v1.3.1

What's Changed

• fix(ci): pin the workflows' Ubuntu runners to ubuntu-26.04 - the ubuntu-latest label migrates to Ubuntu 26.04 from 2026-10-19 by @using-system in #36
• refactor(odd-status): one launch script per CLI at the repository root, generic over the packaged command by @using-system in #39
• fix(actions): list the characters resolve-oddyssey.sh accepts instead of a locale-dependent range by @using-system in #40
• docs(agents): run a security review of the diff alongside the review subagent on every PR by @using-system in #47
• fix(ci): release.yml refuses a version below the highest release and a major tag move that is not a fast-forward by @using-system in #48
• fix(odd-status): keep the job token out of the checkout and say what --secret-env-vars does by @using-system in #49
• fix(actions): pin the uv release every setup-uv step installs and disclose it by @using-system in #50
• fix(odd-status): export the Claude credential from the shell instead of putting it on env's argument vector by @using-system in #51
• fix(odd-status): recompute the verdict with the package's own script on the checkout instead of reading it from the model's answer by @using-system in #52

Full Changelog: v1.3.0...v1.3.1