Fixed
- Allow self-isolating linked package tests without inherited PM_PATH elemento pm-t05d8d
- Preserve every tracker merge fence during nested init and detect lost active mappings elemento pm-kynkl8
- GH-1325: history diff cursor drops newest rows and strands the final page elemento pm-c3aiik
- Windows nightly merge-receipt classification test exceeds 60-second budget elemento pm-v0600g
- GH-1327: Windows nightly static inventory unreadable-source assertion fails elemento pm-ft90q2
- GH-1326: Windows nightly bundled-package init test exceeds 30 seconds elemento pm-kvhnb5
- MCP detached task completion coverage can miss cleanup under hosted shards elemento pm-tm6h9x
- Full coverage refusal-closure retry test exceeds its four-minute budget under suite contention elemento pm-mrrci4
- GH-1328: linked-test execution does not disclose item evidence recording elemento pm-aao1hy
- GH-1330: per-command JSON help inherits the root intent and init example elemento pm-s8ztcl
- Refuse malformed settings writes with typed recovery elemento pm-z329kd
- Refuse local package installation when source scan stops at entry limit elemento pm-erogk1
Other
- Refresh September 27 compatible development dependency releases elemento pm-u9qqip
- Claude plugin spec-alignment hygiene vs 2026-07-11 official docs (minor, non-blocking) elemento pm-dudr
Fixed
- SDK complete-list receipt falsely reports legacy aliases for canonical helper elemento pm-vf9iaf
Other
- Consolidate workspace customization discovery and commands under workspace with permanent compatibility aliases elemento pm-npr3
- Declare workspace, templates and guide ownership with bounded agent orientation elemento pm-uk9dwh
- Dispatch daily releases at 04:45 Europe/Vienna with the hosted schedule as fallback elemento pm-9url9h
Other
- Adapt OpenClaw test-audit skill to pm SDK and repository test governance elemento pm-xvibt6
- Bound embedding requests, enforce retrieval floors, and protect schema previews elemento pm-g0b88h
Fixed
- GH-1306: Isolate merge driver installation and health across Git worktrees elemento pm-c1dwbt
- GH-1305: Preserve workflow policy refusal evidence and actionable missing-field recovery elemento pm-o5s22y
- GH-1303: Canonical help and refreshable agent guidance elemento pm-80k965
- GH-1304: Deterministic release pipeline branch coverage across hosted environments elemento pm-m2ai6c
- Scheduled auto-release has a chronically high failure rate and no rolling measure, so a degraded pipeline reads as healthy one run at a time elemento pm-e70zh5
- Daily auto-release never runs in its declared window: all 84 scheduled runs fired 2.5-4 hours after the cron time, so the release clock is undocumented drift elemento pm-44u3wt
- GH-1294: release commit omits synchronized plugin runtime manifests elemento pm-t4prek
- The related ceiling is pinned to the live count with block enforcement, so recording one associative sibling relation anywhere in the tracker fails CI while the share floor it duplicates would have allowed it elemento pm-r3o7x4
Security
- Semgrep 874840452: Medium dependabot missing cooldown in .github/dependabot.yml\#L3 elemento pm-gkut
- Semgrep 874840451: Medium dependabot missing cooldown in .github/dependabot.yml\#L23 elemento pm-dmo5
Fixed
- Dogfood test failure must not print inherited environment secrets elemento pm-jiv3dw
- Claude plugin: marketplace installs fall back to npx @latest, not the advertised native MCP server elemento pm-l9wl
- Windows copied agent plugins cannot install pinned runtime through npm.cmd elemento pm-d6fd85
- Nightly coverage, quality, and Windows tests exceed serial job budgets elemento pm-ul9rye
- GH-1291: Windows nightly release cleanup fixture includes Node compile cache elemento pm-puf5rq
Security
- Scorecard Token-Permissions (0→10): declare least-privilege top-level permissions in every GitHub workflow elemento pm-003j
Other
- Support safe Bash completion inside quoted and escaped prefixes elemento pm-eswzn9
- Refresh compatible Sentry, jscpd, and TypeScript-ESLint patches for September 22 elemento pm-hate9s
Other
- Mutation-testing gate: prove the 100 percent coverage suite actually detects defects, with a ratcheted mutation score on SDK core elemento pm-zclzll
Fixed
- Prevent dogfood telemetry workers from recreating disposable workspaces elemento pm-idj82e
- GH-1287: Release evidence integration test depends on mutable repository changelog state elemento pm-lq10y3
- GH-1284: release notes must read complete tracker evidence beyond default output budgets elemento pm-svxdsx
- Fix smoke and contract workspace cleanup on exits and interrupts elemento pm-14dnbh
Security
- Refresh pinned Codecov CodeQL and TruffleHog actions with dependency-update-safe workflow contracts elemento pm-mwdout
Other
- Extend owned workspace cleanup across release gates and interruptible test runners elemento pm-xjy565
- Refresh fast-check and tsx patches under unchanged dependency policy elemento pm-kpoj19
- Repair calendar shortcut package discovery and upgrade migration guidance elemento pm-o3fh
- Prune src/cli/commands/index.ts barrel dead re-exports and adopt knip as a dead-export gate elemento pm-f4yn
- Diagnose abandoned build leases before the full acquisition timeout elemento pm-63i8nr
Fixed
- GH-1280: preserve literal completion across Bash versions and package helper paths elemento pm-t6jl1f
Other
- Refresh compatible September 20 validation tooling alongside portability regressions elemento pm-cljdn3
- Bound replication-gate Git work independently of tracker migration size elemento pm-26y269
Changed
- Refresh jscpd 5.3 and verify decomposed source with zero-clone gates elemento pm-xgbzxs
- Decompose CLI bootstrap, SDK dispatch, extension loading, and shell completion elemento pm-yh8r
- Decompose SDK search into query, retrieval, and response modules elemento pm-jt3b
Other
- Resolve validate duplicate issue-code GH-209 warning without changelog drag elemento pm-pivf
- Deterministic closed_at backfill for legacy closed items derived from history streams elemento pm-wrbe
Fixed
- Workspace singleton files (settings.json, schema, session-state, checkpoints) are lock-free read-modify-write — parallel pm config set demonstrably loses updates elemento pm-bgcu
- The close-time blocker-clear warning names one deleted ordering edge out of N, so silent multi-blocker data loss is indistinguishable from single-blocker clearing elemento pm-scbr0s
- Declare and enforce shared default bounds across graph queries elemento pm-mfy1ux
- Isolate published MCP verification from the caller global skill catalog elemento pm-prmt1y
- The --profile timer reports a fraction of real invocation latency and is documented nowhere, so every latency judgement built on it is calibrated against the wrong number elemento pm-ag9nka
- Count successful provenance resolutions so historical health advisories can clear elemento pm-4f1l7f
- Isolated release acceptance inherits npm allow-scripts through npm run elemento pm-64qsbl
- macOS registry acceptance rejects empty optional flags under Bash nounset elemento pm-q4avk2
- Windows transport-floor contract test batches 78 fixtures under one deadline elemento pm-lgyaw8
Other
- Fail repository tests on undeclared MCP options including reporter overrides elemento pm-v0s2rm
- Reconcile provenance delivery metadata with reviewed implementation elemento pm-senomv
- Refresh Node declarations to 26.6.1 for SDK and process timing validation elemento pm-8p629e