2026.5.3

Changed

Fixed

  • PmCliError events leaking to Sentry via captureConsoleIntegration Eintrag pm-9iho
  • UX: Telemetry shows 84 'No update flags provided' errors - improve guidance Eintrag pm-sh4x

Security

Other

Closed

2026.5.2

Added

Fixed

  • Code duplication: toErrorMessage and toNonEmptyString across 5+ files Eintrag pm-540l
  • Telemetry queue timeout: 21 events stuck with flush timeout Eintrag pm-sgmb
  • Telemetry: Fix queue bloat and move flush to background Eintrag pm-sgko
  • Search: Fix cosine similarity with L2 normalization Eintrag pm-h2pi
  • Project tracker validation hygiene warnings remain Eintrag pm-e0b5
  • pm health ok:false for normal telemetry queue draining is non-actionable noise Eintrag pm-gmnh
  • pm cal --include events\|scheduled expands recurring events without default cap Eintrag pm-vg5h
  • Calendar recurring event line has redundant double-title (item title repeated in event title field) Eintrag pm-b1pd
  • pm templates bare command shows empty output (should list templates) Eintrag pm-dc2y
  • Calendar --include scheduled alias missing (calendar summary uses 'scheduled' but filter requires 'events') Eintrag pm-itb0
  • pm files --add bare path fails with misleading error (scope implied required) Eintrag pm-8r2r
  • Priority --priority error message missing 0..4 range and semantic labels Eintrag pm-1h7w
  • Telemetry queue oversized-event pruning not applied during flush phase (regression) Eintrag pm-on3q
  • Issue: Telemetry queue bloat from oversized result_summary payloads Eintrag pm-ntr0

Removed

Security

  • Chore: 2026-05-02 Phase 3 Audit - IP scrub, dogfood, analysis tooling Eintrag pm-2326
  • 2026-05-02 Full PM CLI Audit Phase 2: Dead Code Removal, Security Enhancement, Sentry Optimization Eintrag pm-kkmo
  • Enhance check-secrets.mjs with private IP detection rule Eintrag pm-daft
  • 2026-05-02 Full PM CLI Audit: Build Fix, Security, Performance, Telemetry Eintrag pm-nnhi
  • Documentation overhaul and public docs safety Eintrag pm-3042
  • Rewrite README and public documentation Eintrag pm-1sb2
  • Pin release dependency ranges for Dependabot hygiene Eintrag pm-q71q

Other

Closed

  • Closed: SDK: bundled extensions use internal imports instead of @unbrained/pm-cli/sdk Eintrag pm-qfuq

2026.5.1

Added

Changed

Fixed

Removed

  • Extend restore to recover missing or deleted item files from history Eintrag pm-g6qd

Security

  • Ignore local .env files for telemetry/security operations Eintrag pm-qgvj
  • Remediate open GitHub findings and recurring checks Eintrag pm-i7w2
  • Track GitHub Dependabot alert \#29 for picomatch (GHSA-3v7f-55p6-f55p) Eintrag pm-5e88
  • Track GitHub Dependabot alert \#27 for undici (GHSA-4992-7rv2-5pvq) Eintrag pm-02c4
  • Track GitHub Dependabot alert \#26 for undici (GHSA-v9p9-hfj2-hcw8) Eintrag pm-ylg3
  • Track GitHub Dependabot alert \#25 for undici (GHSA-vrm6-8vpv-qv8q) Eintrag pm-s5vv
  • Track GitHub Dependabot alert \#24 for undici (GHSA-2mjp-6q6p-2qxm) Eintrag pm-x4sy
  • Track GitHub Dependabot alert \#20 for undici (GHSA-phc3-fgpg-7m6h) Eintrag pm-090w
  • Track GitHub Dependabot alert \#19 for undici (GHSA-f269-vfmq-vjvj) Eintrag pm-rb9v
  • Track GitHub Dependabot alert \#13 for undici (GHSA-g9mf-h72j-4rw9) Eintrag pm-51y8
  • Track GitHub Dependabot alert \#12 for undici (GHSA-cxrh-j4jr-qwg3) Eintrag pm-pagj
  • Track GitHub Dependabot alert \#11 for undici (GHSA-9qxr-qj54-h672) Eintrag pm-tl4d
  • Track GitHub Dependabot alert \#10 for undici (GHSA-m4v8-wqvr-p9f7) Eintrag pm-ipul
  • Track GitHub Dependabot alert \#9 for undici (GHSA-3787-6prv-h9w3) Eintrag pm-d3i5
  • Track GitHub Dependabot alert \#8 for undici (GHSA-wqq4-5wpv-mx2g) Eintrag pm-v6vi
  • Track GitHub Dependabot alert \#7 for zod (GHSA-m95q-7qp3-xv42) Eintrag pm-4ydh
  • Track GitHub Dependabot alert \#6 for undici (GHSA-r6ch-mqf9-qc9w) Eintrag pm-8m72
  • Track GitHub Dependabot alert \#5 for fast-json-patch (GHSA-8gh8-hqwg-xf34) Eintrag pm-pacx
  • Track GitHub Dependabot alert \#4 for undici (GHSA-f772-66g8-q5h3) Eintrag pm-eu59
  • Track GitHub Dependabot alert \#3 for undici (GHSA-8qr4-xgw6-wmr3) Eintrag pm-bv2c
  • Track GitHub Dependabot alert \#2 for undici (GHSA-q768-x9m6-m9qp) Eintrag pm-5p3z
  • Track GitHub Dependabot alert \#1 for undici (GHSA-3cvr-822r-rqcc) Eintrag pm-ncbe
  • Documentation, migration, and safety posture Eintrag pm-31fj
  • D2: Update compatibility and security/trust guidance Eintrag pm-3949

Other

Closed

  • Closed: Issue: Private IP address in committed pm task files Eintrag pm-xk8b

2026.3.12

Fixed

Security

Other

2026.3.9

Added

Changed

Fixed

Removed

Security

Other