v1.2.0

1.2.0 (2026-06-15)

Features

• defect-scan: --file-issues — file deduped, labeled tracker issues from findings (#6) (4791805)
• defect-scan: --file-issues, scope-resolution fix, Dart profile, extensible profiles + public-readiness hardening (83ebd16)
• defect-scan: 3-layer profile discovery (cmd_profiles) (518659f)
• defect-scan: add Dart/Flutter profile + include .dart in triage source-filter (2e70008)
• defect-scan: add frontmatter to built-in profiles (f374cb2)
• defect-scan: add P10 — security response headers (CSP & friends) (9a0ae0d)
• defect-scan: data-driven cmd_stacks (profile frontmatter) (ebd159c)
• defect-scan: data-driven triage source-filter (profile extensions) (1ebb364)
• defect-scan: field-by-field shadow-merge (fm_field) (7682987)
• defect-scan: frontmatter-lite reader (fm_get) + skill_dir (7c6f07d)
• defect-scan: pattern-pack discovery (cmd_patterns) (1777b46)
• defect-scan: SKILL.md orchestration for layered profiles + origin gating (159dad8)

Bug Fixes

• defect-scan: guard fm_field calls in cmd_stacks so extensions-only profiles detect (1401728)
• defect-scan: resolve scan scope on clean/merge-HEAD trees; never dead-end silently (#5) (22176cf)