Bump the pm-toolchain group with 3 updates
Bumps the pm-toolchain group with 3 updates: @unbrained/pm-cli, pm-changelog and pm-ops.
Updates @unbrained/pm-cli from 2026.10.13 to 2026.10.15
Release notes
Sourced from @unbrained/pm-cli's releases.
v2026.10.15
@unbrained/pm-cli2026.10.15Source range: v2026.10.14...v2026.10.15
Changelog
Fixed
- GH-1467: Preserve optional extension value arity in machine contracts (pm-gh1467)
- GH-1466: Preserve explicitly false values for extension bool aliases (pm-gh1466)
- GH-1458: Preserve linked-test edit history across older published readers and writers (pm-gh1458)
- GH-1457: Recover output cursors passed to --after and expose budget continuation controls (pm-gh1457)
Security
- Redact sensitive values in Sentry command context and encoded diagnostic text (pm-geywoc)
Other
- Compact SDK declaration whitespace while preserving types and documentation (pm-chw71s)
PM Tracker Evidence
Closed pm items in release window: 8 By type: Task=3, Issue=5 By status: closed=8
Selected release-related tracker items:
- pm-gh1458 [Issue/closed] GH-1458: Preserve linked-test edit history across older published readers and writers
v2026.10.14
@unbrained/pm-cli2026.10.14Source range: v2026.10.13...v2026.10.14
Changelog
Added
- GH-1462: Publish host-aligned TOON codecs for extension acceptance tests (pm-gh1462)
- Enable explicit successful-command Sentry tracing without eager startup (pm-58yzil)
Changed
- Give recurrence policy globs a deterministic matching bound (pm-0vqbl5)
Fixed
... (truncated)
Changelog
Sourced from @unbrained/pm-cli's changelog.
2026.10.15 - 2026-10-15
Fixed
- GH-1467: Preserve optional extension value arity in machine contracts (pm-gh1467)
- GH-1466: Preserve explicitly false values for extension bool aliases (pm-gh1466)
- GH-1458: Preserve linked-test edit history across older published readers and writers (pm-gh1458)
- GH-1457: Recover output cursors passed to --after and expose budget continuation controls (pm-gh1457)
Security
- Redact sensitive values in Sentry command context and encoded diagnostic text (pm-geywoc)
Other
- Compact SDK declaration whitespace while preserving types and documentation (pm-chw71s)
2026.10.14 - 2026-10-14
Added
- GH-1462: Publish host-aligned TOON codecs for extension acceptance tests (pm-gh1462)
- Enable explicit successful-command Sentry tracing without eager startup (pm-58yzil)
Changed
- Give recurrence policy globs a deterministic matching bound (pm-0vqbl5)
Fixed
- Prevent Sentry command context from recording positional content and option values (pm-geywoc)
- GH-1461: Normalize supported inline flag placeholders across help and parsing (pm-gh1461)
- GH-1460: Merge extension assets as ordinary Git files while preserving tracker drivers (pm-gh1460)
- Resume due telemetry after a concurrent background upload (pm-j8spis)
- Embedded CLI commands fail when an eval host has no script argv entry (pm-mor9pl)
Commits
9de83bcchore(release): cut 2026.10.15b29ceb3fix(sdk): preserve extension grammar and diagnostic privacy0e94c3cfeat(sdk): guard linked-test history and recover context continuation2024387chore(release): cut 2026.10.14c577edefeat(sdk): complete package authoring primitives and reliable telemetry deliveryf01d624feat: add consent-aware SDK tracing and bounded recurrence matching (#1455)- See full diff in compare view
Updates pm-changelog from 2026.10.12 to 2026.10.16
Release notes
Sourced from pm-changelog's releases.
pm-changelog v2026.10.16
No release notes provided.
pm-changelog v2026.10.15
No release notes provided.
pm-changelog v2026.10.14
2026.10.14 - 2026-10-14
Fixed
- Preserve shipped entries when completed items are reopened and closed again (pmc-reopened-history)
pm-changelog v2026.10.13
No release notes provided.
Changelog
Sourced from pm-changelog's changelog.
Changelog
2026.10.19-1 - 2026-10-19
Fixed
- Publish same-day calendar suffixes with an explicit latest dist-tag (pmc-udb5)
- Request the full list projection explicitly for whole-tracker changelog reads (pmc-zfyb)
2026.10.14 - 2026-10-14
Fixed
- Preserve shipped entries when completed items are reopened and closed again (pmc-reopened-history)
Commits
b7934edRelease pm-changelog v2026.10.16b013f5achore(deps-dev): bump marked (#249)4a2e633Verify release backlog and stabilize Git fixture cleanup (#247)aafea5dEnable the gated pm-github issue sync (#240)8e2050fRelease pm-changelog v2026.10.15517972dchore(deps-dev): bump@unbrained/pm-cli(#245)166c6deRelease pm-changelog v2026.10.14935c7d2fix(changelog): preserve shipped entries across reopened completions (#243)911f1feLink custom-type items to their registered tracker folders (#241)3e895e6chore(deps-dev): bump@unbrained/pm-cli(#242)- Additional commits viewable in compare view
Updates pm-ops from 2026.10.12 to 2026.10.16
Release notes
Sourced from pm-ops's releases.
pm-ops v2026.10.16
Changelog
2026.10.15 - 2026-10-15
Security
- Remove the unpatched braces chain with built-in fs.glob and jscpd 5 only (ops-braces-audit)
2026.10.14 - 2026-10-14
Fixed
- Reject unresolved alias and function publish indirection in canonical attestation auditor (ops-publish-indirection)
- Keep merge-driver prepare read-only during npm pack and publish (ops-pack-prepare)
2026.10.12 - 2026-10-12
Added
- Repair an incomplete release triple, instead of only reporting it every day (ops-3j1z)
Fixed
- Make historical Windows proof evidence available in fresh clones (ops-kw02)
Other
- Certify pm-ops on PM CLI/SDK 2026.10.10 with linear declaration scanner (ops-hiee)
2026.10.5 - 2026-10-05
Fixed
- Cover .tsx, .mts and .cts sources in the docstring and duplication gates, excluding ambient .d.mts/.d.cts declarations (ops-zq8c)
Other
- Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (ops-k1lf)
2026.9.29 - 2026-09-29
Fixed
- Release completeness audit fails a release it just created because the GitHub Release list lags creation (ops-eys5)
2026.9.28 - 2026-09-28
Fixed
... (truncated)
Changelog
Sourced from pm-ops's changelog.
Changelog
2026.10.15 - 2026-10-15
Security
- Remove the unpatched braces chain with built-in fs.glob and jscpd 5 only (ops-braces-audit)
2026.10.14 - 2026-10-14
Fixed
- Reject unresolved alias and function publish indirection in canonical attestation auditor (ops-publish-indirection)
- Keep merge-driver prepare read-only during npm pack and publish (ops-pack-prepare)
Commits
20cf00eRelease pm-ops v2026.10.16d4e6757chore(deps-dev): bump pm-changelog (#174)53bb649Read [[ =~ ]] regex operands and array assignments as words so version checks...84221c8Preserve multiline shell quotes and scan Compose executable fields (#171)6ec0512Enable the gated pm-github issue sync and remove the braces chain (#168)de9c474Release pm-ops v2026.10.15159802dFail closed on third-party publish wrappers in the attestation auditor (#167)f126502Close tracker items delivered by merged pull requests (#165)44bcf51chore(deps-dev): bump@types/node(#166)417369cRelease pm-ops v2026.10.14- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions
Summary by cubic
Updates the pm-toolchain group to latest patch releases: @unbrained/pm-cli to 2026.10.15, pm-changelog to 2026.10.16, and pm-ops to 2026.10.16.
Dependencies
pm-opsdrops the optionalfast-globpeer and raises thejscpdrange to>=5.0.0 <6.0.0, removing the unpatchedbraceschain; it also gains ayamlruntime dependency.@unbrained/pm-cliaddssemveras a bundled dependency.pm-changelogfixes shipped entries being dropped when completed items are reopened and closed again.
Refactors
- The merge-driver test no longer expects Git's built-in
text,binary, anduniondrivers in the registered config, sincepm-cli2026.10.15 and later declaremerge=textin.gitattributes.