2026.11.3

Fixed

  • GH-1631: expose bounded extension-owned diagnostics on expected SDK errors item pm-gh1631
  • Advertise safe linked-test command replacement after an immutable-command edit refusal item pm-1rfy0y
  • Route project-schema keys to their declared flags in field refusals item pm-wftvem
  • Typed refusals keep their own headline in human output: a likely_duplicate create refusal no longer reads as an invalid flag value item pm-btv6x7
  • Preserve surrogate pairs in bounded extension error diagnostics item pm-y4v90c

Other

  • Refresh mature GitHub Action pins: CodeQL 4.39.1, CodSpeed action 5.6.0 and TruffleHog 3.99.7 item pm-ey1zh7

2026.11.2

Fixed

  • A continuable key=value prose segment containing a colon is misread as a new key, so --comment/--note/--learning seeds store the raw entry with its text= prefix item pm-fr10t8
  • GH-1580: Host-bound extension settings sections item pm-gh1580
  • pm config set on a schema-invalid settings.json writes the fallback defaults as the whole file, deleting unrelated settings item pm-4zpq71
  • Pin tested runtime peers in the published manifest so Bun installs resolve them without peer-range warnings item pm-2csj4k

Security

  • GH-1647: acquireLock / acquireLockLease follow a symlinked locks directory and create the lock outside the tracker item pm-gh1647

Other

  • Refresh aged Unicorn 79, Stryker 10.1.1 and knip 6.43.0 without changing strict lint policy item pm-8g06ma
  • Adopt Vitest 5 with CodSpeed 6.1, keeping exact coverage, benchmark history and the CodSpeed Axios patch item pm-fokyhh

2026.11.1

Fixed

  • MCP read tools read every declared flat parameter, pm_search honours its keywords alias, and filtered pm context keeps dependency edges item pm-hke9z7
  • GH-1642: compact brief pm list and pm search TOON envelopes while keeping the effective default sort visible item pm-gh1642
  • GH-1644: disclose when a --for intent reduces an explicit --limit and recommend the measured canonical pm context --for orient item pm-gh1644
  • GH-1643: make pm claim --next --start one atomic select-claim-start write and type the claim-target refusals item pm-gh1643

2026.10.31

Changed

Fixed

  • pm close clears the assignee but leaves claim_principal, so closed claimed items keep an active owner item pm-8xgg7i
  • GH-1618: prevent automated comment churn from misleading next-work priority item pm-gh1618
  • GH-1610: compact lean refusals and expose structured claim context item pm-gh1610
  • GH-1627: bound the entire next response and compact optional TOON sections losslessly item pm-gh1627
  • GH-1628: preserve terminal timestamps for identical forced SDK updates item pm-gh1628
  • Pull-request CI requests 33 hosted-runner jobs per push against the account's 20-job concurrency cap, so required checks wait hours before they start item pm-m6ig79
  • Text refusals drop the specific What happened detail when an echoed argv overflows the diagnostic ceiling item pm-4oc353
  • GH-1622: investigate pm-presets SDK-loading fault blocking daily release item pm-gh1622
  • Successful linked-test receipts carry non-actionable execution_context and all-zero failure_categories, even under --lean item pm-covpax
  • Unknown-option recovery drops a dash-leading prose value: the advertised replay closes, comments or creates without the user's text item pm-stq61b
  • GH-1633: accept comma-separated --unset field lists with per-field validation item pm-gh1633
  • GH-1630: bound selective linked-test receipts to the selected collection item pm-gh1630
  • GH-1626: offer same-command replay corrections for brief completeness spellings item pm-gh1626
  • GH-1609: recover killed commit owners and bound lock waits with a monotonic clock item pm-gh1609
  • GH-1624: define typed Unicode handling for extension output across JSON and TOON item pm-gh1624
  • GH-1625: align extension-refusal Sentry capture with declared contracts and telemetry source context item pm-gh1625
  • GH-1602: keep preflight warnings inside JSON error envelopes item pm-gh1602
  • Bound independent native receipt regression cases item pm-native-index-proof
  • GH-1558: Settle Windows generation-fixture rename rejections without weakening lock assertions item pm-gh1558

Security

  • Registry advisories GHSA-mrwp-f3q8-3g9p (follow-redirects 1.16.1, high) and GHSA-g3hv-75wg-m249 (minimatch 10.2.6, moderate) block the static gate on main and every PR item pm-irviv0

2026.10.30

Added

  • GH-1597: expose host-bound item transaction status and safe abandonment or supersession item pm-gh1597
  • GH-1598: bind batch mutation APIs to PmClient and expose canonical staged preview records item pm-gh1598

Fixed

  • GH-1617: make history display order explicit and consistent across projections item pm-gh1617
  • GH-1603: Reduce null agenda fields and escaped tag overhead in bounded context output item pm-gh1603
  • GH-1606: Validate public SDK runtime operand values before mutation internals item pm-gh1606
  • GH-1614: keep typed SDK data literal across CLI sentinel inputs item pm-gh1614

Other

2026.10.28

Fixed

Security

Other

  • Complete October 20 tooling cohort with mature jscpd 5.4.2 item pm-wb25c1

2026.10.27

Fixed

  • GH-1593: verify authoritative history integrity in SDK mutation-event reads item pm-gh1593
  • Isolate telemetry setup in the health cursor replay regression item pm-oahhyc
  • Preserve Git-backed merge-receipt evidence in isolated linked-test contexts item pm-ycyymg
  • Let superseded CI aggregators stop when their workflow is canceled item pm-ci-cancel-aggregate
  • Reserve preparation and runner queue time before serial release acceptance item pm-29bwud

Other

  • Use resilient temporary-root cleanup in the packed-install workflow fixture item pm-p5u6
  • Refresh mature tooling, scanner pins and changelog SDK contracts item pm-8skz5z

2026.10.26

Added

  • Allow safe transaction previews in managed-package workspaces with derived dependency links item pm-jhkzk0

Changed

Fixed

  • GH-1591: guarded terminal updates conflict with their own scalar write and misreport compensation item pm-pllp78
  • Session reference receipts advertise unsupported get --brief recovery item pm-session-reference-recovery
  • GH-1567: fit whole SDK envelopes using the selected serializer and token budget item pm-gh1567
  • GH-1579: Make inferred completion timestamps observable on close item pm-gh1579
  • GH-1585: make tracked policy-refusal audit side effects explicit and actionable item pm-gh1585
  • GH-1577: make SDK create focus inheritance explicit and discoverable item pm-gh1577
  • GH-1581: Report successful context snapshot refresh without recovery warnings item pm-gh1581

Security

  • GH-1583: recognize concrete private home paths through bounded shared normalization item pm-gh1583

Other

  • Adopt release-age eligible gpt-tokenizer 4.1.0 and verify token-budget baselines item pm-tokenizer410

2026.10.25

Changed

Fixed

  • GH-1556: diagnose ignored merge-receipt paths before settlement staging item pm-gh1556
  • Rebase concurrent history assignments and removals without losing events item pm-gh1553
  • GH-1562: expose calendar matching totals and bounded continuation item pm-gh1562
  • GH-1554: resume bounded activity reads from a stable event window item pm-gh1554
  • GH-1571: allow projection of active extension item fields across read surfaces item pm-gh1571
  • Use elapsed-time task-state waits in the Windows MRTR regression item pm-win-task-wait
  • Align the host grammar census with the latest installed package command item pm-package-grammar24
  • GH-1573: await telemetry producers before Sentry fixture cleanup item pm-gh1573
  • GH-1568: keep read-only commands from recreating missing workflow schema files item pm-gh1568
  • GH-1561: normalize numeric template-save priority and publish supported options item pm-gh1561
  • GH-1560: retain extension flag defaults in help and runtime contracts item pm-gh1560

2026.10.24

Fixed

  • GH-1564: align SDK bulk rollback checkpoint types and runtime admission item pm-gh1564
  • GH-1563: preserve later peer edits during bulk checkpoint rollback item pm-gh1563
  • Refuse assignment-only shell lists and command terminators item pm-g7cup8
  • Keep aggregate test execution complete when legacy commands are refused item pm-s32gcz
  • Reuse SDK command admission before offering positional test retries item pm-qi7v2j
  • Preserve structured test recovery and refuse comment-only verification item pm-3mefuq
  • PR1559: keep command admission linear and recovery startup lightweight item pm-5md8n7
  • Declare current pm-changelog commands in the SDK grammar census item pm-4pzw7i
  • GH-1547: correct linked-resource positional misuse in refusal recovery item pm-t2dqzijokl31
  • GH-1555: refuse assignment-only linked-test commands before recording false passes item pm-gh1555
  • GH-1552: charge SDK read budgets using compact JSON envelopes item pm-gh1552
  • GH-1551: expose omission and budget receipts on precise SDK read results item pm-gh1551

Security

  • Remediate independent-feed development dependency advisories item pm-zod466