Skip to content

release: 1.8.0-rc.1 - #76

Merged
danoszz merged 3 commits into
mainfrom
release/1.8.0-rc.1
Oct 20, 2026
Merged

danoszz merged 3 commits into
mainfrom
release/1.8.0-rc.1

Conversation

@danoszz

@danoszz danoszz commented Oct 20, 2026

Copy link
Copy Markdown
Owner

Prepares 1.8.0-rc.1. Not tagged, nothing published. Merge and tag only on the maintainer's go.

  • Version 1.8.0-rc.1 in package.json/lock, SKILL.md, plugin.json, marketplace.json, CITATION.cff and the METHODOLOGY cite block (audit: 8 files in sync).
  • CHANGELOG: [Unreleased] → [1.8.0-rc.1] - 2026-10-20, with a short note that it ships on npm next.
  • npm run audit:internal: every gate passes (1,034 tests, benchmark unchanged at P 0.864 / R 0.905, 0 third-party hosts, 716 KB packed of 781).
  • Two User-Agent tests only accepted X.Y.Z; they now accept a prerelease suffix. The code already sent penthera/1.8.0-rc.1.
  • Popular-package list refreshed: identical content, so not committed.

After merge, on the maintainer's go:

git tag v1.8.0-rc.1 <merge-commit> && git push origin v1.8.0-rc.1

publish.yml stages it on npm with --tag next (#75) and creates a prerelease GitHub release. Then approve on npmjs.com → penthera → Staged Packages with 2FA.

🤖 Generated with Claude Code

Version 1.8.0-rc.1 in every file the release checks keep in sync, the
[Unreleased] notes moved under 1.8.0-rc.1, and the regenerated internal
audit report (all gates pass). The User-Agent tests accept a prerelease
suffix, which the code already sent correctly. Not tagged.

AI-Assisted: Claude Code with Claude Opus 5.5; bumped the versions, ran the audit and fixed the two over-strict tests
Co-Authored-By: Claude Opus 5.5 <[email protected]>
@github-actions

github-actions Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

Dependency capability diff

Compared against 069f4f1db3c3a5e7d74cc39d5e103c730f2cae00: 0 added · 0 changed · 0 removed.

No package gained capabilities, and no new package can reach shell, network or install-time code.

penthera deps v1.8.0-rc.1: offline static analysis, no telemetry. Capabilities are what code can do, not a verdict.

Checked by Penthera, open-source security for the apps and AI systems you ship · https://github.com/danoszz/penthera

Updated for commit 5eb8120 · workflow run. This comment is edited in place on every push.

danoszz and others added 2 commits October 20, 2026 19:44
AI-Assisted: Claude Code with Claude Opus 5.5; reran the internal audit on the updated release branch
Co-Authored-By: Claude Opus 5.5 <[email protected]>
@danoszz
danoszz merged commit 146262a into main Oct 20, 2026
19 checks passed
@danoszz
danoszz deleted the release/1.8.0-rc.1 branch October 20, 2026 17:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant