pm-context 2026.8.28 → 2026.8.31

package/CHANGELOG.md

@@ -1,9 +1,26 @@
 # Changelog
 
+## 2026.8.31 - 2026-08-31
+
+### Fixed
+
+- Remove the unused changelog verifier test import ([pm-context-91b3](https://github.com/unbraind/pm-context/blob/main/.agents/pm/issues/pm-context-91b3.toon))
+- Keep CodeQL actions versioned and updated as one unit ([pm-context-zwf1](https://github.com/unbraind/pm-context/blob/main/.agents/pm/issues/pm-context-zwf1.toon))
+- Pin pm-changelog 2026.8.30 before the next release ([pm-context-4w80](https://github.com/unbraind/pm-context/blob/main/.agents/pm/issues/pm-context-4w80.toon))
+- Rebase the changelog date verifier onto the current release workflow ([pm-context-o76d](https://github.com/unbraind/pm-context/blob/main/.agents/pm/issues/pm-context-o76d.toon))
+
+## 2026.8.29 - 2026-08-29
+
+### Fixed
+
+- Preserve append-only provenance history during review repair ([pm-context-9xfx](https://github.com/unbraind/pm-context/blob/main/.agents/pm/issues/pm-context-9xfx.toon))
+- Make the affinity tiebreak test use one shared instant ([pm-context-hxj5](https://github.com/unbraind/pm-context/blob/main/.agents/pm/issues/pm-context-hxj5.toon))
+
 ## 2026.8.28 - 2026-08-28
 
 ### Fixed
 
+- Refuse the unattested publish fallback after provenance failure ([pm-context-fuhi](https://github.com/unbraind/pm-context/blob/main/.agents/pm/issues/pm-context-fuhi.toon))
 - changelog scripts read the pm workspace with default budgets instead of canonical complete reads ([pm-context-8th2](https://github.com/unbraind/pm-context/blob/main/.agents/pm/issues/pm-context-8th2.toon))
 
 ### Security

package/dist/index.js

@@ -1389,7 +1389,7 @@ function setupCommands(api) {
 const defineExtension = (module) => module;
 export default defineExtension({
     name: "pm-context",
-    version: "2026.8.28",
+    version: "2026.8.31",
     description: "Generate deterministic pm context packs for agent handoffs, reviews, and status briefs",
     activate(api) {
         setupCommands(api);

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-context",
-  "version": "2026.8.28",
+  "version": "2026.8.31",
   "description": "Generate deterministic pm context packs for agent handoffs, reviews, and status briefs",
   "author": "@unbraind",
   "pm_min_version": "2026.8.15",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-context",
-  "version": "2026.8.28",
+  "version": "2026.8.31",
   "description": "Generate deterministic pm context packs for agent handoffs, reviews, and status briefs",
   "type": "module",
   "main": "dist/index.js",
@@ -20,16 +20,18 @@
     "typecheck": "tsc --noEmit",
     "check": "npm run typecheck",
     "verify:release-workflow": "node .agents/pm/verify-release-yaml.mjs",
+    "verify:release-publish-attestation": "node scripts/verify-release-publish-attestation.ts",
     "audit:prod": "node --input-type=module -e \"import { spawnSync } from 'node:child_process'; import { devNull } from 'node:os'; const env = { ...process.env, npm_config_userconfig: devNull, NPM_CONFIG_USERCONFIG: devNull }; for (const key of Object.keys(env)) if (key.toLowerCase() === 'npm_config_allow_scripts') delete env[key]; const win = process.platform === 'win32'; const r = spawnSync(win ? 'npm.cmd' : 'npm', ['audit', '--omit=dev', '--ignore-scripts'], { stdio: 'inherit', env, shell: win }); process.exit(r.status ?? 1);\"",
     "pack:dry-run": "npm pack --dry-run",
-    "changelog:full": "pm-changelog --pm-root .agents/pm --mode replace --output CHANGELOG.md --all-release-tags --release-version-from-package --item-url-base https://github.com/unbraind/pm-context/blob/main/.agents/pm --respect-item-release --pm-bin ./node_modules/.bin/pm --pm-arg=--output-budget --pm-arg=unbounded --pm-arg=--output-limit --pm-arg=unbounded",
+    "changelog:full": "pm-changelog --pm-root .agents/pm --mode replace --output CHANGELOG.md --all-release-tags --release-version-from-package --date-from-version --item-url-base https://github.com/unbraind/pm-context/blob/main/.agents/pm --respect-item-release --pm-bin ./node_modules/.bin/pm --pm-arg=--output-budget --pm-arg=unbounded --pm-arg=--output-limit --pm-arg=unbounded",
     "changelog:check": "npm run changelog:full -- --check",
-    "release:check": "npm run typecheck && npm run verify:release-workflow && npm run docstring && npm run build && npm run coverage && npm run audit:prod && npm run pack:dry-run",
+    "release:check": "npm run typecheck && npm run verify:release-workflow && npm run docstring && npm run build && npm run coverage && npm run audit:prod && npm run pack:dry-run && npm run verify:release-publish-attestation && npm run verify:release-changelog-date",
     "prepublishOnly": "npm run release:check",
     "prepare": "node scripts/prepare-merge-driver.mjs",
     "merge:install": "pm merge install",
     "coverage": "npm run build && npm run build:test && node scripts/coverage-gate.ts",
-    "docstring": "node scripts/docstring-gate.ts"
+    "docstring": "node scripts/docstring-gate.ts",
+    "verify:release-changelog-date": "node scripts/verify-release-changelog-date.ts"
   },
   "keywords": [
     "pm-cli",
@@ -53,9 +55,9 @@
   },
   "devDependencies": {
     "@types/node": "^26.1.1",
-    "@unbrained/pm-cli": "2026.8.24",
+    "@unbrained/pm-cli": "2026.8.27",
     "c8": "^12.0.0",
-    "pm-changelog": "^2026.8.7",
+    "pm-changelog": "2026.8.30",
     "pm-ops": "2026.8.17",
     "typescript": "^7.0.2",
     "yaml": "2.9.0"
@@ -82,7 +84,8 @@
     "sources": [
       ".",
       "scripts/coverage-gate.ts",
-      "scripts/docstring-gate.ts"
+      "scripts/docstring-gate.ts",
+      "scripts/verify-release-publish-attestation.ts"
     ],
     "tests": [
       "test/*.test.ts"