Andrey Antukh d5c4bfb234 ✨ Add security fixes section to the changelog flow ...

The 🔒 section is generated from advisories instead of being written
by hand: an advisory becomes an entry when its patched_versions include
the release version, so unpublished (triage/draft) advisories are valid.

- gh.py advisories --patched-version filters on the exact token of
  vulnerabilities[*].patched_versions; the list output keeps the summary
  schema.
- changelog.py security renders the entries sorted by GHSA id, links the
  merged milestone PRs labelled "pr pt" that reference the GHSA id and
  warns when a reference has no matching patched version. The subsection
  follows 🚀 (or 💥, or the version header) and is removed
  when the version has no advisories.
- Tests cover the filter, the entry rendering, PR discovery and the
  subsection placement.
- Memories and the update-changelog skill document the contract.
- CHANGES.md: add 2.19.1 with its security fixes and the remaining bug
  fix.

AI-assisted-by: deepseek-v4.1-flash

2026-11-10 18:18:00 +00:00

..

changelog.py

✨ Add security fixes section to the changelog flow

2026-11-10 18:18:00 +00:00

check-commit

🔧 Raise commit message limits to 80 chars

2026-10-14 18:35:15 +02:00

check-fmt-clj

♻️ Consolidate dev tooling into scripts/ and reorganize docs

2026-07-22 09:18:06 +02:00

ci

✨ Add a build task to the local CI orchestrator

2026-10-29 15:06:43 +00:00

clean-node-modules

🔧 Pin all pnpm workspaces to one shared pnpm store

2026-09-09 08:04:11 +02:00

db-schema

✨ Isolate backend-test database per devenv instance (#12048)

2026-10-01 19:22:01 +02:00

detect-target-branch

♻️ Consolidate dev tooling into scripts/ and reorganize docs

2026-07-22 09:18:06 +02:00

error-reports.mjs

✨ Add minor improvements for error report script

2026-07-25 09:56:38 +02:00

gh.py

✨ Add security fixes section to the changelog flow

2026-11-10 18:18:00 +00:00

nrepl-eval.mjs

♻️ Consolidate dev tooling into scripts/ and reorganize docs

2026-07-22 09:18:06 +02:00

paren-repair

♻️ Consolidate dev tooling into scripts/ and reorganize docs

2026-07-22 09:18:06 +02:00

project-anomalies.py

✨ Add find-project-anomalies skill and helper

2026-10-06 16:58:08 +00:00

psql

✨ Isolate backend-test database per devenv instance (#12048)

2026-10-01 19:22:01 +02:00

replace-copyright.sh

📎 Update copyright headers

2026-09-09 17:58:09 +02:00

setup-opencode

🔧 Install opencode on demand instead of baking it in

2026-10-17 14:00:43 +02:00

start-mdts-server

✨ Audit-log docs, error-reporting flag and frontend initiator (#11997)

2026-10-02 11:08:13 +02:00

start-serena

📎 Backport devenv improvements

2026-06-05 11:44:20 +02:00

sync-pnpm-version

🔧 Skip build output when stamping the pnpm version

2026-10-29 14:09:43 +00:00

taiga.py

♻️ Consolidate dev tooling into scripts/ and reorganize docs

2026-07-22 09:18:06 +02:00

test_changelog.py

✨ Add security fixes section to the changelog flow

2026-11-10 18:18:00 +00:00

test_check_commit.py

🔧 Raise commit message limits to 80 chars

2026-10-14 18:35:15 +02:00

test_ci.py

✨ Add a build task to the local CI orchestrator

2026-10-29 15:06:43 +00:00

test_gh.py

✨ Add security fixes section to the changelog flow

2026-11-10 18:18:00 +00:00

test_project_anomalies.py

✨ Add find-project-anomalies skill and helper

2026-10-06 16:58:08 +00:00

test_sync_pnpm_version.py

🔧 Skip build output when stamping the pnpm version

2026-10-29 14:09:43 +00:00