v0.30.2

0.30.2 (2026-05-18)

Bug Fixes

• compile: resolve autodiscovered source path relative to lock file directory (#616) (be2e1c4)

v0.30.1

0.30.1 (2026-05-18)

Bug Fixes

• tests: isolate fixtures from codemod rewrites and bump Windows debug stack (#613) (a628d09)

v0.30.0

0.30.0 (2026-05-18)

Features

• cli: add ado-aw enable (#583) (1b4273b)
• cli: consolidate Phase 1 pipeline-lifecycle commands (disable/remove/list/status/run/secrets) (#602) (096b7a4)
• compile: add --force flag to bypass GitHub-remote guard (#577) (562ff7f)
• compile: replace Python gate evaluator with bundled TypeScript gate.js (#389) (a2ce38c)
• engine: split copilot CLI install path by compile target (#584) (4fe2175)
• safeoutputs: add daily smoke suite and reject unknown safe-output keys (#563) (29b221e)
• workflows: add clippy-fixer agentic workflow (#575) (ca914f1)
• workflows: allow update-awf-version to close superseded PRs (#590) (e0ddc2c)
• workflows: file release-notes action-item issues from update-awf-version (#593) (d4fedd5)

Bug Fixes

• compile: default non-1es vmImage to ubuntu-22.04 (#578) (b841998)
• compile: enforce ADO build-number rules for pipeline_agent_name (#576) (1c7c407)
• compile: quote pipeline name in generated YAML to handle colons and quotes (#568) (ebd2f17)
• compile: tighten ADO org name validation to alphanumeric and hyphen only (#598) (91d39a9)
• configure: accept bare org name for --org (#579) (8029980)
• safeoutputs: prevent symlink exfiltration in create-pr Stage 3 (#549) (f04c033)
• secrets: preserve masked ADO secrets on definition PUT (#604) (2e0a0bb)

v0.29.0

0.29.0 (2026-05-15)

Features

• compile: add target: job and target: stage for ADO template output (#519) (8df9682)
• compile: unify pool front-matter replacement across targets (#538) (7806369)
• safeoutputs: add ado-aw-debug.create-issue for dogfood pipelines (#492) (69a634b)
• safeoutputs: add work-item filing to noop and missing-tool safe outputs (#521) (c1bf552)

Bug Fixes

• cache-memory: reject symlinks in agent memory to prevent Stage 3 credential theft (#524) (f311d36)
• ci: move docs deploy workflow to top-level .github/workflows (#539) (dcb2b33)
• compile: address pool review feedback (#541) (9bdb126)
• safeoutputs: neutralize Stage 3 upload message command injection paths (#501) (45cd552)

v0.28.0

0.28.0 (2026-05-09)

Features

• compile: add compact repos: front-matter syntax with codemod auto-rewrite (#478) (3e67cfd)
• compile: autorewrite front matter via detection-based codemods (#476) (64bbc73)

Bug Fixes

• safeoutputs: block VSO command injection via repository alias across Stage 3 PR-safe-output executors (#482) (6f4a6dd)
• workflow: add protected-files fallback-to-issue for doc-freshness-check (#473) (12e273c)

v0.27.0

0.27.0 (2026-05-08)

Features

• cli: make init always overwrite; --force bypasses GitHub remote guard (#465) (6c1a332)

Bug Fixes

• doc-freshness-check: expand allowed-files to docs, README, prompts (#463) (4abeb09)
• execute: match safe-output repository by name or alias (#469) (76cd618)
• safeoutputs: send Content-Range header for pipeline artifact uploads (#467) (e95cbf5)

v0.26.1

0.26.1 (2026-05-08)

Bug Fixes

• ci: allow doc freshness workflow to update AGENTS.md (#452) (463dafa)
• compile: detect and prevent workspace checkout collision with self repo (#456) (051d45c)

v0.26.0

0.26.0 (2026-05-07)

Features

• workflows: add frontmatter-aligner gh-aw workflow (#448) (d3af7e6)

Bug Fixes

• cli: direct GitHub repos to gh-aw for compile/init (#447) (0ca3a25)

v0.25.1

0.25.1 (2026-05-07)

Bug Fixes

• safeoutputs: support glob wildcards anywhere in allowed-tags patterns (#442) (17e372c)
• workflows: simplify change-risk to use add-comment instead of PR review (#443) (4f2f188)

v0.25.0

0.25.0 (2026-05-07)

Features

• runtimes: add dotnet runtime extension (#435) (bdfb21c)

Bug Fixes

• compile: fail pipeline step on AWF download errors (#439) (367dd9d)