CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

The current 0.7.x release line is an alpha line. Public release artifacts use 0.7.0-alpha.<build_number> versions and matching v0.7.0-alpha.<build_number> tags until the installer, signing and release automation are stable enough for a non-alpha release.

Public alpha installer executables are unsigned until Authenticode signing is configured.

---

🚀 0.7.0-alpha.4 - 2026-05-12

This alpha release closes the 0.7.0-alpha line before development moves to 0.7.1-alpha.0. It focuses on release reliability, public project metadata, automated pull request maintenance, clearer repository documentation, and cleaner GitHub Release notes.

🌟 Highlights

• Closes the 0.7.0-alpha line; follow-up development is expected to continue on 0.7.1-alpha.0.
• Hardens release preparation by refreshing citation and archive metadata automatically, then validating that public metadata stays aligned with the package version.
• Improves GitHub Release notes generation so manually wrapped changelog prose renders as clean, flowing release text.
• Reduces pull request queue maintenance with automerge branch updates, workflow-safe skips, and clearer pull request metadata requirements.
• Adds post-release automation that can open a separate next-version pull request after the GitHub Release is published.

✨ Features

Release

• Open post-release version bump PR by @lukaszpiotrluczak in #60.

🐛 Fixes

Ci

• Skip workflow PRs in automerge updater by @lukaszpiotrluczak in #55.

• Request write token for automerge branch updates by @lukaszpiotrluczak in #54.

Release

• Preserve unscoped changelog entries by @lukaszpiotrluczak in #59.

• Keep release notes paragraphs unwrapped by @lukaszpiotrluczak in #57.

• Generate retry changelog follow-ups by @lukaszpiotrluczak in #46.

• Remove duplicate release notes heading by @lukaszpiotrluczak in #43.

📝 Documentation

General

• Update agent and release metadata guidance by @lukaszpiotrluczak in #56.

License

• Document notice structure by @lukaszpiotrluczak in #45.

Readme

• Add transparency disclaimer by @lukaszpiotrluczak in #47.

🏗️ Build, CI and Release Automation

CI/CD

• Centralize Node and pnpm setup by @lukaszpiotrluczak in #51.

• Use offline pnpm installs by @lukaszpiotrluczak in #49.

• Enforce pull request template details by @lukaszpiotrluczak in #53.

• Update automerge pull request branches by @lukaszpiotrluczak in #50.

🧹 Maintenance

Ci

• Use official setup-task action by @lukaszpiotrluczak in #44.

Powershell

• Format scripts by @lukaszpiotrluczak in #48.

📦 Release Assets

• GitHub Release: v0.7.0-alpha.4

🚀 0.7.0-alpha.3 - 2026-05-11

This alpha release establishes the first public release baseline for Codex 13 Student Dev Kit. It focuses on making the Setup installer releasable through GitHub Actions, tightening repository validation, and preparing signed, versioned release artifacts with clear changelog and metadata output.

🌟 Highlights

• Introduces the first release pipeline for the Windows Setup installer, including version validation, artifact labeling, release metadata, and GitHub Release output.
• Hardens repository quality gates with CodeQL, signed commit checks, DCO validation, pull request metadata linting, and stricter dependency update validation.
• Updates the GitHub Actions and developer tooling stack used to build, validate, and publish release candidates.

✨ Features

Release

• Automate release preparation and notes by @lukaszpiotrluczak in #29.

Setup

• Bootstrap signed SDK installer release pipeline by @lukaszpiotrluczak in b59c421.

🐛 Fixes

Changelog

• Preserve generated release text by Łukasz Piotr Łuczak in 51291f8.

Ci

• Skip bot PR title lint by @lukaszpiotrluczak in #33.

• Allow dependency bot PR metadata by @lukaszpiotrluczak in #32.

📝 Documentation

Branding

• Polish project visuals by @lukaszpiotrluczak in #31.

General

• Add release citation metadata by @lukaszpiotrluczak in 4c1ced1.

♻️ Refactoring

• Avoid mutating option parser loop counter by @lukaszpiotrluczak in #18.

🏗️ Build, CI and Release Automation

Release Automation

• Gate release tagging on main checks by @lukaszpiotrluczak in #41.

• Support failed alpha release retries by @lukaszpiotrluczak in #39.

• Validate release version against app version by @lukaszpiotrluczak in #27.

• Harden release workflow by @lukaszpiotrluczak in #25.

• Improve release workflow run name by @lukaszpiotrluczak in #23.

• Show release workflow invocation by @lukaszpiotrluczak in #21.

• Fix release workflow shell by @lukaszpiotrluczak in #19.

Developer Tooling

• Use pwsh for developer tooling by @lukaszpiotrluczak in #20.

Repository Checks

• Harden NSIS plugin hash generation by @lukaszpiotrluczak in #26.

• Lint pull request metadata by @lukaszpiotrluczak in #24.

• Validate DCO sign-off author by @lukaszpiotrluczak in #22.

• Build C++ during CodeQL analysis by @lukaszpiotrluczak in #17.

• Verify signed commits by @lukaszpiotrluczak in #16.

• Replace eclint editorconfig check by @lukaszpiotrluczak in #15.

• Add CodeQL scanning workflow by @lukaszpiotrluczak in 4d81052.

• Tighten dependency update validation by @lukaszpiotrluczak in c9bbff5.

CI/CD

• Remove unsupported Dependabot cooldown by @lukaszpiotrluczak in 3e31c03.

• Tune Dependabot update cadence by @lukaszpiotrluczak in 5299d28.

• Authenticate Task setup requests by @lukaszpiotrluczak in 9885a3b.

⬆️ Dependencies

GitHub Actions and CI

• Updated actions/create-github-app-token from 2.1.1 to 3.1.1 by @dependabot[bot] in #30.

• Updated actions/checkout from 4.3.1 to 6.0.2 by @dependabot[bot] in #12.

• Updated pnpm/action-setup from 6.0.5 to 6.0.6 by @dependabot[bot] in #11.

• Updated actions/setup-node from 4.4.0 to 6.4.0 by @dependabot[bot] in #7.

• Updated actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in #4.

• Updated softprops/action-gh-release from 2.6.2 to 3.0.0 by @dependabot[bot] in #6.

• Updated pnpm/action-setup from 4.3.0 to 6.0.5 by @dependabot[bot] in #5.

• Updated actions/cache from 4.3.0 to 5.0.5 by @dependabot[bot] in #3.

Production Dependencies

No production dependency updates.

Developer Tooling

• Updated @commitlint/config-conventional from 20.5.3 to 21.0.0 by @dependabot[bot] in #14.

• Updated @commitlint/cli from 20.5.3 to 21.0.0 by @dependabot[bot] in #13.

• Updated markdownlint-cli2 from 0.18.1 to 0.22.1 by @dependabot[bot] in #8.

• Updated cspell from 8.19.4 to 10.0.0 by @dependabot[bot] in #10.

• Updated @evilmartians/lefthook from 1.13.6 to 2.1.6 by @dependabot[bot] in #9.

🧹 Maintenance

• Initial empty commit by @lukaszpiotrluczak in 5a412a0.

📦 Release Assets

• GitHub Release: v0.7.0-alpha.3