Release 0.9.3

See CHANGELOG.md for the full list of user-facing changes.

v0.9.2

ADO AAD bearer-token auth, Governance Guide, single-authority Merge Gate.
See CHANGELOG.md for full notes.

Release v0.9.1

Release v0.9.0

Release v0.8.12

v0.8.11 — security fix, Windows compat, scope-aware hooks

Security:
- Reject symlinked primitive files to prevent traversal attacks (#596)

Fixed (14 fixes):
- Hook deployment scope-awareness (#565, #566)
- Windows CP950/CP936 encoding crashes (#591)
- PowerShell 5.1 Join-Path compatibility (#593)
- Marketplace GITHUB_HOST for GHE users (#589)
- compilation.exclude primitive discovery leakage (#477)
- Script runner false-positive runtime detection (#563)
- Missing applyTo warning across all compile modes (#449)
- Remote default branch detection (#574)
- Duplicate skill name warnings (#545)
- auto_create directory guard (#576)
- deps update -g scope passthrough (#562)

chore: bump version to 0.8.10 (#560)

Co-authored-by: Copilot <[email protected]>