0.3.9

What's Changed

• fix(client): never resend a write that may have reached the server (#307) (#308) by @joshdoesthis in #309
• fix(chat): restore the audit-fix convention in the public security guidance (#274) (#275) by @joshdoesthis in #276
• fix(ci): publish npm packages from a github-hosted runner so provenance is accepted (#268) (#269) by @joshdoesthis in #270
• fix(deps): move override notes out of overrides so npm can publish (#262) by @joshdoesthis in #263
• fix(deps): patch dependency audit advisories by @joshdoesthis in #255
• fix(ci): file new scan-failure issues over rest to avoid contents scope (#252) (#253) by @joshdoesthis in #254
• fix(deps): address bun-audit vulnerabilities by @joshdoesthis in #232
• feat(dx): migrate ci-templates to Blacksmith runners by @joshdoesthis in #229
• feat(dx): migrate ci-templates to Blacksmith runners (#229) by @joshdoesthis in #230
• feat(dx): migrate ci-templates to Blacksmith runners (#229) (#230) by @joshdoesthis in #231
• fix(chat): rename synced .github/security.md to security-review.md (#223) (#224) by @joshdoesthis in #225
• feat(ci): file audit scan-failure issues on the pm tracker by @joshdoesthis in #217
• feat(chat): portable agent coverage (AGENTS.md, review, security) by @joshdoesthis in #198
• fix(deps): patch brace-expansion dos advisory (#160) (#161) by @joshdoesthis in #162
• feat(report-scan-failure): refresh the issue body on repeat reports (#156) (#157) by @joshdoesthis in #158

Full Changelog

Full Changelog: 0.3.8...0.3.9