v0.23.0

0.23.0 (2026-05-06)

Features

• safeoutputs: add dynamic tags with allowed-tags to create/update work item (#420) (d02997a)

Bug Fixes

• safeoutputs: fix upload-pipeline-artifact 405 by adding scopeIdentifier to container API requests (#421) (2d460fd)

v0.22.4

0.22.4 (2026-05-06)

Bug Fixes

• execute: don't overwrite env-derived ADO context with None CLI args (#413) (aa8a09f)

v0.22.3

0.22.3 (2026-05-05)

Bug Fixes

• compile: show full error chain in batch compile output (#411) (157ed02)

v0.22.2

0.22.2 (2026-05-05)

Bug Fixes

• compile: reject unknown front-matter fields with deny_unknown_fields (#409) (788250d)

v0.22.1

0.22.1 (2026-05-05)

Bug Fixes

• compile: remove empty env block from executor step when no write permissions (#407) (0f25f06)

v0.22.0

0.22.0 (2026-05-05)

Features

• runtimes: add unified Node.js and Python runtime extensions (#400) (991621a)
• safe-outputs: rename upload-build-artifact to upload-build-attachment and add upload-pipeline-artifact (#404) (d3aad31)

Bug Fixes

• security: neutralize pipeline commands in execute_safe_outputs Err arm (#405) (da83c03)
• security: neutralize VSO pipeline commands in Stage 3 log output (#396) (ea76888)

v0.21.0

0.21.0 (2026-05-02)

⚠ BREAKING CHANGES

• compile: trigger filter IR with data-driven Python evaluator (#345)

Features

• compile: trigger filter IR with data-driven Python evaluator (#345) (90df351)
• executor: auto-capture ADO build variables in ExecutionContext (#378) (7575218)
• safe-outputs: add unified upload-build-artifact safe output (#380) (b66037d)

Bug Fixes

• safeoutputs: enforce add-build-tag scope for build IDs > i32::MAX (#379) (c533900)
• safeoutputs: sanitize ADO-sourced title and tags in prefix-guard error messages to prevent VSO command injection (#370) (3fa067f)

v0.20.0

0.20.0 (2026-04-29)

Features

• compile: add awf_path_prepends for chroot PATH injection (#359) (4576bc3)

v0.19.0

0.19.0 (2026-04-29)

Features

• compile: add required_awf_mounts to CompilerExtension for Lean runtime (#354) (f6f437b)
• engine: update default model to claude-opus-4.7 (#355) (dff681b)

v0.18.2

0.18.2 (2026-04-28)

Bug Fixes

• compile: use workingDirectory for integrity check instead of absolute path (#346) (0ce9238)