@unbrained/pm-cli 2026.10.2 → 2026.10.3

package/.claude-plugin/marketplace.json

@@ -5,13 +5,13 @@
     "url": "https://github.com/unbraind/pm-cli"
   },
   "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-  "version": "2026.10.2",
+  "version": "2026.10.3",
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 32 MCP tools, 14 workflow skills with slash invocations, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.10.2",
+      "version": "2026.10.3",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 2026.10.3 - 2026-10-03
+
+### Fixed
+
+- GH-1354: Linked-test snapshot mode drops nested package dependencies and breaks monorepo acceptance ([pm-5iwfkj](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-5iwfkj.toon))
+
+### Security
+
+- Scorecard alert 29: patch Axios in the CodSpeed development dependency graph ([pm-r61juc](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-r61juc.toon))
+- Remove unpatched braces recursion vulnerability from file matching ([pm-fnx3np](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-fnx3np.toon))
+
+### Other
+
+- Refresh eligible MCP Apps 2.0.3 SDK type contracts ([pm-iktual](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-iktual.toon))
+
 ## 2026.10.2 - 2026-10-02
 
 ### Fixed

package/dist/cli-bundle/bundle-manifest.json

@@ -1,157 +1,157 @@
 {
   "schema_version": 1,
-  "generation": "9ebc00b21b28c20faed9794bd2e3827304378ad96b7da05a4770b9bc782ed1ae",
+  "generation": "9ec6cca6dd66229bd86259e38d01603641d9bf63fc58ca17804b9d0c080e7b3e",
   "files": [
     {
-      "path": "chunks/chunk-7FUEQOYG.js",
-      "sha256": "92479a42816897eed6eb51cf248102de604e75589017d6775a82b5517b08c350"
+      "path": "chunks/chunk-3AF2R3Y6.js",
+      "sha256": "95df070a4ed0240d3cf390d7509752c33546154c552887b7fedee80e88a825de"
     },
     {
-      "path": "chunks/chunk-7FUEQOYG.js.map",
-      "sha256": "15e812737eff8caa722e0c3c9dca2af60cbc1975626ace416651a73bab61617c"
+      "path": "chunks/chunk-3AF2R3Y6.js.map",
+      "sha256": "c213cb6680ca55981b30d0dec6401d770b3cac40964784918e840700471e7b9c"
     },
     {
-      "path": "chunks/chunk-7NL3A2BY.js",
-      "sha256": "cd445b7b840684cde78b934bb2a206f4cd869f74827e0e5a7811f3b7f60945aa"
+      "path": "chunks/chunk-44UGMMQ6.js",
+      "sha256": "42b1d4fe255834b5804fff65730b24e6556d5f12bc6e61d7b17a3c4a0e1716a0"
     },
     {
-      "path": "chunks/chunk-7NL3A2BY.js.map",
-      "sha256": "5359cc076347c8aecc46389acfdcbf59975023dcddf1541e841de0a89b9c97b6"
+      "path": "chunks/chunk-44UGMMQ6.js.map",
+      "sha256": "297d305295eb05f2d7e8dd7512686e7e82d0cc6042ff0e6933aba590fe18bdd3"
     },
     {
-      "path": "chunks/chunk-CZLAWXDR.js",
-      "sha256": "0896c3f2e53a9872aecf62a78a251c5e8ec464f4f1fd92ca7f0aa7927138be9b"
+      "path": "chunks/chunk-5XKF5SQV.js",
+      "sha256": "bec8fba16f338379abfbd7bb2f7b5db978942d5debd92c0e3da6a9b99e29b827"
     },
     {
-      "path": "chunks/chunk-CZLAWXDR.js.map",
-      "sha256": "8cd5ac3baf78de52045227b33680e156243802965d3bbd0480d89729ce21b007"
+      "path": "chunks/chunk-5XKF5SQV.js.map",
+      "sha256": "b99b6cbc471dceb69941c27a9bf2108a6315e4eef849c5216dac8ed0f7d46570"
     },
     {
-      "path": "chunks/chunk-DEZPZOQ7.js",
-      "sha256": "ef11ddab9ecc9533cac75ccc8ca41058a59382dfbe3262033fa21c7264d73b0d"
+      "path": "chunks/chunk-6ST3SCQ6.js",
+      "sha256": "43cfe9112650ca3562d51cc40ae346224832079360e7639bf3a379db9be39c2c"
     },
     {
-      "path": "chunks/chunk-DEZPZOQ7.js.map",
-      "sha256": "ed562b0bba7ee7214e56ac7f728054b3496bec4597c94a4eb7b4179e6f5cb1c9"
+      "path": "chunks/chunk-6ST3SCQ6.js.map",
+      "sha256": "3ef6aaaab9d223b065b678a7eb29cc8fb1a241156372d5809b00812dd5a84afb"
     },
     {
-      "path": "chunks/chunk-HY6M34B4.js",
-      "sha256": "dc633f00791f3ac5f4007a92f8a7f39e2ed714590c12bf32e0383e3d271ab2d4"
+      "path": "chunks/chunk-6Z4IV2MC.js",
+      "sha256": "c9f7c5e1858289a5bb813ce380b7e797b480cac29f8e2354e2734f20b79659f0"
     },
     {
-      "path": "chunks/chunk-HY6M34B4.js.map",
-      "sha256": "ea4bcf1d916e4d177cb24bfe04c6b4e4b4cffc96ea984df4bc8f44e3c9d33ad5"
+      "path": "chunks/chunk-6Z4IV2MC.js.map",
+      "sha256": "8cd5ac3baf78de52045227b33680e156243802965d3bbd0480d89729ce21b007"
     },
     {
-      "path": "chunks/chunk-MTJMOI4I.js",
-      "sha256": "1455569e648e925adb434abaf1fb07433393e1a1d6243c0fb3c9315100889d22"
+      "path": "chunks/chunk-DEZPZOQ7.js",
+      "sha256": "ef11ddab9ecc9533cac75ccc8ca41058a59382dfbe3262033fa21c7264d73b0d"
     },
     {
-      "path": "chunks/chunk-MTJMOI4I.js.map",
-      "sha256": "a696112b08740febb3e945bae7efbcd5b27640da75be30c37d01ea4910ead053"
+      "path": "chunks/chunk-DEZPZOQ7.js.map",
+      "sha256": "ed562b0bba7ee7214e56ac7f728054b3496bec4597c94a4eb7b4179e6f5cb1c9"
     },
     {
-      "path": "chunks/chunk-R4TUD355.js",
-      "sha256": "563482d57538087fab50aed2fa55019b6d90058ff9780c82052cdd94948a2136"
+      "path": "chunks/chunk-FW5LJXQY.js",
+      "sha256": "2021f2bc7f500b3dc47751823f119ab3d8405c485044f6810a30bdde3c6e284c"
     },
     {
-      "path": "chunks/chunk-R4TUD355.js.map",
-      "sha256": "c213cb6680ca55981b30d0dec6401d770b3cac40964784918e840700471e7b9c"
+      "path": "chunks/chunk-FW5LJXQY.js.map",
+      "sha256": "b10059e7f44ca506bbf6107e5d1f15d7029939d205b9a84332de98804ad695e5"
     },
     {
-      "path": "chunks/chunk-R7ULWMBG.js",
-      "sha256": "0fbfdf410823781ad466f902703edb8660566befecd90e716916583bffa2e66a"
+      "path": "chunks/chunk-H2DZW6I6.js",
+      "sha256": "a0103d3c655888fc3b3f92e9d6acd7d5c22b154e9bb7566d9a940a3fc527d0e8"
     },
     {
-      "path": "chunks/chunk-R7ULWMBG.js.map",
-      "sha256": "ea8cbea45182297293ba6b7f18dc6b7503de12e529b4f9257783441a18e97be9"
+      "path": "chunks/chunk-H2DZW6I6.js.map",
+      "sha256": "15e812737eff8caa722e0c3c9dca2af60cbc1975626ace416651a73bab61617c"
     },
     {
-      "path": "chunks/chunk-SGFQQXFD.js",
-      "sha256": "27cfd4152f894bbd21c5d4f1d8ba40ea447d11983ec3b09a578d8bbc787522d7"
+      "path": "chunks/chunk-H7CXQBGQ.js",
+      "sha256": "a290f4c003d6380d0a7e8ee82c3e9bdd0c0e3a5f1ab847fe0241a188cf811221"
     },
     {
-      "path": "chunks/chunk-SGFQQXFD.js.map",
-      "sha256": "ed562b0bba7ee7214e56ac7f728054b3496bec4597c94a4eb7b4179e6f5cb1c9"
+      "path": "chunks/chunk-H7CXQBGQ.js.map",
+      "sha256": "5359cc076347c8aecc46389acfdcbf59975023dcddf1541e841de0a89b9c97b6"
     },
     {
-      "path": "chunks/chunk-SV7CZEVV.js",
-      "sha256": "9dcfcf611a0fe50d65086252632e6bf1e6965e7824f22b42d6d69d53766c6fed"
+      "path": "chunks/chunk-KP7NBQK3.js",
+      "sha256": "b995df617fc43c4c81f7802621b6b0be321efd619a6101b2c9739ae62fbaec99"
     },
     {
-      "path": "chunks/chunk-SV7CZEVV.js.map",
-      "sha256": "4284b482efd497941b0ff1e3585ce905b160b74b8e6b7120f296eb7958659a92"
+      "path": "chunks/chunk-KP7NBQK3.js.map",
+      "sha256": "22bf58cfe55d8c18e0b805da592f79a4048466d5e57fd329cf12573a25ea353e"
     },
     {
-      "path": "chunks/chunk-TRYXVQ7W.js",
-      "sha256": "e321f93adfe4cb445ae46ed01595a19808fa9687738e2b67c9cddecbafab25c7"
+      "path": "chunks/chunk-MKXBCBAN.js",
+      "sha256": "b539fa841af195ae8957d4eed043d27815bf0fd2775bf368eb0b71003137149b"
     },
     {
-      "path": "chunks/chunk-TRYXVQ7W.js.map",
-      "sha256": "297d305295eb05f2d7e8dd7512686e7e82d0cc6042ff0e6933aba590fe18bdd3"
+      "path": "chunks/chunk-MKXBCBAN.js.map",
+      "sha256": "4284b482efd497941b0ff1e3585ce905b160b74b8e6b7120f296eb7958659a92"
     },
     {
-      "path": "chunks/chunk-WP6NRH72.js",
-      "sha256": "02d317df66efffdd7956941a0116cdba301de04219ea13aa42f4a972b8983198"
+      "path": "chunks/chunk-QPKQKSQU.js",
+      "sha256": "ed67c1281f4f0f8b002164ab2a0c9ac8d3f06082037f02df424f07d0f1704123"
     },
     {
-      "path": "chunks/chunk-WP6NRH72.js.map",
-      "sha256": "3ef6aaaab9d223b065b678a7eb29cc8fb1a241156372d5809b00812dd5a84afb"
+      "path": "chunks/chunk-QPKQKSQU.js.map",
+      "sha256": "a61e129bf21643e95384d58cd627b317c31a55b94c95cfd076394b601f9aac88"
     },
     {
-      "path": "chunks/chunk-XOUBIF6Z.js",
-      "sha256": "808056615ee833b2df1e50f461961c5dc5167e64955f905c0625a57e47d4c473"
+      "path": "chunks/chunk-SGFQQXFD.js",
+      "sha256": "27cfd4152f894bbd21c5d4f1d8ba40ea447d11983ec3b09a578d8bbc787522d7"
     },
     {
-      "path": "chunks/chunk-XOUBIF6Z.js.map",
-      "sha256": "b99b6cbc471dceb69941c27a9bf2108a6315e4eef849c5216dac8ed0f7d46570"
+      "path": "chunks/chunk-SGFQQXFD.js.map",
+      "sha256": "ed562b0bba7ee7214e56ac7f728054b3496bec4597c94a4eb7b4179e6f5cb1c9"
     },
     {
-      "path": "chunks/chunk-Z2GYDSAO.js",
-      "sha256": "c58a31ec9c8af2753ba58e5b8207310bcdd1fb4b750cc4ef596908aee5d66fc8"
+      "path": "chunks/chunk-YCBGZF3T.js",
+      "sha256": "716e911cbabf0e6ba7dcd36e8f99b0c1145ecf5d8427ee0473e12f9f9e5d112f"
     },
     {
-      "path": "chunks/chunk-Z2GYDSAO.js.map",
-      "sha256": "39c9d1a7bb6d6eea2a60ce3818d45b2c5038c87081022c66685ba0d2d4595e95"
+      "path": "chunks/chunk-YCBGZF3T.js.map",
+      "sha256": "ea4bcf1d916e4d177cb24bfe04c6b4e4b4cffc96ea984df4bc8f44e3c9d33ad5"
     },
     {
-      "path": "chunks/chunk-ZI7F3FVE.js",
-      "sha256": "f58c987bb105e81ad70af3c071725f9b152327a9114bd32067b12cae660da7eb"
+      "path": "chunks/chunk-YDWKGUQU.js",
+      "sha256": "fbe38a25a16a807738cb70b38661a3c276bc2447930e617788010f814d29699f"
     },
     {
-      "path": "chunks/chunk-ZI7F3FVE.js.map",
-      "sha256": "22bf58cfe55d8c18e0b805da592f79a4048466d5e57fd329cf12573a25ea353e"
+      "path": "chunks/chunk-YDWKGUQU.js.map",
+      "sha256": "39c9d1a7bb6d6eea2a60ce3818d45b2c5038c87081022c66685ba0d2d4595e95"
     },
     {
-      "path": "chunks/register-list-query-R4PHNB7W.js",
-      "sha256": "472e2c8b3b3baae23154015dbe0cc6ac11fa0ae2f7a8e8b9071aa82cab290c03"
+      "path": "chunks/register-list-query-DYCGUQEW.js",
+      "sha256": "47f0dccf8bf266771f7fcd7993b841da8371fe42defc63ed5626d3e112f405c4"
     },
     {
-      "path": "chunks/register-list-query-R4PHNB7W.js.map",
+      "path": "chunks/register-list-query-DYCGUQEW.js.map",
       "sha256": "7c1dd3a5a9437bfffd7dcd00776150c854f9e6a6fae37dc42bc6fb8fa18b9f3f"
     },
     {
-      "path": "chunks/register-mutation-PDDAUDYV.js",
-      "sha256": "83ee66005c0250622495ebd8d2ce9e91337c45e525269c66af1d2bed566ab778"
+      "path": "chunks/register-mutation-5PT3NW3A.js",
+      "sha256": "b247a735577c66b94311a4f05da00c72ac370dcb6c38a5ca48a0b2c3fc127ce6"
     },
     {
-      "path": "chunks/register-mutation-PDDAUDYV.js.map",
+      "path": "chunks/register-mutation-5PT3NW3A.js.map",
       "sha256": "a03480c00e7529a953ca654d6f73b3ac4f0456967cdfc382b12deca78775ca75"
     },
     {
-      "path": "chunks/register-operations-A5HJT46K.js",
-      "sha256": "6fd01b3955f55db21d813dcf9695f08adc7f9a38e1f49ae6d52b205cc8898ce5"
+      "path": "chunks/register-operations-QDDQOAAV.js",
+      "sha256": "ed8dcd636239561f6d9cf957ad30eabdc8656a7d2887f542ad41a8c8d6e437c2"
     },
     {
-      "path": "chunks/register-operations-A5HJT46K.js.map",
+      "path": "chunks/register-operations-QDDQOAAV.js.map",
       "sha256": "2dd98228c8c79f3846db025459067402853372730234f536f8b2f49f74da7863"
     },
     {
-      "path": "chunks/register-setup-EZ2F25JI.js",
-      "sha256": "8607dddc04540609f1ca591c18d70b63c69510830d7ed364f935c6e9eaa1d4e5"
+      "path": "chunks/register-setup-BBX67YMA.js",
+      "sha256": "52cd9cdc91367bc53ce2c2a099455761c4dd337f4eb69a6d52079cb79db1eb61"
     },
     {
-      "path": "chunks/register-setup-EZ2F25JI.js.map",
+      "path": "chunks/register-setup-BBX67YMA.js.map",
       "sha256": "dc4517127745f292c96fd6eb0ee07f5ba1898bbd2a52266987c5609dc6f473cf"
     },
     {
@@ -171,12 +171,12 @@
       "sha256": "974f8e877cfa8adb7e05770e5573548ae5f041e06cdf871f34b1fa2f4e63fd3e"
     },
     {
-      "path": "focused-chunks/chunk-BLCTBSGT.js",
-      "sha256": "09a2b5bb31dc6f94f4a2d7fc0d28cb268750f608eeca8ad934cb77e8ea65584a"
+      "path": "focused-chunks/chunk-73DA7ISY.js",
+      "sha256": "ebb3b3de7d4ba5ed08feb182818610da94190244d3cad14b6a5e3aedb65d0eda"
     },
     {
-      "path": "focused-chunks/chunk-BLCTBSGT.js.map",
-      "sha256": "1ea26c3f9605a5b397c59e598be40a69aef4c52d82f626672cf5a682df774f4a"
+      "path": "focused-chunks/chunk-73DA7ISY.js.map",
+      "sha256": "7446a8cce160cbca05bd1db0666dd0a49a04c512b2e94c1b002145361a2cf3a1"
     },
     {
       "path": "focused-chunks/chunk-DBD4W4QP.js",
@@ -210,14 +210,6 @@
       "path": "focused-chunks/chunk-FKK2HI3S.js.map",
       "sha256": "bb288fb1ddb4f79bb931b6f84e4a17997b6478effc660f5a935b962bf2dcebc6"
     },
-    {
-      "path": "focused-chunks/chunk-GBD4EN6S.js",
-      "sha256": "1dd21bb4be58642fb9a86f90c17797d68762e8d4064db258ea6a039f00bee084"
-    },
-    {
-      "path": "focused-chunks/chunk-GBD4EN6S.js.map",
-      "sha256": "303c1fc754503903186f59e887f64ea137a3c3021cd16dbda8e535c9b3bfffc0"
-    },
     {
       "path": "focused-chunks/chunk-GMYUNHST.js",
       "sha256": "34d608bff4d6228d3cbe88f2bf6d64bee2685f48d635304b762565deffd9ae22"
@@ -235,12 +227,12 @@
       "sha256": "2536922ae21f29b6d28033a35d9aba3d921ee26867d733ba0a76857c97366cd9"
     },
     {
-      "path": "focused-chunks/chunk-IR4UXLRP.js",
-      "sha256": "d496ea73cb48dfb4d5a0cceecb2453cb65da9e80cfbac90fdde2a923f2ae86c2"
+      "path": "focused-chunks/chunk-HIA2ZF64.js",
+      "sha256": "6cccaa190123bf684ea6b195761ffe2e6908d360a1df4fb9835a9b5d550d3ce4"
     },
     {
-      "path": "focused-chunks/chunk-IR4UXLRP.js.map",
-      "sha256": "1b83141b00d979bc3336abc5d48d3d9d680a91e009cb1f67ddf796bd67395390"
+      "path": "focused-chunks/chunk-HIA2ZF64.js.map",
+      "sha256": "303c1fc754503903186f59e887f64ea137a3c3021cd16dbda8e535c9b3bfffc0"
     },
     {
       "path": "focused-chunks/chunk-UTRSM3ZK.js",
@@ -258,6 +250,14 @@
       "path": "focused-chunks/chunk-VVWYI2X7.js.map",
       "sha256": "1f8226414288b36631c2e11132ced8869e79ae68a5932a18cab9b744b4e2478b"
     },
+    {
+      "path": "focused-chunks/chunk-WAJNX4RN.js",
+      "sha256": "12c30e2f46a7dbee3563094d3f5ba6d4d4f560554322c63cac9b539aa5d7972e"
+    },
+    {
+      "path": "focused-chunks/chunk-WAJNX4RN.js.map",
+      "sha256": "8d862647bb814ff90c862ed7e34b3c9a0b528499e0c0105340515b5483ac7cd9"
+    },
     {
       "path": "focused-chunks/chunk-WCY6HRZO.js",
       "sha256": "2c2ad9a97cdcedfb05381de3b3bdbbeb2eed179155f6c1292a19dd48f6d29f2e"
@@ -292,7 +292,7 @@
     },
     {
       "path": "main.js",
-      "sha256": "616080ed324c49a090247d0a67a47b9202843ed810c152b576d386a7160e3ab4"
+      "sha256": "73015236f7a65721374d1fd88458e3b312476afb249ecc8539928d9b36071173"
     },
     {
       "path": "main.js.map",
@@ -316,15 +316,15 @@
     },
     {
       "path": "sdk-core.js",
-      "sha256": "4d27b1c90a3780df98a620f33d33876eb0f151f220d52dda435fc04786e484c0"
+      "sha256": "9e2220381049de695b6288b640d9b23fac89399f98ac367a57cbb2c20ef3dc30"
     },
     {
       "path": "sdk-core.js.map",
-      "sha256": "2064e129b1bf38d01bef43ecab388f05cf581bfc240b7047fa166ddf6e22d004"
+      "sha256": "26ed54fbfffe326ff569971108fceba0914f2c3f8ee5f09a316d386f1b1dde87"
     },
     {
       "path": "sdk-governance.js",
-      "sha256": "cda314b406af258773715c3c31a5ee4c9d32cb3ff89e6b0e47c2d4451f6b7077"
+      "sha256": "e8cd97145db2b7460b1f94f7e5deb9ac1e9f1301787fc50b71621a72e717f42c"
     },
     {
       "path": "sdk-governance.js.map",
@@ -340,15 +340,15 @@
     },
     {
       "path": "sdk-merge.js",
-      "sha256": "c7ec3b9c04ea9c286e67d4280a1f2e48a9c49198a61c1beec2da44220d583ba1"
+      "sha256": "9f3b16991b3c1e9860be44ceb0861688344c6b9f5c66480d4ec0961b4487ad24"
     },
     {
       "path": "sdk-merge.js.map",
-      "sha256": "2907fa083728bd9538c7e3d086c320b2604f459508bd707f454105dbc9a61665"
+      "sha256": "de07025938d703daae11fdf9a8a6de094921182afde24196dd79d75d88737eb8"
     },
     {
       "path": "sdk-query.js",
-      "sha256": "077d01b5c736424a045ffdc95b229f10da1972e83839c90726152c50868274ff"
+      "sha256": "9f11c378446b148db0b09728d2c3e3fcd26be6f11b330eddc0f2cc8078171236"
     },
     {
       "path": "sdk-query.js.map",
@@ -356,7 +356,7 @@
     },
     {
       "path": "sdk-runtime.js",
-      "sha256": "279e81b108b1b7e739057d19b3d6dedde2b2274b1a38cf9e21b5ec293624a906"
+      "sha256": "f59ca0afd5ec521b85b9a47eb0acc55548724599aa2b02fee5cf1d9772ebd5d3"
     },
     {
       "path": "sdk-runtime.js.map",
@@ -364,7 +364,7 @@
     },
     {
       "path": "sdk-testing.js",
-      "sha256": "fafc52d45c4e48c8e4e3cafc8dc22d4add8b89144cff881f9fc853b33222132f"
+      "sha256": "e8f632c73bffe27b38a129874fcaa146494605e09e25a0479b27ac3eff1f8955"
     },
     {
       "path": "sdk-testing.js.map",
@@ -372,7 +372,7 @@
     },
     {
       "path": "sdk.js",
-      "sha256": "cc79b0cffb056a93002562d0450a8493adfe6a44be9424c9c759ce34e1faa1f6"
+      "sha256": "2af313d0fb30e0a3ad700c10b6d006ee9e20f8fa16e61f27f1c0b2afce2273eb"
     },
     {
       "path": "sdk.js.map",