v0.65.1

What's Changed

• feat: default to stable version and resolve aliases in install-gh-aw.sh by @Copilot in #23628
• Add CI job to test install-gh-aw.sh with stable release by @Copilot in #23633
• fix: sync install.sh with install-gh-aw.sh and update test for stable version default by @Copilot in #23632
• docs: add Releases and Versioning reference page by @Copilot in #23635
• [jsweep] Clean add_reaction.cjs by @github-actions[bot] in #23639
• feat: add approval-label cookie to all workflows with min-integrity: approved by @Copilot in #23627
• Fix qmd indexing job failure due to TypeScript peer dependency conflict by @Copilot in #23645
• chore: bump @playwright/mcp 0.0.68→0.0.69 and MCP Gateway v0.2.9→v0.2.10 by @Copilot in #23644
• fix: correct YAML indentation for detection job permissions block by @Copilot in #23647
• [architecture] Update architecture diagram - 2026-03-31 by @github-actions[bot] in #23657
• Recompile workflows to sync lock files with source markdown by @Copilot in #23676
• [docs] Update Astro dependencies - 2026-03-31 by @github-actions[bot] in #23670
• [instructions] Sync github-agentic-workflows.md with release v0.65.0 by @github-actions[bot] in #23669
• [docs] Consolidate developer specs into dev.md v4.8 by @github-actions[bot] in #23671
• [community] Update community contributions in README by @github-actions[bot] in #23667
• [docs] Update glossary - daily scan by @github-actions[bot] in #23665
• [code-simplifier] refactor: simplify detection job permissions and WASM result building by @github-actions[bot] in #23651
• chore(deps): bump github.com/rhysd/actionlint from 1.7.11 to 1.7.12 by @dependabot[bot] in #23661
• fix(functional-pragmatist): replace make+len patterns to avoid CodeQL violations by @Copilot in #23685
• [dead-code] chore: remove dead functions — 7 functions removed by @github-actions[bot] in #23693
• chore: update @sentry/mcp-server to 0.31.0 by @Copilot in #23697
• chore(deps): bump @sentry/mcp-server from 0.29.0 to 0.31.0 in /.github/workflows by @dependabot[bot] in #23660
• feat: add Release Punter workflow by @Copilot in #23694
• [q] refactor(console): migrate list.go from Bubble Tea to huh Select (#23690) by @github-actions[bot] in #23700
• fix: move protected files details section inside alert block by @Copilot in #23702
• Fix engine failure message: include engine ID and use blob URL for workflow source by @Copilot in #23703
• chore: bump gh-aw-firewall (AWF) to v0.25.5 by @Copilot in #23711
• Improve test quality: scripts/lint_error_messages_test.go by @Copilot in #23706
• Skip update_cache_memory job when agent job is skipped by @Copilot in #23720
• refactor: eliminate semanticVersion duplicate struct and findGitRoot passthrough wrapper by @Copilot in #23707
• [docs] Self-healing documentation fixes from issue analysis - 2026-03-31 by @github-actions[bot] in #23728
• Remove unused integrityLevelOrder variable to fix lint by @Copilot in #23721
• fix: close @mention neutralization bypass via U+200E/200F/00AD/034F invisible chars by @Copilot in #23735

Full Changelog: v0.65.0...v0.65.1