What's Changed

• ci: stage frozen Go27 bridge authority by @intel352 in #1024
• ci: adopt frozen Go27 policy bridge by @intel352 in #1025
• test(wfctl): reuse immutable fixture builds per invocation by @intel352 in #1033
• fix(ui): pin patched source-map-js resolution by @intel352 in #1035
• ci: stage benchmark authority and patch fixture x/text by @intel352 in #1038
• ci: adopt strict benchmark collector and quiet Saga logging by @intel352 in #1039
• ci: promote the realized Go 1.27 bridge authority by @intel352 in #1040
• Stage canonical Go 1.27.2 policy authority by @intel352 in #1045
• ci: adopt staged Go1.27.2 policy compiler by @intel352 in #1046
• ci: promote realized Go1.27.2 policy authority by @intel352 in #1048
• ci: stage frozen classifier capability authority by @intel352 in #1049
• build(deps): bump github.com/santhosh-tekuri/jsonschema/v6 from 6.0.2 to 6.0.3 by @dependabot[bot] in #1028
• build(deps): bump github.com/GoCodeAlone/modular/modules/eventbus/v2 from 2.10.0 to 2.12.0 by @dependabot[bot] in #1032
• build(deps): bump the npm_and_yarn group across 1 directory with 8 updates by @dependabot[bot] in #1026
• test: compress conformance fixture archives at best speed by @intel352 in #1034
• fix(auth): enforce configured JWT issuer and audience by @intel352 in #1042
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.47.0 in the go_modules group across 1 directory by @dependabot[bot] in #1051
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.47.0 in /example in the go_modules group across 1 directory by @dependabot[bot] in #1050
• build(deps): bump github.com/alicebob/miniredis/v2 from 2.38.0 to 2.39.0 by @dependabot[bot] in #1030
• fix(ci): align example and capability fixture dependency metadata by @intel352 in #1053
• fix(ci): adopt frozen policy capability and repair fetch fixture event environment by @intel352 in #1052
• fix(ci): promote realized policy capability authority by @intel352 in #1054
• fix(ci): correct unused staged audit executable hash by @intel352 in #1055
• fix(ci): correct unused portable audit executable hash by @intel352 in #1057
• ci: adopt Kubernetes boundary audit and mutation checks by @intel352 in #1056
• fix(ci): promote accepted capability audit authority by @intel352 in #1058
• fix(wfctl): wait for valid helper PID in SIGKILL fixture by @intel352 in #1059
• ci: stage complete Go1.27.2 workflow wave by @intel352 in #1060
• fix(lsp): preserve hover Markdown under lint 2.14 by @intel352 in #1062
• ci: adopt Go 1.27.2 and verify native fixture compilers by @intel352 in #1061
• ci: promote complete Go 1.27.2 workflow wave by @intel352 in #1063
• ci: stage isolated policy Go 1.27.2 floor by @intel352 in #1064
• fix(wfctl): retain safe failure evidence for record-host tests by @intel352 in #1065
• ci: stage native test package budget context by @intel352 in #1068
• ci: validate equivalent staged native test budgets by @intel352 in #1070
• ci: adopt native test budget with preserved policy mutations by @intel352 in #1069
• fix(wfctl): preserve Docker resolver failure evidence by @intel352 in #1067
• ci: adopt staged policy Go 1.27.2 floor by @intel352 in #1066
• ci: promote realized Go policy authority floor by @intel352 in #1071
• fix(wfctl): bound Docker daemon identity requests by @intel352 in #1072
• ci: promote realized native test budget context by @intel352 in #1073
• test: make SQLite cross-context lock regression deterministic by @intel352 in #1074
• fix: update Workflow toolchains and generated runtime boundaries by @intel352 in #1022
• ci: stage matching snapshot test budget by @intel352 in #1075
• ci: match snapshot test budget to native CI by @intel352 in #1076
• ci: promote matching snapshot test budget by @intel352 in #1077
• fix: keep generated release outputs out of VCS dirtiness by @intel352 in #1078
• Add portable Workflow assistant example by @intel352 in #1083
• fix: enforce MCP tool contracts and effect annotations by @intel352 in #1084
• fix(mcp): support July 2026 while preserving legacy stdio by @intel352 in #1085

Automated pre-release snapshot built from the latest commit on main.

Commit: 4b2c11c
Build: snapshot-4b2c11cc

Warning: This is an unstable development build. Use tagged releases for production.

What's Changed

• fix: discover selected-provider IaC resources by @intel352 in #1023

Full Changelog: v0.86.1...v0.86.2

What's Changed

• feat(wfctl): bounded pipeline records and registry reports by @intel352 in #1020
• feat(iac): pass persisted state on update by @intel352 in #1021

Full Changelog: v0.86.0...v0.86.1

What's Changed

• build(deps): bump github.com/lib/pq from 1.10.9 to 1.12.3 by @dependabot[bot] in #1003
• build(deps): bump github.com/tochemey/goakt/v4 from 4.2.12 to 4.2.13 by @dependabot[bot] in #1002
• ci: remove public DigitalOcean automation by @intel352 in #1010
• build(deps): bump charm.land/lipgloss/v2 from 2.0.4 to 2.0.5 by @dependabot[bot] in #1004
• build(deps): bump charm.land/bubbles/v2 from 2.1.0 to 2.1.1 by @dependabot[bot] in #1005
• ci: stage v0.86 workflow authority by @intel352 in #1011
• ci: stage v0.86 consumer authority by @intel352 in #1012
• build(deps): bump charm.land/bubbletea/v2 from 2.0.7 to 2.0.8 by @dependabot[bot] in #1014
• build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in #1007
• build(deps-dev): bump brace-expansion from 1.1.12 to 1.1.16 in /ui in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1016
• build(deps): bump github.com/GoCodeAlone/modular/modules/cache from 1.17.0 to 1.19.0 by @dependabot[bot] in #1009
• build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 in /example in the go_modules group across 1 directory by @dependabot[bot] in #1018
• build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 in the go_modules group across 1 directory by @dependabot[bot] in #1017
• build(deps): bump github.com/tochemey/goakt/v4 from 4.2.13 to 4.3.1 by @dependabot[bot] in #1008
• build(deps): bump github.com/GoCodeAlone/modular/modules/auth from 1.17.0 to 1.19.0 by @dependabot[bot] in #1015
• feat(iac): make secret and provider-job lifecycles safe by @intel352 in #1019

Full Changelog: v0.85.4...v0.86.0

What's Changed

• Add prevalidated rolling deployment contract alias by @intel352 in #1001

Full Changelog: v0.85.3...v0.85.4

What's Changed

• fix(lint/lockio): ForStmt Post clause must not fold into releaseSeen by @intel352 in #999

Full Changelog: v0.85.2...v0.85.3

What's Changed

• chore: bump modular to v1.13.5 by @intel352 in #998

Full Changelog: v0.85.1...v0.85.2

What's Changed

• Avoid locks across persistence I/O by @intel352 in #997

Full Changelog: v0.85.0...v0.85.1

What's Changed

• docs: add wfctl repair retro by @intel352 in #995
• feat(wfctl,lint): add doctor app probe and lock-across-I/O analyzer by @intel352 in #996

Full Changelog: v0.84.6...v0.85.0