What's Changed
Security
- fix: require explicit ack for unauthenticated network exposure (#776) by @tomasz-tomczyk in #776
- fix: reject cross-site browser POSTs via Sec-Fetch-Site (#775) by @tomasz-tomczyk in #775
Agent integrations
- feat: add ampcode integration for crit install (#761) by @mochadwi in #761 - Thank you!
- feat: configure Claude plan approval mode (#759) by @tomasz-tomczyk in #759 - Thank you @keoz-higidi for suggesting!
- feat: opt-in round-ready notify and OpenCode wait toast (#755) by @tomasz-tomczyk in #755 - Thank you @FlorentDhamma for suggesting!
- fix: correct opencode sub-command from 'ask' to 'run' (#754) by @blyoa in #754 - Thank you!
- fix: require explicit Crit invocation across agent integrations (#756) by @tomasz-tomczyk in #756 - Thank you @rsanheim for raising!
Notifications & review UX
- feat: auto-close review tab after approval (#753) by @tomasz-tomczyk in #753 - Thank you @jvaldiviezo9 for suggesting!
- feat: treat --output as crit data root for keyed reviews (#771) by @tomasz-tomczyk in #771
- fix(cli): add command-scoped help (#770) by @tomasz-tomczyk in #770 - Thank you @pstibrany for suggesting!
- fix: clear auto-close on dismiss and drop inert browser notifications (#773) by @tomasz-tomczyk in #773
- fix: avoid duplicate browser tab on live cold start (#768) by @tomasz-tomczyk in #768 - Thank you @CarlosZ for reporting!
- fix: honor configured output across review commands (#769) by @tomasz-tomczyk in #769 - Thank you @CarlosZ for reporting!
- fix: honor legacy --output reviews and close browser-open gaps (#772) by @tomasz-tomczyk in #772
Dependencies
- chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 (#751) by @app/dependabot in #751
- chore(deps): bump actions/setup-go from 6 to 7 (#749) by @app/dependabot in #749
- chore(deps): bump actions/setup-node from 6 to 7 (#750) by @app/dependabot in #750
New Contributors
Full Changelog: v0.18.1...v0.18.2
Contributors
rsanheim, tomasz-tomczyk, and 7 other contributors