v1.0.6

Added

• Add GitHub Actions workflow to auto-close issues when PRs merge to release/*
  branches; GitHub's native auto-close only works on the default branch, so this
  workflow parses merged PR bodies for closing keywords and closes referenced
  issues via the API
• Add GitHub Actions workflow to forward-merge release/* branches through the
  release chain into main; a fix pushed to an older release line cascades
  forward through newer lines automatically, opening a labeled PR (and halting)
  on the first conflict or protected branch instead of being dropped

Fixed

• Fix mcp-proxy spawned during llmenv export inheriting the calling shell's
  stdio; when the export was sourced over SSH via source <(llmenv export) the
  proxy wrote its logs into the process-substitution pipe, flooding the terminal
  with command not found: INFO: lines. The proxy now redirects stdio to
  /dev/null and starts in its own process group so terminal job-control
  signals no longer reach it
• Fix llmenv sync silently reporting success when git push failed; a
  rejected or failed push is now surfaced as an error with git's own message
• Fix git operations potentially hanging on a credential prompt when run with a
  non-interactive stdin (CI, or a sourced llmenv export); all git subprocesses
  now detach stdin so they fail fast instead of blocking
• Fix materialized skills failing silently when they referenced bundled scripts
  via hardcoded ~/.claude paths; such paths resolve against the default config
  dir, not the materialized folder llmenv actually boots. Materialization now
  rejects skills (and rules/CLAUDE.md) carrying ~/.claude or $HOME/.claude
  paths, naming the offending file
• Fix marketplace git clone/fetch failures hiding git's diagnostic output;
  the underlying stderr is now surfaced (auth failure, bad URL, disk full are
  distinguishable) with any embedded credentials scrubbed from the message
• Fix llmenv config auto-pull silently swallowing a failed fast-forward
  (diverged history, conflict, network); a one-line nudge now points at
  llmenv sync instead of failing invisibly on every shell prompt

Binary Checksums

6deeca22ef104ad2f9c52278e84c4367dd9d80dfe555f0a17baedb3bd1f6cd55  llmenv-linux-x86_64
c52dbf8ac394eaadf6847f4d2970f3b7487dc1f49c58c425d6d83e2128a90179  llmenv-macos-aarch64
27bf5f8978f5c1e39543c1f024e37fac778b3daf34dd57c12bf1511f81e99964  llmenv-macos-x86_64

Verify integrity:

sha256sum -c checksums.txt

Supply Chain Security

SLSA v1.0 provenance attestations included. Verify:

slsa-verifier verify-artifact --artifact-path=<binary> --provenance=<provenance.intoto.jsonl> --source-uri=github.com/phaedrus1992/llmenv