v0.4.0

Added

• Restores the Container consumer skill through a narrowly configured development-only Composer skill manager, with explicit guidance to check its supported API version before using it against the unchanged runtime. (#67)

Changed

• Require fast-forward/clock ^1.1 and synchronize its bundled consumer skill from the installed Composer package alongside the trusted Config and Container skills. (#68)
• Project install now offers the llm/skills Composer manager with the Changelog GitHub source, so projects can restore the agent instructions through an explicitly approved Composer plugin without requiring the Changelog runtime. Setup previews the changes, preserves manager configuration and foreign skill ownership, and uses a verified standalone manager without activating consumer plugins or autoloaders. The legacy native skill:install command remains available. (#65)
• Synchronize the Config and Container consumer skills from the installed Composer dependencies through an explicit trusted-package list, preserving other configured skill sources. (#66)
• Require fast-forward/container ^1.10 so installed Composer dependencies supply the supported Container consumer skill alongside the runtime library. (#66)
• Include the GitHub repository and current-to-next version transition in generated version-PR titles by default, with repository placeholders and preserved custom titles. (#60)

Fixed

• Restore changelog feedback for fork pull requests with Checkout v7 by explicitly allowing the exact head to be read as validation data, while keeping execution confined to the pinned trusted runtime and disabling persistent credentials, submodules and LFS. (#61)
• Render fragment descriptions that already contain a Markdown list without adding a second outer bullet. Use CommonMark source classification to preserve list numbering, nesting, active link definitions after root paragraphs, inline-owned comment text, raw HTML, literal code whitespace and historical release boundaries; keep delivery references within their owning items and outside literal blocks, and reject HTML tails that would hide subsequent headings or references. (#64)
• Preserve an explicitly selected minor or major impact in a canonical Dependabot fragment without rewriting it or refusing the rerun. Document the patch maintenance default and classify dependency updates by their effect on the consumer package's public contract. (#62)