2026.10.12

Fixed

Other

2026.10.11

Fixed

Other

2026.10.10

Added

Changed

Fixed

  • Platform nightly legs fail on half of all days and nothing measures the rate: each alert opens a fresh issue and closes on repair, so a 28-occurrence family reads as 28 first occurrences Eintrag pm-2zjs0g
  • Full-item stdin JSON must preserve declared schema and extension custom fields Eintrag pm-stdin-schema-fields
  • Agent-task token ratchet changes verdict with temporary-root path length Eintrag pm-agent-token-path
  • Exact-tag recovery must preserve the complete reviewed release-control import closure Eintrag pm-gh1429
  • Installed-agent acceptance must recover infeasible context budgets and retain structured refusal diagnostics Eintrag pm-gh1428

2026.10.9

Added

  • Fact-preserving SDK table encoding, measured TOON defaults, and complete context budgets Eintrag pm-kvxqp1

Fixed

Other

2026.10.8

Fixed

Other

2026.10.7

Fixed

  • GH-1417: Bundle the tested CLI runtime closure for reproducible npm and Bun installs Eintrag pm-gh1417
  • GH-1418: Accept real Bun filtered-test execution receipts Eintrag pm-gh1418
  • Prose graph census misses valid item identifiers with multiple hyphens Eintrag pm-axotea
  • Include body-only references in strict workspace assurance context Eintrag pm-jprn58
  • GH-1413: Preserve lossless producer cursors under amount-only output caps Eintrag pm-gh1413
  • GH-1414/GH-1415: Restore portable schema and checksum nightly fixtures Eintrag pm-gh1414
  • Expose typed explicit-ID duplicate creation conflicts to SDK callers Eintrag pm-gh1400

Security

  • Remove vulnerable MCP Apps development client from the locked dependency tree (GHSA-6qxp-vccf-f47h) Eintrag pm-mcpoauth

Other

  • Deliver canonical strict-create, claim-start and scoped init recovery Eintrag pm-flfk2d

2026.10.6

Fixed

  • GH-1411: Compose amount and token ceilings without stale cursors or skipped rows Eintrag pm-gh1411
  • GH-1386: remove conflicting global output projection from get recovery retries Eintrag pm-gh1386
  • GH-1408: Reduce omission receipt overhead for explicit scalar field projections Eintrag pm-gh1408
  • GH-1409/GH-1410: Preserve declared blocker spelling when resolving imported source IDs Eintrag pm-gh1409
  • GH-1398: Preserve bare-help discovery before CLI mutations Eintrag pm-gh1398
  • GH-1392: Keep extension diagnostics read-only and resolve npm-managed freshness Eintrag pm-gh1392
  • PR watch reports success when a mandatory check never reports Eintrag pm-zpwfzy
  • Verify immutable Codecov assets and authenticated Cloud report uploads Eintrag pm-2x67z9
  • GH-1394: Define audited owned-subtree replacement for complete-next settings mutations Eintrag pm-gh1394
  • GH-1393: Seed truthful schema-context settings history for linked tests Eintrag pm-gh1393

Security

  • CodeQL 43: keep worker-bridge debug diagnostics free of raw arguments and stderr Eintrag pm-cql43
  • Dependabot 47 and Scorecard 29: patch indexed source-map offset denial of service Eintrag pm-dba47
  • Adopt CodeQL 4.38.2 and TruffleHog 3.97.9 immutable scanner updates Eintrag pm-gh1404

Other

  • Refresh aged SonarJS 4.2.2 and TypeScript-ESLint 8.71 quality tooling Eintrag pm-l8dzdv

2026.10.5

Fixed

  • GH-1389: Derive get omission receipts from emitted schedule and artifact aliases Eintrag pm-gh1389
  • GH-1388: Expose every declared blocker and its live status in default item reads Eintrag pm-gh1388
  • Compact retained runtime modules and stage packed SDK acceptance efficiently Eintrag pm-2evidence-dist
  • GH-1385: preserve literal annotation prefixes across comment input transports Eintrag pm-gh1385
  • GH-1383: consistent SDK item/history drift reads during concurrent ordinary mutations Eintrag pm-gh1383
  • GH-1355: Agent UX: unknown prefix-option values become nonexistent commands in recovery examples Eintrag pm-7wzc6f

2026.10.4

Added

  • GH-1356: SDK: expose the canonical settings preview through host-bound audited mutation Eintrag pm-2sef82

Fixed

  • Transactional preview portability: canonical race fixtures and persistent invalid-path recovery Eintrag pm-n912nt
  • GH-1366: Agent UX: --output-format json emits human errors while --json emits structured errors Eintrag pm-gh1366
  • GH-1354: Linked-test snapshot mode drops nested package dependencies and breaks monorepo acceptance Eintrag pm-5iwfkj
  • GH-1365: Agent UX: typed update refusals blame valid flags instead of the field that failed validation Eintrag pm-gh1365
  • GH-1369: Agent UX: claim --start bypasses compact mutation receipts and returns a noncanonical outer ID Eintrag pm-gh1369
  • GH-1368: Agent UX: context next silently ignores inherited --fields and --depth options, including invalid values Eintrag pm-gh1368
  • GH-1367: Agent UX: context handoff omission receipts suggest depth flags that do not restore omitted sections Eintrag pm-gh1367

Other

  • Published artifact weight: the npm tarball ships 20MB of inline-source sourcemaps plus duplicate tsc and bundle outputs Eintrag pm-998juj

2026.10.3

Fixed

  • GH-1354: Linked-test snapshot mode drops nested package dependencies and breaks monorepo acceptance Eintrag pm-5iwfkj

Security

  • Scorecard alert 29: patch Axios in the CodSpeed development dependency graph Eintrag pm-r61juc
  • Remove unpatched braces recursion vulnerability from file matching Eintrag pm-fnx3np

Other