2026.10.2
Fixed
- GH-1370: validate transaction previews against staged lifecycle state 条目 pm-gh1370
- GH-1371: compose output budget and producer pagination 条目 pm-gh1371
- GH-1364: preserve tracker scope and valid projection in recovery 条目 pm-gh1364
更新日志
每个 pm 版本的变化，并链接到记录每项变更的 pm 条目。
2026.10.1
Fixed
- Control native effort in the history/activity provenance fixture 条目 pm-6jvz55
- GH-1351: leaf get advertises empty children as omitted 条目 pm-x8jdt8
- GH-1349: Bun 1.3.5 merge installer accepts a transient launcher 条目 pm-aaxq4n
Security
- Scorecard alert 29: patch new brace-expansion recursion and rewrite denial-of-service advisories 条目 pm-cbzvgn
2026.9.30
Fixed
- Registry install acceptance loses subprocess timeout and signal evidence and labels every failure as registry availability 条目 pm-q7c36n
- Bun merge-driver installation disagrees with strict health 条目 pm-vks66s
- Expose host-bound audited workspace settings mutation to extension commands 条目 pm-wtqltn
- Full-item stdin JSON update silently ignores edited notes 条目 pm-2589e6
2026.9.29
Fixed
- GH-1340: pm duplicates treats UTF-8 prose as a 0.99 issue-code match 条目 pm-1ieq24
- Persist revised linked evidence notes while preserving idempotent retries 条目 pm-zqxlfs
- Bound Plan mutation receipts while preserving full inspection 条目 pm-hqy7lr
Deprecated
- Alias-usage counters: measure deprecated-spelling hits so grammar-freeze removals are evidence-based 条目 pm-0mox
- Extension activation attributes canonical full-list projection to deprecated --full 条目 pm-8uwigr
Other
- Replay each history state once: reuse the previous entry's digest as the next before-hash, stop at the first matching hash epoch, and drop the second document clone 条目 pm-hen0t6
2026.9.28
Fixed
- GH-1325: history diff cursor drops newest rows and strands the final page 条目 pm-c3aiik
- Windows nightly merge-receipt classification test exceeds 60-second budget 条目 pm-v0600g
- GH-1327: Windows nightly static inventory unreadable-source assertion fails 条目 pm-ft90q2
- GH-1326: Windows nightly bundled-package init test exceeds 30 seconds 条目 pm-kvhnb5
- MCP detached task completion coverage can miss cleanup under hosted shards 条目 pm-tm6h9x
- Full coverage refusal-closure retry test exceeds its four-minute budget under suite contention 条目 pm-mrrci4
- GH-1328: linked-test execution does not disclose item evidence recording 条目 pm-aao1hy
- GH-1330: per-command JSON help inherits the root intent and init example 条目 pm-s8ztcl
- Refuse malformed settings writes with typed recovery 条目 pm-z329kd
- Refuse local package installation when source scan stops at entry limit 条目 pm-erogk1
- Allow self-isolating linked package tests without inherited PM_PATH 条目 pm-t05d8d
- Preserve every tracker merge fence during nested init and detect lost active mappings 条目 pm-kynkl8
Security
- Exclude Git metadata from local package directory installs 条目 pm-k7nxaz
Other
- Refresh September 27 compatible development dependency releases 条目 pm-u9qqip
- Claude plugin spec-alignment hygiene vs 2026-07-11 official docs (minor, non-blocking) 条目 pm-dudr
2026.9.27
Fixed
- SDK complete-list receipt falsely reports legacy aliases for canonical helper 条目 pm-vf9iaf
Security
- Expose static extension inventory for hosted and agent reads 条目 pm-lhhnx9
Other
- Consolidate workspace customization discovery and commands under workspace with permanent compatibility aliases 条目 pm-npr3
- Declare workspace, templates and guide ownership with bounded agent orientation 条目 pm-uk9dwh
- Dispatch daily releases at 04:45 Europe/Vienna with the hosted schedule as fallback 条目 pm-9url9h
2026.9.26
Fixed
- Refuse unsupported schema dry-run flags before mutation 条目 pm-s74dca
- Releases from the default branch are supported with analyzer evidence 条目 pm-u1baah
Other
- Adapt OpenClaw test-audit skill to pm SDK and repository test governance 条目 pm-xvibt6
- Bound embedding requests, enforce retrieval floors, and protect schema previews 条目 pm-g0b88h
2026.9.25
Fixed
- GH-1306: Isolate merge driver installation and health across Git worktrees 条目 pm-c1dwbt
- GH-1305: Preserve workflow policy refusal evidence and actionable missing-field recovery 条目 pm-o5s22y
- GH-1303: Canonical help and refreshable agent guidance 条目 pm-80k965
- GH-1304: Deterministic release pipeline branch coverage across hosted environments 条目 pm-m2ai6c
- Scheduled auto-release has a chronically high failure rate and no rolling measure, so a degraded pipeline reads as healthy one run at a time 条目 pm-e70zh5
- Daily auto-release never runs in its declared window: all 84 scheduled runs fired 2.5-4 hours after the cron time, so the release clock is undocumented drift 条目 pm-44u3wt
- GH-1294: release commit omits synchronized plugin runtime manifests 条目 pm-t4prek
- The related ceiling is pinned to the live count with block enforcement, so recording one associative sibling relation anywhere in the tracker fails CI while the share floor it duplicates would have allowed it 条目 pm-r3o7x4
Security
- Semgrep 874840452: Medium dependabot missing cooldown in .github/dependabot.yml\#L3 条目 pm-gkut
- Semgrep 874840451: Medium dependabot missing cooldown in .github/dependabot.yml\#L23 条目 pm-dmo5
2026.9.24
Fixed
- Dogfood test failure must not print inherited environment secrets 条目 pm-jiv3dw
- Claude plugin: marketplace installs fall back to npx @latest, not the advertised native MCP server 条目 pm-l9wl
- Windows copied agent plugins cannot install pinned runtime through npm.cmd 条目 pm-d6fd85
- Nightly coverage, quality, and Windows tests exceed serial job budgets 条目 pm-ul9rye
- GH-1291: Windows nightly release cleanup fixture includes Node compile cache 条目 pm-puf5rq
Security
- Scorecard Token-Permissions (0→10): declare least-privilege top-level permissions in every GitHub workflow 条目 pm-003j
Other
- Support safe Bash completion inside quoted and escaped prefixes 条目 pm-eswzn9
- Refresh compatible Sentry, jscpd, and TypeScript-ESLint patches for September 22 条目 pm-hate9s
2026.9.23
Other
- Mutation-testing gate: prove the 100 percent coverage suite actually detects defects, with a ratcheted mutation score on SDK core 条目 pm-zclzll