What's Changed
🔧 Other Changes
- perf: consolidate six performance scan reports by @danielmeppiel in #3370
- docs: consolidate maintainer roster and contributor credit by @danielmeppiel in #3489
- chore(license): scope Apache-2.0 software and CC-BY-4.0 docs by @danielmeppiel in #3487
- docs(concepts): Fix
what-is-apmfile extension by @TyMick in #3461 - Fix YAML syntax error in
docs-grounding-verifierfrontmatter by @TyMick in #3285 - fix(triage): drop inaccessible grok-4.7 pin from scheduled Triage Panel by @danielmeppiel in #3515
- fix(perf-scan): emit noop instead of opening an issue on clean scans by @danielmeppiel in #3516
- docs(pr): require closing keyword for delivered issues, Refs for partial by @danielmeppiel in #3518
- docs(lockfile-spec): show sha256: hash form APM writes by @danielmeppiel in #3519
- docs(devcontainer): stop advertising the unpublished GHCR feature by @danielmeppiel in #3526
- fix(install): keep the locked commit as the cached source pin by @abhishekacharya200 in #3407
- fix(receipts): preserve macOS identity across remounts with downgrade-safe migration by @TyceHerrman in #3439
- fix(codex): admit Codex CLI 0.163.0 or later for native registration by @danielmeppiel in #3529
- fix(install): retry transient Windows denials at staged activation (#3386) by @danielmeppiel in #3530
- fix(install): keep files deployed to other Claude/Hermes profiles by @xronos-i-am in #3424
- fix(install): replay locked Git-semver tag for cached subdirectory deps by @danielmeppiel in #3527
- fix(install): refuse unmatched skills: selection before any primitive writes by @danielmeppiel in #3538
- fix(install): reconcile a targeted package's dropped transitive dependencies by @danielmeppiel in #3528
- fix(git): pin autocrlf=false on the uncached fallback clone and checkout by @abhishekacharya200 in #3409
- fix(compile): ignore generated context outputs in placement counting by @danielmeppiel in #3539
- fix(mcp): deploy MCP servers from local-path Claude plugin dependencies by @danielmeppiel in #3540
- fix(mcp): keep v0.1 registry server version in search and show by @danielmeppiel in #3549
- fix(lifecycle): close HTTP response published during deadline grace join by @danielmeppiel in #3548
- fix(install.ps1): report the full staged-binary failure output by @danielmeppiel in #3533
- docs(prompts): note Copilot harness and CLI do not load prompt files by @danielmeppiel in #3550
- fix(audit): recognize Copilot sessionStart prompt hooks by @danielmeppiel in #3542
- fix(lifecycle): treat non-positive script timeouts as invalid by @danielmeppiel in #3544
- fix(plugins): read flat-shape Claude plugin .mcp.json files by @danielmeppiel in #3541
- fix(marketplace): verify commit-SHA refs in marketplace check by @danielmeppiel in #3543
- fix(audit): replay git deps over their declared transport by @danielmeppiel in #3531
- fix(install): do not treat an empty skill directory as an unmanaged collision by @MohammedAlkindi in #3449
- fix(install): keep lockfile_version in sync after carrying resolved_tag by @danielmeppiel in #3536
- fix(lockfile,compile): create apm.lock.yaml and compiled outputs with umask-derived mode by @danielmeppiel in #3547
- fix(deps): honor PROXY_REGISTRY_ONLY in ref and semver enumeration by @pearlatvg in #3471
- fix(lockfile): fail closed when apm.lock.yaml is a symlink by @danielmeppiel in #3532
- fix(adapters): prepend docker run for options-only OCI packages (#3404) by @abhishekacharya200 in #3405
- fix(mcp): preserve declared self-defined server names containing slashes by @bodapatisaikrishna in #3493
- fix(codex): forward ${VAR} stdio env values with env_vars instead of writing them by @abhishekacharya200 in #3406
- docs: install APM from Scoop's default main bucket (dead scoop-apm link) by @danielmeppiel in #3517
- fix(install): preserve skills during cold replay without deployment receipts by @sergio-sisternes-epam in #3490
- fix(uninstall): remove packages only from the selected Claude profile by @danielmeppiel in #3555
- fix(tests): pin LF line endings in cached Codex source-pin fixture by @danielmeppiel in #3561
- fix(tests): allow retained lifecycle lock in generated state-machine write set by @danielmeppiel in #3566
- fix(arch): scope lockfile-read guard to the read-only resolver by @danielmeppiel in #3568
- fix(ci): bypass unresolvable Azure apt mirror when installing fish and zsh by @danielmeppiel in #3570
- fix(deps): lock transitive setuptools 84.1.0 (GHSA-xmj3-9gf7-h52w) by @danielmeppiel in #3563
- fix(antigravity): emit native rule frontmatter (string globs, always_on trigger) by @danielmeppiel in #3546
- chore: release v0.35.1 by @danielmeppiel in #3558
New Contributors
- @TyMick made their first contribution in #3461
- @TyceHerrman made their first contribution in #3439
- @xronos-i-am made their first contribution in #3424
- @pearlatvg made their first contribution in #3471
Full Changelog: v0.35.0...v0.35.1