• Harden compiler, durable resume, and agent sandbox (review findings) by @dydx in #42
• Deep linking and retry-failed by @dydx in #43
• fix(test): pin resume-workdir resume to the host target double by @dydx in #44
• release: v0.3.4 by @dydx in #45

Full Changelog: v0.3.3...v0.3.4

v0.3.3

What's Changed

• Property-based testing + security hardening (fast-check) by @dydx in #26
• Security track S-3: egress credential-scope hardening (reject * in host derivation) by @dydx in #27
• Make work:base the default runs-on by @dydx in #28
• Testing strategy review + remediation by @dydx in #29
• chore(deps): pin dependencies by @renovate[bot] in #16
• ci: drop redundant test-unit job (don't run the suite twice) by @dydx in #30
• chore(deps): lock file maintenance by @renovate[bot] in #31
• chore(deps): update dependency knip to v6.17.1 by @renovate[bot] in #32
• chore(deps): update eslint toolchain to v8.61.1 by @renovate[bot] in #33
• chore(deps): lock file maintenance by @renovate[bot] in #34
• release: v0.3.3 by @dydx in #35

Full Changelog: v0.3.2...v0.3.3

v0.3.2

What's Changed

• fix(otel): true trace root + real service.version (v0.3.2) by @dydx in #25

Full Changelog: v0.3.1...v0.3.2

v0.3.1

What's Changed

• bolt on otlp reporting to grafana. tested on cloud by @dydx in #23
• release: v0.3.1 by @dydx in #24

Full Changelog: v0.3.0...v0.3.1

v0.3.0 — Scheduled triggers + `work serve`

Time-based triggers, and a single long-lived host to run them.

⚠️ Breaking

• work --web is removed — the local server is now the work serve
  subcommand (no alias). Update any scripts or service units: work --web →
  work serve (same --workspace / --port flags).

✨ New: scheduled triggers

• Declare on: schedule with one or more cron: expressions (UTC, five-field
  GitHub-Actions syntax), validated at parse time.
• work serve is the scheduler — it fires a workflow when a cron slot comes
  due, dispatching down the same path a manual run takes. No separate daemon, no
  CLI scheduling.
• Skip-by-default, no catch-up: a slot missed while the host is down is dropped
  and the schedule resumes at the next future slot — never a backfill flood. A
  slot-derived idempotency key fires each slot exactly once.
• Status surface — GET /api/schedules and a Schedules panel in the serve
  console (workflow, cron, last-fired, next-fire), read through the running host.

work serve

One process now serves the HTTP API, the browser console, the authenticated
webhook receiver, and the scheduler. History, deliveries, and schedule state
persist under <workspace>/.workflows/db/.

Docs

User-facing pages for on: schedule and the serve host, the --web → work serve
rename propagated across the site, and a test/e2e/scheduled/ gallery example.

---

What's Changed

• chore(deps): lock file maintenance by @renovate[bot] in #17
• Scheduled triggers: on: schedule cron, fired by work serve by @dydx in #22

Full Changelog: v0.2.3...v0.3.0