Recent Commits to cli:main (10)

ci: switch automation workflow from pull_request_target to pull_request (#969)

feat(sheets): add --range flag to +append for targeting specific tabs (#641)

Previously +append always used hardcoded "A1" range, limiting appends
to the first sheet. Add optional --range flag (default: "A1") to allow
appending to any sheet tab using A1 notation.

chore: release versions (#655)

refactor: drop serde_yaml by migrating to toml (#657)

* refactor: migrate skill registry from yaml to toml to drop unmaintained serde_yaml dependency

* chore: add changeset for yaml to toml migration

* fix(tests): resolve TOML test suite formatting

docs: update installation instructions to prioritize github releases (#656)

* docs: update installation instructions to prioritize github releases

* ci: add explicit verification instructions to github release notes

---------

Co-authored-by: jpoehnelt-bot <jpoehnelt-bot@users.noreply.github.com>

ci: add cargo-deny for license, advisory, and source auditing (#653)

* ci: add cargo-deny configuration for supply chain auditing

* Update deny.toml

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* Update deny.toml

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* Update deny.toml

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* Update deny.toml

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* Update deny.toml

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* ci: add cargo-deny to workflow

Integrates cargo-deny into the main CI pipeline using the official
EmbarkStudios action. This will automatically block PRs that introduce
banned licenses, insecure crates, or unallowed registries.

* ci: explicitly deny unmaintained, yanked, and unlicensed crates per review

* ci: remove deprecated cargo-deny keys and restore valid config

---------

Co-authored-by: jpoehnelt-bot <jpoehnelt-bot@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

fix: auto-install binary on run if missing (#654)

* fix: auto-install binary on run if missing

pnpm skips postinstall when the package is already cached/installed.
This commit ensures run.js will auto-trigger install.js if the
binary is missing, fixing the 'gws binary not found' error.

* chore: add changeset for pnpm binary fix

---------

Co-authored-by: jpoehnelt-bot <jpoehnelt-bot@users.noreply.github.com>

ci: add cargo-audit workflow for dependency vulnerability scanning (#649)

Co-authored-by: jpoehnelt-bot <jpoehnelt-bot@users.noreply.github.com>

fix: verify SHA256 checksum in npm postinstall script (#650)

Co-authored-by: jpoehnelt-bot <jpoehnelt-bot@users.noreply.github.com>

ci: pin cross-rs to v0.2.5 in release workflow (#651)

Co-authored-by: jpoehnelt-bot <jpoehnelt-bot@users.noreply.github.com>