2026.10.23

Fixed

Other

  • Retain original dependency advisory receipts on release workflow failures elemento pm-z20n3s

2026.10.22

Fixed

Security

Other

2026.10.21

Fixed

  • Return a typed assurance refusal for unknown declaration reads instead of high-priority Sentry faults elemento pm-eg5u1n
  • Patch MCP client redirect disclosure and Vite Windows editor injection advisories elemento pm-5sgx37
  • Bound Windows script regression admission with complete deterministic shards elemento pm-vqwery
  • Scorecard alert 29: patch newly disclosed follow-redirects credential-header vulnerabilities elemento pm-px2raj
  • GH-1518: recover provably dead same-host item-lock owners before TTL expiry elemento pm-02z97f
  • Replace unsafe live-lock force advice with invocation-preserving contention recovery elemento pm-htiwmd
  • GH-1520: reject unknown SDK mutation option keys before any write elemento pm-fl3phm
  • GH-1519: preflight test run options before persisting linked-test edits elemento pm-hdvxqg
  • GH-1507: Explain effective default list ordering in brief rows and metadata elemento pm-zd46m7
  • GH-1514: injected extension SDK client loses invocation author precedence elemento pm-65srr0
  • GH-1511: keep blocked work prioritization inside context cursor page boundaries elemento pm-0luwp4
  • GH-1510: make relationship packet cursor recovery command-aware elemento pm-ohgg1b
  • GH-1512: define count-based context completion rounding at half-percent boundaries elemento pm-r2xv95
  • GH-1509: preserve legacy relationship blocker details in deep context elemento pm-h5ko1l

Other

  • Complete bounded discovery and read-only recovery proof for missing assurance declarations elemento pm-l6bpb8
  • Expose freshness and completeness of independent dependency advisory feeds before merge elemento pm-eqxjzl
  • Schedule corpus and policy fixture keepers after parallel contract workers elemento pm-ckb8w5

2026.10.20

Changed

Fixed

  • Align token-budget recovery declaration states with the public runtime guard elemento pm-8jzcwv
  • Preserve authoritative history after native SQLite transaction startup failures elemento pm-0orupq
  • Bound recovery probes by missing-reference rendering retries elemento pm-k6uglj
  • Probe canonical include-mode retries with their actual packing policy elemento pm-0bbc53
  • Enforce rendered relationship budgets with expected SDK usage recovery elemento pm-odw3j8
  • Preserve expected check publishers in PR readiness receipts elemento pm-5p48kf
  • Bound complete macOS nightly validation with two shards elemento pm-qrirz8
  • Run Git-heavy merge regression files after parallel contract workers elemento pm-89297t
  • Show failed required PR checks before waiting on pending optional reviewers elemento pm-jm7m3o
  • item mutate --dry-run does not surface per-row advisory duplicate-detection warnings elemento pm-ekf2gu
  • GH-1500: Preserve null, empty and reserved JSON row facts through host rendering elemento pm-4euctr
  • GH-1501: Compact default brief-list TOON envelopes without hiding source completeness elemento pm-6pycus

Security

  • GH-1504: Refresh eligible Actions and executed secret-scanner contracts elemento pm-396dil

Other

2026.10.19

Fixed

2026.10.18

Fixed

  • Retain tested optional-peer closures in the published runtime bundle elemento pm-iceees
  • Fail the required coverage aggregate when any shard fails or is skipped elemento pm-0p4aal
  • Invalidate shared history projections when writers lack SQLite elemento pm-f7shxf
  • GH-1485: Bound history-index reader contention before authoritative appends elemento pm-gh1485
  • Keep mutation-event subscriptions available when optional index rebuilds race or contend elemento pm-xj80p9
  • GH-1487: Respect nested Git repository boundaries during tracker discovery elemento pm-gh1487
  • GH-1484: Infer native Node test telemetry and bound intentional test flush lifetime elemento pm-gh1484
  • GH-1486: Keep passing health diagnostics concise by default elemento pm-gh1486
  • GH-1489: Keep all-status list filters independent of field projection elemento pm-gh1489
  • GH-1482: Read legacy dependency timestamps safely and diagnose invalid values elemento pm-gh1482
  • GH-1481: Retain explicitly requested sort values in brief list projections elemento pm-gh1481

Other

2026.10.17

Added

Fixed

Other

  • As an MCP host or coding agent, I can discover pm capabilities and complete long-running context workflows through one current stateless protocol elemento pm-x705zo

2026.10.15

Fixed

  • GH-1467: Preserve optional extension value arity in machine contracts elemento pm-gh1467
  • GH-1466: Preserve explicitly false values for extension bool aliases elemento pm-gh1466
  • GH-1458: Preserve linked-test edit history across older published readers and writers elemento pm-gh1458
  • GH-1457: Recover output cursors passed to --after and expose budget continuation controls elemento pm-gh1457

Security

  • Redact sensitive values in Sentry command context and encoded diagnostic text elemento pm-geywoc

Other

  • Compact SDK declaration whitespace while preserving types and documentation elemento pm-chw71s

2026.10.14

Added

  • GH-1462: Publish host-aligned TOON codecs for extension acceptance tests elemento pm-gh1462
  • Enable explicit successful-command Sentry tracing without eager startup elemento pm-58yzil

Changed

Fixed

  • GH-1461: Normalize supported inline flag placeholders across help and parsing elemento pm-gh1461
  • GH-1460: Merge extension assets as ordinary Git files while preserving tracker drivers elemento pm-gh1460
  • Resume due telemetry after a concurrent background upload elemento pm-j8spis
  • Prevent Sentry command context from recording positional content and option values elemento pm-geywoc
  • Embedded CLI commands fail when an eval host has no script argv entry elemento pm-mor9pl

2026.10.13

Added

Fixed

Other