Repository navigation
Releases
Releases · unbraind/pm-graph
pm-graph v2026.11.12
Changelog
2026.11.12 - 2026-11-12
Dependencies
2026.11.10 - 2026-11-10
Dependencies
- Bump the pm-toolchain group with 3 updates (#204)
- Bump the codeql-action group with 2 updates (#201)
- Bump the pm-toolchain group with 2 updates (#200)
- Bump @unbrained/pm-cli (#198)
- Bump @unbrained/pm-cli (#197)
- Bump the pm-toolchain group with 3 updates (#196)
- Bump unbraind/pm-github/.github/workflows/pm-github-sync.yml from 2026.10.23 to 2026.10.30 (#190)
- Bump the dependencies group across 1 directory with 3 updates (#193)
- Bump the pm-toolchain group with 3 updates (#192)
- Bump unbraind/pm-github/.github/workflows/pm-github-closeout.yml (#191)
2026.10.31 - 2026-10-31
Added
- Explain relationship paths with minimum declared evidence cost (pm-graph-evidence-cost-paths)
Fixed
- Restore main CI after evidence-path coverage falls below the exact floor (pm-graph-main-ci-coverage)
Other
- Align the Dependabot sync caller with its pinned workflow release (pm-graph-a8qp)
2026.10.28 - 2026-10-28
Added
- Refresh projections from mutation events with sparse work receipts (pm-graph-event-sparse)
- Collapse equivalent graph nodes while preserving boundary explanations (pm-graph-cif6)
Other
- Stop Hound from linting generated dist/ output (pm-graph-hound-generated-dist)
2026.10.26 - 2026-10-26
Other
- Point the npm homepage at the package catalog and link the author (pm-graph-yx81)
2026.10.25 - 2026-10-25
Added
- Project consented workspaces into a qualified read-only graph (pm-graph-projection)
Other
- Preserve host refusal recovery and normalize blocker-cut budget flags (pm-graph-sdk-host-flags)
- Reconcile stale in-progress tracker records (2026-10-23) (pm-graph-reconcile-1023)
2026.10.24 - 2026-10-24
Added
- Enumerate minimal blocker frontiers for a goal with bounded completeness receipts (pm-graph-8z44)
- Compare snapshot graph impact for resuming agents (pm-graph-snapshot-impact)
Other
- Correct review evidence in tracker reconciliation PR 155 (pm-graph-review155)
2026.10.23 - 2026-10-23
Changed
- Adopt pm-github 2026.10.16: default-branch-safe gated sync and daily gated closeout PRs (pm-graph-mupl)
- Enable the gated GitHub issue sync and drop the braces chain (pm-graph-maint1014)
Fixed
- A release run bumped and committed a new version every night while publishing was impossible, because the only externally-failable step runs last (pm-graph-wos1)
- Fix release publish ordering ahead of protected main push (pm-graph-ihhe)
- Refresh managed pm-github extension for project-local PM CLI 2026.9.27 (pm-graph-ipvn)
- Graph export uses quadratic item and edge scans on large trackers (pm-graph-3a1p)
- Remove vulnerable braces dependency from certification toolchain (pm-graph-g8uc)
- The publish-attestation gate misses a publish routed through an unquoted shell variable (pm-graph-ifqz)
- The changelog gate stamps an untagged version with the current date, so its verdict flips every midnight with no commit (pm-graph-4glq)
- The release job authenticated with a stored npm token that expired, so publishing stopped while every other gate stayed green (pm-graph-ybzl)
Other
- Cover the output_format decline contract with real SDK harness tests instead of a registration-only assertion (pm-graph-vgj0)
- Render package visuals with build-time Triplicate tokens (pm-graph-triplicate)
- Certify pm-graph on PM CLI/SDK 2026.10.4 and consolidate pending dependency updates (pm-graph-lcmc)
Closed
- Closed: Committed CHANGELOG.md drifts from deterministic regeneration after the pm-graph-3svp type classification change, breaking changelog:check on every PR (pm-graph-brgk)
2026.10.14 - 2026-10-14
Added
- Adopt SDK read_output contracts on pm-graph read commands (pm-graph-by2t)
2026.10.5 - 2026-10-05
Other
- Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (pm-graph-088p)
2026.9.26 - 2026-09-26
Fixed
- A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (pm-graph-1k7d)
Other
- Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (pm-graph-at6i)
2026.9.18 - 2026-09-18
Other
- Certify pm CLI 2026.9.17 (pm-graph-zfdw)
2026.9.13 - 2026-09-13
Other
- Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor (pm-graph-bwlv)
2026.9.11 - 2026-09-11
Other
- Certify pm CLI 2026.9.10 and pick up the canonical auditor fixes the lockfile was holding back (pm-graph-upz4)
2026.9.8 - 2026-09-08
Security
- Consume the canonical attestation gate instead of carrying a copy of it (pm-graph-qg2n)
Other
- Harden the attestation consumer suite to match the rest of the converged fleet (pm-graph-53r2)
2026.9.1 - 2026-09-01
Fixed
- This repository has never produced a static analysis, because it runs no CodeQL workflow (pm-graph-ke7d)
- Group codeql-action bumps into one pull request to end the split-PR deadlock (pm-graph-2fft)
2026.8.31 - 2026-08-31
Closed
- Closed: Pin pm-changelog 2026.8.30 before the next release (pm-graph-g0em)
- Closed: Regenerate the changelog after the release tag was created (pm-graph-7la7)
2026.8.29 - 2026-08-29
Fixed
- Unblock PR 70 suffixed CalVer changelog gate (pm-graph-gjpd)
- Close PR 79 scalar escape review findings (pm-graph-ewxc)
- A failed provenance publish silently falls back to an unattested one ([pm-graph-1fe4](https://git...
pm-graph v2026.11.10
Changelog
2026.11.10 - 2026-11-10
Dependencies
- Bump the pm-toolchain group with 3 updates (#204)
- Bump the codeql-action group with 2 updates (#201)
- Bump the pm-toolchain group with 2 updates (#200)
- Bump @unbrained/pm-cli (#198)
- Bump @unbrained/pm-cli (#197)
- Bump the pm-toolchain group with 3 updates (#196)
- Bump unbraind/pm-github/.github/workflows/pm-github-sync.yml from 2026.10.23 to 2026.10.30 (#190)
- Bump the dependencies group across 1 directory with 3 updates (#193)
- Bump the pm-toolchain group with 3 updates (#192)
- Bump unbraind/pm-github/.github/workflows/pm-github-closeout.yml (#191)
2026.10.31 - 2026-10-31
Added
- Explain relationship paths with minimum declared evidence cost (pm-graph-evidence-cost-paths)
Fixed
- Restore main CI after evidence-path coverage falls below the exact floor (pm-graph-main-ci-coverage)
Other
- Align the Dependabot sync caller with its pinned workflow release (pm-graph-a8qp)
2026.10.28 - 2026-10-28
Added
- Refresh projections from mutation events with sparse work receipts (pm-graph-event-sparse)
- Collapse equivalent graph nodes while preserving boundary explanations (pm-graph-cif6)
Other
- Stop Hound from linting generated dist/ output (pm-graph-hound-generated-dist)
2026.10.26 - 2026-10-26
Other
- Point the npm homepage at the package catalog and link the author (pm-graph-yx81)
2026.10.25 - 2026-10-25
Added
- Project consented workspaces into a qualified read-only graph (pm-graph-projection)
Other
- Preserve host refusal recovery and normalize blocker-cut budget flags (pm-graph-sdk-host-flags)
- Reconcile stale in-progress tracker records (2026-10-23) (pm-graph-reconcile-1023)
2026.10.24 - 2026-10-24
Added
- Enumerate minimal blocker frontiers for a goal with bounded completeness receipts (pm-graph-8z44)
- Compare snapshot graph impact for resuming agents (pm-graph-snapshot-impact)
Other
- Correct review evidence in tracker reconciliation PR 155 (pm-graph-review155)
2026.10.23 - 2026-10-23
Changed
- Adopt pm-github 2026.10.16: default-branch-safe gated sync and daily gated closeout PRs (pm-graph-mupl)
- Enable the gated GitHub issue sync and drop the braces chain (pm-graph-maint1014)
Fixed
- A release run bumped and committed a new version every night while publishing was impossible, because the only externally-failable step runs last (pm-graph-wos1)
- Fix release publish ordering ahead of protected main push (pm-graph-ihhe)
- Refresh managed pm-github extension for project-local PM CLI 2026.9.27 (pm-graph-ipvn)
- Graph export uses quadratic item and edge scans on large trackers (pm-graph-3a1p)
- Remove vulnerable braces dependency from certification toolchain (pm-graph-g8uc)
- The publish-attestation gate misses a publish routed through an unquoted shell variable (pm-graph-ifqz)
- The changelog gate stamps an untagged version with the current date, so its verdict flips every midnight with no commit (pm-graph-4glq)
- The release job authenticated with a stored npm token that expired, so publishing stopped while every other gate stayed green (pm-graph-ybzl)
Other
- Cover the output_format decline contract with real SDK harness tests instead of a registration-only assertion (pm-graph-vgj0)
- Render package visuals with build-time Triplicate tokens (pm-graph-triplicate)
- Certify pm-graph on PM CLI/SDK 2026.10.4 and consolidate pending dependency updates (pm-graph-lcmc)
Closed
- Closed: Committed CHANGELOG.md drifts from deterministic regeneration after the pm-graph-3svp type classification change, breaking changelog:check on every PR (pm-graph-brgk)
2026.10.14 - 2026-10-14
Added
- Adopt SDK read_output contracts on pm-graph read commands (pm-graph-by2t)
2026.10.5 - 2026-10-05
Other
- Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (pm-graph-088p)
2026.9.26 - 2026-09-26
Fixed
- A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (pm-graph-1k7d)
Other
- Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (pm-graph-at6i)
2026.9.18 - 2026-09-18
Other
- Certify pm CLI 2026.9.17 (pm-graph-zfdw)
2026.9.13 - 2026-09-13
Other
- Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor (pm-graph-bwlv)
2026.9.11 - 2026-09-11
Other
- Certify pm CLI 2026.9.10 and pick up the canonical auditor fixes the lockfile was holding back (pm-graph-upz4)
2026.9.8 - 2026-09-08
Security
- Consume the canonical attestation gate instead of carrying a copy of it (pm-graph-qg2n)
Other
- Harden the attestation consumer suite to match the rest of the converged fleet (pm-graph-53r2)
2026.9.1 - 2026-09-01
Fixed
- This repository has never produced a static analysis, because it runs no CodeQL workflow (pm-graph-ke7d)
- Group codeql-action bumps into one pull request to end the split-PR deadlock (pm-graph-2fft)
2026.8.31 - 2026-08-31
Closed
- Closed: Pin pm-changelog 2026.8.30 before the next release (pm-graph-g0em)
- Closed: Regenerate the changelog after the release tag was created (pm-graph-7la7)
2026.8.29 - 2026-08-29
Fixed
- A failed provenance publish silently falls back to an unattested one (pm-graph-1fe4)
- Unblock PR 70 suffixed CalVer changelog gate (pm-graph-gjpd)
- Close PR 79 scalar escape review findings (pm-graph-ewxc)
Other
- Pilot pm-github issue sync for pm-graph (pm-graph-7gv0)
2...
pm-graph v2026.10.31
Changelog
2026.10.31 - 2026-10-31
Added
- Explain relationship paths with minimum declared evidence cost (pm-graph-evidence-cost-paths)
Fixed
- Restore main CI after evidence-path coverage falls below the exact floor (pm-graph-main-ci-coverage)
Other
- Align the Dependabot sync caller with its pinned workflow release (pm-graph-a8qp)
2026.10.28 - 2026-10-28
Added
- Refresh projections from mutation events with sparse work receipts (pm-graph-event-sparse)
- Collapse equivalent graph nodes while preserving boundary explanations (pm-graph-cif6)
Other
- Stop Hound from linting generated dist/ output (pm-graph-hound-generated-dist)
2026.10.26 - 2026-10-26
Other
- Point the npm homepage at the package catalog and link the author (pm-graph-yx81)
2026.10.25 - 2026-10-25
Added
- Project consented workspaces into a qualified read-only graph (pm-graph-projection)
Other
- Preserve host refusal recovery and normalize blocker-cut budget flags (pm-graph-sdk-host-flags)
- Reconcile stale in-progress tracker records (2026-10-23) (pm-graph-reconcile-1023)
2026.10.24 - 2026-10-24
Added
- Enumerate minimal blocker frontiers for a goal with bounded completeness receipts (pm-graph-8z44)
- Compare snapshot graph impact for resuming agents (pm-graph-snapshot-impact)
Other
- Correct review evidence in tracker reconciliation PR 155 (pm-graph-review155)
2026.10.23 - 2026-10-23
Changed
- Adopt pm-github 2026.10.16: default-branch-safe gated sync and daily gated closeout PRs (pm-graph-mupl)
- Enable the gated GitHub issue sync and drop the braces chain (pm-graph-maint1014)
Fixed
- A release run bumped and committed a new version every night while publishing was impossible, because the only externally-failable step runs last (pm-graph-wos1)
- Fix release publish ordering ahead of protected main push (pm-graph-ihhe)
- Refresh managed pm-github extension for project-local PM CLI 2026.9.27 (pm-graph-ipvn)
- Graph export uses quadratic item and edge scans on large trackers (pm-graph-3a1p)
- Remove vulnerable braces dependency from certification toolchain (pm-graph-g8uc)
- The publish-attestation gate misses a publish routed through an unquoted shell variable (pm-graph-ifqz)
- The changelog gate stamps an untagged version with the current date, so its verdict flips every midnight with no commit (pm-graph-4glq)
- The release job authenticated with a stored npm token that expired, so publishing stopped while every other gate stayed green (pm-graph-ybzl)
Other
- Cover the output_format decline contract with real SDK harness tests instead of a registration-only assertion (pm-graph-vgj0)
- Render package visuals with build-time Triplicate tokens (pm-graph-triplicate)
- Certify pm-graph on PM CLI/SDK 2026.10.4 and consolidate pending dependency updates (pm-graph-lcmc)
Closed
- Closed: Committed CHANGELOG.md drifts from deterministic regeneration after the pm-graph-3svp type classification change, breaking changelog:check on every PR (pm-graph-brgk)
2026.10.14 - 2026-10-14
Added
- Adopt SDK read_output contracts on pm-graph read commands (pm-graph-by2t)
2026.10.5 - 2026-10-05
Other
- Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (pm-graph-088p)
2026.9.26 - 2026-09-26
Fixed
- A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (pm-graph-1k7d)
Other
- Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (pm-graph-at6i)
2026.9.18 - 2026-09-18
Other
- Certify pm CLI 2026.9.17 (pm-graph-zfdw)
2026.9.13 - 2026-09-13
Other
- Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor (pm-graph-bwlv)
2026.9.11 - 2026-09-11
Other
- Certify pm CLI 2026.9.10 and pick up the canonical auditor fixes the lockfile was holding back (pm-graph-upz4)
2026.9.8 - 2026-09-08
Security
- Consume the canonical attestation gate instead of carrying a copy of it (pm-graph-qg2n)
Other
- Harden the attestation consumer suite to match the rest of the converged fleet (pm-graph-53r2)
2026.9.1 - 2026-09-01
Fixed
- This repository has never produced a static analysis, because it runs no CodeQL workflow (pm-graph-ke7d)
- Group codeql-action bumps into one pull request to end the split-PR deadlock (pm-graph-2fft)
2026.8.31 - 2026-08-31
Closed
- Closed: Pin pm-changelog 2026.8.30 before the next release (pm-graph-g0em)
- Closed: Regenerate the changelog after the release tag was created (pm-graph-7la7)
2026.8.29 - 2026-08-29
Fixed
- A failed provenance publish silently falls back to an unattested one (pm-graph-1fe4)
- Unblock PR 70 suffixed CalVer changelog gate (pm-graph-gjpd)
- Close PR 79 scalar escape review findings (pm-graph-ewxc)
Other
- Pilot pm-github issue sync for pm-graph (pm-graph-7gv0)
2026.8.28 - 2026-08-28
Other
- Drop inert pm manifest key and guard the closed manifest vocabulary (pm-graph-g2fs)
- Realign changelog branch with main after xc7g release-note rewrite (pm-graph-1lzu)
Closed
- Closed: The identity gate deadlocks the one remediation its own failure message prescribes (pm-graph-m8f9)
- Closed: Remove private identities and host-specific paths from reachable Git history (pm-graph-xc7g)
2026.8.17 - 2026-08-17
Fixed
- The pm CLI compatibility floor was declared only in peerDependencies, which only npm enforces, and not in manifest.json pm_min_version, which is the field the CLI enforces (pm-graph-wg5g)
2026.8.10 ...
pm-graph v2026.10.28
Changelog
2026.10.28 - 2026-10-28
Added
- Collapse equivalent graph nodes while preserving boundary explanations (pm-graph-cif6)
Other
- Stop Hound from linting generated dist/ output (pm-graph-hound-generated-dist)
2026.10.25 - 2026-10-25
Added
- Project consented workspaces into a qualified read-only graph (pm-graph-projection)
Other
- Preserve host refusal recovery and normalize blocker-cut budget flags (pm-graph-sdk-host-flags)
- Reconcile stale in-progress tracker records (2026-10-23) (pm-graph-reconcile-1023)
2026.10.24 - 2026-10-24
Added
- Enumerate minimal blocker frontiers for a goal with bounded completeness receipts (pm-graph-8z44)
- Compare snapshot graph impact for resuming agents (pm-graph-snapshot-impact)
Other
- Correct review evidence in tracker reconciliation PR 155 (pm-graph-review155)
2026.10.23 - 2026-10-23
Changed
- Adopt pm-github 2026.10.16: default-branch-safe gated sync and daily gated closeout PRs (pm-graph-mupl)
- Enable the gated GitHub issue sync and drop the braces chain (pm-graph-maint1014)
Fixed
- A release run bumped and committed a new version every night while publishing was impossible, because the only externally-failable step runs last (pm-graph-wos1)
- Fix release publish ordering ahead of protected main push (pm-graph-ihhe)
- Refresh managed pm-github extension for project-local PM CLI 2026.9.27 (pm-graph-ipvn)
- Graph export uses quadratic item and edge scans on large trackers (pm-graph-3a1p)
- Remove vulnerable braces dependency from certification toolchain (pm-graph-g8uc)
- The publish-attestation gate misses a publish routed through an unquoted shell variable (pm-graph-ifqz)
- The changelog gate stamps an untagged version with the current date, so its verdict flips every midnight with no commit (pm-graph-4glq)
- The release job authenticated with a stored npm token that expired, so publishing stopped while every other gate stayed green (pm-graph-ybzl)
Other
- Cover the output_format decline contract with real SDK harness tests instead of a registration-only assertion (pm-graph-vgj0)
- Render package visuals with build-time Triplicate tokens (pm-graph-triplicate)
- Certify pm-graph on PM CLI/SDK 2026.10.4 and consolidate pending dependency updates (pm-graph-lcmc)
Closed
- Closed: Committed CHANGELOG.md drifts from deterministic regeneration after the pm-graph-3svp type classification change, breaking changelog:check on every PR (pm-graph-brgk)
2026.10.14 - 2026-10-14
Added
- Adopt SDK read_output contracts on pm-graph read commands (pm-graph-by2t)
2026.10.5 - 2026-10-05
Other
- Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (pm-graph-088p)
2026.9.26 - 2026-09-26
Fixed
- A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (pm-graph-1k7d)
Other
- Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (pm-graph-at6i)
2026.9.18 - 2026-09-18
Other
- Certify pm CLI 2026.9.17 (pm-graph-zfdw)
2026.9.13 - 2026-09-13
Other
- Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor (pm-graph-bwlv)
2026.9.11 - 2026-09-11
Other
- Certify pm CLI 2026.9.10 and pick up the canonical auditor fixes the lockfile was holding back (pm-graph-upz4)
2026.9.8 - 2026-09-08
Security
- Consume the canonical attestation gate instead of carrying a copy of it (pm-graph-qg2n)
Other
- Harden the attestation consumer suite to match the rest of the converged fleet (pm-graph-53r2)
2026.9.1 - 2026-09-01
Fixed
- This repository has never produced a static analysis, because it runs no CodeQL workflow (pm-graph-ke7d)
- Group codeql-action bumps into one pull request to end the split-PR deadlock (pm-graph-2fft)
2026.8.31 - 2026-08-31
Closed
- Closed: Pin pm-changelog 2026.8.30 before the next release (pm-graph-g0em)
- Closed: Regenerate the changelog after the release tag was created (pm-graph-7la7)
2026.8.29 - 2026-08-29
Fixed
- A failed provenance publish silently falls back to an unattested one (pm-graph-1fe4)
- Unblock PR 70 suffixed CalVer changelog gate (pm-graph-gjpd)
- Close PR 79 scalar escape review findings (pm-graph-ewxc)
Other
- Pilot pm-github issue sync for pm-graph (pm-graph-7gv0)
2026.8.28 - 2026-08-28
Other
- Drop inert pm manifest key and guard the closed manifest vocabulary (pm-graph-g2fs)
- Realign changelog branch with main after xc7g release-note rewrite (pm-graph-1lzu)
Closed
- Closed: The identity gate deadlocks the one remediation its own failure message prescribes (pm-graph-m8f9)
- Closed: Remove private identities and host-specific paths from reachable Git history (pm-graph-xc7g)
2026.8.17 - 2026-08-17
Fixed
- The pm CLI compatibility floor was declared only in peerDependencies, which only npm enforces, and not in manifest.json pm_min_version, which is the field the CLI enforces (pm-graph-wg5g)
2026.8.10 - 2026-08-10
Fixed
- Propagate the docstring gate entry guard fix (pm-graph-r8nz)
Other
- Adopt the mandatory docstring gate (pm-graph-k5ao)
2026.8.8 - 2026-08-08
Other
- Adopt pm CLI and SDK 2026.8.7 with a covered TypeScript merge-driver lifecycle (pm-graph-jrc0)
2026.8.7 - 2026-08-07
Fixed
- Reconcile PR with same-day release before changelog CI (pm-graph-y2ax)
Other
- Gate CI on strict tracked pm project health (pm-graph-9qk5)
2026.8.6 - 2026-08-06
Fixed
- id-resolution test can fail in its own setup when three random ids share a prefix ([pm-grap...
pm-graph v2026.10.26
Changelog
2026.10.25 - 2026-10-25
Added
- Project consented workspaces into a qualified read-only graph (pm-graph-projection)
Other
- Preserve host refusal recovery and normalize blocker-cut budget flags (pm-graph-sdk-host-flags)
- Reconcile stale in-progress tracker records (2026-10-23) (pm-graph-reconcile-1023)
2026.10.24 - 2026-10-24
Added
- Enumerate minimal blocker frontiers for a goal with bounded completeness receipts (pm-graph-8z44)
- Compare snapshot graph impact for resuming agents (pm-graph-snapshot-impact)
Other
- Correct review evidence in tracker reconciliation PR 155 (pm-graph-review155)
2026.10.23 - 2026-10-23
Changed
- Adopt pm-github 2026.10.16: default-branch-safe gated sync and daily gated closeout PRs (pm-graph-mupl)
- Enable the gated GitHub issue sync and drop the braces chain (pm-graph-maint1014)
Fixed
- A release run bumped and committed a new version every night while publishing was impossible, because the only externally-failable step runs last (pm-graph-wos1)
- Fix release publish ordering ahead of protected main push (pm-graph-ihhe)
- Committed CHANGELOG.md drifts from deterministic regeneration after the pm-graph-3svp type classification change, breaking changelog:check on every PR (pm-graph-brgk)
- Refresh managed pm-github extension for project-local PM CLI 2026.9.27 (pm-graph-ipvn)
- Graph export uses quadratic item and edge scans on large trackers (pm-graph-3a1p)
- Remove vulnerable braces dependency from certification toolchain (pm-graph-g8uc)
- The publish-attestation gate misses a publish routed through an unquoted shell variable (pm-graph-ifqz)
- The changelog gate stamps an untagged version with the current date, so its verdict flips every midnight with no commit (pm-graph-4glq)
- The release job authenticated with a stored npm token that expired, so publishing stopped while every other gate stayed green (pm-graph-ybzl)
Other
- Cover the output_format decline contract with real SDK harness tests instead of a registration-only assertion (pm-graph-vgj0)
- Bring pm-graph to real 100% line/branch/function coverage and raise the gate to 100 (pm-graph-6zil)
- Render package visuals with build-time Triplicate tokens (pm-graph-triplicate)
- Certify pm-graph on PM CLI/SDK 2026.10.4 and consolidate pending dependency updates (pm-graph-lcmc)
2026.10.14 - 2026-10-14
Added
- Adopt SDK read_output contracts on pm-graph read commands (pm-graph-by2t)
2026.10.5 - 2026-10-05
Other
- Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (pm-graph-088p)
2026.9.26 - 2026-09-26
Fixed
- A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (pm-graph-1k7d)
Other
- Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (pm-graph-at6i)
2026.9.18 - 2026-09-18
Other
- Certify pm CLI 2026.9.17 (pm-graph-zfdw)
2026.9.13 - 2026-09-13
Other
- Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor (pm-graph-bwlv)
2026.9.11 - 2026-09-11
Other
- Certify pm CLI 2026.9.10 and pick up the canonical auditor fixes the lockfile was holding back (pm-graph-upz4)
2026.9.8 - 2026-09-08
Security
- Consume the canonical attestation gate instead of carrying a copy of it (pm-graph-qg2n)
Other
- Harden the attestation consumer suite to match the rest of the converged fleet (pm-graph-53r2)
2026.9.1 - 2026-09-01
Fixed
- This repository has never produced a static analysis, because it runs no CodeQL workflow (pm-graph-ke7d)
- Group codeql-action bumps into one pull request to end the split-PR deadlock (pm-graph-2fft)
2026.8.31 - 2026-08-31
Fixed
- Pin pm-changelog 2026.8.30 before the next release (pm-graph-g0em)
- Regenerate the changelog after the release tag was created (pm-graph-7la7)
2026.8.29 - 2026-08-29
Fixed
- A failed provenance publish silently falls back to an unattested one (pm-graph-1fe4)
- Unblock PR 70 suffixed CalVer changelog gate (pm-graph-gjpd)
- Close PR 79 scalar escape review findings (pm-graph-ewxc)
Other
- Pilot pm-github issue sync for pm-graph (pm-graph-7gv0)
2026.8.28 - 2026-08-28
Fixed
- Remove private identities and host-specific paths from reachable Git history (pm-graph-xc7g)
Security
- The identity gate deadlocks the one remediation its own failure message prescribes (pm-graph-m8f9)
Other
- Drop inert pm manifest key and guard the closed manifest vocabulary (pm-graph-g2fs)
- Realign changelog branch with main after xc7g release-note rewrite (pm-graph-1lzu)
2026.8.17 - 2026-08-17
Fixed
- The pm CLI compatibility floor was declared only in peerDependencies, which only npm enforces, and not in manifest.json pm_min_version, which is the field the CLI enforces (pm-graph-wg5g)
2026.8.10 - 2026-08-10
Fixed
- Propagate the docstring gate entry guard fix (pm-graph-r8nz)
Other
- Adopt the mandatory docstring gate (pm-graph-k5ao)
2026.8.8 - 2026-08-08
Other
- Adopt pm CLI and SDK 2026.8.7 with a covered TypeScript merge-driver lifecycle (pm-graph-jrc0)
2026.8.7 - 2026-08-07
Fixed
- Reconcile PR with same-day release before changelog CI (pm-graph-y2ax)
Other
- Gate CI on strict tracked pm project health (pm-graph-9qk5)
2026.8.6 - 2026-08-06
Fixed
- id-resolution test can fail in its own setup when three random ids share a prefix (pm-graph-of5p)
2026.8.4 - 2026-08-04
Fixed
- Fix runGraph projected result narrowing and bump pm-cli to 2026.8.3 ([pm-graph-l9df](https://github.com/unbraind/pm-graph/blob/main/...
pm-graph v2026.10.25
Changelog
2026.10.25 - 2026-10-25
Added
- Project consented workspaces into a qualified read-only graph (pm-graph-projection)
Other
- Preserve host refusal recovery and normalize blocker-cut budget flags (pm-graph-sdk-host-flags)
- Reconcile stale in-progress tracker records (2026-10-23) (pm-graph-reconcile-1023)
2026.10.24 - 2026-10-24
Added
- Enumerate minimal blocker frontiers for a goal with bounded completeness receipts (pm-graph-8z44)
- Compare snapshot graph impact for resuming agents (pm-graph-snapshot-impact)
Other
- Correct review evidence in tracker reconciliation PR 155 (pm-graph-review155)
2026.10.23 - 2026-10-23
Changed
- Adopt pm-github 2026.10.16: default-branch-safe gated sync and daily gated closeout PRs (pm-graph-mupl)
- Enable the gated GitHub issue sync and drop the braces chain (pm-graph-maint1014)
Fixed
- A release run bumped and committed a new version every night while publishing was impossible, because the only externally-failable step runs last (pm-graph-wos1)
- Fix release publish ordering ahead of protected main push (pm-graph-ihhe)
- Committed CHANGELOG.md drifts from deterministic regeneration after the pm-graph-3svp type classification change, breaking changelog:check on every PR (pm-graph-brgk)
- Refresh managed pm-github extension for project-local PM CLI 2026.9.27 (pm-graph-ipvn)
- Graph export uses quadratic item and edge scans on large trackers (pm-graph-3a1p)
- Remove vulnerable braces dependency from certification toolchain (pm-graph-g8uc)
- The publish-attestation gate misses a publish routed through an unquoted shell variable (pm-graph-ifqz)
- The changelog gate stamps an untagged version with the current date, so its verdict flips every midnight with no commit (pm-graph-4glq)
- The release job authenticated with a stored npm token that expired, so publishing stopped while every other gate stayed green (pm-graph-ybzl)
Other
- Cover the output_format decline contract with real SDK harness tests instead of a registration-only assertion (pm-graph-vgj0)
- Bring pm-graph to real 100% line/branch/function coverage and raise the gate to 100 (pm-graph-6zil)
- Render package visuals with build-time Triplicate tokens (pm-graph-triplicate)
- Certify pm-graph on PM CLI/SDK 2026.10.4 and consolidate pending dependency updates (pm-graph-lcmc)
2026.10.14 - 2026-10-14
Added
- Adopt SDK read_output contracts on pm-graph read commands (pm-graph-by2t)
2026.10.5 - 2026-10-05
Other
- Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (pm-graph-088p)
2026.9.26 - 2026-09-26
Fixed
- A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (pm-graph-1k7d)
Other
- Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (pm-graph-at6i)
2026.9.18 - 2026-09-18
Other
- Certify pm CLI 2026.9.17 (pm-graph-zfdw)
2026.9.13 - 2026-09-13
Other
- Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor (pm-graph-bwlv)
2026.9.11 - 2026-09-11
Other
- Certify pm CLI 2026.9.10 and pick up the canonical auditor fixes the lockfile was holding back (pm-graph-upz4)
2026.9.8 - 2026-09-08
Security
- Consume the canonical attestation gate instead of carrying a copy of it (pm-graph-qg2n)
Other
- Harden the attestation consumer suite to match the rest of the converged fleet (pm-graph-53r2)
2026.9.1 - 2026-09-01
Fixed
- This repository has never produced a static analysis, because it runs no CodeQL workflow (pm-graph-ke7d)
- Group codeql-action bumps into one pull request to end the split-PR deadlock (pm-graph-2fft)
2026.8.31 - 2026-08-31
Fixed
- Pin pm-changelog 2026.8.30 before the next release (pm-graph-g0em)
- Regenerate the changelog after the release tag was created (pm-graph-7la7)
2026.8.29 - 2026-08-29
Fixed
- A failed provenance publish silently falls back to an unattested one (pm-graph-1fe4)
- Unblock PR 70 suffixed CalVer changelog gate (pm-graph-gjpd)
- Close PR 79 scalar escape review findings (pm-graph-ewxc)
Other
- Pilot pm-github issue sync for pm-graph (pm-graph-7gv0)
2026.8.28 - 2026-08-28
Fixed
- Remove private identities and host-specific paths from reachable Git history (pm-graph-xc7g)
Security
- The identity gate deadlocks the one remediation its own failure message prescribes (pm-graph-m8f9)
Other
- Drop inert pm manifest key and guard the closed manifest vocabulary (pm-graph-g2fs)
- Realign changelog branch with main after xc7g release-note rewrite (pm-graph-1lzu)
2026.8.17 - 2026-08-17
Fixed
- The pm CLI compatibility floor was declared only in peerDependencies, which only npm enforces, and not in manifest.json pm_min_version, which is the field the CLI enforces (pm-graph-wg5g)
2026.8.10 - 2026-08-10
Fixed
- Propagate the docstring gate entry guard fix (pm-graph-r8nz)
Other
- Adopt the mandatory docstring gate (pm-graph-k5ao)
2026.8.8 - 2026-08-08
Other
- Adopt pm CLI and SDK 2026.8.7 with a covered TypeScript merge-driver lifecycle (pm-graph-jrc0)
2026.8.7 - 2026-08-07
Fixed
- Reconcile PR with same-day release before changelog CI (pm-graph-y2ax)
Other
- Gate CI on strict tracked pm project health (pm-graph-9qk5)
2026.8.6 - 2026-08-06
Fixed
- id-resolution test can fail in its own setup when three random ids share a prefix (pm-graph-of5p)
2026.8.4 - 2026-08-04
Fixed
- Fix runGraph projected result narrowing and bump pm-cli to 2026.8.3 ([pm-graph-l9df](https://github.com/unbraind/pm-graph/blob/main/...
pm-graph v2026.10.24
Changelog
2026.10.24 - 2026-10-24
Added
- Enumerate minimal blocker frontiers for a goal with bounded completeness receipts (pm-graph-8z44)
- Compare snapshot graph impact for resuming agents (pm-graph-snapshot-impact)
Other
- Correct review evidence in tracker reconciliation PR 155 (pm-graph-review155)
2026.10.23 - 2026-10-23
Changed
- Adopt pm-github 2026.10.16: default-branch-safe gated sync and daily gated closeout PRs (pm-graph-mupl)
- Enable the gated GitHub issue sync and drop the braces chain (pm-graph-maint1014)
Fixed
- A release run bumped and committed a new version every night while publishing was impossible, because the only externally-failable step runs last (pm-graph-wos1)
- Fix release publish ordering ahead of protected main push (pm-graph-ihhe)
- Committed CHANGELOG.md drifts from deterministic regeneration after the pm-graph-3svp type classification change, breaking changelog:check on every PR (pm-graph-brgk)
- Refresh managed pm-github extension for project-local PM CLI 2026.9.27 (pm-graph-ipvn)
- Graph export uses quadratic item and edge scans on large trackers (pm-graph-3a1p)
- Remove vulnerable braces dependency from certification toolchain (pm-graph-g8uc)
- The publish-attestation gate misses a publish routed through an unquoted shell variable (pm-graph-ifqz)
- The changelog gate stamps an untagged version with the current date, so its verdict flips every midnight with no commit (pm-graph-4glq)
- The release job authenticated with a stored npm token that expired, so publishing stopped while every other gate stayed green (pm-graph-ybzl)
Other
- Cover the output_format decline contract with real SDK harness tests instead of a registration-only assertion (pm-graph-vgj0)
- Bring pm-graph to real 100% line/branch/function coverage and raise the gate to 100 (pm-graph-6zil)
- Render package visuals with build-time Triplicate tokens (pm-graph-triplicate)
- Certify pm-graph on PM CLI/SDK 2026.10.4 and consolidate pending dependency updates (pm-graph-lcmc)
2026.10.14 - 2026-10-14
Added
- Adopt SDK read_output contracts on pm-graph read commands (pm-graph-by2t)
2026.10.5 - 2026-10-05
Other
- Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (pm-graph-088p)
2026.9.26 - 2026-09-26
Fixed
- A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (pm-graph-1k7d)
Other
- Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (pm-graph-at6i)
2026.9.18 - 2026-09-18
Other
- Certify pm CLI 2026.9.17 (pm-graph-zfdw)
2026.9.13 - 2026-09-13
Other
- Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor (pm-graph-bwlv)
2026.9.11 - 2026-09-11
Other
- Certify pm CLI 2026.9.10 and pick up the canonical auditor fixes the lockfile was holding back (pm-graph-upz4)
2026.9.8 - 2026-09-08
Security
- Consume the canonical attestation gate instead of carrying a copy of it (pm-graph-qg2n)
Other
- Harden the attestation consumer suite to match the rest of the converged fleet (pm-graph-53r2)
2026.9.1 - 2026-09-01
Fixed
- This repository has never produced a static analysis, because it runs no CodeQL workflow (pm-graph-ke7d)
- Group codeql-action bumps into one pull request to end the split-PR deadlock (pm-graph-2fft)
2026.8.31 - 2026-08-31
Fixed
- Pin pm-changelog 2026.8.30 before the next release (pm-graph-g0em)
- Regenerate the changelog after the release tag was created (pm-graph-7la7)
2026.8.29 - 2026-08-29
Fixed
- A failed provenance publish silently falls back to an unattested one (pm-graph-1fe4)
- Unblock PR 70 suffixed CalVer changelog gate (pm-graph-gjpd)
- Close PR 79 scalar escape review findings (pm-graph-ewxc)
Other
- Pilot pm-github issue sync for pm-graph (pm-graph-7gv0)
2026.8.28 - 2026-08-28
Fixed
- Remove private identities and host-specific paths from reachable Git history (pm-graph-xc7g)
Security
- The identity gate deadlocks the one remediation its own failure message prescribes (pm-graph-m8f9)
Other
- Drop inert pm manifest key and guard the closed manifest vocabulary (pm-graph-g2fs)
- Realign changelog branch with main after xc7g release-note rewrite (pm-graph-1lzu)
2026.8.17 - 2026-08-17
Fixed
- The pm CLI compatibility floor was declared only in peerDependencies, which only npm enforces, and not in manifest.json pm_min_version, which is the field the CLI enforces (pm-graph-wg5g)
2026.8.10 - 2026-08-10
Fixed
- Propagate the docstring gate entry guard fix (pm-graph-r8nz)
Other
- Adopt the mandatory docstring gate (pm-graph-k5ao)
2026.8.8 - 2026-08-08
Other
- Adopt pm CLI and SDK 2026.8.7 with a covered TypeScript merge-driver lifecycle (pm-graph-jrc0)
2026.8.7 - 2026-08-07
Fixed
- Reconcile PR with same-day release before changelog CI (pm-graph-y2ax)
Other
- Gate CI on strict tracked pm project health (pm-graph-9qk5)
2026.8.6 - 2026-08-06
Fixed
- id-resolution test can fail in its own setup when three random ids share a prefix (pm-graph-of5p)
2026.8.4 - 2026-08-04
Fixed
- Fix runGraph projected result narrowing and bump pm-cli to 2026.8.3 (pm-graph-l9df)
Other
- Resolve pm-changelog to the release that derives release dates in UTC (pm-graph-9gtz)
2026.7.31 - 2026-07-31
Fixed
- Release commits discard the rebuilt dist, so the git-install path serves the previous version (pm-graph-v6yt)
2026.7.30 - 2026-07-30
Added
- Replace the list-all shell-outs with the in-process SDK item reader ([pm-graph-v7k3](https://github.com/...
pm-graph v2026.10.23
Changelog
2026.10.23 - 2026-10-23
Changed
- Adopt pm-github 2026.10.16: default-branch-safe gated sync and daily gated closeout PRs (pm-graph-mupl)
- Enable the gated GitHub issue sync and drop the braces chain (pm-graph-maint1014)
Fixed
- A release run bumped and committed a new version every night while publishing was impossible, because the only externally-failable step runs last (pm-graph-wos1)
- Fix release publish ordering ahead of protected main push (pm-graph-ihhe)
- Committed CHANGELOG.md drifts from deterministic regeneration after the pm-graph-3svp type classification change, breaking changelog:check on every PR (pm-graph-brgk)
- Refresh managed pm-github extension for project-local PM CLI 2026.9.27 (pm-graph-ipvn)
- Graph export uses quadratic item and edge scans on large trackers (pm-graph-3a1p)
- Remove vulnerable braces dependency from certification toolchain (pm-graph-g8uc)
- The publish-attestation gate misses a publish routed through an unquoted shell variable (pm-graph-ifqz)
- The changelog gate stamps an untagged version with the current date, so its verdict flips every midnight with no commit (pm-graph-4glq)
- The release job authenticated with a stored npm token that expired, so publishing stopped while every other gate stayed green (pm-graph-ybzl)
Other
- Cover the output_format decline contract with real SDK harness tests instead of a registration-only assertion (pm-graph-vgj0)
- Bring pm-graph to real 100% line/branch/function coverage and raise the gate to 100 (pm-graph-6zil)
- Render package visuals with build-time Triplicate tokens (pm-graph-triplicate)
- Certify pm-graph on PM CLI/SDK 2026.10.4 and consolidate pending dependency updates (pm-graph-lcmc)
2026.10.14 - 2026-10-14
Added
- Adopt SDK read_output contracts on pm-graph read commands (pm-graph-by2t)
2026.10.5 - 2026-10-05
Other
- Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (pm-graph-088p)
2026.9.26 - 2026-09-26
Fixed
- A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (pm-graph-1k7d)
Other
- Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (pm-graph-at6i)
2026.9.18 - 2026-09-18
Other
- Certify pm CLI 2026.9.17 (pm-graph-zfdw)
2026.9.13 - 2026-09-13
Other
- Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor (pm-graph-bwlv)
2026.9.11 - 2026-09-11
Other
- Certify pm CLI 2026.9.10 and pick up the canonical auditor fixes the lockfile was holding back (pm-graph-upz4)
2026.9.8 - 2026-09-08
Security
- Consume the canonical attestation gate instead of carrying a copy of it (pm-graph-qg2n)
Other
- Harden the attestation consumer suite to match the rest of the converged fleet (pm-graph-53r2)
2026.9.1 - 2026-09-01
Fixed
- This repository has never produced a static analysis, because it runs no CodeQL workflow (pm-graph-ke7d)
- Group codeql-action bumps into one pull request to end the split-PR deadlock (pm-graph-2fft)
2026.8.31 - 2026-08-31
Fixed
- Pin pm-changelog 2026.8.30 before the next release (pm-graph-g0em)
- Regenerate the changelog after the release tag was created (pm-graph-7la7)
2026.8.29 - 2026-08-29
Fixed
- A failed provenance publish silently falls back to an unattested one (pm-graph-1fe4)
- Unblock PR 70 suffixed CalVer changelog gate (pm-graph-gjpd)
- Close PR 79 scalar escape review findings (pm-graph-ewxc)
Other
- Pilot pm-github issue sync for pm-graph (pm-graph-7gv0)
2026.8.28 - 2026-08-28
Fixed
- Remove private identities and host-specific paths from reachable Git history (pm-graph-xc7g)
Security
- The identity gate deadlocks the one remediation its own failure message prescribes (pm-graph-m8f9)
Other
- Drop inert pm manifest key and guard the closed manifest vocabulary (pm-graph-g2fs)
- Realign changelog branch with main after xc7g release-note rewrite (pm-graph-1lzu)
2026.8.17 - 2026-08-17
Fixed
- The pm CLI compatibility floor was declared only in peerDependencies, which only npm enforces, and not in manifest.json pm_min_version, which is the field the CLI enforces (pm-graph-wg5g)
2026.8.10 - 2026-08-10
Fixed
- Propagate the docstring gate entry guard fix (pm-graph-r8nz)
Other
- Adopt the mandatory docstring gate (pm-graph-k5ao)
2026.8.8 - 2026-08-08
Other
- Adopt pm CLI and SDK 2026.8.7 with a covered TypeScript merge-driver lifecycle (pm-graph-jrc0)
2026.8.7 - 2026-08-07
Fixed
- Reconcile PR with same-day release before changelog CI (pm-graph-y2ax)
Other
- Gate CI on strict tracked pm project health (pm-graph-9qk5)
2026.8.6 - 2026-08-06
Fixed
- id-resolution test can fail in its own setup when three random ids share a prefix (pm-graph-of5p)
2026.8.4 - 2026-08-04
Fixed
- Fix runGraph projected result narrowing and bump pm-cli to 2026.8.3 (pm-graph-l9df)
Other
- Resolve pm-changelog to the release that derives release dates in UTC (pm-graph-9gtz)
2026.7.31 - 2026-07-31
Fixed
- Release commits discard the rebuilt dist, so the git-install path serves the previous version (pm-graph-v6yt)
2026.7.30 - 2026-07-30
Added
- Replace the list-all shell-outs with the in-process SDK item reader (pm-graph-v7k3)
- Run the test suite against TypeScript sources behind an uncheatable coverage gate (pm-graph-5cu7)
Fixed
- pm-graph status help documents the version field with a stale literal, and the release version-bump regex targets that string instead of the real declaration (pm-graph-b3sw)
Other
- Raise the pm-graph engine from 63% line cover...
pm-graph v2026.10.20
Changelog
2026.10.14 - 2026-10-14
Added
- Adopt SDK read_output contracts on pm-graph read commands (pm-graph-by2t)
2026.10.5 - 2026-10-05
Other
- Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (pm-graph-088p)
2026.9.26 - 2026-09-26
Fixed
- A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (pm-graph-1k7d)
Other
- Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (pm-graph-at6i)
2026.9.18 - 2026-09-18
Other
- Certify pm CLI 2026.9.17 (pm-graph-zfdw)
2026.9.13 - 2026-09-13
Other
- Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor (pm-graph-bwlv)
2026.9.11 - 2026-09-11
Other
- Certify pm CLI 2026.9.10 and pick up the canonical auditor fixes the lockfile was holding back (pm-graph-upz4)
2026.9.8 - 2026-09-08
Security
- Consume the canonical attestation gate instead of carrying a copy of it (pm-graph-qg2n)
Other
- Harden the attestation consumer suite to match the rest of the converged fleet (pm-graph-53r2)
2026.9.1 - 2026-09-01
Fixed
- This repository has never produced a static analysis, because it runs no CodeQL workflow (pm-graph-ke7d)
- Group codeql-action bumps into one pull request to end the split-PR deadlock (pm-graph-2fft)
2026.8.31 - 2026-08-31
Fixed
- Pin pm-changelog 2026.8.30 before the next release (pm-graph-g0em)
- Regenerate the changelog after the release tag was created (pm-graph-7la7)
2026.8.29 - 2026-08-29
Fixed
- A failed provenance publish silently falls back to an unattested one (pm-graph-1fe4)
- Unblock PR 70 suffixed CalVer changelog gate (pm-graph-gjpd)
- Close PR 79 scalar escape review findings (pm-graph-ewxc)
Other
- Pilot pm-github issue sync for pm-graph (pm-graph-7gv0)
2026.8.28 - 2026-08-28
Fixed
- Remove private identities and host-specific paths from reachable Git history (pm-graph-xc7g)
Security
- The identity gate deadlocks the one remediation its own failure message prescribes (pm-graph-m8f9)
Other
- Drop inert pm manifest key and guard the closed manifest vocabulary (pm-graph-g2fs)
- Realign changelog branch with main after xc7g release-note rewrite (pm-graph-1lzu)
2026.8.17 - 2026-08-17
Fixed
- The pm CLI compatibility floor was declared only in peerDependencies, which only npm enforces, and not in manifest.json pm_min_version, which is the field the CLI enforces (pm-graph-wg5g)
2026.8.10 - 2026-08-10
Fixed
- Propagate the docstring gate entry guard fix (pm-graph-r8nz)
Other
- Adopt the mandatory docstring gate (pm-graph-k5ao)
2026.8.8 - 2026-08-08
Other
- Adopt pm CLI and SDK 2026.8.7 with a covered TypeScript merge-driver lifecycle (pm-graph-jrc0)
2026.8.7 - 2026-08-07
Fixed
- Reconcile PR with same-day release before changelog CI (pm-graph-y2ax)
Other
- Gate CI on strict tracked pm project health (pm-graph-9qk5)
2026.8.6 - 2026-08-06
Fixed
- id-resolution test can fail in its own setup when three random ids share a prefix (pm-graph-of5p)
2026.8.4 - 2026-08-04
Fixed
- Fix runGraph projected result narrowing and bump pm-cli to 2026.8.3 (pm-graph-l9df)
Other
- Resolve pm-changelog to the release that derives release dates in UTC (pm-graph-9gtz)
2026.7.31 - 2026-07-31
Fixed
- Release commits discard the rebuilt dist, so the git-install path serves the previous version (pm-graph-v6yt)
2026.7.30 - 2026-07-30
Added
- Replace the list-all shell-outs with the in-process SDK item reader (pm-graph-v7k3)
- Run the test suite against TypeScript sources behind an uncheatable coverage gate (pm-graph-5cu7)
Fixed
- pm-graph status help documents the version field with a stale literal, and the release version-bump regex targets that string instead of the real declaration (pm-graph-b3sw)
Other
- Raise the pm-graph engine from 63% line coverage toward the 100% mandate (pm-graph-xnbt)
- Adopt pm-cli 2026.7.29 (pm-graph-jh4d)
2026.7.28 - 2026-07-28
Other
- Adopt pm-cli 2026.7.28 (pm-graph-gh22)
- Adopt pm-cli 2026.7.27 dependency ranges (pm-graph-gzw9)
2026.7.27 - 2026-07-27
Added
- Adopt sdk/graph engine and drop the pm graph shell-out (pm-graph-ow1z)
2026.7.26 - 2026-07-26
Other
- Enable governance duplicate-detection advisory mode and adopt pm-cli 2026.7.25 (pm-graph-asgr)
2026.7.25 - 2026-07-25
Other
- Adopt --respect-item-release in changelog scripts and bump pm-changelog to 2026.7.24 (pm-graph-cvd3)
2026.7.24 - 2026-07-24
Added
- Enhance pm-graph impact to use canonical registry-aware pm graph engine with graceful fallback and diagram rendering (pm-graph-bfal)
2026.7.23 - 2026-07-23
Fixed
- Recommend pm merge reconcile (2026.7.22) over raw history-repair in Multi-agent merge safety docs (pm-graph-10e8)
Other
- Adopt pm field-aware merge driver for multi-agent branch-merge safety (pm-graph-tjqb)
2026.7.18 - 2026-07-18
Added
- Canonical pm pm-graph export gains shaping flags (--output/--edges/--root/--depth/--filter/--include-closed) (pm-graph-83ev)
Fixed
- Analytics and sync ignore ctx.pm_root: tracker_not_initialized under custom --pm-path (pm-graph-swfx)
- Exporter adapter 'graph' collides with new core pm graph command group (pm-cli 2026.7.18) (pm-graph-3svp)
2026.7.15 - 2026-07-15
Fixed
- Classify missing optional Neo4j configuration as an expected CLI error (pm-graph-4hs4)
2026.7.14-1 - 2026-07-14
Fixed
- pm-graph export --format json emits TOON; neighbors/query reject positional args at contract layer (pm-graph-1fr9)
20...
pm-graph v2026.10.18
Changelog
2026.10.14 - 2026-10-14
Added
- Adopt SDK read_output contracts on pm-graph read commands (pm-graph-by2t)
2026.10.5 - 2026-10-05
Other
- Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (pm-graph-088p)
2026.9.26 - 2026-09-26
Fixed
- A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (pm-graph-1k7d)
Other
- Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (pm-graph-at6i)
2026.9.18 - 2026-09-18
Other
- Certify pm CLI 2026.9.17 (pm-graph-zfdw)
2026.9.13 - 2026-09-13
Other
- Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor (pm-graph-bwlv)
2026.9.11 - 2026-09-11
Other
- Certify pm CLI 2026.9.10 and pick up the canonical auditor fixes the lockfile was holding back (pm-graph-upz4)
2026.9.8 - 2026-09-08
Security
- Consume the canonical attestation gate instead of carrying a copy of it (pm-graph-qg2n)
Other
- Harden the attestation consumer suite to match the rest of the converged fleet (pm-graph-53r2)
2026.9.1 - 2026-09-01
Fixed
- This repository has never produced a static analysis, because it runs no CodeQL workflow (pm-graph-ke7d)
- Group codeql-action bumps into one pull request to end the split-PR deadlock (pm-graph-2fft)
2026.8.31 - 2026-08-31
Fixed
- Pin pm-changelog 2026.8.30 before the next release (pm-graph-g0em)
- Regenerate the changelog after the release tag was created (pm-graph-7la7)
2026.8.29 - 2026-08-29
Fixed
- A failed provenance publish silently falls back to an unattested one (pm-graph-1fe4)
- Unblock PR 70 suffixed CalVer changelog gate (pm-graph-gjpd)
- Close PR 79 scalar escape review findings (pm-graph-ewxc)
Other
- Pilot pm-github issue sync for pm-graph (pm-graph-7gv0)
2026.8.28 - 2026-08-28
Fixed
- Remove private identities and host-specific paths from reachable Git history (pm-graph-xc7g)
Security
- The identity gate deadlocks the one remediation its own failure message prescribes (pm-graph-m8f9)
Other
- Drop inert pm manifest key and guard the closed manifest vocabulary (pm-graph-g2fs)
- Realign changelog branch with main after xc7g release-note rewrite (pm-graph-1lzu)
2026.8.17 - 2026-08-17
Fixed
- The pm CLI compatibility floor was declared only in peerDependencies, which only npm enforces, and not in manifest.json pm_min_version, which is the field the CLI enforces (pm-graph-wg5g)
2026.8.10 - 2026-08-10
Fixed
- Propagate the docstring gate entry guard fix (pm-graph-r8nz)
Other
- Adopt the mandatory docstring gate (pm-graph-k5ao)
2026.8.8 - 2026-08-08
Other
- Adopt pm CLI and SDK 2026.8.7 with a covered TypeScript merge-driver lifecycle (pm-graph-jrc0)
2026.8.7 - 2026-08-07
Fixed
- Reconcile PR with same-day release before changelog CI (pm-graph-y2ax)
Other
- Gate CI on strict tracked pm project health (pm-graph-9qk5)
2026.8.6 - 2026-08-06
Fixed
- id-resolution test can fail in its own setup when three random ids share a prefix (pm-graph-of5p)
2026.8.4 - 2026-08-04
Fixed
- Fix runGraph projected result narrowing and bump pm-cli to 2026.8.3 (pm-graph-l9df)
Other
- Resolve pm-changelog to the release that derives release dates in UTC (pm-graph-9gtz)
2026.7.31 - 2026-07-31
Fixed
- Release commits discard the rebuilt dist, so the git-install path serves the previous version (pm-graph-v6yt)
2026.7.30 - 2026-07-30
Added
- Replace the list-all shell-outs with the in-process SDK item reader (pm-graph-v7k3)
- Run the test suite against TypeScript sources behind an uncheatable coverage gate (pm-graph-5cu7)
Fixed
- pm-graph status help documents the version field with a stale literal, and the release version-bump regex targets that string instead of the real declaration (pm-graph-b3sw)
Other
- Raise the pm-graph engine from 63% line coverage toward the 100% mandate (pm-graph-xnbt)
- Adopt pm-cli 2026.7.29 (pm-graph-jh4d)
2026.7.28 - 2026-07-28
Other
- Adopt pm-cli 2026.7.28 (pm-graph-gh22)
- Adopt pm-cli 2026.7.27 dependency ranges (pm-graph-gzw9)
2026.7.27 - 2026-07-27
Added
- Adopt sdk/graph engine and drop the pm graph shell-out (pm-graph-ow1z)
2026.7.26 - 2026-07-26
Other
- Enable governance duplicate-detection advisory mode and adopt pm-cli 2026.7.25 (pm-graph-asgr)
2026.7.25 - 2026-07-25
Other
- Adopt --respect-item-release in changelog scripts and bump pm-changelog to 2026.7.24 (pm-graph-cvd3)
2026.7.24 - 2026-07-24
Added
- Enhance pm-graph impact to use canonical registry-aware pm graph engine with graceful fallback and diagram rendering (pm-graph-bfal)
2026.7.23 - 2026-07-23
Fixed
- Recommend pm merge reconcile (2026.7.22) over raw history-repair in Multi-agent merge safety docs (pm-graph-10e8)
Other
- Adopt pm field-aware merge driver for multi-agent branch-merge safety (pm-graph-tjqb)
2026.7.18 - 2026-07-18
Added
- Canonical pm pm-graph export gains shaping flags (--output/--edges/--root/--depth/--filter/--include-closed) (pm-graph-83ev)
Fixed
- Analytics and sync ignore ctx.pm_root: tracker_not_initialized under custom --pm-path (pm-graph-swfx)
- Exporter adapter 'graph' collides with new core pm graph command group (pm-cli 2026.7.18) (pm-graph-3svp)
2026.7.15 - 2026-07-15
Fixed
- Classify missing optional Neo4j configuration as an expected CLI error (pm-graph-4hs4)
2026.7.14-1 - 2026-07-14
Fixed
- pm-graph export --format json emits TOON; neighbors/query reject positional args at contract layer (pm-graph-1fr9)