pm
Menü

Änderungen

Was sich in jedem pm-Release geändert hat, mit einem Link auf den pm-Eintrag, der jede Änderung festhält.

2026.8.30

Other

  • Adopt eslint-plugin-unicorn 74 with strict lint and packed-consumer proof Eintrag pm-6f66vu

2026.8.29

Fixed

  • GH-1144: hash-only merge receipts contradict report output and cannot reconcile truthfully Eintrag pm-z1z96w
  • GH-1146/1147: external blockers remain stale and validation recommends deleting them Eintrag pm-yhle2e
  • GH-1140: reject ambiguous bare comma tuples for linked file and test mutations Eintrag pm-nc94mk
  • GH-1148: cached drift mismatch can falsely report tracker corruption Eintrag pm-sxg7wl
  • GH-1138: linked test name filters can pass after executing zero tests Eintrag pm-ntnv4k
  • GH-1136: npm 12 object-form npm pack receipts break registry package installs Eintrag pm-xrjy8o
  • The annotation key=value grammar has three divergent comma behaviours, two of which silently corrupt the evidence text before it is made immutable Eintrag pm-hu92i3
  • GH-1150: health remediation for pending merge receipts must perform the repair Eintrag pm-r0p3at
  • GH-1134: required collection recovery omits truthful --clear-\* intent Eintrag pm-t7wl00
  • GH-1143: Claude session-file provenance resolver ignores real nested stream fields Eintrag pm-f60039
  • GH-1137: linked docs writes silently persist nonexistent workspace paths Eintrag pm-hiqlkh
  • Sentry release gate aborts valid API queries at a fixed 15-second deadline Eintrag pm-b9g2cs

Other

  • Close the jscpd/CodeFactor sensitivity gap: minTokens 115 misses low-token table clones the CodeFactor bot still files Eintrag pm-xspd
  • Refresh @sentry/node 10.72 with packed SDK and release proof Eintrag pm-mwhv33
  • Refresh compatible 2026-08-29 dependency releases Eintrag pm-vwuidf

2026.8.28

Fixed

  • Repository test runner inherits production Sentry and turns negative CLI fixtures into release-blocking incidents Eintrag pm-5ug5xq
  • Broad squash commits overflow hosted-analysis tree lookup and falsely lose reviewed PR provenance Eintrag pm-gactwj
  • Golden agent-transcript replay: measure tokens-per-completed-task as a CI-visible DX regression gate Eintrag pm-8pnj
  • Unknown-option refusal textual flags bypass structured global-option filtering Eintrag pm-x4wbui
  • Agent-task transcript recovery accepts a refusal as a successful retry Eintrag pm-o360q6
  • Close lifecycle bypasses reproducible process clock Eintrag pm-hmpu4p
  • GH-1132: opt-in idempotent annotation append (ifAbsent/--if-absent) prevents retry-driven context duplication; duplicate appends remain available by default Eintrag pm-ea1yh2
  • Agent-task transcripts accept declared no-effect and partial-effect successful exits Eintrag pm-wanwyc
  • Agent-task baselines accept missing task and composite token ceilings Eintrag pm-aksavu
  • Agent-task closeout claims lack linked full-verification commands Eintrag pm-ervmsc
  • CLI transport-floor RSS admission false-fails on single-sample page noise Eintrag pm-pz49xc
  • Unknown-option refusals identify the actual rejected flag and fail closed at delimiters Eintrag pm-fo8g7j
  • Agent-task gate accepts incidental substrings as required-field completeness Eintrag pm-o7u08u
  • Completed-task transcripts require terminal success, exclusive refusal metadata, and complete recovery Eintrag pm-wa39rl
  • Agent-task token replay trusts missing or incorrect accounting estimates Eintrag pm-ok2kdn

Security

  • GH-1131: macOS Node 24 nightly cannot create the Skills-over-MCP special-file socket fixture Eintrag pm-k23c4c

2026.8.27

Added

  • Tiered contract-driven help: one-screen core help, full surface via pm help --all, generated from the contract table Eintrag pm-e2bq
  • Skills over MCP: discoverable version-coherent pm workflows with progressive disclosure, capability requirements, and token budgets Eintrag pm-8nzivt
  • MCP Apps for pm: interactive graph, context, plan, assurance, and long-operation views with consent-safe action boundaries Eintrag pm-pznhee

Fixed

  • GH-859: pm-beads source export can omit Beads comment bodies and events Eintrag pm-tpwde6
  • pm get silently discards --output-include field names because entity reads bind the flag to sections while collection reads bind it to fields, and the omission receipt reports no omissions either way Eintrag pm-0k19l7
  • GH-860: pm-beads --preserve-source-ids changes source ID casing Eintrag pm-f7jj9b
  • GH-862: pm-beads must map Beads close reasons into native resolution metadata Eintrag pm-gus5ft
  • GH-1118: natural-language word-number titles trigger duplicate issue-code false positives Eintrag pm-blvfye
  • Published-artifact verification rejects the new pm-mcp-http bin before executing its healthy published entrypoint Eintrag pm-fpdne3

Other

  • Consolidate package lifecycle: extension/package/install/upgrade under a single pm package namespace Eintrag pm-tnud
  • Refresh compatible ESLint 10.9.1 and Node type 26.3 patches Eintrag pm-crkmmr
  • MCP 2026-07-28 conformance and release gate: official schema matrix, protocol-era adapters, real transports, adversarial cases, and published consumers Eintrag pm-55yf1t

2026.8.26

Added

  • MCP subscriptions and transports: subscriptions/listen, request-scoped streams, Streamable HTTP headers, retry semantics, and stdio parity Eintrag pm-v7e337
  • MCP server surface and cache contracts: deterministic tools, prompts, resources, JSON Schema 2020-12, ttlMs, cacheScope, and change coherence Eintrag pm-hv1x1x
  • Official MCP tasks extension for pm: asynchronous long operations, tasks/get polling, tasks/update input, durable handles, and lifecycle convergence Eintrag pm-rzs24j
  • MCP multi round-trip requests: input_required results, elicitation, retry state, and removal of server-initiated request assumptions Eintrag pm-rz9gep
  • Stateless MCP core: request-local version and capabilities, mandatory server/discover, typed result envelopes, and deterministic identity Eintrag pm-vae5ec

Changed

  • SDK-first architecture: pm CLI (and MCP) become thin layers over a complete public pm SDK Eintrag pm-usfg

Fixed

  • GH-1091: surface extension manifest schema lint separately from version compatibility Eintrag pm-gh1091
  • GH-1109: tracker-context seeding writes an empty settings history document Eintrag pm-2ga1g7
  • GH-1112: Windows Node 24 merge-receipt boundary test relies on POSIX name-length failure Eintrag pm-v3umtp

Security

  • MCP remote authorization and observability: issuer-bound credentials, client metadata documents, consent, header security, and OpenTelemetry propagation Eintrag pm-3zh9s4

Deprecated

  • MCP 2026-07-28 deprecation and removal migration: roots, sampling, logging, dynamic registration, HTTP+SSE, includeContext, ping, and legacy sessions Eintrag pm-vzcisw
  • ADR: MCP 2026-07-28 is canonical and legacy interoperability is a bounded stateless adapter, not connection-local session state Eintrag pm-sqvshj

Other

  • Refresh Sentry 10.71 and TypeScript-ESLint 8.68 with packed-consumer proof Eintrag pm-7xfndr

2026.8.25

Fixed

  • Dynamic-read continuation cursors are born stale: pm health emits a cursor that its next invocation rejects Eintrag pm-oahhyc
  • GH-1105: contracts must declare each command projection vocabulary before invocation Eintrag pm-q4isdq
  • The outcome-milestone ladder is a sibling set rather than a layer: 1,024 terminal items reach the roadmap apex through 154 typed roots without traversing any outcome milestone Eintrag pm-h6b73t

Security

2026.8.24

Fixed

  • Structured release-failure causes are preserved in blocked-release alerts Eintrag pm-x63izf
  • Bulk writes accept newline/comma IDs from argv, stdin, and @path with effect-aware exits Eintrag pm-3oq022
  • update-many --dry-run allows filter-only preview for review and bulk-selection workflows Eintrag pm-kexu

Other

  • Uniform stdin convention: body-file and annotation --file flags accept '-' for stdin Eintrag pm-iktj
  • Single source of surface tiering: one contract-declared tier per command drives CLI help, MCP tool profiles, completions, and docs together Eintrag pm-kxci8x

2026.8.23

Added

  • Every instruction the product emits about its own next command is an unexecuted claim: the recovery vocabulary is generated, asserted as text, and run by nothing Eintrag pm-h8tpeh

Changed

Fixed

  • Allow linked tests to opt out of source-workspace injection for self-sandboxing repo-wide gates Eintrag pm-efkvdy
  • Linked-test schema context changes non-PM repository checks, so commands that pass directly fail when recorded and run through pm test Eintrag pm-e97jyf
  • GH-1089: expose reproducible execution through supported CLI and MCP process configuration Eintrag pm-gh1089
  • Budget recovery can recommend a smaller ceiling than the request that already truncated Eintrag pm-xam9bt

Security

  • Linked-test commands are merge-unioned workspace data executed with shell:true — no provenance, allowlist, or confirmation boundary Eintrag pm-ed28wi
  • Cross-harness provenance adapters: automatically resolve native model, version, and effort signals beyond Claude without identity flags Eintrag pm-c0lrdm

Other

  • Expose agent probe controls and versioned legacy-author vocabulary through pm config and SDK mutation APIs Eintrag pm-yds9dt
  • Diagnostic output budget: errors, warnings, and recovery bundles are the output an agent reads most and the only output with no declared ceiling Eintrag pm-cha95z

2026.8.22

Fixed

  • GH-1078: Complete-list certification accepts absent or contradictory truth receipts and emits stale recovery Eintrag pm-gh1078
  • GH-1076: read-only duplicates rejects universal JSON output controls Eintrag pm-gh1076
  • GH-1074: package doctor cannot distinguish a safe declining service override from a global interceptor Eintrag pm-gh1074
  • GH-1073: pm init accepts a whitespace id prefix that makes later creates fail Eintrag pm-gh1073
  • GH-1075: Windows Node 24 nightly validation failed at main 3e7ac007 Eintrag pm-gh1075
  • The child hierarchy kind has an unenforced direction and cardinality: 7 of 15 rows are inverted against the registry's own declaration and no channel, validator, or audit finding notices Eintrag pm-vk7zek
  • Hierarchy-canonicalizing dependency kinds bypass every cycle detector: mutual child_of edges leave the graph provably inconsistent while validate, health, and graph analyze all report acyclic Eintrag pm-rggtvd

Security

  • GH-1072: pm install leaks user allow-scripts config into isolated package installs Eintrag pm-gh1072

2026.8.21

Added

  • Prose-asserted relationships are unmeasured: 1,750 identifier pairs named in item text carry no edge in any direction, and nothing counts the gap Eintrag pm-ob9z4y

Changed

  • Provide consistent tracker preflight and executable recovery across SDK, CLI, and MCP Eintrag pm-6qiwan

Fixed

  • The blocks ceiling counts fabricated and evidence-cited ordering edges identically, so the historical ordering reconstruction another item mandates cannot land Eintrag pm-c90tfh
  • The dependency remove flag accepts a value its own add flag refuses and reports success on a zero-match, so a mistyped graph repair exits 0 having changed nothing Eintrag pm-gos426
  • All four graph traversal verbs reject the semantic edge kinds the ontology exists to express, so 'what implements this milestone' returns the ordering-kind answer with no sign a semantic one exists Eintrag pm-3dyec2
  • Typed-outcome reachability admits three of ten edge kinds, so the four semantic kinds the ontology exists to express contribute nothing to the invariant they were minted to satisfy Eintrag pm-ayg31c
  • The graph audit raises duplicate dependency rows at warning severity and the only remediation available deletes every copy, so collapsing a duplicate means briefly destroying a real edge Eintrag pm-flnefm

Other

  • ADR: Ordering assurance partitions evidence-cited blocks from uncited blocks Eintrag pm-jhpby4