0.28.0 (2026-05-09)

Features

• compile: add compact repos: front-matter syntax with codemod auto-rewrite (#478) (3e67cfd)
• compile: autorewrite front matter via detection-based codemods (#476) (64bbc73)

Bug Fixes

• safeoutputs: block VSO command injection via repository alias across Stage 3 PR-safe-output executors (#482) (6f4a6dd)
• workflow: add protected-files fallback-to-issue for doc-freshness-check (#473) (12e273c)

0.27.0 (2026-05-08)

Features

• cli: make init always overwrite; --force bypasses GitHub remote guard (#465) (6c1a332)

Bug Fixes

• doc-freshness-check: expand allowed-files to docs, README, prompts (#463) (4abeb09)
• execute: match safe-output repository by name or alias (#469) (76cd618)
• safeoutputs: send Content-Range header for pipeline artifact uploads (#467) (e95cbf5)

0.26.1 (2026-05-08)

Bug Fixes

• ci: allow doc freshness workflow to update AGENTS.md (#452) (463dafa)
• compile: detect and prevent workspace checkout collision with self repo (#456) (051d45c)

0.26.0 (2026-05-07)

Features

• workflows: add frontmatter-aligner gh-aw workflow (#448) (d3af7e6)

Bug Fixes

• cli: direct GitHub repos to gh-aw for compile/init (#447) (0ca3a25)

0.25.1 (2026-05-07)

Bug Fixes

• safeoutputs: support glob wildcards anywhere in allowed-tags patterns (#442) (17e372c)
• workflows: simplify change-risk to use add-comment instead of PR review (#443) (4f2f188)

0.25.0 (2026-05-07)

Features

• runtimes: add dotnet runtime extension (#435) (bdfb21c)

Bug Fixes

• compile: fail pipeline step on AWF download errors (#439) (367dd9d)

0.24.0 (2026-05-07)

Features

• workflows: add /change-risk slash command for PR risk assessment (#434) (e787956)

Bug Fixes

• logging: always capture debug logs to file while preserving console verbosity (#430) (64e9709)
• safeoutputs: use sanitize_config for identifier fields instead of sanitize_text (#433) (ea43b11)

0.23.1 (2026-05-07)

Bug Fixes

• safeoutputs: rewrite upload-pipeline-artifact flow to fix HTTP 405 (#425) (5e4c89e)
• security: harden upload path validation and trigger filter script integrity (#428) (84a2031)

0.23.0 (2026-05-06)

Features

• safeoutputs: add dynamic tags with allowed-tags to create/update work item (#420) (d02997a)

Bug Fixes

• safeoutputs: fix upload-pipeline-artifact 405 by adding scopeIdentifier to container API requests (#421) (2d460fd)

0.22.4 (2026-05-06)

Bug Fixes

• execute: don't overwrite env-derived ADO context with None CLI args (#413) (aa8a09f)