Skip to content

chore(main): release 0.2.0#471

Closed
Aureliolo wants to merge 1 commit into
mainfrom
release-please--branches--main--components--synthorg
Closed

chore(main): release 0.2.0#471
Aureliolo wants to merge 1 commit into
mainfrom
release-please--branches--main--components--synthorg

Conversation

@Aureliolo
Copy link
Copy Markdown
Owner

🤖 I have created a release beep boop

0.2.0 (2026-03-15)

Features

  • add /get/ installation page for CLI installer (#413) (6a47e4a)
  • add /review-dep-pr skill for dependency update PR review (#315) (56f6565)
  • add approval workflow gates to TaskEngine (#387) (2db968a)
  • add autonomy levels and approval timeout policies (#42, #126) (#197) (eecc25a)
  • add CFO cost optimization service with anomaly detection, reports, and approval decisions (#186) (a7fa00b)
  • add code quality toolchain (ruff, mypy, pre-commit, dependabot) (#63) (36681a8)
  • add configurable cost tiers and subscription/quota-aware tracking (#67) (#185) (9baedfa)
  • add container packaging, Docker Compose, and CI pipeline (#269) (435bdfe), closes #267
  • add coordination error taxonomy classification pipeline (#146) (#181) (70c7480)
  • add cost-optimized, hierarchical, and auction assignment strategies (#175) (ce924fa), closes #173
  • add cross-platform Go CLI for container lifecycle management (#401) (0353d9e), closes #392
  • add design specification, license, and project setup (8669a09)
  • add env var substitution and config file auto-discovery (#77) (7f53832)
  • add explicit ScanOutcome signal to OutputScanResult (#394) (be33414), closes #284
  • add FastestStrategy routing + vendor-agnostic cleanup (#140) (09619cb), closes #139
  • add HR engine and performance tracking (#45, #47) (#193) (2d091ea)
  • add intra-loop stagnation detector (#415) (#458) (8e9f34f)
  • add issue auto-search and resolution verification to PR review skill (#119) (deecc39)
  • add mandatory JWT + API key authentication (#256) (c279cfe)
  • add meeting scheduler, event-triggered meetings, and Go CLI lint fixes (#407) (5550fa1)
  • add Mem0 memory backend adapter (#345) (2788db8), closes #206
  • add memory retrieval, ranking, and context injection pipeline (#41) (873b0aa)
  • add pluggable MemoryBackend protocol with models, config, and events (#180) (46cfdd4)
  • add pluggable MemoryBackend protocol with models, config, and events (#32) (46cfdd4)
  • add pluggable output scan response policies (#263) (b9907e8)
  • add pluggable PersistenceBackend protocol with SQLite implementation (#36) (f753779)
  • add PR preview deployments via Cloudflare Pages (#302) (b73c45a)
  • add progressive trust and promotion/demotion subsystems (#43, #49) (3a87c08)
  • add retry handler, rate limiter, and provider resilience (#100) (b890545)
  • add RFC 9457 structured error responses (Phase 1) (#457) (6612a99), closes #419
  • add SecOps security agent with rule engine, audit log, and ToolInvoker integration (#40) (83b7b6c)
  • add shared org memory and memory consolidation/archival (#125, #48) (4a0832b)
  • add static OpenAPI reference page with Scalar UI (#319) (77cdbcc)
  • centralized single-writer TaskEngine with full CRUD API (#328) (9c1a3e1)
  • default sandbox to enabled, polish CLI output, add sandbox CI build (#455) (a4869b6)
  • design unified provider interface (#86) (3e23d64)
  • expand template presets, rosters, and add inheritance (#80, #81, #84) (15a9134)
  • implement agent runtime state vs immutable config split (#115) (4cb1ca5)
  • implement AgentEngine core orchestrator (#11) (#143) (f2eb73a)
  • implement AgentStateRepository for runtime state persistence (#459) (5009da7)
  • implement AuditRepository for security audit log persistence (#279) (94bc29f)
  • implement basic tool system (registry, invocation, results) (#15) (c51068b)
  • implement built-in file system tools (#18) (325ef98)
  • implement checkpoint recovery strategy (#367) (f886838)
  • implement communication foundation — message bus, dispatcher, and messenger (#157) (8e71bfd)
  • implement company template system with 7 built-in presets (#85) (cbf1496)
  • implement conflict resolution protocol (#122) (#166) (e03f9f2)
  • implement core entity and role system models (#69) (acf9801)
  • implement crash recovery with fail-and-reassign strategy (#149) (e6e91ed)
  • implement engine extensions — Plan-and-Execute loop and call categorization (#134, #135) (#159) (9b2699f)
  • implement enterprise logging system with structlog (#73) (2f787e5)
  • implement graceful shutdown with cooperative timeout strategy (#130) (6592515)
  • implement hierarchical delegation and loop prevention (#12, #17) (6be60b6)
  • implement LiteLLM driver and provider registry (#88) (ae3f18b), closes #4
  • implement LLM decomposition strategy and workspace isolation (#174) (aa0eefe)
  • implement meeting protocol system (#123) (ee7caca)
  • implement message and communication domain models (#74) (560a5d2)
  • implement model routing engine (#99) (d3c250b)
  • implement parallel agent execution (#22) (#161) (65940b3)
  • implement per-call cost tracking service (#7) (#102) (c4f1f1c)
  • implement personality injection and system prompt construction (#105) (934dd85)
  • implement single-task execution lifecycle (#21) (#144) (c7e64e4)
  • implement subprocess sandbox for tool execution isolation (#131) (#153) (3c8394e)
  • implement task assignment subsystem with pluggable strategies (#172) (c7f1b26), closes #26 #30
  • implement task decomposition and routing engine (#14) (9c7fb52)
  • implement Task, Project, Artifact, Budget, and Cost domain models (#71) (81eabf1)
  • implement tool permission checking (#16) (833c190)
  • implement YAML config loader with Pydantic validation (#59) (ff3a2ba)
  • implement YAML config loader with Pydantic validation (#75) (ff3a2ba)
  • incremental AgentEngine → TaskEngine status sync (#331) (7a68d34), closes #323
  • initialize project with uv, hatchling, and src layout (39005f9)
  • initialize project with uv, hatchling, and src layout (#62) (39005f9)
  • Litestar REST API, WebSocket feed, and approval queue (M6) (#189) (29fcd08)
  • make TokenUsage.total_tokens a computed field (#118) (c0bab18), closes #109
  • parallel tool execution in ToolInvoker.invoke_all (#137) (58517ee)
  • site: add SEO essentials, contact form, early-access banner (#467) (11b645e), closes #466
  • testing framework, CI pipeline, and M0 gap fixes (#64) (f581749)
  • web dashboard pages — views, components, tests, and review fixes (#354) (b165ec4)
  • web dashboard with Vue 3 + PrimeVue + Tailwind CSS (#347) (06416b1)
  • wire all modules into observability system (#97) (f7a0617)
  • wire MultiAgentCoordinator into runtime (#396) (7a9e516)

Bug Fixes

  • address Greptile post-merge review findings from PRs #170-#175 (#176) (c5ca929)
  • address post-merge review feedback from PRs #164-#167 (#170) (3bf897a), closes #169
  • attach cosign signatures and provenance bundle to release assets (#438) (f191a4d)
  • CLA signatures branch + declutter repo root (#409) (cabe953)
  • CLI improvements — config show, completion install, enhanced doctor, Sigstore verification (#465) (9e08cec)
  • correct API reference link path in rest-api.md (#320) (3d08f92)
  • correct deploy-pages SHA and improve preview cleanup reliability (#304) (584d64a)
  • correct Release Please branch name in release workflow (#410) (515d816)
  • create git tag explicitly for draft releases (#432) (1f5120e)
  • docker healthcheck, CI optimization, and container hardening (#436) (4d32bca)
  • enforce strict mypy on test files (#89) (aeeff8c)
  • ensure security headers on all HTTP responses (#437) (837f2fc)
  • export .intoto.jsonl provenance for OpenSSF Scorecard (#456) (2feed09)
  • harden API key hashing with HMAC-SHA256 and clean up legacy changelog (#292) (5e85353)
  • harden coordination pipeline with validators, logging, and fail-fast (#333) (2f10d49), closes #205
  • harden Docker sandbox, MCP bridge, and code runner (#50, #53) (d5e1b6e)
  • harden git tools security + code quality improvements (#150) (000a325)
  • harden subprocess cleanup, env filtering, and shutdown resilience (#155) (d1fe1fb)
  • incorporate post-merge feedback + pre-PR review fixes (#164) (c02832a)
  • make install scripts usable immediately without terminal restart (#433) (b45533c)
  • migrate pids_limit to deploy.resources.limits.pids (#439) (66b94fd)
  • pre-PR review fixes for post-merge findings (#183) (26b3108)
  • replace slsa-github-generator with attest-build-provenance, fix DAST (#424) (eeaadff)
  • repo-wide security hardening from ZAP, Scorecard, and CodeQL audit (#357) (27eb288)
  • resolve circular imports, bump litellm, fix release tag format (#286) (a6659b5)
  • resolve CodeQL path-injection alerts in Go CLI (#412) (f41bf16)
  • restore golangci-lint to v2.11.3 (broken by replace_all in #425) (#427) (8ba9375)
  • site: add reCAPTCHA v3, main landmark, and docs sitemap (#469) (fa6d35c)
  • strengthen immutability for BaseTool schema and ToolInvoker boundaries (#117) (7e5e861)
  • upgrade goreleaser to v2.14.3 (v2.11.3 never existed) (#425) (df6650d)
  • upgrade upload-pages-artifact to v4 and add zizmor workflow linting (#299) (2eac571)
  • use Cloudflare Pages API default per_page for pagination (#305) (9fec245)
  • use cosign --bundle flag for checksums signing (#443) (19735b9)
  • use draft releases to support immutable release policy (#429) (a6c7444)
  • use force-tag-creation instead of manual tag creation hack (#462) (2338004)

Performance

  • harden non-inferable principle implementation (#195) (02b5f4e), closes #188

Refactoring

  • adopt NotBlankStr across all models (#108) (#120) (ef89b90)
  • extract _SpendingTotals base class from spending summary models (#111) (2f39c1b)
  • harden BudgetEnforcer with error handling, validation extraction, and review fixes (#182) (c107bf9)
  • harden personality profiles, department validation, and template rendering (#158) (10b2299)
  • pre-PR review improvements for ExecutionLoop + ReAct loop (#124) (8dfb3c0)
  • redesign release notes layout (#434) (239aaf7)
  • rename package from ai_company to synthorg (#422) (df27c6e), closes #398
  • split events.py into per-domain event modules (#136) (e9cba89)

Documentation

  • add ADR-001 memory layer evaluation and selection (#178) (db3026f), closes #39
  • add agent scaling research findings to DESIGN_SPEC (#145) (57e487b)
  • add CLAUDE.md, contributing guide, and dev documentation (#65) (55c1025), closes #54
  • add crash recovery, sandboxing, analytics, and testing decisions (#127) (5c11595)
  • address external review feedback with MVP scope and new protocols (#128) (3b30b9a)
  • expand design spec with pluggable strategy protocols (#121) (6832db6)
  • finalize 23 design decisions (ADR-002) (#190) (8c39742)
  • remove milestone references and rebrand to SynthOrg (#289) (57a03e0)
  • set up documentation site, release CI, and sandbox hardening (#298) (0dec9da)
  • split DESIGN_SPEC.md into 7 focused design pages (#308) (9ea0788)
  • update project docs for M2.5 conventions and add docs-consistency review agent (#114) (99766ee)

Tests

  • add e2e single agent integration tests (#24) (#156) (f566fb4)
  • add fuzz and property-based testing across all layers (#421) (115a742)
  • add provider adapter integration tests (#90) (40a61f4)

CI/CD

  • add npm and pre-commit ecosystems to Dependabot (#369) (54e5fe7)
  • add pip-audit, hadolint, OSSF Scorecard, ZAP DAST, and pre-push hooks (#350) (2802d20)
  • add Release Please for automated versioning and GitHub Releases (#278) (a488758)
  • add SLSA L3 provenance for CLI binaries and container images (#423) (d3dc75d)
  • add workflow_dispatch trigger to PR Preview for Dependabot PRs (#326) (4c7b6d9)
  • bump actions/checkout from 4 to 6 (#95) (1897247)
  • bump actions/setup-node from 4.4.0 to 6.3.0 (#311) (3c99d6f)
  • bump actions/setup-node from 4.4.0 to 6.3.0 (#360) (2db5105)
  • bump actions/setup-python from 5.6.0 to 6.2.0 (#312) (3273553)
  • bump actions/upload-artifact from 4 to 7 (#94) (27b1517)
  • bump anchore/scan-action from 6.5.1 to 7.3.2 (#271) (80a1c15)
  • bump astral-sh/setup-uv from 6.0.1 to 7.4.0 (#310) (b63cee7)
  • bump astral-sh/setup-uv from 7.4.0 to 7.5.0 in the minor-and-patch group (#335) (98dd8ca)
  • bump docker/build-push-action from 6.19.2 to 7.0.0 (#273) (dd0219e)
  • bump docker/login-action from 3.7.0 to 4.0.0 (#272) (33d6238)
  • bump docker/metadata-action from 5.10.0 to 6.0.0 (#270) (baee04e)
  • bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#274) (5fc06f7)
  • bump github/codeql-action from 3.32.6 to 4.32.6 (#361) (ce766e8)
  • bump sigstore/cosign-installer from 3.9.1 to 4.1.0 (#275) (29dd16c)
  • bump the major group with 4 updates (#405) (20c7a04)
  • group major dependabot bumps per ecosystem (#388) (3c43aef)
  • harden CI/CD pipeline (#92) (ce4693c)
  • split vulnerability scans into critical-fail and high-warn tiers (#277) (aba48af)

Maintenance


This PR was generated with Release Please. See documentation.

@Aureliolo Aureliolo added the autorelease: pending Release-please pending-release marker label Mar 15, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@gemini-code-assist
Copy link
Copy Markdown
Contributor

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request officially marks the release of version 0.2.0 for the SynthOrg project. It consolidates a wide array of developments, including significant new features, critical bug fixes, and general improvements across the codebase and infrastructure. This release aims to enhance the project's capabilities, stability, and overall developer experience.

Highlights

  • Major Version Release: Version 0.2.0 has been released, incorporating a substantial collection of new features, bug fixes, and various improvements.
  • Comprehensive Changelog: The release includes extensive updates across features, bug fixes, performance enhancements, refactorings, documentation, CI/CD, and maintenance tasks.
  • Automated Release Process: This release was generated automatically using Release Please, streamlining the versioning and changelog generation process.
Changelog
Activity
  • This pull request was automatically generated by Release Please.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Mar 15, 2026

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (2)
  • chore(main): release ai-company
  • chore(main): release

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 3879be87-4e6a-434f-9f55-80f0d6719f92

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch release-please--branches--main--components--synthorg
✨ Simplify code
  • Create PR with simplified code
  • Commit simplified code in branch release-please--branches--main--components--synthorg
📝 Coding Plan
  • Generate coding plan for human review comments

Comment @coderabbitai help to get the list of available commands and usage tips.

@Aureliolo Aureliolo temporarily deployed to cloudflare-preview March 15, 2026 22:17 — with GitHub Actions Inactive
Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request, generated by Release Please, prepares for version 0.2.0. However, it appears to be downgrading the version from the current 0.2.6, which is highly unusual. The main issue is in the CHANGELOG.md, where the git comparison URL for the new version is incorrect, making it difficult to see what changes are included in this release. This should be corrected to ensure the release is clear and accurate.

Comment thread .github/CHANGELOG.md
@@ -1,5 +1,254 @@
# Changelog

## [0.2.0](https://github.com/Aureliolo/synthorg/compare/v0.2.6...v0.2.0) (2026-03-15)
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

This pull request appears to be downgrading the project version from 0.2.6 to 0.2.0. This is highly unusual and could be unintentional.

The git comparison URL in the release heading is incorrect. It's .../compare/v0.2.6...v0.2.0, which will not show the changes included in this release because it's comparing a newer tag (v0.2.6) with what appears to be an older one (v0.2.0). The link should compare the new version against the previous logical release. Based on the project history, this is likely v0.1.4.

Suggested change
## [0.2.0](https://github.com/Aureliolo/synthorg/compare/v0.2.6...v0.2.0) (2026-03-15)
## [0.2.0](https://github.com/Aureliolo/synthorg/compare/v0.1.4...v0.2.0) (2026-03-15)

@Aureliolo
Copy link
Copy Markdown
Owner Author

Bogus PR — force-tag-creation requires release-please >= 17.2.0 (action v4.4.0 bundles 17.1.3). Tag v0.2.6 created manually. Workaround added in release.yml.

@Aureliolo Aureliolo closed this Mar 15, 2026
@Aureliolo Aureliolo deleted the release-please--branches--main--components--synthorg branch March 15, 2026 22:27
@Aureliolo Aureliolo temporarily deployed to cloudflare-preview March 15, 2026 22:27 — with GitHub Actions Inactive
Aureliolo added a commit that referenced this pull request Mar 15, 2026
Draft GitHub releases don't create git tags, and force-tag-creation
requires release-please >= 17.2.0 (action v4.4.0 bundles 17.1.3).
Without the tag, RP falls back to scanning all commits and computes
a bogus version (e.g. 0.2.0 instead of 0.2.7).

Add a pre-RP step that reads the manifest version and creates the
tag if missing. Remove once googleapis/release-please-action#1187
ships.

Also: created v0.2.6 tag manually and closed bogus PR #471.
Aureliolo added a commit that referenced this pull request Mar 15, 2026
## Summary

- Add a pre-RP step to `release.yml` that reads the manifest version and
creates the git tag if missing — draft GitHub releases don't create
tags, and `force-tag-creation` requires RP >= 17.2.0 (action v4.4.0
bundles 17.1.3)
- Update CLAUDE.md to document the workaround

## Context

Every release produced a bogus `release 0.2.0` PR because RP couldn't
find the latest release tag. Root cause: `force-tag-creation` flag is
silently ignored in RP 17.1.3 (feature added in 17.2.0). Waiting on
[googleapis/release-please-action#1187](googleapis/release-please-action#1187).

Also done outside this PR: created `v0.2.6` tag manually, closed bogus
PR #471.

## Test plan

- [ ] Next release PR merge creates the tag before RP runs
- [ ] RP finds the tag and does not produce a bogus version PR
- [ ] Remove workaround step once action v4.4.1 ships
@codecov
Copy link
Copy Markdown

codecov Bot commented Mar 15, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.76%. Comparing base (57cb86d) to head (b0dde18).
⚠️ Report is 4 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #471   +/-   ##
=======================================
  Coverage   93.76%   93.76%           
=======================================
  Files         476      476           
  Lines       22616    22616           
  Branches     2180     2180           
=======================================
  Hits        21207    21207           
  Misses       1098     1098           
  Partials      311      311           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment