v1.12.0

1.12.0 (2026-10-24)

Features

• approver: deterministic APPROVE/ESCALATE for factory PRs, shadow mode (#557) (44196c5)
• approver: the Vanguard Approver (shadow) workflow runs the approver after the factory PR review and comments APPROVE/ESCALATE; it never merges, approves or labels (#564) (b4fca07)
• hub: show how many tasks wait for the factory (spietrza/vanguard#560) (#562) (ed440ef)
• review: risk level line after the review verdict (spietrza/vanguard#559) (#561) (340425a)
• revise: refuse fork PRs instead of pushing to a same-named base-repo branch (spietrza/vanguard#567) (#571) (c889c81)
• revise: trust PR feedback and spec manifests only from authorised authors (spietrza/vanguard#566) (#569) (bc92f5f)
• secret-scan: check injected secret values regardless of path or allowlist marker (spietrza/vanguard#568) (#570) (18b69c5)

Bug Fixes

• factory: no double conventional prefix in the factory commit headline (#553) (d4ef178)
• revise: mark the PR ready with VANGUARD_PUSH_TOKEN so the automatic review runs (#572) (0b30b77)

Documentation

• diagrams show the shadow approver (#565) (f54ee87)
• PR review also fires on ready factory PRs (#558) (7a9def2)
• README hero flow as a diagram (#554) (d7b1b8a)

v1.11.0

1.11.0 (2026-10-22)

Features

• decision-model: default to clef instead of clef-flash (#541) (024cefe)
• factory: open the PR ready for review when every gate passed (#549) (dcf0334)
• pr-review: watch-prs also takes the PR from opened / ready_for_review events, so a caller can review a factory PR as soon as it is ready; Vanguard's own caller now does that without a label, and CI's build runs pnpm verify (#550) (8e1e412)
• verify: run the repo's verify script so the gate matches CI (#548) (21d81d0)

Bug Fixes

• ci: gate on spietrza, open factory PRs with the push token (#543) (7755fa8)
• deps: bump vite from 7.3.6 to 7.3.7 in apps/desktop (#544) (5443487)

Documentation

• add flow diagrams to README (#542) (6663df3)
• cursor: GitHub Actions does not support cursor yet (#539) (05e6a46)
• diagrams cover GitLab and Linear, not just GitHub (#545) (bb7cfa0)
• diagrams show ready PRs and the automatic review (#551) (1d0e5dd)

Upgrade notes (callers on @v1)

• Ready PRs: a factory PR now opens ready for review when every gate passed. It stays a draft only when a gate or the visual proof failed, or no verify command ran (#549).
• CI on factory PRs: map VANGUARD_PUSH_TOKEN in your implement caller's secrets:, with Contents and Pull requests: Read and write. Without it nothing changes: the PR opens with GITHUB_TOKEN and gets no CI until a push (#543).
• verify script: a verify script in your package.json now takes precedence over the typecheck/test auto-detect (#548).
• Repository name: the repository is spietrza/vanguard. Change uses: SebaBoler/vanguard/... to uses: spietrza/vanguard/..., because the old owner name only resolves through GitHub's rename redirect (#543).

v1.10.1

1.10.1 (2026-10-20)

Bug Fixes

• ci: pass bundled skills to review and revise runs (#538) (c4f21a6)

Documentation

• hub: README Hub section, prerequisites and usage paths; docs/refactor in the changelog (#536) (4b2d172)

v1.10.0

1.10.0 (2026-10-20)

Features

• hub: Add project by repository URL — clone into a chosen folder, then register it (#534) (440a27c), closes #532

v1.9.0

1.9.0 (2026-10-19)

Features

• cursor: make the Cursor CLI provider work in the factory (#519) (16c2cec)

Bug Fixes

• skills: keep tech-spec out of implement, revise and review runs (#526) (56899cc)
• skills: warn on a dropped repo tech-spec, no override noise (#531) (9fbc5c6)

v1.8.1

1.8.1 (2026-10-19)

Bug Fixes

• deps: dependabot bumps for root and apps/desktop in one verified PR (#527) (a11ced6)

v1.8.0

1.8.0 (2026-10-18)

Features

• desktop: typed command catalogue in src/wire.ts for the Tauri, hub and mock adapters (#509) (63d5c67), closes #498
• factory: conventional-commit prefix on factory PR titles (#502) (212e135), closes #495
• hub: one wire codec for the RPC envelope, SSE frames and the hub marker (#503) (3fa1748), closes #496 #491
• inspector: one address for a CI run's records on both backends (#516) (626b278), closes #499
• skills: inject skills into the spec, revise and review runs (#517) (74055e0)
• skills: merge the repo's .github/vanguard-skills into every run (#515) (6fbbc39)

Bug Fixes

• desktop: run-record types from src/wire.ts, diffOmitted and visualProof in the UI, RemoteRun.cached on the hub (#505) (a4919a5), closes #492
• hub: api_create_task runs validateCreateTask; one core-method table behind both dispatchers (#508) (d59785e), closes #500 #493
• hub: same-origin check compares host, not scheme (#506) (1ef03d4), closes #490

v1.7.0

1.7.0 (2026-10-17)

Features

• test(hub): browse/rpc tests compare un-realpathed tmp paths and fail on macOS (SebaBoler/vanguard#477) (#486) (4b8aafb)

Bug Fixes

• hub: RPC result envelope + Remote fetch wiring (browser smoke) (#484) (c6e9f24)
• hub: serve the Tauri app icon as the web UI favicon (#489) (c02c443)

v1.6.0

1.6.0 (2026-10-17)

Features

• ci: opt-in upload of .vanguard/runs as a workflow artifact (#481) (3e9439d)

v1.5.0

1.5.0 (2026-10-17)

Features

• ci: write run summary to GITHUB_STEP_SUMMARY (#469) (ab83663)
• desktop: pull CI run records into the Inspector (#470) (0206248)
• metrics: opt-in OTLP trace export for Langfuse (#471) (4e3bd43)

Bug Fixes

• run-record: redact transcripts, drop diff and bundle for secret-blocked runs (#478) (cdf79e0)