Skip to content

chore(main): release 0.2.0#460

Closed
Aureliolo wants to merge 1 commit into
mainfrom
release-please--branches--main--components--synthorg
Closed

chore(main): release 0.2.0#460
Aureliolo wants to merge 1 commit into
mainfrom
release-please--branches--main--components--synthorg

Conversation

@Aureliolo
Copy link
Copy Markdown
Owner

🤖 I have created a release beep boop

0.2.0 (2026-03-15)

Features

  • add /get/ installation page for CLI installer (#413) (6a47e4a)
  • add /review-dep-pr skill for dependency update PR review (#315) (56f6565)
  • add approval workflow gates to TaskEngine (#387) (2db968a)
  • add autonomy levels and approval timeout policies (#42, #126) (#197) (eecc25a)
  • add CFO cost optimization service with anomaly detection, reports, and approval decisions (#186) (a7fa00b)
  • add code quality toolchain (ruff, mypy, pre-commit, dependabot) (#63) (36681a8)
  • add configurable cost tiers and subscription/quota-aware tracking (#67) (#185) (9baedfa)
  • add container packaging, Docker Compose, and CI pipeline (#269) (435bdfe), closes #267
  • add coordination error taxonomy classification pipeline (#146) (#181) (70c7480)
  • add cost-optimized, hierarchical, and auction assignment strategies (#175) (ce924fa), closes #173
  • add cross-platform Go CLI for container lifecycle management (#401) (0353d9e), closes #392
  • add design specification, license, and project setup (8669a09)
  • add env var substitution and config file auto-discovery (#77) (7f53832)
  • add explicit ScanOutcome signal to OutputScanResult (#394) (be33414), closes #284
  • add FastestStrategy routing + vendor-agnostic cleanup (#140) (09619cb), closes #139
  • add HR engine and performance tracking (#45, #47) (#193) (2d091ea)
  • add issue auto-search and resolution verification to PR review skill (#119) (deecc39)
  • add mandatory JWT + API key authentication (#256) (c279cfe)
  • add meeting scheduler, event-triggered meetings, and Go CLI lint fixes (#407) (5550fa1)
  • add Mem0 memory backend adapter (#345) (2788db8), closes #206
  • add memory retrieval, ranking, and context injection pipeline (#41) (873b0aa)
  • add pluggable MemoryBackend protocol with models, config, and events (#180) (46cfdd4)
  • add pluggable MemoryBackend protocol with models, config, and events (#32) (46cfdd4)
  • add pluggable output scan response policies (#263) (b9907e8)
  • add pluggable PersistenceBackend protocol with SQLite implementation (#36) (f753779)
  • add PR preview deployments via Cloudflare Pages (#302) (b73c45a)
  • add progressive trust and promotion/demotion subsystems (#43, #49) (3a87c08)
  • add retry handler, rate limiter, and provider resilience (#100) (b890545)
  • add SecOps security agent with rule engine, audit log, and ToolInvoker integration (#40) (83b7b6c)
  • add shared org memory and memory consolidation/archival (#125, #48) (4a0832b)
  • add static OpenAPI reference page with Scalar UI (#319) (77cdbcc)
  • centralized single-writer TaskEngine with full CRUD API (#328) (9c1a3e1)
  • default sandbox to enabled, polish CLI output, add sandbox CI build (#455) (a4869b6)
  • design unified provider interface (#86) (3e23d64)
  • expand template presets, rosters, and add inheritance (#80, #81, #84) (15a9134)
  • implement agent runtime state vs immutable config split (#115) (4cb1ca5)
  • implement AgentEngine core orchestrator (#11) (#143) (f2eb73a)
  • implement AuditRepository for security audit log persistence (#279) (94bc29f)
  • implement basic tool system (registry, invocation, results) (#15) (c51068b)
  • implement built-in file system tools (#18) (325ef98)
  • implement checkpoint recovery strategy (#367) (f886838)
  • implement communication foundation — message bus, dispatcher, and messenger (#157) (8e71bfd)
  • implement company template system with 7 built-in presets (#85) (cbf1496)
  • implement conflict resolution protocol (#122) (#166) (e03f9f2)
  • implement core entity and role system models (#69) (acf9801)
  • implement crash recovery with fail-and-reassign strategy (#149) (e6e91ed)
  • implement engine extensions — Plan-and-Execute loop and call categorization (#134, #135) (#159) (9b2699f)
  • implement enterprise logging system with structlog (#73) (2f787e5)
  • implement graceful shutdown with cooperative timeout strategy (#130) (6592515)
  • implement hierarchical delegation and loop prevention (#12, #17) (6be60b6)
  • implement LiteLLM driver and provider registry (#88) (ae3f18b), closes #4
  • implement LLM decomposition strategy and workspace isolation (#174) (aa0eefe)
  • implement meeting protocol system (#123) (ee7caca)
  • implement message and communication domain models (#74) (560a5d2)
  • implement model routing engine (#99) (d3c250b)
  • implement parallel agent execution (#22) (#161) (65940b3)
  • implement per-call cost tracking service (#7) (#102) (c4f1f1c)
  • implement personality injection and system prompt construction (#105) (934dd85)
  • implement single-task execution lifecycle (#21) (#144) (c7e64e4)
  • implement subprocess sandbox for tool execution isolation (#131) (#153) (3c8394e)
  • implement task assignment subsystem with pluggable strategies (#172) (c7f1b26), closes #26 #30
  • implement task decomposition and routing engine (#14) (9c7fb52)
  • implement Task, Project, Artifact, Budget, and Cost domain models (#71) (81eabf1)
  • implement tool permission checking (#16) (833c190)
  • implement YAML config loader with Pydantic validation (#59) (ff3a2ba)
  • implement YAML config loader with Pydantic validation (#75) (ff3a2ba)
  • incremental AgentEngine → TaskEngine status sync (#331) (7a68d34), closes #323
  • initialize project with uv, hatchling, and src layout (39005f9)
  • initialize project with uv, hatchling, and src layout (#62) (39005f9)
  • Litestar REST API, WebSocket feed, and approval queue (M6) (#189) (29fcd08)
  • make TokenUsage.total_tokens a computed field (#118) (c0bab18), closes #109
  • parallel tool execution in ToolInvoker.invoke_all (#137) (58517ee)
  • testing framework, CI pipeline, and M0 gap fixes (#64) (f581749)
  • web dashboard pages — views, components, tests, and review fixes (#354) (b165ec4)
  • web dashboard with Vue 3 + PrimeVue + Tailwind CSS (#347) (06416b1)
  • wire all modules into observability system (#97) (f7a0617)
  • wire MultiAgentCoordinator into runtime (#396) (7a9e516)

Bug Fixes

  • address Greptile post-merge review findings from PRs #170-#175 (#176) (c5ca929)
  • address post-merge review feedback from PRs #164-#167 (#170) (3bf897a), closes #169
  • attach cosign signatures and provenance bundle to release assets (#438) (f191a4d)
  • CLA signatures branch + declutter repo root (#409) (cabe953)
  • correct API reference link path in rest-api.md (#320) (3d08f92)
  • correct deploy-pages SHA and improve preview cleanup reliability (#304) (584d64a)
  • correct Release Please branch name in release workflow (#410) (515d816)
  • create git tag explicitly for draft releases (#432) (1f5120e)
  • docker healthcheck, CI optimization, and container hardening (#436) (4d32bca)
  • enforce strict mypy on test files (#89) (aeeff8c)
  • ensure security headers on all HTTP responses (#437) (837f2fc)
  • export .intoto.jsonl provenance for OpenSSF Scorecard (#456) (2feed09)
  • harden API key hashing with HMAC-SHA256 and clean up legacy changelog (#292) (5e85353)
  • harden coordination pipeline with validators, logging, and fail-fast (#333) (2f10d49), closes #205
  • harden Docker sandbox, MCP bridge, and code runner (#50, #53) (d5e1b6e)
  • harden git tools security + code quality improvements (#150) (000a325)
  • harden subprocess cleanup, env filtering, and shutdown resilience (#155) (d1fe1fb)
  • incorporate post-merge feedback + pre-PR review fixes (#164) (c02832a)
  • make install scripts usable immediately without terminal restart (#433) (b45533c)
  • migrate pids_limit to deploy.resources.limits.pids (#439) (66b94fd)
  • pre-PR review fixes for post-merge findings (#183) (26b3108)
  • replace slsa-github-generator with attest-build-provenance, fix DAST (#424) (eeaadff)
  • repo-wide security hardening from ZAP, Scorecard, and CodeQL audit (#357) (27eb288)
  • resolve circular imports, bump litellm, fix release tag format (#286) (a6659b5)
  • resolve CodeQL path-injection alerts in Go CLI (#412) (f41bf16)
  • restore golangci-lint to v2.11.3 (broken by replace_all in #425) (#427) (8ba9375)
  • strengthen immutability for BaseTool schema and ToolInvoker boundaries (#117) (7e5e861)
  • upgrade goreleaser to v2.14.3 (v2.11.3 never existed) (#425) (df6650d)
  • upgrade upload-pages-artifact to v4 and add zizmor workflow linting (#299) (2eac571)
  • use Cloudflare Pages API default per_page for pagination (#305) (9fec245)
  • use cosign --bundle flag for checksums signing (#443) (19735b9)
  • use draft releases to support immutable release policy (#429) (a6c7444)

Performance

  • harden non-inferable principle implementation (#195) (02b5f4e), closes #188

Refactoring

  • adopt NotBlankStr across all models (#108) (#120) (ef89b90)
  • extract _SpendingTotals base class from spending summary models (#111) (2f39c1b)
  • harden BudgetEnforcer with error handling, validation extraction, and review fixes (#182) (c107bf9)
  • harden personality profiles, department validation, and template rendering (#158) (10b2299)
  • pre-PR review improvements for ExecutionLoop + ReAct loop (#124) (8dfb3c0)
  • redesign release notes layout (#434) (239aaf7)
  • rename package from ai_company to synthorg (#422) (df27c6e), closes #398
  • split events.py into per-domain event modules (#136) (e9cba89)

Documentation

  • add ADR-001 memory layer evaluation and selection (#178) (db3026f), closes #39
  • add agent scaling research findings to DESIGN_SPEC (#145) (57e487b)
  • add CLAUDE.md, contributing guide, and dev documentation (#65) (55c1025), closes #54
  • add crash recovery, sandboxing, analytics, and testing decisions (#127) (5c11595)
  • address external review feedback with MVP scope and new protocols (#128) (3b30b9a)
  • expand design spec with pluggable strategy protocols (#121) (6832db6)
  • finalize 23 design decisions (ADR-002) (#190) (8c39742)
  • remove milestone references and rebrand to SynthOrg (#289) (57a03e0)
  • set up documentation site, release CI, and sandbox hardening (#298) (0dec9da)
  • split DESIGN_SPEC.md into 7 focused design pages (#308) (9ea0788)
  • update project docs for M2.5 conventions and add docs-consistency review agent (#114) (99766ee)

Tests

  • add e2e single agent integration tests (#24) (#156) (f566fb4)
  • add fuzz and property-based testing across all layers (#421) (115a742)
  • add provider adapter integration tests (#90) (40a61f4)

CI/CD

  • add npm and pre-commit ecosystems to Dependabot (#369) (54e5fe7)
  • add pip-audit, hadolint, OSSF Scorecard, ZAP DAST, and pre-push hooks (#350) (2802d20)
  • add Release Please for automated versioning and GitHub Releases (#278) (a488758)
  • add SLSA L3 provenance for CLI binaries and container images (#423) (d3dc75d)
  • add workflow_dispatch trigger to PR Preview for Dependabot PRs (#326) (4c7b6d9)
  • bump actions/checkout from 4 to 6 (#95) (1897247)
  • bump actions/setup-node from 4.4.0 to 6.3.0 (#311) (3c99d6f)
  • bump actions/setup-node from 4.4.0 to 6.3.0 (#360) (2db5105)
  • bump actions/setup-python from 5.6.0 to 6.2.0 (#312) (3273553)
  • bump actions/upload-artifact from 4 to 7 (#94) (27b1517)
  • bump anchore/scan-action from 6.5.1 to 7.3.2 (#271) (80a1c15)
  • bump astral-sh/setup-uv from 6.0.1 to 7.4.0 (#310) (b63cee7)
  • bump astral-sh/setup-uv from 7.4.0 to 7.5.0 in the minor-and-patch group (#335) (98dd8ca)
  • bump docker/build-push-action from 6.19.2 to 7.0.0 (#273) (dd0219e)
  • bump docker/login-action from 3.7.0 to 4.0.0 (#272) (33d6238)
  • bump docker/metadata-action from 5.10.0 to 6.0.0 (#270) (baee04e)
  • bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#274) (5fc06f7)
  • bump github/codeql-action from 3.32.6 to 4.32.6 (#361) (ce766e8)
  • bump sigstore/cosign-installer from 3.9.1 to 4.1.0 (#275) (29dd16c)
  • bump the major group with 4 updates (#405) (20c7a04)
  • group major dependabot bumps per ecosystem (#388) (3c43aef)
  • harden CI/CD pipeline (#92) (ce4693c)
  • split vulnerability scans into critical-fail and high-warn tiers (#277) (aba48af)

Maintenance


This PR was generated with Release Please. See documentation.

@Aureliolo Aureliolo added the autorelease: pending Release-please pending-release marker label Mar 15, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Mar 15, 2026

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (2)
  • chore(main): release ai-company
  • chore(main): release

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: ca0aecaa-4246-4b4c-9d70-9c54e8f6bfca

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch release-please--branches--main--components--synthorg
✨ Simplify code
  • Create PR with simplified code
  • Commit simplified code in branch release-please--branches--main--components--synthorg
📝 Coding Plan
  • Generate coding plan for human review comments

Comment @coderabbitai help to get the list of available commands and usage tips.

@gemini-code-assist
Copy link
Copy Markdown
Contributor

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request represents a significant milestone, officially releasing version 0.2.0 of the project. It integrates a broad spectrum of development efforts, ranging from core architectural components like agent engines and communication protocols to user-facing elements such as a web dashboard and CLI tools. The release also emphasizes security, stability, and maintainability through numerous bug fixes, code hardening, and CI/CD pipeline enhancements, ensuring a more robust and feature-rich platform.

Highlights

  • Major Release: This pull request marks the official release of version 0.2.0, consolidating a substantial number of new features, bug fixes, and improvements across the project. The version number rollback from 0.2.5 to 0.2.0 suggests a re-baselining or correction in the release numbering strategy.
  • Extensive Feature Development: Version 0.2.0 introduces a wide array of new capabilities, including a cross-platform Go CLI, a web dashboard with Vue 3, enhanced memory and persistence backends, advanced agent orchestration (TaskEngine, AgentEngine), cost optimization services, and comprehensive security features like JWT/API key authentication and a SecOps agent.
  • Robust Bug Fixes and Hardening: Numerous bug fixes have been implemented, addressing issues such as release asset signing, API reference links, CI/CD workflow corrections, and security vulnerabilities identified through audits (ZAP, Scorecard, CodeQL). Significant hardening efforts were applied to Docker sandboxes, coordination pipelines, and git tools.
  • Infrastructure and Code Quality Improvements: The release includes substantial refactoring, such as renaming the package to 'synthorg', adopting NotBlankStr across models, and splitting event modules. CI/CD pipelines were enhanced with new tools (pip-audit, hadolint, OSSF Scorecard) and updated actions, alongside extensive documentation updates and testing framework additions (fuzz, property-based, e2e integration tests).
Changelog
  • .github/.release-please-manifest.json
    • Updated the project version from 0.2.5 to 0.2.0.
  • .github/CHANGELOG.md
    • Added a comprehensive changelog entry for version 0.2.0, detailing new features, bug fixes, performance improvements, refactorings, documentation updates, CI/CD changes, and maintenance tasks.
    • Retained the previous 0.2.5 changelog entry, indicating a potential re-ordering or correction in release history.
  • pyproject.toml
    • Updated the project version in tool.commitizen from 0.2.5 to 0.2.0.
  • src/synthorg/init.py
    • Updated the __version__ string from 0.2.5 to 0.2.0.
Activity
  • The pull request was created by Aureliolo, indicating an automated release process.
  • The PR description explicitly states it was generated by Release Please, a tool for automated versioning and GitHub Releases.
  • The commit history within the PR body lists numerous individual commits categorized under Features, Bug Fixes, Performance, Refactoring, Documentation, Tests, CI/CD, and Maintenance, all contributing to the 0.2.0 release.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@Aureliolo Aureliolo temporarily deployed to cloudflare-preview March 15, 2026 18:39 — with GitHub Actions Inactive
Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request appears to be for a new release, but it downgrades the project version from 0.2.5 to 0.2.0. This is a critical issue that violates semantic versioning principles and can cause significant problems for users and dependency management tools. All new releases should have a version number that is greater than the previous one. Given the extensive changes, a minor version bump to 0.3.0 seems appropriate. I've left comments on all files where the version is being changed to reflect this. Additionally, the changelog contains a comparison link that is incorrect for a new release due to the version downgrade.

@@ -1,3 +1,3 @@
{
".": "0.2.5"
".": "0.2.0"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

The version is being downgraded from 0.2.5 to 0.2.0. This is likely a mistake and should be corrected to a higher version number to avoid issues with release automation and package managers. Given the scope of changes, 0.3.0 would be a suitable version.

Suggested change
".": "0.2.0"
".": "0.3.0"

Comment thread .github/CHANGELOG.md
@@ -1,5 +1,246 @@
# Changelog

## [0.2.0](https://github.com/Aureliolo/synthorg/compare/v0.2.5...v0.2.0) (2026-03-15)
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

The new version 0.2.0 is lower than the previous version 0.2.5. This is a version downgrade and violates semantic versioning. It can cause significant issues with package managers and user expectations. Given the large number of features and changes in this release, a minor version bump to 0.3.0 would be more appropriate.

Additionally, the comparison link compare/v0.2.5...v0.2.0 is incorrect for a release. It should compare the previous version tag to the new version tag, for example .../compare/v0.2.5...v0.3.0.

Comment thread pyproject.toml
[tool.commitizen]
name = "cz_conventional_commits"
version = "0.2.5" # x-release-please-version
version = "0.2.0" # x-release-please-version
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

The version is being downgraded from 0.2.5 to 0.2.0. New releases should have an incremented version number to follow semantic versioning. Considering the number of new features, 0.3.0 would be a more appropriate version.

Suggested change
version = "0.2.0" # x-release-please-version
version = "0.3.0" # x-release-please-version

Comment thread src/synthorg/__init__.py
"""SynthOrg - Framework for building synthetic organizations."""

__version__ = "0.2.5" # x-release-please-version
__version__ = "0.2.0" # x-release-please-version
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

The version is being downgraded from 0.2.5 to 0.2.0. This is against semantic versioning principles and can cause problems for users of this package. The version should be incremented for a new release, for instance to 0.3.0 given the scope of changes.

Suggested change
__version__ = "0.2.0" # x-release-please-version
__version__ = "0.3.0" # x-release-please-version

@codecov
Copy link
Copy Markdown

codecov Bot commented Mar 15, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.67%. Comparing base (24a0d7a) to head (e5c4585).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #460   +/-   ##
=======================================
  Coverage   93.67%   93.67%           
=======================================
  Files         469      469           
  Lines       22219    22219           
  Branches     2143     2143           
=======================================
  Hits        20814    20814           
  Misses       1095     1095           
  Partials      310      310           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@Aureliolo
Copy link
Copy Markdown
Owner Author

Closing — Release Please was computing 0.2.0 due to stale version history from the v0.2.4 recovery. Fix: added last-release-sha to config pointing to v0.2.5.

@Aureliolo Aureliolo closed this Mar 15, 2026
@Aureliolo Aureliolo temporarily deployed to cloudflare-preview March 15, 2026 18:42 — with GitHub Actions Inactive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment