Issues | Pull Requests | v4.584.0...v4.585.0
🎉 New Packages
#64400 cfgaudit/cfgaudit: Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. SARIF output, OWASP LLM Top 10 mapping @predictor2718
Security
#64331 modem-dev/hunk: Verify GitHub artifact attestations from v0.19.0 @scop
#64330 matthart1983/netwatch: Verify GitHub artifact attestations from v0.38.0 @scop
#64329 helmfile/helmfile: Verify GitHub artifact attestations from v1.8.1 @scop
#64328 git-bug/git-bug: Verify GitHub artifact attestations from v0.11.0 @scop
#64327 entireio/git-sync: Verify GitHub artifact attestations from v0.9.0 @scop
#64326 dependabot/cli: Verify GitHub artifact attestations from v1.62.2 @scop
#64325 github/gh-ost: Verify GitHub artifact attestations from v1.1.11 @scop
Fixes
#64290 kiro.dev/kiro-cli: Support 3.x on macOS and Linux @djgoku
#64208 sudorandom/protoc-gen-connect-openapi: Rename the package to connectrpc/protoc-gen-connect-openapi
The GitHub Repository of the package "sudorandom/protoc-gen-connect-openapi" was transferred from sudorandom/protoc-gen-connect-openapi to connectrpc/protoc-gen-connect-openapi