What's Changed
- feat(command): add audit:trend command by @vinceAmstoutz in #136
- feat(agent): teach the reviewer by @vinceAmstoutz in #137
- feat(scan): sarif results as attacker risk markers by @vinceAmstoutz in #138
- feat(scan): add config-driven custom attacker skills by @vinceAmstoutz in #139
- feat(agent): suggested-fix patch per confirmed finding by @vinceAmstoutz in #140
- feat(domain): estimate a CVSS v4.0 vector and score per finding by @vinceAmstoutz in #141
- chore(tests): detection-quality eval harness by @vinceAmstoutz in #142
- feat(command): render audit:trend as HTML by @vinceAmstoutz in #146
- feat(command): add audit:baseline by @vinceAmstoutz in #148
- ci: fix release binary build never producing assets by @vinceAmstoutz in #144
- ci: spc cannot resolve extensions by @vinceAmstoutz in #145
- ci: pin stable spc and build zlib into the binary runtime by @vinceAmstoutz in #147
- ci: drop PHP-core extensions from the resolved spc build list by @vinceAmstoutz in #150
- ci: run spc doctor --auto-fix before building the binary runtime by @vinceAmstoutz in #151
- ci: target the release tag explicitly when attaching binaries by @vinceAmstoutz in #152
- ci: authenticate spc pre-built downloads by @vinceAmstoutz in #153
- ci: tolerate spc doctor's Windows VS false-negative by @vinceAmstoutz in #154
- ci: make the Windows binary non-blocking by @vinceAmstoutz in #155
- ci: name the standalone macOS binaries macos instead of darwin by @vinceAmstoutz in #158
- ci: prune stale release assets by @vinceAmstoutz in #159
- fix(standalone): correct provider bridge resolution and config-home override by @vinceAmstoutz in #161
- chore(deps): bump actions/setup-node from 6 to 7 by @dependabot in #163
Full Changelog: 1.13.0...1.14.0