v0.20.0

What's Changed

Other Changes

• chore(deps): bump ora from 9.4.0 to 9.4.1 by @dependabot[bot] in #126
• chore(deps): bump ossf/scorecard-action from 99c09fe975337306107572b4fdf4db224cf8e2f2 to 4eaacf0543bb3f2c246792bd56e8cdeffafb205a by @dependabot[bot] in #125
• feat(guard): extend F10 credential-egress DLP to GitHub fine-grained / GitLab / Stripe keys by @m1ngshum in #128
• feat(guard): F10 Detector-B — decode-and-rescan (warn-only) for encoded payloads by @m1ngshum in #129
• chore(deps-dev): bump the dev-dependencies group with 3 updates by @dependabot[bot] in #127
• fix: harden guard against 6 adversarially-verified security findings by @m1ngshum in #130

Full Changelog: v0.19.0...v0.20.0

v0.19.0

What's Changed

Other Changes

• feat: Gemini CLI client adapter (D4a) by @m1ngshum in #120
• feat: doctor --json / --report + fix mcpm_doctor issues:[] (D7) by @m1ngshum in #121
• feat: mcpm verify + GitHub Action — repo-only lockfile integrity gate (D2) by @m1ngshum in #122
• feat: mcpm audit --sarif — SARIF 2.1.0 for GitHub code-scanning (D3) by @m1ngshum in #123
• docs: distribution install matrix + name-collision decision (D6) by @m1ngshum in #124

Full Changelog: v0.18.0...v0.19.0

v0.18.0

What's Changed

Other Changes

• fix(ci): attach SBOM at release-create time (immutable-releases 422) by @m1ngshum in #116
• feat(config): Claude Code adapter (~/.claude.json) [D1] by @m1ngshum in #117
• docs: reconcile to v0.17.0 + Claude Code client by @m1ngshum in #118
• fix(dogfood): close the confine-tamper pins race at its root (exit-wait) by @m1ngshum in #119

Full Changelog: v0.17.0...v0.18.0

v0.17.0

What's Changed

Other Changes

• docs: developer & enterprise adoption roadmap by @m1ngshum in #112
• chore: supply-chain evidence pack (SECURITY.md, SBOM, Scorecard) by @m1ngshum in #113
• ci: macOS confine leg + CONTRACTS.md exit-code contract by @m1ngshum in #114
• feat: block install/up of registry-delisted servers (E9a) by @m1ngshum in #115

Full Changelog: v0.16.0...v0.17.0

v0.16.0

What's Changed

Other Changes

• chore(deps-dev): bump the dev-dependencies group with 3 updates by @dependabot[bot] in #105
• feat(guard): verify --orig-hash at spawn (warn-once) — close the latent marker-integrity gap by @m1ngshum in #108
• refactor(guard): extract shared store-integrity.ts (dedupe symlink-safe atomic write) by @m1ngshum in #109
• feat(guard): F1 confine core — OS sandbox (macOS Seatbelt) + spawn decision table by @m1ngshum in #110
• feat(guard): F1 confine — user-reachable via enable --confine + doctor-confine by @m1ngshum in #111

Full Changelog: v0.15.0...v0.16.0

v0.15.0

What's Changed

Other Changes

• docs: sync CLAUDE.md state to v0.14.0 by @m1ngshum in #99
• chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #100
• chore(deps): bump pnpm/action-setup from 6.0.8 to 6.0.9 by @dependabot[bot] in #101
• chore(deps): bump semver from 7.8.2 to 7.8.5 by @dependabot[bot] in #102
• chore(deps): clear the Dependabot alert surface + catalog the hidden-chars mute-nit by @m1ngshum in #104
• feat(sync): add mcpm sync --check cross-client config-drift dashboard (F7) by @m1ngshum in #106
• chore(release): v0.15.0 by @m1ngshum in #107

Full Changelog: v0.14.0...v0.15.0

v0.14.0

What's Changed

Other Changes

• feat(guard): block exfil-named tool-schema params at tools/list (F5) by @m1ngshum in #97
• chore(release): v0.14.0 by @m1ngshum in #98

Full Changelog: v0.13.0...v0.14.0

v0.13.0

What's Changed

Other Changes

• test: CI guards that catch the dogfood bug classes earlier by @m1ngshum in #94
• feat(up): --frozen fail-closed integrity BLOCK tier (F3) by @m1ngshum in #95
• chore(release): v0.13.0 by @m1ngshum in #96

Full Changelog: v0.12.1...v0.13.0

v0.12.1

What's Changed

Other Changes

• fix: false-success overclaims + mislabels surfaced by a full dogfood by @m1ngshum in #92
• chore(release): v0.12.1 by @m1ngshum in #93

Full Changelog: v0.12.0...v0.12.1

v0.12.0

What's Changed

Other Changes

• feat(guard): cross-server tool-shadowing detection (F2, name-collision slice) by @m1ngshum in #90
• chore(release): v0.12.0 by @m1ngshum in #91

Full Changelog: v0.11.0...v0.12.0