Fixed
- Allow self-isolating linked package tests without inherited PM_PATH 条目 pm-t05d8d
- Preserve every tracker merge fence during nested init and detect lost active mappings 条目 pm-kynkl8
- GH-1325: history diff cursor drops newest rows and strands the final page 条目 pm-c3aiik
- Windows nightly merge-receipt classification test exceeds 60-second budget 条目 pm-v0600g
- GH-1327: Windows nightly static inventory unreadable-source assertion fails 条目 pm-ft90q2
- GH-1326: Windows nightly bundled-package init test exceeds 30 seconds 条目 pm-kvhnb5
- MCP detached task completion coverage can miss cleanup under hosted shards 条目 pm-tm6h9x
- Full coverage refusal-closure retry test exceeds its four-minute budget under suite contention 条目 pm-mrrci4
- GH-1328: linked-test execution does not disclose item evidence recording 条目 pm-aao1hy
- GH-1330: per-command JSON help inherits the root intent and init example 条目 pm-s8ztcl
- Refuse malformed settings writes with typed recovery 条目 pm-z329kd
- Refuse local package installation when source scan stops at entry limit 条目 pm-erogk1
Security
- Exclude Git metadata from local package directory installs 条目 pm-k7nxaz
Other
- Refresh September 27 compatible development dependency releases 条目 pm-u9qqip
- Claude plugin spec-alignment hygiene vs 2026-07-11 official docs (minor, non-blocking) 条目 pm-dudr
Fixed
- SDK complete-list receipt falsely reports legacy aliases for canonical helper 条目 pm-vf9iaf
Security
- Expose static extension inventory for hosted and agent reads 条目 pm-lhhnx9
Other
- Consolidate workspace customization discovery and commands under workspace with permanent compatibility aliases 条目 pm-npr3
- Declare workspace, templates and guide ownership with bounded agent orientation 条目 pm-uk9dwh
- Dispatch daily releases at 04:45 Europe/Vienna with the hosted schedule as fallback 条目 pm-9url9h
Fixed
- Refuse unsupported schema dry-run flags before mutation 条目 pm-s74dca
- Releases from the default branch are supported with analyzer evidence 条目 pm-u1baah
Other
- Adapt OpenClaw test-audit skill to pm SDK and repository test governance 条目 pm-xvibt6
- Bound embedding requests, enforce retrieval floors, and protect schema previews 条目 pm-g0b88h
Fixed
- GH-1306: Isolate merge driver installation and health across Git worktrees 条目 pm-c1dwbt
- GH-1305: Preserve workflow policy refusal evidence and actionable missing-field recovery 条目 pm-o5s22y
- GH-1303: Canonical help and refreshable agent guidance 条目 pm-80k965
- GH-1304: Deterministic release pipeline branch coverage across hosted environments 条目 pm-m2ai6c
- Scheduled auto-release has a chronically high failure rate and no rolling measure, so a degraded pipeline reads as healthy one run at a time 条目 pm-e70zh5
- Daily auto-release never runs in its declared window: all 84 scheduled runs fired 2.5-4 hours after the cron time, so the release clock is undocumented drift 条目 pm-44u3wt
- GH-1294: release commit omits synchronized plugin runtime manifests 条目 pm-t4prek
- The related ceiling is pinned to the live count with block enforcement, so recording one associative sibling relation anywhere in the tracker fails CI while the share floor it duplicates would have allowed it 条目 pm-r3o7x4
Security
- Semgrep 874840452: Medium dependabot missing cooldown in .github/dependabot.yml\#L3 条目 pm-gkut
- Semgrep 874840451: Medium dependabot missing cooldown in .github/dependabot.yml\#L23 条目 pm-dmo5
Fixed
- Dogfood test failure must not print inherited environment secrets 条目 pm-jiv3dw
- Claude plugin: marketplace installs fall back to npx @latest, not the advertised native MCP server 条目 pm-l9wl
- Windows copied agent plugins cannot install pinned runtime through npm.cmd 条目 pm-d6fd85
- Nightly coverage, quality, and Windows tests exceed serial job budgets 条目 pm-ul9rye
- GH-1291: Windows nightly release cleanup fixture includes Node compile cache 条目 pm-puf5rq
Security
- Scorecard Token-Permissions (0→10): declare least-privilege top-level permissions in every GitHub workflow 条目 pm-003j
Other
- Support safe Bash completion inside quoted and escaped prefixes 条目 pm-eswzn9
- Refresh compatible Sentry, jscpd, and TypeScript-ESLint patches for September 22 条目 pm-hate9s
Other
- Mutation-testing gate: prove the 100 percent coverage suite actually detects defects, with a ratcheted mutation score on SDK core 条目 pm-zclzll
Fixed
- Prevent dogfood telemetry workers from recreating disposable workspaces 条目 pm-idj82e
- GH-1287: Release evidence integration test depends on mutable repository changelog state 条目 pm-lq10y3
- GH-1284: release notes must read complete tracker evidence beyond default output budgets 条目 pm-svxdsx
- Fix smoke and contract workspace cleanup on exits and interrupts 条目 pm-14dnbh
Security
- Refresh pinned Codecov CodeQL and TruffleHog actions with dependency-update-safe workflow contracts 条目 pm-mwdout
Other
- Extend owned workspace cleanup across release gates and interruptible test runners 条目 pm-xjy565
- Refresh fast-check and tsx patches under unchanged dependency policy 条目 pm-kpoj19
- Repair calendar shortcut package discovery and upgrade migration guidance 条目 pm-o3fh
- Prune src/cli/commands/index.ts barrel dead re-exports and adopt knip as a dead-export gate 条目 pm-f4yn
- Diagnose abandoned build leases before the full acquisition timeout 条目 pm-63i8nr
Fixed
- GH-1280: preserve literal completion across Bash versions and package helper paths 条目 pm-t6jl1f
Other
- Refresh compatible September 20 validation tooling alongside portability regressions 条目 pm-cljdn3
- Bound replication-gate Git work independently of tracker migration size 条目 pm-26y269
Changed
- Refresh jscpd 5.3 and verify decomposed source with zero-clone gates 条目 pm-xgbzxs
- Decompose CLI bootstrap, SDK dispatch, extension loading, and shell completion 条目 pm-yh8r
- Decompose SDK search into query, retrieval, and response modules 条目 pm-jt3b
Fixed
- Make native shell acceptance portable to hosted Fish 条目 pm-d8exnz
- Preserve Unicode and isolate completion data in Bash, Zsh and Fish 条目 pm-cimph7
- Harden Bash completion literals and large-workspace search normalization 条目 pm-ul5lph
Other
- Resolve validate duplicate issue-code GH-209 warning without changelog drag 条目 pm-pivf
- Deterministic closed_at backfill for legacy closed items derived from history streams 条目 pm-wrbe
Fixed
- Workspace singleton files (settings.json, schema, session-state, checkpoints) are lock-free read-modify-write — parallel pm config set demonstrably loses updates 条目 pm-bgcu
- The close-time blocker-clear warning names one deleted ordering edge out of N, so silent multi-blocker data loss is indistinguishable from single-blocker clearing 条目 pm-scbr0s
- Declare and enforce shared default bounds across graph queries 条目 pm-mfy1ux
- Isolate published MCP verification from the caller global skill catalog 条目 pm-prmt1y
- The --profile timer reports a fraction of real invocation latency and is documented nowhere, so every latency judgement built on it is calibrated against the wrong number 条目 pm-ag9nka
- Count successful provenance resolutions so historical health advisories can clear 条目 pm-4f1l7f
- Isolated release acceptance inherits npm allow-scripts through npm run 条目 pm-64qsbl
- macOS registry acceptance rejects empty optional flags under Bash nounset 条目 pm-q4avk2
- Windows transport-floor contract test batches 78 fixtures under one deadline 条目 pm-lgyaw8
Other
- Fail repository tests on undeclared MCP options including reporter overrides 条目 pm-v0s2rm
- Reconcile provenance delivery metadata with reviewed implementation 条目 pm-senomv
- Refresh Node declarations to 26.6.1 for SDK and process timing validation 条目 pm-8p629e