pm-graph v2026.10.26

Changelog

2026.10.25 - 2026-10-25

Added

• Project consented workspaces into a qualified read-only graph (pm-graph-projection)

Other

• Preserve host refusal recovery and normalize blocker-cut budget flags (pm-graph-sdk-host-flags)
• Reconcile stale in-progress tracker records (2026-10-23) (pm-graph-reconcile-1023)

2026.10.24 - 2026-10-24

Added

• Enumerate minimal blocker frontiers for a goal with bounded completeness receipts (pm-graph-8z44)
• Compare snapshot graph impact for resuming agents (pm-graph-snapshot-impact)

Other

• Correct review evidence in tracker reconciliation PR 155 (pm-graph-review155)

2026.10.23 - 2026-10-23

Changed

• Adopt pm-github 2026.10.16: default-branch-safe gated sync and daily gated closeout PRs (pm-graph-mupl)
• Enable the gated GitHub issue sync and drop the braces chain (pm-graph-maint1014)

Fixed

• A release run bumped and committed a new version every night while publishing was impossible, because the only externally-failable step runs last (pm-graph-wos1)
• Fix release publish ordering ahead of protected main push (pm-graph-ihhe)
• Committed CHANGELOG.md drifts from deterministic regeneration after the pm-graph-3svp type classification change, breaking changelog:check on every PR (pm-graph-brgk)
• Refresh managed pm-github extension for project-local PM CLI 2026.9.27 (pm-graph-ipvn)
• Graph export uses quadratic item and edge scans on large trackers (pm-graph-3a1p)
• Remove vulnerable braces dependency from certification toolchain (pm-graph-g8uc)
• The publish-attestation gate misses a publish routed through an unquoted shell variable (pm-graph-ifqz)
• The changelog gate stamps an untagged version with the current date, so its verdict flips every midnight with no commit (pm-graph-4glq)
• The release job authenticated with a stored npm token that expired, so publishing stopped while every other gate stayed green (pm-graph-ybzl)

Other

• Cover the output_format decline contract with real SDK harness tests instead of a registration-only assertion (pm-graph-vgj0)
• Bring pm-graph to real 100% line/branch/function coverage and raise the gate to 100 (pm-graph-6zil)
• Render package visuals with build-time Triplicate tokens (pm-graph-triplicate)
• Certify pm-graph on PM CLI/SDK 2026.10.4 and consolidate pending dependency updates (pm-graph-lcmc)

2026.10.14 - 2026-10-14

Added

• Adopt SDK read_output contracts on pm-graph read commands (pm-graph-by2t)

2026.10.5 - 2026-10-05

Other

• Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (pm-graph-088p)

2026.9.26 - 2026-09-26

Fixed

• A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (pm-graph-1k7d)

Other

• Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (pm-graph-at6i)

2026.9.18 - 2026-09-18

Other

• Certify pm CLI 2026.9.17 (pm-graph-zfdw)

2026.9.13 - 2026-09-13

Other

• Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor (pm-graph-bwlv)

2026.9.11 - 2026-09-11

Other

• Certify pm CLI 2026.9.10 and pick up the canonical auditor fixes the lockfile was holding back (pm-graph-upz4)

2026.9.8 - 2026-09-08

Security

• Consume the canonical attestation gate instead of carrying a copy of it (pm-graph-qg2n)

Other

• Harden the attestation consumer suite to match the rest of the converged fleet (pm-graph-53r2)

2026.9.1 - 2026-09-01

Fixed

• This repository has never produced a static analysis, because it runs no CodeQL workflow (pm-graph-ke7d)
• Group codeql-action bumps into one pull request to end the split-PR deadlock (pm-graph-2fft)

2026.8.31 - 2026-08-31

Fixed

• Pin pm-changelog 2026.8.30 before the next release (pm-graph-g0em)
• Regenerate the changelog after the release tag was created (pm-graph-7la7)

2026.8.29 - 2026-08-29

Fixed

• A failed provenance publish silently falls back to an unattested one (pm-graph-1fe4)
• Unblock PR 70 suffixed CalVer changelog gate (pm-graph-gjpd)
• Close PR 79 scalar escape review findings (pm-graph-ewxc)

Other

• Pilot pm-github issue sync for pm-graph (pm-graph-7gv0)

2026.8.28 - 2026-08-28

Fixed

• Remove private identities and host-specific paths from reachable Git history (pm-graph-xc7g)

Security

• The identity gate deadlocks the one remediation its own failure message prescribes (pm-graph-m8f9)

Other

• Drop inert pm manifest key and guard the closed manifest vocabulary (pm-graph-g2fs)
• Realign changelog branch with main after xc7g release-note rewrite (pm-graph-1lzu)

2026.8.17 - 2026-08-17

Fixed

• The pm CLI compatibility floor was declared only in peerDependencies, which only npm enforces, and not in manifest.json pm_min_version, which is the field the CLI enforces (pm-graph-wg5g)

2026.8.10 - 2026-08-10

Fixed

• Propagate the docstring gate entry guard fix (pm-graph-r8nz)

Other

• Adopt the mandatory docstring gate (pm-graph-k5ao)

2026.8.8 - 2026-08-08

Other

• Adopt pm CLI and SDK 2026.8.7 with a covered TypeScript merge-driver lifecycle (pm-graph-jrc0)

2026.8.7 - 2026-08-07

Fixed

• Reconcile PR with same-day release before changelog CI (pm-graph-y2ax)

Other

• Gate CI on strict tracked pm project health (pm-graph-9qk5)

2026.8.6 - 2026-08-06

Fixed

• id-resolution test can fail in its own setup when three random ids share a prefix (pm-graph-of5p)

2026.8.4 - 2026-08-04

Fixed

• Fix runGraph projected result narrowing and bump pm-cli to 2026.8.3 (pm-graph-l9df)

Other

• Resolve pm-changelog to the release that derives release dates in UTC (pm-graph-9gtz)

2026.7.31 - 2026-07-31

Fixed

• Release commits discard the rebuilt dist, so the git-install path serves the previous version (pm-graph-v6yt)

2026.7.30 - 2026-07-30

Added

• Replace the list-all shell-outs with the in-process SDK item reader (pm-graph-v7k3)
• Run the test suite against TypeScript sources behind an uncheatable coverage gate (pm-graph-5cu7)

Fixed

• pm-graph status help documents the version field with a stale literal, and the release version-bump regex targets that string instead of the real declaration (pm-graph-b3sw)

Other

• Raise the pm-graph engine from 63% line coverage toward the 100% mandate (pm-graph-xnbt)
• Adopt pm-cli 2026.7.29 (pm-graph-jh4d)

2026.7.28 - 2026-07-28

Other

• Adopt pm-cli 2026.7.28 (pm-graph-gh22)
• Adopt pm-cli 2026.7.27 dependency ranges (pm-graph-gzw9)

2026.7.27 - 2026-07-27

Added

• Adopt sdk/graph engine and drop the pm graph shell-out (pm-graph-ow1z)

2026.7.26 - 2026-07-26

Other

• Enable governance duplicate-detection advisory mode and adopt pm-cli 2026.7.25 (pm-graph-asgr)

2026.7.25 - 2026-07-25

Other

• Adopt --respect-item-release in changelog scripts and bump pm-changelog to 2026.7.24 (pm-graph-cvd3)

2026.7.24 - 2026-07-24

Added

• Enhance pm-graph impact to use canonical registry-aware pm graph engine with graceful fallback and diagram rendering (pm-graph-bfal)

2026.7.23 - 2026-07-23

Fixed

• Recommend pm merge reconcile (2026.7.22) over raw history-repair in Multi-agent merge safety docs (pm-graph-10e8)

Other

• Adopt pm field-aware merge driver for multi-agent branch-merge safety (pm-graph-tjqb)

2026.7.18 - 2026-07-18

Added

• Canonical pm pm-graph export gains shaping flags (--output/--edges/--root/--depth/--filter/--include-closed) (pm-graph-83ev)

Fixed

• Analytics and sync ignore ctx.pm_root: tracker_not_initialized under custom --pm-path (pm-graph-swfx)
• Exporter adapter 'graph' collides with new core pm graph command group (pm-cli 2026.7.18) (pm-graph-3svp)

2026.7.15 - 2026-07-15

Fixed

• Classify missing optional Neo4j configuration as an expected CLI error (pm-graph-4hs4)

2026.7.14-1 - 2026-07-14

Fixed

• pm-graph export --format json emits TOON; neighbors/query reject positional args at contract layer (pm-graph-1fr9)

2026.7.10-1 - 2026-07-10

Added

• Full pm ecosystem production pass for pm-graph (pm-graph-dhzp)
• Hands-on functional test pass 2026-05-29 (real data) (pm-graph-n0nt)

Fixed

• Fix node filter dedup and application, update version constant (pm-graph-4mil)
• Adversarial review pass 2026-07-10 (pm-graph-3mny)

Other

• Production-readiness audit 2026-05-29 (pm-graph-fq9w)
• Full-cycle hardening wave: pm-graph (pm-graph-4yd1)
• Harden release bun-verify so registry-mirror lag cannot block the GitHub release (pm-graph-avy6)

2026.7.10 - 2026-07-10

Other

• Ecosystem release readiness pass 2026-07-06 (pm-graph-qqsg)

2026.7.6 - 2026-07-06

Fixed

• Fix release CI ordering (publish-before-tag) (pm-graph-cb1l)

Other

• Align Node engine with pm CLI runtime (pm-graph-yrkr)
• Regenerate CHANGELOG after pm close item (pm-graph-ozh8)

2026.6.9-1 - 2026-06-09

Added

• Add --format mermaid/graphml to graph cycles and critical-path (pm-graph-jqiv)

2026.6.7 - 2026-06-07

Added

• Report bottleneck connectors in graph analytics (pm-graph-zod7)

Other

• Harden release readiness checks (pm-graph-uj77)
• Align package dependencies to pm CLI/SDK 2026.6.6 (pm-graph-bnsw)

2026.6.4 - 2026-06-04

Added

• Add topo-sort, impact, and dependency-depth analytics (pm-graph-r5yz)

2026.6.2-1 - 2026-06-02

Added

• Deepen pm-graph with offline analytics + new export formats (pm-graph-1dpk)
• Unit tests for analytics + new renderers (pm-graph-f9c3)
• graph exporter: add graphml + plantuml formats (pm-graph-79f2)

Other

• pm-graph critical-path: longest blocking chain (pm-graph-f1k9)
• pm-graph path: shortest dependency path (BFS) (pm-graph-vtlu)
• pm-graph cycles: detect dependency cycles, CI exit code (pm-graph-h0xs)
• pm-graph analyze: offline graph-health report (pm-graph-d9tz)
• Decision: analytics operate on STRUCTURAL edges only (pm-graph-89nw)

2026.6.2 - 2026-06-02

Added

• Add multi-format graph exporter (pm graph export): cypher, mermaid, dot, json-graph (pm-graph-xii9)

2026.5.30 - 2026-05-30

Other

• Production-readiness audit 2026-05-28 (pm-graph-41bm)

2026.5.28 - 2026-05-28

Added

• Add publish retry + provenance fallback to release workflow (pm-graph-e0at)

2026.5.27 - 2026-05-27

Added

• Add bun-install verification to release workflow (pm-graph-e063)

2026.5.26 - 2026-05-26

Fixed

• ci: fix release workflow step ordering (pm-graph-f03m)

Other

• Release readiness hardening for pm-graph (pm-graph-fnu1)