Release v2.3.2

[v2.3.2] - 2026-08-17

Fixed

• repair npm README images and tighten package contents (#222)

Changed

• update changelog and version for v2.3.1 (#221)

Release v2.3.1

[v2.3.1] - 2026-08-17

Added

• complete P3 polish — npm allowlist, docs accuracy, sitemap+OG (#220)
• verify 10 more agent skill directories (26 verified total) (#219)

Fixed

• guard against slug path traversal and harden security scans (#218)

Changed

• cover converter utilities (#216)
• bump github/codeql-action/init from 4.37.3 to 4.37.6 (#215)
• bump github/codeql-action/analyze from 4.37.3 to 4.37.6 (#214)
• extract home helper to shared utility (#210)
• update changelog and version for v2.3.0 (#212)

Documentation

• add alloutflo to contributors list (#217)
• add devmaster1987 to contributors list (#213)

Release v2.3.0

[v2.3.0] - 2026-08-06

Added

• add apps.json for wvw.dev listing (#201)

Fixed

• warn MCP servers execute arbitrary code for non-github sources (#211)
• handle rejected debounce callbacks
• security scan bypass in setup/profile/ci + bundle + P1 hardening (#202)

Changed

• cover shared debounce utility
• add shared debounce utility
• use shared watch debouncer
• share watch debounce logic
• restore console stubs and add progress bar fail coverage
• add unit tests for src/utils/spinner.js
• update changelog and version for v2.2.0 (#200)

Documentation

• add Kegorapetse to contributors (#209)
• add Caner Bektaş to contributors list

Release v2.2.0

[v2.2.0] - 2026-07-31

Added

• filter installed skills by agent (#158)
• update demo GIFs with corrected timing and fix init dispatch (#197)
• add template system to rolecraft init (--template, --list) (#196)
• add rollback mechanism, parallel install, error handling improvements (#195)

Fixed

• silence init stdout to avoid node:test desync (#199)
• add rollback --help suggestion and showError integration test
• remove redundant deploy-docs job from release-publish (docs.yml auto-deploys on push)

Changed

• round 2 — fix remaining architectural issues (#194)
• fix top 5 architectural issues (#193)
• update changelog and version for v2.1.0 (#192)

Documentation

• add adity982 to contributors
• update landing page for new features (#198)
• add RoleCraft branding to skills README
• update README positioning, tagline, and npm description
• update stale values — 87.4 kB, 86 agents

Release v2.1.0

[v2.1.0] - 2026-07-28

Added

• auto-generate benchmark SVG from results data (#191)
• replace hardcoded claims with manifest tokens, update benchmark with current data (#190)
• add agents capability manifest command and generated agent docs (#186)
• add API modules for CLI-only commands and Node.js API cross-references (#183)
• update publish message for auto-merge workflow (#182)
• add category to publish flow; fix YAML quote stripping

Fixed

• use full URL for SVG in RESULTS.md to fix VitePress build
• close watchers and debounce timers deterministically in watch tests (#189)
• update public claims — agent count and package size from manifest, soften absolute language (#188)
• publish directly to upstream registry, fall back to fork on 403
• remove check-updates from completions, add -d descriptions and -o/-s y flags to fish
• complete missing commands and flags
• add checkout step in deploy-docs job for gh workflow run

Changed

• bump postcss from 8.5.16 to 8.5.23 (#187)
• update repo references from sametcelikbicak to rolecraft-sh in docs and examples
• update changelog and version for v2.0.1 (#179)

Documentation

• update comparison.md with garden-skills and fix duplicate row
• add MFA-G to contributors list
• fix auto-merge references to reflect maintainer merge workflow

Release v2.0.1

[v2.0.1] - 2026-07-24

Fixed

• use upstream commit SHA for branch creation, add error bodies, document gh auth token

Changed

• bump version to 2.0.1 (registry publish fix + npm pack hygiene)
• bump github/codeql-action/analyze from 4.37.1 to 4.37.3 (#178)
• bump github/codeql-action/init from 4.37.1 to 4.37.3 (#177)
• release v2.0.0

Documentation

• update publish success message to reflect maintainer review
• add marketplace badge to CI guide
• add Marketplace badge to CI section, fix agent count, add registry source link
• complete v2.0.0 docs audit (api diff/compose/test, comparison, CHANGELOG dup fix)

Release v2.0.0

[v2.0.0] - 2026-07-24

Added

• add GitHub Registry MVP — search, publish, install by slug, version check, API exports (#172)
• progress bar, TUI flicker/resize fix, CLI help update (#170)
• add doctor --deep conflict detection (#169)
• add rolecraft diff and compose commands (#168)
• add rolecraft test command with assertion engine (#164)
• add Node.js API layer with src/api/ modules (#159)
• add rolecraft mcp check command for npm update checks
• add MCP config validation to rolecraft doctor (P2)
• add MCP security scan for gh: and npm: sources (P2)
• add version pinning for npm (@Version) and gh (@branch/@tag) MCP sources (P1)
• add rolecraft mcp search command for GitHub and npm (P1) (#18)
• add MCP lockfile for ci restore (P0) (#151)
• add uvx:, pipx:, go:, deno:, cargo: MCP source types (#149)
• enhance doctor command with comprehensive health checks (#147)
• add multi-skill support to use and setup commands (#146)
• multi-skill install with interactive selection, --list, and --skill flags (#145)

Fixed

• readme table formatting and move mgalore to new row
• reject empty convert sources (#171)
• execSync→spawnSync for CodeQL alert, fix doc build (unclosed array tag), add publish/registry to sidebar and nav (#173)
• resolve CodeQL alerts 88 and 89 (#166)
• resolve CodeQL alerts in test command (#165)
• remove unused imports flagged by CodeQL (#82, #83) (#162)
• remove unused imports flagged by CodeQL (#160)
• validate MCP agent support — only 7 of 86+ agents have MCP (#150)
• remove unused report function in doctor.js (CodeQL #73)

Changed

• replace string concat with template literals
• add Biome lint/format with pre-commit hook and fix CodeQL alerts
• trigger CodeQL re-analysis
• exclude test files and dev artifacts from npm bundle
• bump actions/checkout from 7.0.0 to 7.0.1 (#148)
• update repo references from sametcelikbicak to rolecraft-sh
• release v1.6.0

Documentation

• add mgalore to contributors (#175)
• fix badge logo visibility with logoColor=white
• collapse nav to 3 items with dropdowns for small screens
• update AGENTS.md with interaction rules and branch strategy
• add mcp update/check docs, add mcp to shell completions
• add GitHub Action badge, CI guide, and docs page

Other

• Update paths

Release v1.6.0

[v1.6.0] - 2026-07-20

Added

• add --json flag to list command (#120)
• add git and npm availability checks
• add skills.sh search with --skills-sh flag (experimental) (#101)
• add convert command for SKILL.md <-> .mdc format conversion (#100)
• add droid, chatgpt, codearts-agent, universal agents (86 total)

Fixed

• log reinstall failure in watch command
• document install yes flag in help
• resolve CodeQL alerts and flaky ENOTEMPTY tests
• enable docs deployment after release

Changed

• bump version to v1.6.0
• bump github/codeql-action/analyze from 4.37.0 to 4.37.1 (#115)
• bump github/codeql-action/init from 4.37.0 to 4.37.1
• bump actions/setup-node from 6.4.0 to 7.0.0
• add star CTA to README (#102)
• update changelog and version for v1.5.0 [skip ci] (#97)

Documentation

• add Benjamin Ayivoh to contributors, convert to grid layout
• add star request to CONTRIBUTING.md
• add Gaohar Imran and Ajay Krishnan to contributors table
• add Yurii201811 to contributors table
• add getting-started, use-cases, and CLI reference pages (#103)
• streamline README for Show HN launch

Release v1.5.0

[v1.5.0] - 2026-07-15

Added

• improve UX with dry-run consistency, spinner, and error formatting (#96)
• agent profile system (save, apply, diff, edit, export, import, link) (#89)
• add demo GIF to hero section and show version in site title (#88)
• add benchmark comparison SVG visual with color contrast fixes (#87)

Fixed

• use full URL for benchmark SVG to prevent VitePress build failure

Changed

• bump actions/upload-pages-artifact from 3.0.1 to 5.0.0 (#86)
• bump actions/configure-pages from 5.0.0 to 6.0.0 (#85)
• bump actions/deploy-pages from 4.0.5 to 5.0.0 (#84)
• bump github/codeql-action/init from 4.36.3 to 4.37.0 (#83)
• bump github/codeql-action/analyze from 4.36.3 to 4.37.0 (#82)
• update changelog and version for v1.4.0 [skip ci] (#81)

Documentation

• simplify CONTRIBUTING, move release process to RELEASE.md, add good first issues
• onboarding guide + profile guide + fix dry-run priority and flag ordering (#90)
• update architecture.md with missing commands and utils
• add profile command to sidebar and fix formatting

Release v1.4.0

[v1.4.0] - 2026-07-10

Added

• improve README, add GitHub templates, fix CodeQL alert, resolve Dependabot CVEs, 100% watch.js coverage (#74)
• add watch command for auto-syncing skills on file change
• add benchmark to docs site, remove ANALYSIS from sidebar (#72)
• add VitePress docs site with GitHub Pages deploy (#71)
• highlight MCP + Skills as key differentiator in README
• MCP server management for AI agents

Fixed

• use real user identity for tag signing in release-prep workflow
• use web streams pipeTo for downloadFile to resolve CodeQL http-to-file-access (#79)
• use web streams pipeTo for downloadFile to resolve CodeQL http-to-file-access
• resolve CodeQL alerts — http-to-file-access and log-injection (#78)
• close security vulnerabilities and add watch to comparison (#75)

Changed

• async/sync cleanup, process.exit removal, magic string dedup (#77)
• centralize agent list into src/agents.js and extend MCP to all 82 agents
• update changelog and version for v1.3.0 [skip ci] (#68)

Documentation

• deduplicate nav links and add benchmark reference

Other

• Revert "fix: use web streams pipeTo for downloadFile to resolve CodeQL http-to-file-access"