0.7.0 (2026-08-18)
Features
Bug Fixes
- deps: make js-yaml imports work on both 4.x and 5.x (#2656) (6466b18)
- deps: patch both HIGH advisories in web (js-yaml 4.3.1, nanoid 3.3.18) (a094ec9)
- deps: raise the js-yaml floor to ^4.3.1 and guard it (#2767) (5b18a96)
- keys: stop the dotted-I fix from collapsing Polish, Lithuanian and Maltese (5df43e7)
- keys: stop the Turkish dotted capital from splitting one employer in two (462d276)
- scan: take the shared lock for scan-history.tsv appends (#2639) (8e264c4)
- web: add Grok Build CLI to the web runtime picker (#2688) (af0d818)
- web: analytics tells an offer-holder they have 0 interviews (and nudges them to try harder) (#2410) (8f2b415)
- web: anchor the fallback stderr classifier so a word can't fail a run (#2882) (be62e3e)
- web: carry the posted: segment so web evaluations reach the POSTED column (#2899) (6eece73)
- web: detect OpenCode in its default install directory (#1794) (c10b887)
- web: emit the posting URL in the tracker-additions TSV so web runs join the dedup (#2833) (3c68721)
- web: enforce that no runtime grants itself blanket write permission (#2875) (9ba6ebf)
- web: finish Unicode company keys for explore + registry (#2668) (c294242)
- web: fold Turkish dotted capitals in status keys, and stop hand-copying the state list (#2786) (e1a0961)
- web: keep Codex JSONL + exit code authoritative for web scoring (#2102) (2d43601)
- web: let the pipeline table scroll horizontally instead of clipping on narrow screens (#2363) (632031c)
- web: make the tracker reader agree with parseTrackerRow on row shape (#2565) (4fea438)
- web: prevent Codex run jobs from waiting on stdin (#1973) (9a139a2)
- web: read target_roles with the shape it is actually written in (#2750) (5f5c06d)
- web: show the retry card, not the update-checkout panel, for runtime scan errors (#1904) (29c0d69)
- web: skip {n}-RESERVED.md sentinels when looking up reports (#1967) (5f4842e)
- web: stop the 16-chip cap from truncating the user's own portals.yml (#2749) (a5af949)
- web: strip the author letter from any lettered block, not just A-G (#2420) (630709a)
- web: take the core tracker lock in POST /api/status (#2903) (d9c4fd0)