Fixed
- Allow self-isolating linked package tests without inherited PM_PATH Eintrag pm-t05d8d
- Preserve every tracker merge fence during nested init and detect lost active mappings Eintrag pm-kynkl8
- GH-1325: history diff cursor drops newest rows and strands the final page Eintrag pm-c3aiik
- Windows nightly merge-receipt classification test exceeds 60-second budget Eintrag pm-v0600g
- GH-1327: Windows nightly static inventory unreadable-source assertion fails Eintrag pm-ft90q2
- GH-1326: Windows nightly bundled-package init test exceeds 30 seconds Eintrag pm-kvhnb5
- MCP detached task completion coverage can miss cleanup under hosted shards Eintrag pm-tm6h9x
- Full coverage refusal-closure retry test exceeds its four-minute budget under suite contention Eintrag pm-mrrci4
- GH-1328: linked-test execution does not disclose item evidence recording Eintrag pm-aao1hy
- GH-1330: per-command JSON help inherits the root intent and init example Eintrag pm-s8ztcl
- Refuse malformed settings writes with typed recovery Eintrag pm-z329kd
- Refuse local package installation when source scan stops at entry limit Eintrag pm-erogk1
Other
- Refresh September 27 compatible development dependency releases Eintrag pm-u9qqip
- Claude plugin spec-alignment hygiene vs 2026-07-11 official docs (minor, non-blocking) Eintrag pm-dudr
Fixed
- SDK complete-list receipt falsely reports legacy aliases for canonical helper Eintrag pm-vf9iaf
Other
- Consolidate workspace customization discovery and commands under workspace with permanent compatibility aliases Eintrag pm-npr3
- Declare workspace, templates and guide ownership with bounded agent orientation Eintrag pm-uk9dwh
- Dispatch daily releases at 04:45 Europe/Vienna with the hosted schedule as fallback Eintrag pm-9url9h
Other
- Adapt OpenClaw test-audit skill to pm SDK and repository test governance Eintrag pm-xvibt6
- Bound embedding requests, enforce retrieval floors, and protect schema previews Eintrag pm-g0b88h
Fixed
- GH-1306: Isolate merge driver installation and health across Git worktrees Eintrag pm-c1dwbt
- GH-1305: Preserve workflow policy refusal evidence and actionable missing-field recovery Eintrag pm-o5s22y
- GH-1303: Canonical help and refreshable agent guidance Eintrag pm-80k965
- GH-1304: Deterministic release pipeline branch coverage across hosted environments Eintrag pm-m2ai6c
- Scheduled auto-release has a chronically high failure rate and no rolling measure, so a degraded pipeline reads as healthy one run at a time Eintrag pm-e70zh5
- Daily auto-release never runs in its declared window: all 84 scheduled runs fired 2.5-4 hours after the cron time, so the release clock is undocumented drift Eintrag pm-44u3wt
- GH-1294: release commit omits synchronized plugin runtime manifests Eintrag pm-t4prek
- The related ceiling is pinned to the live count with block enforcement, so recording one associative sibling relation anywhere in the tracker fails CI while the share floor it duplicates would have allowed it Eintrag pm-r3o7x4
Security
- Semgrep 874840452: Medium dependabot missing cooldown in .github/dependabot.yml\#L3 Eintrag pm-gkut
- Semgrep 874840451: Medium dependabot missing cooldown in .github/dependabot.yml\#L23 Eintrag pm-dmo5
Fixed
- Dogfood test failure must not print inherited environment secrets Eintrag pm-jiv3dw
- Claude plugin: marketplace installs fall back to npx @latest, not the advertised native MCP server Eintrag pm-l9wl
- Windows copied agent plugins cannot install pinned runtime through npm.cmd Eintrag pm-d6fd85
- Nightly coverage, quality, and Windows tests exceed serial job budgets Eintrag pm-ul9rye
- GH-1291: Windows nightly release cleanup fixture includes Node compile cache Eintrag pm-puf5rq
Security
- Scorecard Token-Permissions (0→10): declare least-privilege top-level permissions in every GitHub workflow Eintrag pm-003j
Other
- Support safe Bash completion inside quoted and escaped prefixes Eintrag pm-eswzn9
- Refresh compatible Sentry, jscpd, and TypeScript-ESLint patches for September 22 Eintrag pm-hate9s
Other
- Mutation-testing gate: prove the 100 percent coverage suite actually detects defects, with a ratcheted mutation score on SDK core Eintrag pm-zclzll
Fixed
- Prevent dogfood telemetry workers from recreating disposable workspaces Eintrag pm-idj82e
- GH-1287: Release evidence integration test depends on mutable repository changelog state Eintrag pm-lq10y3
- GH-1284: release notes must read complete tracker evidence beyond default output budgets Eintrag pm-svxdsx
- Fix smoke and contract workspace cleanup on exits and interrupts Eintrag pm-14dnbh
Security
- Refresh pinned Codecov CodeQL and TruffleHog actions with dependency-update-safe workflow contracts Eintrag pm-mwdout
Other
- Extend owned workspace cleanup across release gates and interruptible test runners Eintrag pm-xjy565
- Refresh fast-check and tsx patches under unchanged dependency policy Eintrag pm-kpoj19
- Repair calendar shortcut package discovery and upgrade migration guidance Eintrag pm-o3fh
- Prune src/cli/commands/index.ts barrel dead re-exports and adopt knip as a dead-export gate Eintrag pm-f4yn
- Diagnose abandoned build leases before the full acquisition timeout Eintrag pm-63i8nr
Fixed
- GH-1280: preserve literal completion across Bash versions and package helper paths Eintrag pm-t6jl1f
Other
- Refresh compatible September 20 validation tooling alongside portability regressions Eintrag pm-cljdn3
- Bound replication-gate Git work independently of tracker migration size Eintrag pm-26y269
Changed
- Refresh jscpd 5.3 and verify decomposed source with zero-clone gates Eintrag pm-xgbzxs
- Decompose CLI bootstrap, SDK dispatch, extension loading, and shell completion Eintrag pm-yh8r
- Decompose SDK search into query, retrieval, and response modules Eintrag pm-jt3b
Other
- Resolve validate duplicate issue-code GH-209 warning without changelog drag Eintrag pm-pivf
- Deterministic closed_at backfill for legacy closed items derived from history streams Eintrag pm-wrbe
Fixed
- Workspace singleton files (settings.json, schema, session-state, checkpoints) are lock-free read-modify-write — parallel pm config set demonstrably loses updates Eintrag pm-bgcu
- The close-time blocker-clear warning names one deleted ordering edge out of N, so silent multi-blocker data loss is indistinguishable from single-blocker clearing Eintrag pm-scbr0s
- Declare and enforce shared default bounds across graph queries Eintrag pm-mfy1ux
- Isolate published MCP verification from the caller global skill catalog Eintrag pm-prmt1y
- The --profile timer reports a fraction of real invocation latency and is documented nowhere, so every latency judgement built on it is calibrated against the wrong number Eintrag pm-ag9nka
- Count successful provenance resolutions so historical health advisories can clear Eintrag pm-4f1l7f
- Isolated release acceptance inherits npm allow-scripts through npm run Eintrag pm-64qsbl
- macOS registry acceptance rejects empty optional flags under Bash nounset Eintrag pm-q4avk2
- Windows transport-floor contract test batches 78 fixtures under one deadline Eintrag pm-lgyaw8
Other
- Fail repository tests on undeclared MCP options including reporter overrides Eintrag pm-v0s2rm
- Reconcile provenance delivery metadata with reviewed implementation Eintrag pm-senomv
- Refresh Node declarations to 26.6.1 for SDK and process timing validation Eintrag pm-8p629e