2026.9.22

Fixed

  • Prevent dogfood telemetry workers from recreating disposable workspaces item pm-idj82e
  • GH-1287: Release evidence integration test depends on mutable repository changelog state item pm-lq10y3
  • GH-1284: release notes must read complete tracker evidence beyond default output budgets item pm-svxdsx
  • Fix smoke and contract workspace cleanup on exits and interrupts item pm-14dnbh

Security

  • Refresh pinned Codecov CodeQL and TruffleHog actions with dependency-update-safe workflow contracts item pm-mwdout

Other

  • Extend owned workspace cleanup across release gates and interruptible test runners item pm-xjy565
  • Refresh fast-check and tsx patches under unchanged dependency policy item pm-kpoj19
  • Repair calendar shortcut package discovery and upgrade migration guidance item pm-o3fh
  • Prune src/cli/commands/index.ts barrel dead re-exports and adopt knip as a dead-export gate item pm-f4yn
  • Diagnose abandoned build leases before the full acquisition timeout item pm-63i8nr

2026.9.21

Fixed

  • GH-1280: preserve literal completion across Bash versions and package helper paths item pm-t6jl1f

Other

  • Refresh compatible September 20 validation tooling alongside portability regressions item pm-cljdn3
  • Bound replication-gate Git work independently of tracker migration size item pm-26y269

2026.9.20

Changed

  • Refresh jscpd 5.3 and verify decomposed source with zero-clone gates item pm-xgbzxs
  • Decompose CLI bootstrap, SDK dispatch, extension loading, and shell completion item pm-yh8r
  • Decompose SDK search into query, retrieval, and response modules item pm-jt3b

Fixed

  • Make native shell acceptance portable to hosted Fish item pm-d8exnz
  • Preserve Unicode and isolate completion data in Bash, Zsh and Fish item pm-cimph7
  • Harden Bash completion literals and large-workspace search normalization item pm-ul5lph

Other

  • Resolve validate duplicate issue-code GH-209 warning without changelog drag item pm-pivf
  • Deterministic closed_at backfill for legacy closed items derived from history streams item pm-wrbe

2026.9.19

Fixed

  • Workspace singleton files (settings.json, schema, session-state, checkpoints) are lock-free read-modify-write — parallel pm config set demonstrably loses updates item pm-bgcu
  • The close-time blocker-clear warning names one deleted ordering edge out of N, so silent multi-blocker data loss is indistinguishable from single-blocker clearing item pm-scbr0s
  • Declare and enforce shared default bounds across graph queries item pm-mfy1ux
  • Isolate published MCP verification from the caller global skill catalog item pm-prmt1y
  • The --profile timer reports a fraction of real invocation latency and is documented nowhere, so every latency judgement built on it is calibrated against the wrong number item pm-ag9nka
  • Count successful provenance resolutions so historical health advisories can clear item pm-4f1l7f
  • Isolated release acceptance inherits npm allow-scripts through npm run item pm-64qsbl
  • macOS registry acceptance rejects empty optional flags under Bash nounset item pm-q4avk2
  • Windows transport-floor contract test batches 78 fixtures under one deadline item pm-lgyaw8

Other

  • Fail repository tests on undeclared MCP options including reporter overrides item pm-v0s2rm
  • Reconcile provenance delivery metadata with reviewed implementation item pm-senomv
  • Refresh Node declarations to 26.6.1 for SDK and process timing validation item pm-8p629e

2026.9.18

Fixed

  • Allow canonical JSON/TOON encoding on mutations item pm-1rta7z
  • Omit redundant read receipts when canonical output flags do not compact results item pm-g8oh0f
  • Keep the largest list prefix that fits the output budget item pm-15yuly
  • Reject ambiguous event durations with explicit minute and month units item pm-jkjt
  • Packed telemetry acceptance must await completion across delivery batches item pm-07m41m
  • GH-1264: enforce next ready-queue token budgets and disclose omitted recommendations item pm-v53h9j
  • Reject malformed linked-test JSON paths instead of silently normalizing assertions item pm-czr31p

Security

  • Reject inherited array elements in linked-test assertions item pm-1skc
  • Read linked-test JSON assertions without invoking accessors item pm-xxrq
  • Prevent prototype traversal in nested settings reads and writes item pm-3kk6
  • Share secret and private-context detection between mutation preflight and repository scanning item pm-wwooxx

Other

  • Verify explicit calendar duration in package-first dogfood item pm-d9bg0i
  • Move meet/event/remind calendar shortcuts from core surface into the builtin-calendar package as create sugar item pm-o3fh
  • ADR: Require explicit minute and month units for event durations item pm-j1vw3a
  • Context judgment corpus: small, real-shaped, scale, and returning-agent continuity scenarios for pm context/next item pm-lixy
  • Refresh Sentry 10.75 and CLI 3.8 with Unicorn 75 compatibility proof item pm-1wypwu
  • Serialize the complete build pipeline so overlapping validation cannot consume partially rewritten dist artifacts item pm-cxc4jc
  • Released-artifact acceptance: the exact published tarball is installed clean and driven through a scripted agent session before the release is advertised item pm-ygli86

2026.9.17

Fixed

  • Keep merge driver launchers usable after runtime upgrades item pm-rcjyft

2026.9.16

Fixed

  • Preserve oversized standard item reads with a brief projection and explicit omission receipts item pm-8eclqf

Other

  • As an agent on a minutes-old scratch project, pm init, quick-capture create, and next are near-zero ceremony and token-cheap at three-item scale item pm-z436

2026.9.15

Fixed

  • Preserve telemetry identity and runtime acceptance across Node and npm versions item pm-7msh7k
  • Automatically bound high-frequency read-only telemetry volume item pm-um3teu
  • Prevent stale cleanup from reclaiming a lock during owner metadata initialization item pm-v2pg4f

Other

2026.9.14

Changed

  • Update marked to 18.0.13 for documentation parser fixes item pm-t9qgf1
  • Refresh Node types 26.5.1, YAML 2.9.1, and fast-check 4.10.0 item pm-7ej0mh

Fixed

  • Preserve telemetry events across concurrent queue rewrites item pm-utxk3h
  • Honor revoked telemetry consent across capture and identity initialization item pm-yjq2x0
  • Explain rejected telemetry source-context overrides without leaking raw values item pm-bw8lsb
  • Destination census rows cite terminal consolidation owners for five live commands, so the grammar gate certifies consolidations no open item will deliver item pm-3ig9b6
  • Package-declared internal commands leak into default runtime contracts item pm-34xisz
  • Allow non-colliding extension leaves beneath core command groups item pm-bwkmp4
  • Compact default list receipts and avoid repeated recovery argument echoes item pm-4f86c4
  • Canonicalize unknown-command recovery with replacement flags item pm-zsic8h

Other

  • Give assurance a declared noun placement and history-author-acknowledge a history leaf: the two live commands whose consolidation owners closed without moving them item pm-djyvbk

2026.9.13

Fixed

  • Suppress inferred test telemetry before identity creation and export item pm-745epp
  • Honor DO_NOT_TRACK across telemetry capture flush and diagnostics item pm-ikgitf
  • Expose privacy-bounded agent harness and CI telemetry dimensions item pm-nnn9nf
  • Published-package verification gives up before npm metadata propagates: two consecutive scheduled cuts were recorded as failed and re-run by hand while the artifact was already live item pm-wzmbvn

Deprecated

  • Permanent hot-path aliases print the migration hint reserved for deprecated spellings on every human-readable call, so the project's own skills cost an extra stderr line per invocation item pm-crd6bf

Other

  • Expose explicit paired sampling for core-only telemetry reads item pm-wrdctq
  • Consolidate item annotation facets: comments/notes/learnings/files/docs/deps/append/test become one facet grammar (old spellings aliased) item pm-yql1
  • Hide runtime completion helper entrypoints from the default agent-facing command surface item pm-szdc
  • Hide internal test-runs-worker from default help/contracts and route it under the test execution plumbing item pm-lp4j