v1.0.30

What's Changed

• fix: parse ALL --allowed-tools flags, not just the first one by @AlexanderBartash in #801
• docs: clarify that Claude does not auto-create PRs by default by @ashwin-ant in #824
• fix: add checkHumanActor to agent mode by @ashwin-ant in #826
• chore: comment out release-base-action job in release workflow by @ashwin-ant in #833

New Contributors

• @AlexanderBartash made their first contribution in #801

Full Changelog: v1...v1.0.30

v1.0.29

What's Changed

• [Security] Fix HIGH vulnerability: CVE-2025-66414 by @orbisai0security in #792
• fix: use original title from webhook payload instead of fetched title by @ashwin-ant in #793
• feat: add path validation for commit_files MCP tool by @ddworken in #796
• feat: custom branch name templates by @dylancdavis in #571
• fix: add missing import and update tests for branch template feature by @ashwin-ant in #799

New Contributors

• @orbisai0security made their first contribution in #792
• @dylancdavis made their first contribution in #571

Full Changelog: v1...v1.0.29

v1.0.28

What's Changed

• fix: update broken link in cloud-providers.md by @ashwin-ant in #758
• chore: remove unused ci yaml file by @kiwamizamurai in #763
• feat: add instant "Fix this" links to PR code reviews by @aiddun in #773
• feat: add ssh_signing_key input for SSH commit signing by @ashwin-ant in #784
• feat: send user request as separate content block for slash command support by @ashwin-ant in #785
• feat: support local plugin marketplace paths by @gor-st in #761
• fix: prevent orphaned installer processes from blocking retries by @ashwin-ant in #790
• fix: set CLAUDE_CODE_ENTRYPOINT for SDK path to match CLI path by @ashwin-ant in #791

New Contributors

• @kiwamizamurai made their first contribution in #763
• @aiddun made their first contribution in #773

Full Changelog: v1...v1.0.28

v1.0.27

Full Changelog: v1...v1.0.27

v1.0.26

What's Changed

• fix: respect user's --setting-sources in claude_args by @ashwin-ant in #750
• fix: set GH_TOKEN alongside GITHUB_TOKEN for gh CLI precedence by @ashwin-ant in #752

Full Changelog: v1...v1.0.26

v1.0.25

What's Changed

• chore: update model to claude-opus-4-5 in workflow by @ashwin-ant in #747
• fix: merge multiple --mcp-config flags and support --allowed-tools parsing by @ashwin-ant in #748

Full Changelog: v1...v1.0.25

v1.0.24

What's Changed

• Fix command injection vulnerability in branch setup by @bogini in #736
• feat: Make Agent SDK the default execution path by @ashwin-ant in #738
• feat: add session_id output to enable resuming conversations by @gor-st in #739

New Contributors

• @gor-st made their first contribution in #739

Full Changelog: v1...v1.0.24

v1.0.23

What's Changed

• feat: add Agent SDK support with USE_AGENT_SDK feature flag by @ashwin-ant in #698
• fix: commentBody may be null by @plaflamme in #706
• feat: add simplified prompt option via USE_SIMPLE_PROMPT env var by @ashwin-ant in #718
• fix: accumulate multiple --allowedTools flags for Agent SDK by @ashwin-ant in #719
• Fix SDK path: add settingSources and default system prompt by @ashwin-ant in #726
• fix: resolve zizmor template injection vulnerabilities by @ant-soumitr in #729

New Contributors

• @plaflamme made their first contribution in #706
• @ant-soumitr made their first contribution in #729

Full Changelog: v1...v1.0.23

v1.0.22

What's Changed

• fix: prevent race condition on issue/PR body edits by @ashwin-ant in #710

Full Changelog: v1...v1.0.22

v1.0.21

What's Changed

• Remove experimental allowed domains feature by @ashwin-ant in #697
• fix: use cross-platform timeout for Claude Code installation by @ashwin-ant in #700

Full Changelog: v1...v1.0.21