5.2.0 (2026-10-01)

Features

• milestones: roll a next milestone and warn on release hygiene (#744) (0b413f2), closes #740 #741

5.1.4 (2026-09-30)

Bug Fixes

• ci: route the bare base path in the Cloudflare docs deploy (#733) (75b34fe)

5.1.3 (2026-09-30)

Bug Fixes

• schema: serve the JSON Schemas from docs.torcato.dev (#732) (d2f5f0f)

5.1.2 (2026-09-30)

Bug Fixes

• ci: pin wrangler to an exact version in the Cloudflare docs deploy (#729) (00728cf)

5.1.1 (2026-09-30)

Bug Fixes

• ci: deploy Cloudflare docs with npx wrangler in pnpm workspaces (#727) (3a11242), closes #725

5.1.0 (2026-09-30)

Features

• config: docs settings in the ProjectConfig (url, deploy) (#724) (af453fd), closes #721 #722
• reusable Cloudflare Workers docs deploy workflow (#723) (eed0cf6), closes shared-docs#74 #721

5.0.1 (2026-09-29)

Bug Fixes

• cli: point moved docs-site and brand targets at the shipped shared-docs commands (#720) (6459dda)

5.0.0 (2026-09-29)

4.8.0 (2026-09-29)

Features

• docs-site: opt-in sibling project links via rules.docs.siblings (#715) (899362d), closes #676
• doctor: report workflow secrets that are not configured (#716) (19b7d59), closes #685

4.7.0 (2026-09-29)

Features

• ci: smoke-test the packed tarball for packages with a bin (#714) (7797bf1), closes #693
• docs-site: wire the brand favicon and social card into the docs site (#710) (606b2a7), closes #680

4.6.0 (2026-09-29)

Bug Fixes

• ci: gate release job on releasable subjects and never cancel runs on main (#711) (f8cafe6), closes #690
• docs-site: rebuild docs via workflow_run after CI, not release: published (#709) (ab07d97), closes #691

Features

• doctor: name the missing brand pieces (#708) (91adab7), closes #679

4.5.0 (2026-09-29)

Bug Fixes

• docs-site: only add bundlephobia/codecov badges when they apply (#701) (3e3d302), closes #675

Features

• guide npm OIDC trusted publishing in setup, doctor and fix (#687) (#706) (57edb30)

4.4.0 (2026-09-29)

Bug Fixes

• doctor: report missing security automation when the lock records it (#704) (621c1e2), closes #692 #692

Features

• brand: scaffold a favicon and render the PNGs in fix brand (#705) (03544e9), closes #678

4.3.1 (2026-09-29)

Bug Fixes

• docs-site: align scaffold dependency ranges with the family (#707) (ab698a5), closes #674

4.3.0 (2026-09-29)

Bug Fixes

• dependabot: assign the owner and comment when a PR falls through to manual review (#703) (1aa5c68), closes #694

Features

• setup: offer brand assets in the wizard and record the choice (#702) (ccebaeb), closes #677

4.2.0 (2026-09-24)

Bug Fixes

• docs-site: emit the scaffold in Biome preset style and drop the smoke spec (#681) (5527582), closes #662

Features

• fix: let selfSafe fixers run on this repo under REPO_TOOLING_ALLOW_SELF (#682) (95c8e39), closes #673

4.1.0 (2026-09-24)

Bug Fixes

• docs-site: add docsSite to the config schema so the lockfile write succeeds (#668) (38684ca), closes #660 #663 #664 #660
• docs-site: approve the site's build scripts in pnpm-workspace.yaml (#671) (a4eb2aa), closes #660 #663 #664 #663
• docs-site: redirect the site root to the docs instead of 404ing (#672) (6277d39), closes #660 #663 #664 #664
• lockfile: detect the bundler instead of recording tsup for every repo (#670) (7d4b22d), closes #661

Features

• brand: read the banner tagline from rules.brand.tagline (#669) (54e62f6), closes #666

4.0.0 (2026-09-24)

3.45.0 (2026-09-23)

Features

• loop: add loop tick --json and shrink the skill to judgement only (#657) (b340b8b), closes #620

3.44.0 (2026-09-23)

Features

• loop: add loop comment and loop verdict (#656) (adc0b0d), closes #619

3.43.0 (2026-09-23)

Features

• loop: add loop reap --json (#655) (0bd4549), closes #618

3.42.0 (2026-09-23)

Features

• loop: add loop worktree add (#654) (8b4cca6), closes #616 #585

3.41.0 (2026-09-23)

Features

• loop: add loop cleanup --json (#653) (e7e52e3), closes #PR #617

3.40.0 (2026-09-23)

Features

• loop: add loop env --json (#651) (307fd50), closes #615 #614

3.39.0 (2026-09-23)

Bug Fixes

• fix: skip the confirm prompt on --dry-run and without a TTY (#649) (0e3cb11), closes #637
• husky: chmod an existing hook that already runs the command (#648) (1f9a155), closes #646

Features

• fix: add explicit-only ai-loop-identity fixer (#650) (13f1d98), closes --#config-dir #638

3.38.3 (2026-09-23)

Bug Fixes

• fix: skip optional-missing findings in a bulk fix (#647) (39cd7f4), closes #630

3.38.2 (2026-09-23)

Bug Fixes

• dependabot: stop assuming npm in repos without a package.json (#643) (33475e8), closes #422 #631
• doctor: run base checks only for a repo with no language marker (#645) (35c7208), closes #632
• fix: never replace hand-written husky hooks or docs.yml workflow (#644) (c9edb28), closes #629
• fix: report the files a --dry-run would actually change (#642) (8869a85), closes #635

3.38.1 (2026-09-23)

Bug Fixes

• detect-language: let Package.swift win over a docs-only package.json (#639) (5279b2d), closes #633
• doctor: skip README badges check without package.json, match own name (#641) (f716172), closes #634
• fix: refuse husky without package.json and skip crashing fixers in bulk runs (#640) (80a4058), closes #636

3.38.0 (2026-09-23)

Bug Fixes

• ai-issue-loop: make the Pass 5 status file absolute and define SUGGESTED (#623) (36cbf35), closes #610
• skills: fall back to general-purpose when reviewer agents are absent (#628) (4259a82), closes #611 #611
• skills: let a promoted ai-suggested issue reach the queue (#609) (b073fc9), closes #608
• skills: split optional gh flags so zsh passes them as two words (#626) (54fa351), closes #624

Features

• ai-issue-loop: notify with PushNotification instead of osascript (#627) (d7598b6), closes #623 #612

3.37.2 (2026-09-21)

Bug Fixes

• ai-issue-loop: assign handoffs to the human, not whoever gh is (#607) (f599fc4), closes #605 601/#603 #606

3.37.1 (2026-09-21)

Bug Fixes

• skills: stop pretending the loop gates Dependabot PRs (#605) (8f4f57e), closes #593 #593

3.37.0 (2026-09-21)

Features

• loop-guard: halt when gh is not the declared agent account (#603) (2fb3193), closes #601

3.36.0 (2026-09-21)

Bug Fixes

• biome: merge into an existing biome.json instead of replacing it (#598) (4f77fc6), closes #587
• biome: parse Tailwind v4 directives in the shipped preset (#599) (2a9a3f0), closes #589
• pnpm-workspace: mirror onlyBuiltDependencies into allowBuilds (#595) (a2953b2), closes #588
• skills: iterate symlinkDirectories line by line so zsh links anything (#596) (e7ab3dd), closes #585

Features

• doctor: flag peers installed below the declared range (#597) (efe3a28), closes #591
• typescript: add a vite-app preset with vite/client and checked tests (#600) (ae2fdd3), closes #592

3.35.0 (2026-08-27)

Features

• skills: ship the dogfood skill so fix claude-skills installs it (#584) (fe3a192), closes #576 #577 #579 #580 #581

3.34.0 (2026-08-27)

Features

• doctor: flag exports naming files the repo's build cannot emit (#583) (0a54257), closes #578 #570 #577 #570

3.33.0 (2026-08-27)

Features

• doctor: flag Swift sources under Sources/ that no declared target claims (#582) (4c56f56), closes #575

3.32.0 (2026-08-27)

Bug Fixes

• setup: derive the pnpm release-age exemption from package.json name (#580) (c98b4f0), closes #573

Features

• lockfile: write an empty rules scaffold so a new repo has rules to edit (#581) (3591b34), closes #571

3.31.2 (2026-08-27)

Bug Fixes

• cli: report one version for --version, writtenBy, and the skill stamps (#579) (926e803), closes #480 #417 #572
• setup: make the library preset own the build script it writes exports for (#577) (ebc5414), closes #570 #573
• swift: preserve an existing Package.swift instead of overwriting it (#576) (9210ea5), closes #574 #575

3.31.1 (2026-08-27)

Bug Fixes

• skills: scope the verdict-marker read to the PR's head commit (#569) (6a6e371), closes #497 #567

3.31.0 (2026-08-27)

Features

• ai-issue-loop: claim the fix round with an ai-fixing label (#568) (05750f8), closes #446 #543 #567 #566

3.30.0 (2026-08-27)

Features

• rules: compare repo rules against a reference repo, and seed setup from one (#565) (f7c818e), closes #563 #unavailable #463

3.29.0 (2026-08-27)

Features

• lockfile: split .repo-tooling.json into record and rules subtrees (v4) (#564) (915e8a5), closes #559 #544 #531 #271 #552 #524

3.28.0 (2026-08-27)

Features

• doctor: scan recent commit history for placeholder or generated author emails (#562) (efc4c8a), closes #557

3.27.0 (2026-08-26)

Features

• doctor: record deliberate deviations as declared exceptions in .repo-tooling.json (#561) (2dd0a65), closes #558 #552

3.26.0 (2026-08-26)

Bug Fixes

• scripts: strip git's ambient repo env vars in the integration scripts (#555) (1551fbf), closes #553
• skills: send CI-red PRs back to a fix round and collapse the ready-PR labels (#554) (0ad1748), closes #545 #543 #527 #406 #500

Features

• lockfile: add requiredSkills and mcp.recommended with advisory doctor checks (#556) (acd35da), closes #534 #533 #534 #533 #534

3.25.0 (2026-08-26)

Features

• cli: add loop guard for bare-checkout repair and node_modules rebuild gating (#553) (d908f4b), closes #519 #519

3.24.0 (2026-08-26)

Features

• doctor: flag an older lockfile and migrate it in place with fix lockfile (#544) (03bedee), closes #531
• labels: give the human's pickup state a merge-ready label instead of an absence (#543) (61d8e3d), closes #541

3.23.0 (2026-08-26)

Features

• doctor: verify aiLoop.agentUser is an assignable collaborator (#537) (4cf2263), closes #530 #521
• schema: publish the .repo-tooling.json JSON Schema at its $schema URL (#539) (686ce35), closes #529

3.22.1 (2026-08-26)

Bug Fixes

• skills: gate the ai-issue-loop decision-comment upsert on the loop's own login (#526) (c79cac6), closes #511

3.22.0 (2026-08-21)

Bug Fixes

• skills: resolve the stamped version from git tags in a checkout (#523) (5a28bc9), closes #417

Features

• skills: assign in-flight work to the agent account (#525) (ad310e6)

3.21.1 (2026-08-21)

Bug Fixes

• skills: reconcile the ai-issue-loop fork — restore the five running-copy blocks (#510) (ac58356), closes #506 #508 #509 #506

3.21.0 (2026-08-21)

Features

• fix: scaffold the release environment gate (#516) (b9efdda), closes #429

3.20.0 (2026-08-21)

Bug Fixes

• claude: read reviewer verdicts from the posted comment (#501) (46763c4), closes #497 #480 #499
• skills-install: quote the skill name in the README install commands (#502) (0a18d0b), closes #492 #498

Features

• skills: guard the ai-issue-loop main checkout against a bare flip (#505) (44709a6), closes #496 #500 #500 #500 #501

3.19.2 (2026-08-21)

Bug Fixes

• doctor: shell-quote both paths in the skill-fork diff hint (#497) (93e60e3), closes #492 #493

3.19.1 (2026-08-21)

Bug Fixes

• biome: rename the shipped preset so Biome never auto-discovers it (#495) (98e1dc3), closes #486 #469 #491
• doctor: name both paths in the skill-fork diff hint (#492) (c01e136), closes #475 #490 #484

3.19.0 (2026-08-21)

Features

• doctor: honour --skills-dir when reporting the Claude skill (#490) (9907de4), closes #485

3.18.0 (2026-08-21)

Features

• skills: route agent follow-ups to ai-suggested issues (#489) (0646da5), closes #478

3.17.0 (2026-08-21)

Features

• skills: tell a stale installed skill from a deliberate local fork (#483) (5bba9ba), closes #480 #448

3.16.3 (2026-08-21)

Bug Fixes

• setup: greet with the current product name, not "JS Tooling" (#481) (7d6cc5e), closes #475 #475 #470 #470
• skills: cut reviewer comment boilerplate in ai-issue-loop (#482) (661d4af), closes #474 #478 #479

3.16.2 (2026-08-21)

Bug Fixes

• skills: clear ai-ready when ai-issue-loop claims an issue (#476) (1920701), closes #458 #467 #461 #452 #429 #429 #474 #473

3.16.1 (2026-08-21)

Bug Fixes

• biome: stop pinning a version in the $schema URL (#477) (769c3ae), closes #330

3.16.0 (2026-08-21)

Bug Fixes

• biome: mark the shipped preset non-root so a whole-repo check can run (#469) (3a9de0a), closes #468
• skills: cap ai-issue-loop agent comment length (#474) (364d8e2), closes #472 #472 #467

Features

• security: auto-merge github-actions patch and minor bumps (#471) (e482c58), closes #452 423/#458 pre-#458 #447 #447 #452
• setup: review --preset in a terminal and add a minimal preset (#470) (dd91641), closes #461 #463 #467

3.15.3 (2026-08-21)

Bug Fixes

• setup: use inquirer's select type so the wizard can run at all (#466) (a927ba9), closes #463 #461

3.15.2 (2026-08-20)

Bug Fixes

• skills: stop routing held Dependabot PRs through ai-changes (#464) (6d5f22c), closes #459 #455

3.15.1 (2026-08-20)

Bug Fixes

• dependabot: stop the dev-minor auto-merge reaching peerDependencies (#462) (a03d378), closes #455 #423 #423 #423 #455

3.15.0 (2026-08-20)

Bug Fixes

• skills: drop the unreachable EnterWorktree step from ai-issue-loop (#454) (209df01), closes #422 #423 #426 #428 #429 #451

Features

• doctor: audit ai-issue-loop label colours and descriptions (#456) (1381117), closes #446 #422

3.14.0 (2026-08-20)

Bug Fixes

• dependabot: refuse to silently delete repo-local ignore rules (#445) (8d279c6), closes #422
• security: gate Dependabot auto-merge on the dev-minor group (#447) (bb32f69), closes #423

Features

• doctor: check the release environment gate (#449) (024377c)
• doctor: tell a stale copied asset from a deliberate local fork (#448) (d83aef9), closes #428
• docusaurus: add docs-generator helpers as a copy asset (#444) (b6ad3e8), closes #426

3.13.2 (2026-08-20)

Bug Fixes

• claude: claim reviewers before spawning in ai-issue-loop Pass 3 (#442) (446cfdb), closes #439

3.13.1 (2026-08-20)

Bug Fixes

• skills: make npm-publish consumer-neutral and release-tool-aware (#437) (e3a2ae1), closes #433 #436

3.13.0 (2026-08-20)

Bug Fixes

• doctor: stop requiring sync-changelog on Changesets repos (#433) (c905d49), closes #425

Features

• claude: ship sync-agents.mjs as a copy asset (#434) (2510f2c), closes #427
• doctor: detect Biome $schema drift from the installed CLI (#435) (e833408), closes #424

3.12.1 (2026-08-17)

Bug Fixes

• docs: repair the docs tsconfig for TypeScript 7 (#421) (bc86f75)

3.12.0 (2026-08-17)

Features

• github: flag the code-scanning gate colliding with the git plugin (#420) (eac8a07), closes #419 #418 #419 #418

3.11.1 (2026-08-17)

Bug Fixes

• release: stop the github preset pushing a release commit to main (#418) (dc9dc91), closes #417 js-common#213

3.11.0 (2026-08-17)

Features

• github: make squash the only merge method in the standard (#415) (a2d53ff), closes #204 #N

3.10.2 (2026-08-17)

Bug Fixes

• cli: fail closed when fix claude-skills has nowhere to install (#413) (816ecef)

3.10.1 (2026-08-12)

Bug Fixes

• ai: symlink nested workspace node_modules into agent worktrees (#408) (e3fe54c), closes #406

3.10.0 (2026-08-12)

Bug Fixes

• claude: correct AI-task gate to ai-ready and state auto-merge asymmetry (#407) (47bbd80), closes #404 #404 #405

Features

• skills: ship the ai-issue-loop skill with a user-level install target (#409) (e4e0bcd), closes #404

3.9.2 (2026-08-12)

Bug Fixes

• brand: escape double quotes in generated SVG text (#403) (2806804)

3.9.1 (2026-08-12)

Bug Fixes

• commitlint: stop enforcing body/footer line length (#402) (a272bcd)

3.9.0 (2026-08-11)

Features

• ai: scaffold .claude/settings.json worktree symlinks (#399) (62459a8), closes #396 rtorcato/js-common#171
• brand: scaffold brand/ sources and audit them in doctor (#400) (461b0b0), closes #395
• doctor: audit milestone hygiene, close completed milestones (#398) (e4b34c2), closes #397

3.8.7 (2026-08-11)

Bug Fixes

• doctor: flag agent docs that name the dead js-tooling bin (#394) (7e6f957), closes #393

3.8.6 (2026-08-10)

Bug Fixes

• doctor: accept an inlined TypeScript preset (#388) (c7300f7), closes #379 #379 #383 #385
• gitlab-ci: only emit jobs whose scripts the repo has (#389) (40a9e6d), closes #364 #386
• vitest: emit a config that imports the shipped preset (#390) (a7f3ef9), closes #387

3.8.5 (2026-08-10)

Bug Fixes

• js: give the size-limit budget a script and a CLI to run it (#384) (b6293bd), closes #371 #377 #382

3.8.4 (2026-08-10)

Bug Fixes

• cli: route fix tsconfig through generateTSConfig (#383) (58c5c0a), closes #366 #378 #366 #381

3.8.3 (2026-08-10)

Bug Fixes

• doctor: accept an inlined biome preset, not just an extends pointer (#379) (2c75d80), closes #378

3.8.2 (2026-08-10)

Bug Fixes

• js: add the scripts that run knip, vitest and tsc (#380) (3b8e978), closes #364 #374 #377

3.8.1 (2026-08-10)

Bug Fixes

• doctor: flag transitive pnpm build approvals (#375) (da20a6a), closes #373

3.8.0 (2026-08-10)

Bug Fixes

• js: add the scripts that run eslint and prettier (#374) (c6fef2f), closes #364 #371

Features

• doctor: report and fix a missing packageManager pin (#376) (345a3df), closes #372

3.7.4 (2026-08-10)

Bug Fixes

• biome: honour .gitignore and track the installed schema version (#367) (04135a6), closes #365 #366

3.7.3 (2026-08-10)

Bug Fixes

• biome: scaffold one biome.json from one code path (#366) (ca19aea), closes #365 #363 #363

3.7.2 (2026-08-10)

Bug Fixes

• ci: make the generated workflow pass on the repo that generated it (#370) (7f86128)
• husky: give commit-msg to the target that installs commitlint (#368) (6473ce7)

3.7.1 (2026-08-09)

Bug Fixes

• cli: finish routing fixer advisories off stdout (#361) (457e28f), closes #357 #358 #358 #290 #290 #358 #358

3.7.0 (2026-08-09)

Bug Fixes

• python: send the git-hooks advisory to stderr, and guard the rule (#360) (570a3cb), closes #356 #358 #356 #358 #358 #358 #359

Features

• perl: add src/languages/perl module (#359) (665c76f), closes #289 #356 #356 #286 #290

3.6.0 (2026-08-09)

Bug Fixes

• cli: send fixer advisories to stderr so --json stays parseable (#358) (99789c1), closes #356

Features

• python: add src/languages/python module (#356) (294a09b), closes #286 #288

3.5.0 (2026-08-09)

Features

• doctor: report the languages a monorepo audit skips (#355) (aa5b4b9), closes #317 #317 #317

3.4.0 (2026-08-08)

Features

• swift: add DocC, swift-format and test-configuration checks (#353) (57b29f7), closes #311 #351 #310

3.3.0 (2026-08-08)

Bug Fixes

• ci: stop silently overwriting a consumer's ci.yml, and let doctor see the drift (#352) (e89e879), closes #340 #340 #342 #348 #309 #340 #349 #340

Features

• ci: ship doctor as a composite GitHub Action (#350) (7164db4), closes #315 #342 #316
• swift: check and scaffold tag-based SwiftPM releases (#351) (5f2f70e), closes #310

3.2.5 (2026-08-08)

Bug Fixes

• ci: widen the action-pin guard past the actions/ org (#348) (a2adbbe), closes #316
• pack: ship dist/base so the published CLI can start (#346) (10d4c72), closes #345 rtorcato/shared-docs#13

3.2.4 (2026-08-08)

Bug Fixes

• presets: make every JS preset survive a real install and verify (#343) (f2af0af), closes #313

3.2.3 (2026-08-08)

Bug Fixes

• ci: bump emitted action pins to the majors this repo runs (#342) (ab3ade3), closes #340
• commitlint: ignore bot commits so dependabot PRs stop failing (#341) (75ccba8), closes #339

---

Every entry above is generated by semantic-release and published to GitHub Releases. Anything older than the first GitHub Release is recorded in CHANGELOG.md.