Release v2.6.2

[v2.6.2] - 2026-10-14

Fixed

• ignore proto in frontmatter (#506) by @Haxxyyyy in #506
• sanitize untrusted terminal output (#503) by @Haxxyyyy in #503
• retry scorecard on cancelled outcomes (#507) by @Haxxyyyy in #507
• bound and verify npm tarball downloads (#502 #504 #505) by @Haxxyyyy in #510
• restrict profile and backup file permissions (#501) by @Haxxyyyy in #501
• normalize before matching and close scanner evasion gaps by @sametcelikbicak in #499
• scan file names and frontmatter for agent-authority grants by @sametcelikbicak in #497
• scan upstream content in check so a flagged update is visible by @sametcelikbicak in #496
• bound every untrusted read and report an incomplete scan by @sametcelikbicak in #495
• reject link entries and fail closed when a tarball cannot be listed by @sametcelikbicak in #494
• write MCP config atomically under a lock with owner-only permissions by @sametcelikbicak in #493
• gate every MCP config key and drop execution-authority keys from profiles by @sametcelikbicak in #492
• never report a high-severity finding as safe by @sametcelikbicak in #491
• stop bundle from forcing skills past the security scan by @sametcelikbicak in #490
• flag warp, goose and openhands as sharing the agents skills dir by @sametcelikbicak in #479
• verify and promote 5 agents from batch 1 - kilo, kode, codeium, augment, codearts-agent by @sametcelikbicak in #473
• verify dexto and loaf agents, repair two dead docUrls by @sametcelikbicak in #466
• repair dead benchmark link breaking the docs build by @sametcelikbicak in #465
• track manifest-derived counts in docs and guard against drift by @sametcelikbicak in #463
• stop tests and benchmark writing fixtures to the repo lockfile by @sametcelikbicak in #462

Changed

• cover installSkill reporting a failed target by @sametcelikbicak in #513
• pass cwd explicitly instead of reassigning process.cwd by @sametcelikbicak in #500
• load command modules on demand instead of at startup by @sametcelikbicak in #464
• bump actions/first-interaction from 3.0.0 to 3.1.0 in #461
• bump actions/upload-artifact from 4.4.3 to 7.0.1 in #460
• bump actions/checkout from 4.1.1 to 7.0.1 in #459
• bump @biomejs/biome in #458
• grant attestations write and make npm publish idempotent by @sametcelikbicak in #457
• update changelog and version for v2.6.1 by @sametcelikbicak in #456

Documentation

• verify and promote agent paths (batch 6) by @sametcelikbicak in #478
• verify and promote agent paths (batch 5) by @sametcelikbicak in #477
• verify and promote agent paths (batch 4) by @sametcelikbicak in #476
• verify and promote agent paths (batch 3) by @sametcelikbicak in #475
• verify and promote agent paths (batch 2) by @sametcelikbicak in #474

Release v2.6.1

[v2.6.1] - 2026-10-08

Fixed

• drop invalid ruleset trigger from scorecard workflow by @sametcelikbicak in #453
• download-and-execute rule misses process and command substitution by @sametcelikbicak in #449
• drop useless String.raw on FLAGS regex fragment by @sametcelikbicak in #447
• deploy sitemap and add canonical, og:image and robots.txt to docs by @sametcelikbicak in #446

Changed

• pin remaining GitHub actions to commit SHAs by @sametcelikbicak in #454
• retrigger scorecard on ruleset changes and allow manual runs by @sametcelikbicak in #452
• scope workflow token permissions to job level and verify release tag by @sametcelikbicak in #451
• add OpenSSF Scorecard and GitHub build provenance attestation by @sametcelikbicak in #450
• update changelog and version for v2.6.0 by @sametcelikbicak in #445

Documentation

• add OpenSSF Scorecard badge by @sametcelikbicak in #455

Release v2.6.0

[v2.6.0] - 2026-10-07

Added

• add --json output to search by @sametcelikbicak in #439
• add grok, muse and posit; correct antigravity paths and verify zcode and pochi by @sametcelikbicak in #430

Fixed

• mark pages deployments inactive before deleting them by @sametcelikbicak in #444
• refuse lockfile slugs that escape the skills directory by @sametcelikbicak in #443
• report a corrupt MCP lock as a ci finding instead of a crash by @sametcelikbicak in #437
• record project-scoped agent installs in the project lockfile by @sametcelikbicak in #436
• merge profile apply into config and ask on conflicts by @sametcelikbicak in #435
• align doctor checks with skill lock paths by @kkkhs in #434
• escape angle brackets in agent notes so the docs build by @sametcelikbicak in #433
• clone gh: MCP servers into ~/.agents/mcp instead of the OS temp dir by @sametcelikbicak in #428
• never report success when the CLI did nothing by @sametcelikbicak in #426
• widen prompt-injection detection to common phrasings by @sametcelikbicak in #424
• verify content hashes in ci by @sametcelikbicak in #423
• derive install targets from the lockfile entry by @sametcelikbicak in #422
• hash and install skill files in subdirectories by @sametcelikbicak in #421
• honor --dry-run in mcp remove by @sametcelikbicak in #420
• raise unscanned_source for MCP sources the scanner never reads by @sametcelikbicak in #419
• refuse corrupt MCP config files by @kkkhs in #417
• resolve agent identity by flag or name when capturing a profile by @sametcelikbicak in #416
• scan setup mcp servers by @kkkhs in #415
• run the security scan gate on every path that installs a skill by @sametcelikbicak in #412
• refuse non-https, non-default-port and credentialed profile import URLs by @muraa-p in #386

Changed

• make the setup command delegate to setupApi by @sametcelikbicak in #442
• move completion generators into the api layer by @sametcelikbicak in #441
• finish UserError migration in resolver, profile, compose, convert by @sametcelikbicak in #440
• make npm test run the same suite as CI by @sametcelikbicak in #438
• bump @vue/server-renderer and vue in #432
• bump source-map-js from 1.2.1 to 1.2.2 in #431
• derive flags, help and completions from one command spec by @sametcelikbicak in #427
• delegate convert command to convertApi by @samiullah-636 in #411
• move agent detection to shared utility by @nikhiljangid120 in #399
• check doc values before merge instead of repairing after by @sametcelikbicak in #398
• update changelog and version for v2.5.0 by @sametcelikbicak in #396

Documentation

• correct security and reproducibility claims, document what the scan does not cover by @sametcelikbicak in #413

Release v2.5.0

[v2.5.0] - 2026-10-02

Added

• move star CTA from bot welcome to doctor output by @sametcelikbicak in #384
• credit every changelog entry to its author by @sametcelikbicak in #357

Fixed

• cover release-prep.sh with a fixture test and fix its portability bugs by @sametcelikbicak in #395
• prevent watch from syncing its own install output by @PandaHUN777 in #381
• download-and-execute rule catches curl -fsSL and skips | shasum by @Bdysj in #374
• make docs-sync open a PR instead of pushing to protected main by @sametcelikbicak in #391
• require review for unscanned npm MCP servers by @YIKUAIBANZI in #379
• stop generated doc values from conflicting on every merge by @sametcelikbicak in #387
• keep project CI skills in project scope by @PandaHUN777 in #378
• clarify lock rename contention by @PandaHUN777 in #377
• thread cwd through ci, install and watch installSkill calls by @biggdawg320 in #380
• reject corrupt lockfiles safely by @tnalbant in #376
• security-scan MCP servers before profile apply writes them by @Bdysj in #368
• validate lockfile slugs in verify and agents-xml by @HarshRajSinghania in #371
• resolve rollback targets by agent name as well as flag by @Bdysj in #364
• remove temp clone dir when git URL resolution fails by @Bdysj in #363
• make MCP lock updates atomic and stop them losing each other by @muraa-p in #362
• re-check the npm tarball host allow-list on every redirect hop by @muraa-p in #361
• skip lockfile writes in rollback dry-run by @Bdysj in #358
• validate npm tarball redirects by @Yurii201811 in #356
• scope slug collisions to target agents by @kocaemre in #348
• serialise lockfile read-modify-write to stop lost updates by @muraa-p in #355
• re-check the profile import host allow-list on every redirect by @muraa-p in #351
• write lock file atomically via temp file and rename by @muraa-p in #349
• normalize agents xml test path by @premiuslol in #341
• honor cwd in apiUpdate installations by @PandaHUN777 in #338
• prevent normalized slug collisions by @PandaHUN777 in #340
• use UserError for skill-not-found in remove and update APIs by @amandeavor in #298

Changed

• regenerate docs and manifest matrix by @sametcelikbicak in #394
• regenerate docs and manifest matrix by @sametcelikbicak in #393
• raise minimum supported Node to 22 and test 24 and 26 by @sametcelikbicak in #383
• cover convertApi dry-run for .mdc files by @chanchalagarwal3580 in #372
• point biome.json at the locked Biome version by @sametcelikbicak in #373
• run test matrix on macos-latest by @miteshanshu in #365
• cover global scope of assertNoSlugCollision by @miteshanshu in #360
• add unit tests for init and use APIs by @PandaHUN777 in #359
• add unit tests for api mcp, profile, ci and upgrade by @readyagentsdev in #320
• group npm dependabot updates by @premiuslol in #321
• test on Node 20, 22, and 24 by @PandaHUN777 in #319
• add unit tests for api setup, convert, agents-xml and completions by @vatsalyrai in #318
• make upgrade command reuse upgrade api by @premiuslol in #315
• bump @biomejs/biome from 2.5.5 to 2.5.14 in #314
• make init command reuse initApi by @vatsalyrai in #313
• add npm dependabot updates by @premiuslol in #312
• use watch close on SIGINT by @premiuslol in #311
• bump codeql-action to 4.38.2 and group its dependabot updates by @sametcelikbicak in #303
• reuse agents xml API in command by @vansh-nagar in #300
• cover update search verify and doctor APIs by @vansh-nagar in #299
• make watch command reuse the watch API by @vatsalyrai in #290
• bump codeql-action init and analyze to 4.38.0 by @sametcelikbicak in #289
• update changelog and version for v2.4.2 by @sametcelikbicak in #286

Documentation

• explain convert API dry-run and destination resolution by @chanchalagarwal3580 in #389

Release v2.4.2

[v2.4.2] - 2026-09-17

Fixed

• update manifest matrix line number for reference.md by @sametcelikbicak in #283
• doctor Turkish text bug, add CI coverage, add E2E tests by @sametcelikbicak in #274
• track all published agent counts by @kegodev in #273

Changed

• backfill supportLevel for 60 unclassified agents by @sametcelikbicak in #285
• remove unreachable converted=[] dead branch in convertApi by @wized2 in #284
• deduplicate shared utils and remove dead code by @sametcelikbicak in #281
• share bundle loading and installation by @Yurii201811 in #280
• bump actions/deploy-pages from 5.0.0 to 5.0.1 (#279)
• bump actions/upload-artifact from 4 to 7 (#278)
• bump github/codeql-action/init from 4.37.8 to 4.37.9 (#277)
• bump github/codeql-action/analyze from 4.37.8 to 4.37.9 (#276)
• update changelog and version for v2.4.1 by @sametcelikbicak in #272

Documentation

• slim down README, move testimonials to CONTRIBUTING, add FAQ page by @sametcelikbicak in #275

Other

• cleanup: remove registry/publish, replace skills source, update demos by @sametcelikbicak in #282

Release v2.4.1

[v2.4.1] - 2026-09-01

Added

• colorize rolecraft help output by @sametcelikbicak in #271
• add skipped and errored counters to check command summary by @sametcelikbicak in #270
• reactivate manifest token matrix for docs by @sametcelikbicak in #264

Fixed

• remove skills from recorded agent directories by @linhaixin45-cmyk in #259

Changed

• merge agent manifest registry by @kkkhs in #269
• replace fixed timeouts with log polling in watch command test by @sametcelikbicak in #268
• bump github/codeql-action/init from 4.37.7 to 4.37.8 (#267)
• bump github/codeql-action/analyze from 4.37.7 to 4.37.8 (#266)
• bump actions/first-interaction from 1 to 3 (#265)
• derive completion agent flags by @kkkhs in #262
• extract shared security score helper by @linhaixin45-cmyk in #263
• welcome first-time contributors with soft star note by @sametcelikbicak in #261
• cover MCP lockfile utilities by @adity982 in #258
• update changelog and version for v2.4.0 by @sametcelikbicak in #257

Documentation

• use GitHub-whitelisted align attributes in contributors table by @sametcelikbicak
• center contributor avatars vertically and reduce to 80px by @sametcelikbicak
• add linhaixin45-cmyk testimonial with larger avatar layout by @sametcelikbicak in #260

Release v2.4.0

[v2.4.0] - 2026-08-24

Added

• add oh-my-pi (omp) agent support by @sametcelikbicak in #251
• add contributor testimonials to README by @sametcelikbicak in #246
• support multiple --skill flags and add skill name to security reports by @sametcelikbicak in #245
• prune old pages deployments in docs workflow by @sametcelikbicak in #244
• add agents and rollback shell completions by @yukidev630 in #242
• reposition as security-first skill manager by @sametcelikbicak in #241
• colorize succeed and fail markers by @Osheun in #226
• add GitHub Release creation to publish workflow by @sametcelikbicak in #228
• tabular CLI output with shared zero-dep tui module by @sametcelikbicak in #224

Changed

• bump github/codeql-action to 4.37.7 by @sametcelikbicak in #250
• centralize tilde expansion by @Yurii201811 in #249
• extract scanner depth and lockfile version constants by @Osheun in #227
• share slug normalization by @Lukakatche in #163
• update changelog and version for v2.3.2 by @sametcelikbicak in #223

Documentation

• fix 18 audit issues across docs, README, and CLI help by @sametcelikbicak in #231
• replace contributor table with auto-updating image by @sametcelikbicak in #230
• add Lukakatche to contributors list by @sametcelikbicak in #225

Release v2.3.2

[v2.3.2] - 2026-08-17

Fixed

• repair npm README images and tighten package contents by @sametcelikbicak in #222

Changed

• update changelog and version for v2.3.1 by @sametcelikbicak in #221

Release v2.3.1

[v2.3.1] - 2026-08-17

Added

• complete P3 polish — npm allowlist, docs accuracy, sitemap+OG by @sametcelikbicak in #220
• verify 10 more agent skill directories (26 verified total) by @sametcelikbicak in #219

Fixed

• guard against slug path traversal and harden security scans by @sametcelikbicak in #218

Changed

• cover converter utilities by @alloutflo in #216
• bump github/codeql-action/init from 4.37.3 to 4.37.6 (#215)
• bump github/codeql-action/analyze from 4.37.3 to 4.37.6 (#214)
• extract home helper to shared utility by @devmaster1987 in #210
• update changelog and version for v2.3.0 by @sametcelikbicak in #212

Documentation

• add alloutflo to contributors list by @sametcelikbicak in #217
• add devmaster1987 to contributors list by @sametcelikbicak in #213

Release v2.3.0

[v2.3.0] - 2026-08-06

Added

• add apps.json for wvw.dev listing by @sametcelikbicak in #201

Fixed

• warn MCP servers execute arbitrary code for non-github sources by @sametcelikbicak in #211
• handle rejected debounce callbacks by @sametcelikbicak
• security scan bypass in setup/profile/ci + bundle + P1 hardening by @sametcelikbicak in #202

Changed

• cover shared debounce utility by @kegodev
• add shared debounce utility by @kegodev
• use shared watch debouncer by @kegodev
• share watch debounce logic by @kegodev
• restore console stubs and add progress bar fail coverage by @sametcelikbicak
• add unit tests for src/utils/spinner.js by @canerbektas
• update changelog and version for v2.2.0 by @sametcelikbicak in #200

Documentation

• add Kegorapetse to contributors by @sametcelikbicak in #209
• add Caner Bektaş to contributors list by @sametcelikbicak