v2.10.2

Maintenance release with CI and metadata fixes.

Added the required author.url field to plugin.json for skill validation compliance. Switched org-internal reusable workflow references from SHA-pinned to branch-based (@main), since SHA-pinning internal workflows causes unnecessary churn from Renovate without meaningful security benefit.

Full Changelog: v2.10.1...v2.10.2

v2.10.1

What's Changed

• fix: pin reusable workflow reference to commit SHA by @CybotTM in #43

Full Changelog: v2.10.0...v2.10.1

v2.10.0

Full Changelog: v2.9.0...v2.10.0

v2.9.0

What's Changed

• fix: harden GitHub Actions against supply chain attacks by @CybotTM in #40
• feat: add org-level security and reusable workflow security references by @CybotTM in #41

Full Changelog: v2.8.0...v2.9.0

v2.8.0

What's Changed

• docs: prefer GitHub native attestations over slsa-verifier by @CybotTM in #38
• fix: GH-6 accept Renovate as alternative to Dependabot by @CybotTM in #39

Full Changelog: v2.7.1...v2.8.0

v2.7.1

What's Changed

• feat(docs): document composite action sub-action allow-list gotcha by @CybotTM in #37

Full Changelog: v2.7.0...v2.7.1

v2.7.0

What's Changed

• chore: Configure Renovate by @renovate[bot] in #32
• feat: add GraphQL --input pattern for special characters by @CybotTM in #34

New Contributors

• @renovate[bot] made their first contribution in #32

Full Changelog: v2.6.2...v2.7.0

v2.6.2

What's Changed

• feat: add release announcement discussion to release-labeler by @CybotTM in #23
• chore: replace generic emails with GitHub references by @CybotTM in #24
• fix: remove unsupported 'support' field from plugin.json by @CybotTM in #25
• feat: add actionlint workflow linter by @CybotTM in #26
• chore: add .gitignore by @CybotTM in #27
• fix: standardize frontmatter and composer.json paths by @CybotTM in #28
• fix: standardize plugin.json author URL to company website by @CybotTM in #29
• refactor: trim SKILL.md for token efficiency by @CybotTM in #30
• feat: add skill validation CI job by @CybotTM in #31

Full Changelog: v2.6.1...v2.6.2

v2.6.1

Full Changelog: v2.6.0...v2.6.1

v2.6.0

What's Changed

• feat: add solo-maintainer auto-approve as first-class pattern
• fix: move permissions to job-level per least-privilege principle
• docs: add tag-version validation reference
• fix: use portable sed and add error handling per review
• docs: add composer audit ignore and batch PR merge gotchas