4.33.10 (2026-10-23)
Bug Fixes
- cli: bump golang.org/x/net safe floor to v0.60.0 (#5164) (56135da)
- cli: honor profile flags, deliver sinks, and MCP argument schemas (#5165) (9600d4c)
- cli: isolate the sample-output probe from the CLI store (#5166) (e27db0e)
- cli: keep API strings from injecting terminal controls or encoded secrets (#5169) (c601087)
- cli: page code-orchestration MCP list reads with resumable cursors (#5127) (aa11117)
- cli: report incomplete sync and fix OData paging, reconcile, and fan-out (#5170) (0db0d66)
- cli: route emitted OAuth mint tests through testenv (#5116) (f04d907), closes #5110
- cli: send multipart endpoints through code-orchestration MCP as multipart (#5129) (6cbf5e4)
- cli: stamp binary-response dry-run action and drop dead stamped-output helper (#5128) (a7a16c4)
- skills: build polish gosec that loads current Go and fail partial scans (#5130) (d36b290)