Added
- Add SDK reliability windows and preserve nightly and release-origin recurrence item pm-reliability-window-delivery
- Cross-version workspace compatibility matrix: prove that workspaces written by older and newer pm releases stay readable and mergeable item pm-pae3wo
Fixed
- Platform nightly legs fail on half of all days and nothing measures the rate: each alert opens a fresh issue and closes on repair, so a 28-occurrence family reads as 28 first occurrences item pm-2zjs0g
- Full-item stdin JSON must preserve declared schema and extension custom fields item pm-stdin-schema-fields
- Agent-task token ratchet changes verdict with temporary-root path length item pm-agent-token-path
- Exact-tag recovery must preserve the complete reviewed release-control import closure item pm-gh1429
- Installed-agent acceptance must recover infeasible context budgets and retain structured refusal diagnostics item pm-gh1428
Added
- Fact-preserving SDK table encoding, measured TOON defaults, and complete context budgets item pm-kvxqp1
Fixed
- GH-1391: Express faithful self-isolating source package gates without tracker redirects item pm-gh1391
- Native SQLite warnings corrupt strict machine-channel acceptance on Node 24.12 item pm-aiqmgj
- Reject external test scratch roots beneath an initialized ancestor tracker item pm-runner-ancestor-tracker
- Scratch lifecycle 15-second wall-clock assertion flakes under default full coverage concurrency item pm-dqej6b
Other
- Refresh cooldown-eligible jscpd 5.4 duplicate-detection tooling item pm-jscpd-54
Other
- Prove native Git lock retry after observed contention in PR1425 item pm-native-git-retry-proof
- Bound local temp footprint: prune Node compile cache and guarantee smoke/dogfood sandbox cleanup on failure item pm-p5u6
Fixed
- GH-1417: Bundle the tested CLI runtime closure for reproducible npm and Bun installs item pm-gh1417
- GH-1418: Accept real Bun filtered-test execution receipts item pm-gh1418
- Prose graph census misses valid item identifiers with multiple hyphens item pm-axotea
- Include body-only references in strict workspace assurance context item pm-jprn58
- GH-1413: Preserve lossless producer cursors under amount-only output caps item pm-gh1413
- GH-1414/GH-1415: Restore portable schema and checksum nightly fixtures item pm-gh1414
- Expose typed explicit-ID duplicate creation conflicts to SDK callers item pm-gh1400
Security
- Remove vulnerable MCP Apps development client from the locked dependency tree (GHSA-6qxp-vccf-f47h) item pm-mcpoauth
Other
- Deliver canonical strict-create, claim-start and scoped init recovery item pm-flfk2d
Fixed
- GH-1411: Compose amount and token ceilings without stale cursors or skipped rows item pm-gh1411
- GH-1386: remove conflicting global output projection from get recovery retries item pm-gh1386
- GH-1408: Reduce omission receipt overhead for explicit scalar field projections item pm-gh1408
- GH-1409/GH-1410: Preserve declared blocker spelling when resolving imported source IDs item pm-gh1409
- GH-1398: Preserve bare-help discovery before CLI mutations item pm-gh1398
- GH-1392: Keep extension diagnostics read-only and resolve npm-managed freshness item pm-gh1392
- PR watch reports success when a mandatory check never reports item pm-zpwfzy
- Verify immutable Codecov assets and authenticated Cloud report uploads item pm-2x67z9
- GH-1394: Define audited owned-subtree replacement for complete-next settings mutations item pm-gh1394
- GH-1393: Seed truthful schema-context settings history for linked tests item pm-gh1393
Security
- CodeQL 43: keep worker-bridge debug diagnostics free of raw arguments and stderr item pm-cql43
- Dependabot 47 and Scorecard 29: patch indexed source-map offset denial of service item pm-dba47
- Adopt CodeQL 4.38.2 and TruffleHog 3.97.9 immutable scanner updates item pm-gh1404
Other
- Refresh aged SonarJS 4.2.2 and TypeScript-ESLint 8.71 quality tooling item pm-l8dzdv
Fixed
- GH-1389: Derive get omission receipts from emitted schedule and artifact aliases item pm-gh1389
- GH-1388: Expose every declared blocker and its live status in default item reads item pm-gh1388
- Compact retained runtime modules and stage packed SDK acceptance efficiently item pm-2evidence-dist
- GH-1385: preserve literal annotation prefixes across comment input transports item pm-gh1385
- GH-1383: consistent SDK item/history drift reads during concurrent ordinary mutations item pm-gh1383
- GH-1355: Agent UX: unknown prefix-option values become nonexistent commands in recovery examples item pm-7wzc6f
Added
- GH-1356: SDK: expose the canonical settings preview through host-bound audited mutation item pm-2sef82
Fixed
- Transactional preview portability: canonical race fixtures and persistent invalid-path recovery item pm-n912nt
- GH-1366: Agent UX: --output-format json emits human errors while --json emits structured errors item pm-gh1366
- GH-1354: Linked-test snapshot mode drops nested package dependencies and breaks monorepo acceptance item pm-5iwfkj
- GH-1365: Agent UX: typed update refusals blame valid flags instead of the field that failed validation item pm-gh1365
- GH-1369: Agent UX: claim --start bypasses compact mutation receipts and returns a noncanonical outer ID item pm-gh1369
- GH-1368: Agent UX: context next silently ignores inherited --fields and --depth options, including invalid values item pm-gh1368
- GH-1367: Agent UX: context handoff omission receipts suggest depth flags that do not restore omitted sections item pm-gh1367
Other
- Published artifact weight: the npm tarball ships 20MB of inline-source sourcemaps plus duplicate tsc and bundle outputs item pm-998juj
Fixed
- GH-1354: Linked-test snapshot mode drops nested package dependencies and breaks monorepo acceptance item pm-5iwfkj
Security
- Scorecard alert 29: patch Axios in the CodSpeed development dependency graph item pm-r61juc
- Remove unpatched braces recursion vulnerability from file matching item pm-fnx3np
