v1.35.1

1.35.1 (2026-06-29)

Bug Fixes

• update NO_REVIEW output strings from rr-*-001 to simplified skill IDs (#1321) (45e66bc)

Skills changed

Changed (93)

• adr-decision-quality
• agent-skill-bridge
• api-compatibility
• api-design
• api-versioning-compat
• architecture-boundaries
• architecture-diagrams
• architecture-risk-register
• architecture-traceability
• architecture-validation-plan
• availability-architecture
• bounded-context-language
• cache-strategy-consistency
• capacity-cost-design
• change-communication
• code-nextjs
• code-php-laravel
• code-react
• code-remix
• code-unit-python-pytest
• code-unit-ts-jest
• code-vue
• component-variants-states
• config-json
• context-budget-tuning
• coverage-gap
• cross-file-leakage
• data-flow-state-ownership
• data-model-db-design
• design-source-conformance
• doc-hygiene
• dr-multiregion
• e2e-wiring
• eval-driven-skill-design
• event-driven-semantics
• existing-pattern-conformance
• external-dependencies
• failure-modes-observability
• firebase-security-rules
• flaky-test
• gh-address-comments
• gha-workflow-security
• hello-skill
• i18n-unused-key
• integration-contracts
• laravel-eloquent-nplus1
• laravel-mass-assignment
• laravel-migration-safety
• loading-state
• logging-observability
• logic-torturing
• migration-rollout-rollback
• migration-safety
• multitenancy-isolation
• nextjs-server-action-security
• normalization-consistency
• nullability-contract
• openapi-contract
• operability-slo
• plan-review-gate
• plangate-exec-conformance
• plangate-gc-deterministic
• plangate-plan-integrity
• plangate-rule-promotion
• plangate-tdd-evidence
• plangate-verification-audit
• pr-description
• pr-template-qa
• pre-mortem
• react-router-action-contract
• react-router-loader-boundary
• refactor-claim-audit
• requirements-acceptance
• review-automation-boundary
• review-comment-triage
• river-review
• secret-credential-scan
• security-basic
• security-privacy-design
• self-contradiction
• supabase-rls-policy
• suppression-feedback
• tailwind-class-hygiene
• test-existence
• test-naming
• test-plan-review
• trust-boundaries-authz
• type-driven-design
• typescript-nullcheck
• typescript-strict
• ubiquitous-language-naming
• vitest-mock-isolation
• war-game

Selective adopters: compare the checksum of your copied skill against docs/data/skill-manifest.json to detect upstream drift.

v1.35.0

1.35.0 (2026-06-29)

Features

• review-team: add review-team skill and /review-team command (#1309) (b817f32)

Bug Fixes

• plugin: add review-team command to Claude Code plugin manifest (#1311) (f92428c)

Skills changed

Changed (1)

• river-review

Added (108)

• a11y-accessible-name
• adr-decision-quality
• agent-skill-bridge
• api-compatibility
• api-design
• api-versioning-compat
• architecture-boundaries
• architecture-diagrams
• architecture-risk-register
• architecture-sample
• architecture-traceability
• architecture-validation-plan
• availability-architecture
• bounded-context-language
• cache-strategy-consistency
• capacity-cost-design
• change-communication
• code-nextjs
• code-php-laravel
• code-quality-sample
• code-react
• code-remix
• code-unit-python-pytest
• code-unit-ts-jest
• code-vue
• component-variants-states
• config-json
• context-budget-tuning
• coverage-gap
• cross-file-leakage
• data-flow-state-ownership
• data-model-db-design
• design-source-conformance
• design-system-component-reuse
• design-token-enforcement
• doc-hygiene
• dr-multiregion
• e2e-wiring
• eval-driven-skill-design
• event-driven-semantics
• existing-pattern-conformance
• external-dependencies
• failure-modes-observability
• firebase-security-rules
• flaky-test
• gh-address-comments
• gha-workflow-security
• hello-skill
• i18n-unused-key
• independent-review-synthesis
• integration-contracts
• laravel-eloquent-nplus1
• laravel-mass-assignment
• laravel-migration-safety
• loading-state
• logging-observability
• logic-torturing
• migration-rollout-rollback
• migration-safety
• modern-web-a11y-interactive
• modern-web-browser-compat
• modern-web-performance
• modern-web-semantic
• multitenancy-isolation
• nextjs-app-router-boundary
• nextjs-server-action-security
• normalization-consistency
• nullability-contract
• openapi-contract
• operability-slo
• plan-review-gate
• plangate-exec-conformance
• plangate-gc-deterministic
• plangate-plan-integrity
• plangate-rule-promotion
• plangate-tdd-evidence
• plangate-verification-audit
• pr-description
• pr-template-qa
• pre-mortem
• react-router-action-contract
• react-router-loader-boundary
• refactor-claim-audit
• requirements-acceptance
• review-automation-boundary
• review-comment-triage
• review-policy-standard-downstream
• review-policy-standard-midstream
• review-policy-standard-upstream
• review-team
• secret-credential-scan
• security-basic
• security-privacy-design
• self-contradiction
• supabase-rls-policy
• suppression-feedback
• tailwind-class-hygiene
• test-existence
• test-naming
• test-plan-review
• test-review-sample
• trust-boundaries-authz
• type-driven-design
• typescript-nullcheck
• typescript-strict
• ubiquitous-language-naming
• vitest-mock-isolation
• war-game

Removed (107)

• rr-downstream-coverage-gap-001
• rr-downstream-flaky-test-001
• rr-downstream-gha-workflow-security-001
• rr-downstream-review-policy-standard-001
• rr-downstream-test-existence-001
• rr-downstream-test-naming-001
• rr-downstream-test-plan-review-001
• rr-downstream-test-review-sample-001
• rr-midstream-a11y-accessible-name-001
• rr-midstream-agent-skill-bridge-001
• rr-midstream-api-compatibility-001
• rr-midstream-code-quality-sample-001
• rr-midstream-component-variants-states-001
• rr-midstream-config-json-001
• rr-midstream-cross-file-leakage-001
• rr-midstream-design-source-conformance-001
• rr-midstream-design-system-component-reuse-001
• rr-midstream-design-token-enforcement-001
• rr-midstream-doc-hygiene-001
• rr-midstream-e2e-wiring-001
• rr-midstream-existing-pattern-conformance-001
• rr-midstream-firebase-security-rules-001
• rr-midstream-gh-address-comments-001
• rr-midstream-hello-skill-001
• rr-midstream-i18n-unused-key-001
• rr-midstream-independent-review-synthesis-001
• rr-midstream-laravel-eloquent-nplus1-001
• rr-midstream-laravel-mass-assignment-001
• rr-midstream-loading-state-001
• rr-midstream-logging-observability-001
• rr-midstream-logic-torturing-001
• rr-midstream-modern-web-a11y-interactive-001
• rr-midstream-modern-web-browser-compat-001
• rr-midstream-modern-web-performance-001
• rr-midstream-modern-web-semantic-001
• rr-midstream-nextjs-app-router-boundary-001
• rr-midstream-nextjs-server-action-security-001
• rr-midstream-normalization-consistency-001
• rr-midstream-nullability-contract-001
• rr-midstream-pr-description-001
• rr-midstream-react-router-action-contract-001
• rr-midstream-react-router-loader-boundary-001
• rr-midstream-refactor-claim-audit-001
• rr-midstream-review-automation-boundary-001
• rr-midstream-review-comment-triage-001
• rr-midstream-review-policy-standard-001
• rr-midstream-secret-credential-scan-001
• rr-midstream-security-basic-001
• rr-midstream-self-contradiction-001
• rr-midstream-supabase-rls-policy-001
• rr-midstream-suppression-feedback-001
• rr-midstream-tailwind-class-hygiene-001
• rr-midstream-type-driven-design-001
• rr-midstream-typescript-nullcheck-001
• rr-midstream-typescript-strict-001
• rr-midstream-ubiquitous-language-naming-001
• rr-midstream-vitest-mock-isolation-001
• rr-midstream-war-game-001
• rr-upstream-adr-decision-quality-001
• rr-upstream-api-design-001
• rr-upstream-api-versioning-compat-001
• rr-upstream-architecture-boundaries-001
• rr-upstream-architecture-diagrams-001
• rr-upstream-architecture-risk-register-001
• rr-upstream-architecture-sample-001
• rr-upstream-architecture-traceability-001
• rr-upstream-architecture-validation-plan-001
• rr-upstream-availability-architecture-001
• rr-upstream-bounded-context-language-001
• rr-upstream-cache-strategy-consistency-001
• rr-upstream-capacity-cost-design-001
• rr-upstream-change-communication-001
• rr-upstream-context-budget-tuning-001
• rr-upstream-data-flow-state-ownership-001
• rr-upstream-data-model-db-design-001
• rr-upstream-dr-multiregion-001
• rr-upstream-eval-driven-skill-design-001
• rr-upstream-event-driven-semantics-001
• rr-upstream-external-dependencies-001
• rr-upstream-failure-modes-observability-001
• rr-upstream-integration-contracts-001
• rr-upstream-laravel-migration-safety-001
• rr-upstream-migration-rollout-rollback-001
• rr-upstream-migration-safety-001
• rr-upstream-multitenancy-isolation-001
• rr-upstream-openapi-contract-001
• rr-upstream-operability-slo-001
• rr-upstream-plan-review-gate-001
• rr-upstream-plangate-exec-conformance-001
• rr-upstream-plangate-gc-deterministic-001
• rr-upstream-plangate-plan-integrity-001
• rr-upstream-plangate-rule-promotion-001
• rr-upstream-plangate-tdd-evidence-001
• rr-upstream-plangate-verification-audit-001
• rr-upstream-pr-template-qa-001
• rr-upstream-pre-mortem-001
• rr-upstream-requirements-acceptance-001
• rr-upstream-review-policy-standard-001
• rr-upstream-security-privacy-design-001
• rr-upstream-test-code-nextjs-001
• rr-upstream-test-code-php-laravel-001
• rr-upstream-test-code-react-001
• rr-upstream-test-code-remix-001
• rr-upstream-test-code-unit-python-pytest-001
• rr-upstream-test-code-unit-ts-jest-001
• rr-upstream-test-code-vue-001
• rr-upstream-trust-boundaries-authz-001

Selective adopters: compare the checksum of your copied skill against docs/data/skill-manifest.json to detect upstream drift.

v1.34.0

1.34.0 (2026-06-25)

Features

• review-team: add consensusLevel badge and teamLeadReport to PR comments (#1308) (2eba500)
• review-team: add consensusLevel metadata field to findings (#1305) (e718dfe)
• review-team: add Tech Lead deterministic synthesis report (#1306) (b8953d1)

v1.33.0

1.33.0 (2026-06-24)

Features

• add reproducible social asset PNG export (#1299) (5b0506d)

v1.32.0

1.32.0 (2026-06-24)

Features

• planner: expose analyzeTestImpact() signal on the execution plan (#1292) (a99ea36)
• planner: opt-in escalation of test skills for high-risk diffs (#1255 follow-up) (#1295) (90a89c0)

v1.31.0

1.31.0 (2026-06-23)

Features

• cli: add runtime Ajv validation for output.schema.json in formatJsonOutput (#1271) (e43dfc1)
• skills: add ask-codex skill to delegate reviews to Codex CLI (#1274) (ec8f6a8)

Bug Fixes

• ci: update scorecard-action and codeql-action to valid SHAs (#1264) (d005cb7)
• deps: add npm overrides for http-proxy-middleware and @babel/core (#1267) (5e850b9)

v1.30.1

1.30.1 (2026-06-22)

Bug Fixes

• deps: add npm overrides for serialize-javascript, qs, uuid (#1257) (40fb0ee)

v1.30.0

1.30.0 (2026-06-22)

Features

• plugin: add setup-team command, composerIcon, and plugin field sync (#1251) (b78769e)

v1.29.0

1.29.0 (2026-06-22)

Features

• ci: add HOL Plugin Scanner + pin GitHub Actions for awesome-codex-plugins (#1248) (16be8ef)

Bug Fixes

• plugin: add composerIcon and assets to .codex-plugin (#1250) (469ea7a)

v1.28.1

1.28.1 (2026-06-21)

Bug Fixes

• skills: harden security-privacy-design eval assertions for JA output (#1238) (#1239) (91eb767)

Skills changed

Changed (1)

• rr-upstream-security-privacy-design-001

Selective adopters: compare the checksum of your copied skill against docs/data/skill-manifest.json to detect upstream drift.