v0.16.0

Changelog

Bug Fixes

• 1c6563c: fix(commands): add mandatory gate to uf.triage-issue Phase 4 (@jflowers)
• 60b6bb3: fix(docs): address PR #485 reviewer feedback (@jflowers)

What's Changed

• feat: add /address-feedback command for PR review triage by @marcusburghardt in #220
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_vuln_scan.yml from 0.2.0 to 0.2.1 by @dependabot[bot] in #227
• ci(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by @dependabot[bot] in #226
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_deps_reviewer.yml from 0.2.0 to 0.2.1 by @dependabot[bot] in #225
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml from 0.2.0 to 0.2.1 by @dependabot[bot] in #224
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.2.0 to 0.2.1 by @dependabot[bot] in #223
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_scheduled.yml from 0.2.0 to 0.2.1 by @dependabot[bot] in #232
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_dependabot_reviewer.yml from 0.2.0 to 0.2.1 by @dependabot[bot] in #231
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_ci.yml from 0.2.0 to 0.2.1 by @dependabot[bot] in #230
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_deps_reviewer.yml from 0.2.1 to 0.3.1 by @dependabot[bot] in #246
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.2.1 to 0.3.1 by @dependabot[bot] in #247
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml from 0.2.1 to 0.3.1 by @dependabot[bot] in #244
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_ci.yml from 0.2.1 to 0.3.1 by @dependabot[bot] in #243
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_scheduled.yml from 0.2.1 to 0.3.1 by @dependabot[bot] in #262
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_dependabot_reviewer.yml from 0.2.1 to 0.3.1 by @dependabot[bot] in #261
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_vuln_scan.yml from 0.2.1 to 0.3.1 by @dependabot[bot] in #259
• ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #260
• fix(agents): detect target repo dynamically in divisor-curator by @gvauter in #252
• feat(scaffold): run sub-tool inits concurrently in uf init by @gvauter in #251
• fix(review): add finding consolidation, compound severity, and CI annotation ingestion by @sonupreetam in #229
• fix: update CRAP baseline for checkPodmanRuntimeDarwin on Linux CI by @gvauter in #255
• feat(scaffold): add Python convention pack and doctor checks by @gvauter in #254
• fix: abort config update when backup write fails (closes #237) by @jsvob in #248
• chore: skip empty custom convention pack imports in CLAUDE.md by @jsvob in #250
• fix: wire auto-mode native fallback in uf setupOpsx/setup auto native fallback by @yvonnedevlinrh in #267
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.3.1 to 0.4.0 by @dependabot[bot] in #274
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_dependabot_reviewer.yml from 0.3.1 to 0.4.0 by @dependabot[bot] in #277
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml from 0.3.1 to 0.4.0 by @dependabot[bot] in #275
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_deps_reviewer.yml from 0.3.1 to 0.4.0 by @dependabot[bot] in #276
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_scheduled.yml from 0.3.1 to 0.4.0 by @dependabot[bot] in #278
• fix: show actual error output from sub-tool failures in uf init and uf setup by @gxmiranda in #269
• feat: add /triage-issue slash command for multi-agent issue triage by @jflowers in #272
• ci(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #282
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_ci.yml from 0.3.1 to 0.4.0 by @dependabot[bot] in #281
• feat: add dnf/RPM and binary download fallbacks to uf setup by @em-redhat in #270
• fix(ci): add missing pull-requests read permission by @yvonnedevlinrh in #285
• feat(finale): add structured PR body, AI attribution, and shell injection fix by @jflowers in #288
• refactor(commands): convert confirmation prompts to AskUserQuestion tool by @jflowers in #286
• fix: align installGolangciLint dry-run with actual install path by @yvonnedevlinrh in #283
• refactor: extract shared pre-flight skill for CI detection and local … by @yvonnedevlinrh in #290
• ci(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #292
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_vuln_scan.yml from 0.3.1 to 0.4.0 by @dependabot[bot] in #280
• feat(uf-init): add missing customization steps and tighten idempotency by @jflowers in #289
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_vuln_scan.yml from 0.4.0 to 0.5.0 by @dependabot[bot] in #297
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_ci.yml from 0.4.0 to 0.5.0 by @dependabot[bot] in #298
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_dependabot_reviewer.yml from 0.4.0 to 0.5.0 by @dependabot[bot] in #300
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_scheduled.yml from 0.4.0 to 0.5.0 by @dependabot[bot] in #299
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.4.0 to 0.5.0 by @dependabot[bot] in #301
• feat: create review-context skill and scaffold asset by @yvonnedevlinrh in #303
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml from 0.4.0 to 0.5.0 by @dependabot[bot] in #306
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_deps_reviewer.yml from 0.4.0 to 0.5.0 by @dependabot[bot] in #305
• refactor(commands): migrate /review-pr to review-context skill by @yvonnedevlinrh in #307
• feat(commands): migrate /review-council to consume review-context skill by @yvonnedevlinrh in #310
• ci(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by @dependabot[bot] in #311
• fix: add missing name field to 8 skill frontmatter by @yvonnedevlinrh in #317
• feat: add ci.md convention pack for CI workflow authoring by @marcusburghardt in #273
• fix(scaffold): prevent uf init --force from hanging on Dewey reindexing by @sonupreetam in #321
• feat(commands): add CI causality analysis and soft-gate to review-council by @yvonnedevlinrh in #318
• feat: add GitHub review posting to /review-council by @yvonnedevlinrh in #323
• feat(finale): add sub-agent option for merge conflict resolution by @em-redhat in #326
• fix(finale): add mergeability gate when CI checks are not reported by @em-redhat in #320
• chore: improve CODEOWNERS check in /review-pr and /review-council by @em-redhat in #327
• feat: add speckit/ folder prefix to Speckit branches by @yvonnedevlinrh in #328
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_vuln_scan.yml from 0.5.0 to 0.6.0 by @dependabot[bot] in #331
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_ci.yml from 0.5.0 to 0.6.0 by @dependabot[bot] in #334
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml from 0.5.0 to 0.6.0 by @dependabot[bot] in #332
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_deps_reviewer.yml from 0.5.0 to 0.6.0 by @dependabot[bot] in #333
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.5.0 to 0.6.0 by @dependabot[bot] in #335
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_dependabot_reviewer.yml from 0.5.0 to 0.6.0 by @dependabot[bot] in #338
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_scheduled.yml from 0.5.0 to 0.6.0 by @dependabot[bot] in #339
• ci(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #340
• docs: document --no-embeddings default during uf init by @sonupreetam in #341
• ci(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #344
• fix: harden review-pr Step 11 confirmation gate against context compression by @em-redhat in #371
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_vuln_scan.yml from 0.6.0 to 0.7.1 by @dependabot[bot] in #366
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_scheduled.yml from 0.6.0 to 0.7.1 by @dependabot[bot] in #367
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml from 0.6.0 to 0.7.1 by @dependabot[bot] in #368
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_dependabot_reviewer.yml from 0.6.0 to 0.7.1 by @dependabot[bot] in #369
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_deps_reviewer.yml from 0.6.0 to 0.7.1 by @dependabot[bot] in #370
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.6.0 to 0.7.1 by @dependabot[bot] in #388
• ci(deps): bump complytime/org-infra/.github/workflows/reusable_ci.yml from 0.6.0 to 0.7.1 by @dependabot[bot] in #389
• feat: add council-review-action composite GitHub Action by @sonupreetam in #336
• fix(openspec-explore): enforce branch-switching gate with AskUserQuestion by @jflowers in #400
• fix(gaze-test-generator): replace advisory compile check with concrete pre-write gate by @jflowers in #404
• fix(muti-mind.sync-push): add confirmation gate before GitHub Issue creation by @jflowers in #408
• fix(triage-issue): gate all label mutations behind AskUserQuestion by @jflowers in #391
• fix(finale): add AskUserQuestion gate before git push by @jflowers in #405
• fix(openspec-propose): enforce dirty-tree guard with AskUserQuestion tool call by @jflowers in #406
• fix(speckit.implement): harden checklist and commit/push gates by @jflowers in #394
• fix(speckit): harden dirty-tree check with explicit AskUserQuestion tool call by @jflowers in #396
• fix(speckit.clarify): require AskUserQuestion tool calls for sequential questioning by @jflowers in #403
• fix(opsx-archive): add branch switch gate and clarify mv guard by @jflowers in #393
• fix(openspec-archive-change): add AskUserQuestion gates for commit and branch-switch safety by @jflowers in #397
• fix(agents): move branch safety guardrails to pre-conditions by @jflowers in #392
• fix: move branch safety rules to pre-conditions in speckit-workflow skill by @jflowers in #398
• fix(speckit): move STOP HERE gates before workflow steps by @jflowers in #401
• chore: prefix uf-owned slash commands with uf. namespace by @marcusburghardt in #304
• fix(muti-mind-po): add AskUserQuestion gate before acceptance decision CLI by @jflowers in #410
• fix: split /uf.review-pr into parent/subagent architecture by @jflowers in #413
• fix: harden /uf.review-council against context compression by @jflowers in #414
• fix: add compression resilience to /uf.unleash pipeline by @jflowers in #415
• fix(commands): add compression guards to /uf.address-feedback by @jflowers in #416
• fix(speckit): move STOP HERE gates to preamble in remaining 5 commands by @jflowers in #417
• fix(speckit-workflow): replace prose-only dirty-tree check with explicit AskUserQuestion gate by @jflowers in #418
• fix(finale): replace prose secrets check gate with AskUserQuestion tool call by @jflowers in #412
• fix(finale): harden /uf.finale against context compression by @jflowers in #411
• chore: add CODEOWNERS file by @yvonnedevlinrh in #439
• fix(review-pr): always offer verdict posting in Step 7 by @jflowers in #442
• fix(sandbox): add wsName validation guard in startServerViaSSH by @yvonnedevlinrh in #440
• fix(sandbox): remove incorrect LookPath podman pre-flight from DevPod by @yvonnedevlinrh in #436
• fix(scaffold): differentiate guardrails for speckit and uf.init commands by @yvonnedevlinrh in #443
• ci: adopt org-infra reusable release workflows by @sonupreetam in #433
• ci(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #421
• fix(scaffold): harden uf init command rename migration by @jflowers in #420
• feat: council-review-action runtime sandbox and review fixes by @sonupreetam in #425
• chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 from 6.0.2 to 6.0.3 by @dependabot[bot] in #453
• fix(ci): remove duplicate concurrency group and enable pre-releases by @sonupreetam in #456
• fix: update specify init invocation for new CLI contract by @jflowers in #458
• chore: remove CLAUDE.md and .cursorrules bridge file scaffolding by @yvonnedevlinrh in #463
• fix: add output fidelity guard to /uf.unleash Step 10 Demo by @jflowers in #467
• fix(setup): resolve companion tool versions independently for RPM URLs by @jflowers in #461
• fix: make uf doctor install hints tool-agnostic by @yvonnedevlinrh in #476
• fix(scaffold): embed starter constitution in uf init by @em-redhat in #480
• feat: add granular bash permissions to gate GitHub mutations by @sonupreetam in #477
• fix: add explicit autonomy guardrails to /uf.unleash pipeline by @jflowers in #481
• fix(commands): rename AskUserQuestion to question tool by @jflowers in #482
• chore(commands): add tags to slash command files by @jflowers in #499
• chore: gitignore .uf/config.yaml and .uf/dewey/config.yaml by @jflowers in #494
• chore: compile dewey learnings and add review doc by @jflowers in #498
• chore: remove .uf/dewey/config.yaml from source control by @jflowers in #500
• chore: add DCP configuration for protect tag preservation by @jflowers in #506
• chore: add DCP config to enable protect tag preservation by @jflowers in #501
• fix: restore accidentally-reverted soft-gate content in pre-flight SKILL.md by @yvonnedevlinrh in #507
• feat: add file-scope filter to pre-flight skill (Fixes #434) by @yvonnedevlinrh in #522
• feat(commands): add mandatory gates at unguarded mutation entry points by @jflowers in #493
• fix(scaffold): protect constitution from --force overwrite by @jflowers in #496
• feat: scaffold DCP config and doctor health check by @jflowers in #505
• fix: pass --force through to sub-tool init commands by @yvonnedevlinrh in #524
• fix(commands): add mandatory gate to uf.triage-issue Phase 4 by @jflowers in #485

New Contributors

• @jsvob made their first contribution in #248
• @yvonnedevlinrh made their first contribution in #267
• @gxmiranda made their first contribution in #269
• @em-redhat made their first contribution in #270

Full Changelog: v0.15.0...v0.16.0