v1.2.0

1.2.0 (2026-10-17)

Added

• infra: type-check the services' JavaScript with tsc (#101) (3d4206f)
• run without uFawkesRes, Backstage app source, clean-host verified (#122) (4ca7eb8)
• shift-left: keep this clone's git hooks in step with the hook config (#105) (692dafd)
• SQLite for score-service and Backstage, built-in Postgres for Coder (#57) (#119) (630f45c)
• types: add a mypy type check over tests/ (#99) (#120) (167d074)

Fixed

• changelog: restore release history; repair issue-form schema (#113) (3500cab)
• make: build Backstage from a clean clone (#98) (#130) (bdd4868)
• make: wait for healthy services in make up (#127) (b55498a)
• score-service: reject plugins that resolve outside the plugins dir (#125) (ed710fd)
• templates: replace unrunnable npm run verify; drop dangling labels (#111) (d803baf)

Docs

• changelog: add Keep a Changelog header and Unreleased section (#108) (f646809)
• governance: add CODE_OF_CONDUCT, expand FUNDING.yml (#107) (e297562)
• issue-templates: add bug_report, feature, security templates (#110) (cd1648b)
• pr-template: add standardized PR template (#109) (190e2df)
• readme: cite research basis (paruff/uFawkes.dev#65) (#117) (e1355c1)

Chores

• ci: adopt Pipe v1.15.0-beta.1 and the CI image (#181) (#114) (edd0fe5)
• ci: bump uFawkesPipe reusables to v1.16.0-beta.1 (#116) (4f9e115)
• infra: adopt the OpenCode shift-left plugin (#153) (#115) (7147e2d)
• release: prepare v1.1.1 (#131) (557673f)

v1.2.0-beta.1

uFawkesDevX v1.2.0-beta.1 (beta of the "v0.1.0" release plan, AC-DEVX-01)

Runs without uFawkesRes. make up brings up Coder and Backstage against storage defined inside the documented setup.

• ADR-0001: no separate database service. SQLite for Score and Backstage, Coder's built-in Postgres (#57).
• Backstage app source included (Yarn 4, Node 24), so make up builds the image.
• Spec, design and plan moved to docs/ai-sdlc/v0.1.0/.
• Clean-host run transcript: docs/ai-sdlc/v0.1.0/clean-host-run.txt

Known exception

Dependency Review flags node-forge 1.4.0 (GHSA-86w9-cpqp-85rv, HIGH). No patched version exists upstream. Accepted as KL-16 in docs/KNOWN_LIMITATIONS.md; Backstage is for localhost use only.

Closes #81.

v1.1.1: clean-clone Backstage build

v1.1.1: a clean clone now builds and starts all five services

Fixed

• make build / make build-backstage bundle the Backstage backend first, so a clean clone builds (#98)
• make check-gid reads the GID from inside a container (Colima, Docker Desktop)

Added

• CI job that builds and starts all five services from a clean checkout and prints make status

Needs Node 22 or 24 on the host. Full changelog: https://github.com/paruff/uFawkesDevX/blob/main/CHANGELOG.md

v1.1.0

1.1.0 (2026-10-07)

Added

• shift-left: adopt uFawkesPipe's shared shift-left hooks (C4) (#95) (69a8635)

Fixed

• deps: bump proxy-addr to 2.0.8 to clear CVE-2026-90711 (#103) (c9143cc)

v1.0.1

1.0.1 (2026-10-03)

Chores

• devcontainer: declare hostRequirements (2 CPUs, 4 GB) (#94) (41ee9eb)
• devcontainer: pin fawkes-space 2.0.0-rc.3 (#92) (a8320d4)

v1.0.0

1.0.0 (2026-10-03)

Added

• Add Developer Control Plane Docker Compose stack (adb59a2)
• add GitOps lifecycle gates to uFawkesDevX (d6f5b0e)
• add GitOps lifecycle gates to uFawkesDevX (2bd3106)
• Add implementation plan and specification for uFawkesDevX v0.2 (4352dd5)
• ci: add opencode GitHub Action, ported from fawkes (5264837)
• ci: add opencode GitHub Action, ported from fawkes (eb759a1)
• ci: add release-please automated release proposals (2164bdd)
• ci: add release-please automated release proposals (45b8e02)
• ci: unified pre-commit, unit-test suites, terraform/go lint scoping (#60) (e6f1a9f)
• devcontainer: use unified GHCR image ghcr.io/paruff/ufawkesai-devcontainer:latest (#61) (b70df43)
• devx: add .woodpecker.yml self-CI (DX-007) (fcd1e61)
• devx: add CI pipeline and comprehensive test suite (94eb0f5)
• devx: add CI pipeline and comprehensive test suite (edb1495)
• devx: add Coder devcontainer workspace template (DX-004) (892faa2)
• devx: add Coder devcontainer workspace template (DX-004) (996081d), closes #28
• devx: add Cookiecutter golden path templates (DX-006) (9186984)
• devx: add Cookiecutter golden path templates (DX-006) (3638592), closes #30
• devx: migrate compose.yaml to v0.2 topology (DX-002) (0fc7363)
• devx: migrate compose.yaml to v0.2 topology (DX-002) (439e45c), closes #26
• devx: reconcile Backstage catalog with 5 uFawkes planes (DX-005) (6aeca9c)
• devx: reconcile Backstage catalog with 5 uFawkes planes (DX-005) (310eef6), closes #29
• score-service: generate compose via score-compose, trigger pipeline webhook (DX-003) (51f69d6), closes #27

Fixed

• ci: add .env setup step before Docker Compose in test jobs (4800579)
• ci: bump uFawkesPipe to v1.2.0, disable PR size check (7498ffd)
• ci: exclude templates/ from Trivy fs scan (17ca873)
• ci: merge main — align with uFawkesPipe, deterministic pre-commit (e0fb33a)
• ci: remove commit-msg hook, add live model resolver (51349f4)
• ci: remove prettier hook, fix pre-commit formatting (25e082e)
• ci: remove Terraform/TFLint steps re-added by mistake (ce5ec41)
• ci: resolve CI Pipeline startup_failure and pre-commit failures (487bc86)
• ci: resolve merge conflict — accept deletion of reusable-lint.yml (28aac62)
• ci: resolve merge conflicts — use uFawkesPipe reusable workflows (7870b06)
• ci: resolve merge conflicts with main — align with uFawkesPipe pattern (0269556)
• deps: bump fast-uri to 3.1.8 to clear CVE-2026-86472 (#78) (8705a11)
• devx: add CODER_ACCESS_URL localhost warning, rename compose test file (DX-002) (40fcbe1)
• devx: warn on localhost CODER_ACCESS_URL, rename compose test (bd09898)
• opencode: translate MCP config to opencode schema (type/command/enabled) (#62) (de2dbea)
• Resolve pre-commit hook failures (131c468)
• score-service: generate compose via score-compose, trigger pipeline webhook (DX-003) (ff3e1ef)
• score-service: validate name in generateComposeFromSpec (CodeQL) (9c228c0)
• security: use placeholder value for POSTGRES_PASSWORD in .env.example (dcd2138)
• suite: sync 4 agents, hooks, model routing from uFawkesAI template (#59) (045a534)
• test: allowlist anomalyco/ for opencode.yml's vendored action (140101d)
• test: allowlist googleapis/ for release-please.yml's vendored action (38c44d1)
• test: cast yaml.safe_load returns to str for mypy (8920be5)

Docs

• add cross-repo stack links (2a0797f)
• add INTENT.md; stop presenting deprecated uFawkesRes as live (#58) (2a4b888), closes #55 #56
• ci: add CI fix report and agent logs for PR #21 (d1cff68)
• ci: update CI diagnosis and fix report for PR #20 (7138ff9)
• design: add design documentation for uFawkesDevX v0.2 (1ea0331)
• design: add design documentation for uFawkesDevX v0.2 including component map, repository structure, and service configurations. (1ea0331)
• design: point to the suite design reference (#87) (1506573)
• design: say the primary button is Flame, not Indigo (#89) (d9fc197)
• docs: stop presenting uFawkesRes as the live Postgres provider (#69) (58bfe27)
• document never-swallow-exceptions principle in scripts rules ([41...