Skip to content

chore(release): cut 0.9.4 #978

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
danielmeppiel merged 4 commits into from
Apr 27, 2026
Merged

chore(release): cut 0.9.4 #978

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
1abe3ff
chore(release): cut 0.9.4
danielmeppiel Apr 27, 2026
16d7b4c
chore(changelog): tighten 0.9.4 entries (so-what for developers)
danielmeppiel Apr 27, 2026
e58a846
chore(changelog): add #660 install.sh air-gapped entry to 0.9.4
danielmeppiel Apr 27, 2026
0268181
Merge branch 'main' into release/0.9.4
danielmeppiel Apr 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 12 additions & 2 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,14 +8,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [Unreleased]

## [0.9.4] - 2026-04-27

### Added

- **Day-0 install parity with `npx skills add`**: every public repo that installs cleanly with `npx skills add owner/repo` now installs cleanly with `apm install owner/repo`. APM recognises the `skills/<name>/SKILL.md` convention used by `vercel-labs/agent-skills`, `xixu-me/skills`, `larksuite/cli`, and the rest of the agentskills.io ecosystem as a first-class package shape (`SKILL_BUNDLE`). `apm.yml` is OPTIONAL for these packages -- adding it is strictly additive (lockfile + pinning) and never regresses installability. Multi-skill bundles install all skills by default; `--skill <NAME>` (repeatable) selects a subset. The selection is **persisted** in `apm.yml` (`skills:` field) and `apm.lock.yaml` (`skill_subset`), so bare `apm install` is deterministic. Use `--skill '*'` to reset to all skills. `apm audit --ci` detects drift between manifest and lockfile skill subsets.
- **Day-0 install parity with `npx skills add`**: every public repo that installs cleanly with `npx skills add owner/repo` now installs cleanly with `apm install owner/repo`. APM recognises the `skills/<name>/SKILL.md` convention used by `vercel-labs/agent-skills`, `xixu-me/skills`, `larksuite/cli`, and the rest of the agentskills.io ecosystem as a first-class package shape (`SKILL_BUNDLE`). `apm.yml` is OPTIONAL for these packages -- adding it is strictly additive (lockfile + pinning) and never regresses installability. Multi-skill bundles install all skills by default; `--skill <NAME>` (repeatable) selects a subset. The selection is **persisted** in `apm.yml` (`skills:` field) and `apm.lock.yaml` (`skill_subset`), so bare `apm install` is deterministic. Use `--skill '*'` to reset to all skills. `apm audit --ci` detects drift between manifest and lockfile skill subsets. (#974)
Copy link

Copilot AI Apr 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 0.9.4 changelog bullet for #974 is extremely long and reads more like release notes than a Keep-a-Changelog entry. Consider trimming it down to the key user-visible points so the changelog stays scannable and consistent with the "concise, one line per PR" convention used elsewhere in this file.

Suggested change
- **Day-0 install parity with `npx skills add`**: every public repo that installs cleanly with `npx skills add owner/repo` now installs cleanly with `apm install owner/repo`. APM recognises the `skills/<name>/SKILL.md` convention used by `vercel-labs/agent-skills`, `xixu-me/skills`, `larksuite/cli`, and the rest of the agentskills.io ecosystem as a first-class package shape (`SKILL_BUNDLE`). `apm.yml` is OPTIONAL for these packages -- adding it is strictly additive (lockfile + pinning) and never regresses installability. Multi-skill bundles install all skills by default; `--skill <NAME>` (repeatable) selects a subset. The selection is **persisted** in `apm.yml` (`skills:` field) and `apm.lock.yaml` (`skill_subset`), so bare `apm install` is deterministic. Use `--skill '*'` to reset to all skills. `apm audit --ci` detects drift between manifest and lockfile skill subsets. (#974)
- `apm install` now supports the same public skill repos as `npx skills add`, including `SKILL.md` bundles and persistent `--skill` subset selection for deterministic installs. (#974)

Copilot uses AI. Check for mistakes.
- Automated `apm-triage-panel` workflow: runs the triage panel skill on a daily fuzzy schedule (oldest-first, max 10 issues per sweep) and on demand via the `status/needs-triage` label, treating every decision as an agentic proposal pending maintainer ratification. Recompiles all gh-aw workflows on v0.68.3. (#954)

### Changed

- `python-architect` agent: documents the GitHub-render trap where `classDiagram` rejects inline `:::cssClass` shorthand on relationship lines (only valid as standalone `class Name:::cssClass`), preventing future panel reviews from emitting unrenderable mermaid. (#970)

### Fixed

- Fixed TLS validation failure behind corporate TLS-intercepting proxies and firewalls: `install/validation.py` now uses `requests` (honouring `REQUESTS_CA_BUNDLE`) instead of stdlib `urllib`, and surfaces a single CA-trust hint at default verbosity instead of a misleading auth error. (#911)
- Triage Panel themed issues now reach the PGS project board: the workflow dispatches `project-sync` per themed issue via the new `safe-outputs.dispatch-workflow` channel, working around GitHub's rule that `GITHUB_TOKEN`-driven label changes never fire downstream `issues: labeled` workflows. Without this, sweeps applied `theme/*` labels but the project-sync trigger silently no-op'd, leaving the board empty.
- Triage Panel themed issues now reach the PGS project board: the workflow dispatches `project-sync` per themed issue via the new `safe-outputs.dispatch-workflow` channel, working around GitHub's rule that `GITHUB_TOKEN`-driven label changes never fire downstream `issues: labeled` workflows. Without this, sweeps applied `theme/*` labels but the project-sync trigger silently no-op'd, leaving the board empty. (#971)
- CLI consistency cleanup from the 2026-04-24 audit (#903): `apm experimental <subcommand> --help` now shows subcommand-specific help; help text and short flags aligned across commands. (#910)
- Issue templates use the canonical APM label taxonomy instead of deprecated/wrong labels; the daily Triage Panel sweep handles classification from there. (#958)
- Docs site auto-deploys after bot-cut releases: `docs.yml` is now a reusable workflow invoked from the release job, working around GitHub's rule that `release: published` events from `GITHUB_TOKEN`-created releases never fire downstream workflows. Restores docs auto-deploy that has been silently broken since v0.9.3. (#953)

## [0.9.3] - 2026-04-26

Expand Down
2 changes: 1 addition & 1 deletion pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"

[project]
name = "apm-cli"
version = "0.9.3"
version = "0.9.4"
Copy link

Copilot AI Apr 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pyproject.toml bumps the project version to 0.9.4, but uv.lock still contains an editable apm-cli entry at version 0.9.3. Please regenerate/update uv.lock so the lockfile metadata stays consistent with the project version (this repo appears to track the project itself inside uv.lock).

Copilot uses AI. Check for mistakes.
description = "MCP configuration tool"
readme = "README.md"
requires-python = ">=3.10"
Expand Down
Loading