v0.49.1

🌟 Release Highlights

This patch release delivers targeted security hardening, reliability improvements, and documentation polish—keeping your agentic workflows running smoothly and securely.

🔒 Security

• Cross-repository allowlist validation (#17771): Flagged workflow handlers now enforce strict cross-repository allowlist checks, preventing unintended cross-repo access.

🐛 Bug Fixes

• add-wizard imports resolution (#17765): Frontmatter imports: dependencies are now fetched locally during add-wizard, fixing resolution failures in offline or restricted environments.
• Safe outputs expiry (#17737): All create-discussion safe output jobs across workflows now correctly set expires: 1d, avoiding stale output retention.
• Parser property ordering (#17754): Strict unknown-property ordering in the parser is now stable, eliminating non-deterministic compilation output.

📚 Documentation

• Quick Start guide hierarchy (#17745): Fixed heading levels in the Quick Start guide for improved navigation and accessibility.
• Feature docs update (#17741): Documentation updated to reflect the latest features from 2026-02-22.

✨ Improvements

• Archie workflow messaging (#17746): Workflow status messages from the Archie agent now use a more professional, consistent tone.

---

For complete details, see CHANGELOG.

Generated by Release

---

What's Changed

• Set expires: 1d for create-discussion safe outputs across all workflows by @Copilot in #17737
• [docs] Update documentation for features from 2026-02-22 by @github-actions[bot] in #17741
• Improve test quality for pkg/parser/import_cache_test.go by @Copilot in #17742
• fix: correct heading hierarchy in Quick Start guide by @Copilot in #17745
• Elevate professional tone in Archie workflow messages by @Copilot in #17746
• parser: stabilize strict unknown-property ordering by @davidahmann in #17754
• fix: fetch frontmatter imports: dependencies locally during add-wizard by @Copilot in #17765
• refactor(workflow): Priority 1 semantic clustering — shared mount validation, copilot function relocation by @Copilot in #17768
• [code-simplifier] parser: add doc comment and assertion message to normalizeAdditionalPropertyList by @github-actions[bot] in #17772
• fix(IMP-003): move generateCustomJobToolDefinition to safe_outputs_config_generation.go by @Copilot in #17770
• SEC-005: Add cross-repository allowlist validation to flagged handlers by @Copilot in #17771

Full Changelog: v0.49.0...v0.49.1