CHANGELOG.md

title	Changelog
description	Automatically generated changelog tracking all notable changes to the HVE Core project using semantic versioning

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Note: This file is automatically maintained by release-please. Do not edit manually.

3.2.2 (2026-03-23)

🐛 Bug Fixes

• workflows: decouple SBOM artifact name from internal filename (#1178) (c3f1ef4)

3.2.1 (2026-03-23)

🐛 Bug Fixes

• workflows: expand dependency-review license allow-list and add docusaurus build step (#1168) (5458cab)
• workflows: prevent zero-diff force-push, fix SBOM attestation, and consolidate security collection (#1159) (0fbd111)

3.2.0 (2026-03-20)

✨ Features

• add -OutputPath parameter to Validate-MarkdownFrontmatter.ps1 (#1134) (fdf1bcf), closes #1006
• add action version consistency scan workflow (#1127) (4229df1)
• agent: MVE Experiment Designer (#976) (70f86ca)
• agents: add ADO Backlog Manager orchestrator agent (#800) (fae3987)
• agents: add meeting analyst agent for transcript analysis using work-iq (#502) (5345b5b)
• agents: add quick-reference line to RPI Phase 5 suggestions (#897) (9a90f39)
• agents: add RAI Planner, enhance SSSC Planner, and redesign Security Planner (#979) (06f826c)
• agents: add symmetric cross-system handoff to GitHub Backlog Manager (#952) (ba34a35)
• agents: Functional Code Review Agent: pre-PR functional correctness reviewer (#733) (9cf63b7)
• build: add Python extensions and uv 0.10.8 to devcontainer (#920) (9ca0579)
• build: add uv ecosystem to Dependabot configuration (#913) (2a4bd39)
• build: enable npm pinning enforcement in dependency scan (#838) (4e9e31f)
• build: migrate attestation actions to v4.1.0 and add SBOM verification docs (#841) (ca1e65b)
• collections: add four new validator checks (orphan, duplicate, companion, coverage) (#869) (1a96b73)
• devcontainer,security: add enterprise artifact hub configuration (#1032) (1d56d25)
• docs: add Rust coding standards and guidelines (#809) (d4c4899)
• extension: add Microsoft logo icon to VS Code Marketplace listings (#906) (82aca41)
• github: add declarative label management (#953) (a1a6845)
• instructions: add ADO backlog shared infrastructure (#786) (1914078)
• instructions: add ADO backlog sprint planning and capacity tracking (#788) (d6fb77d)
• instructions: add ADO triage workflow and prompt (#787) (cde0190)
• instructions: add shared story quality conventions and sprint planning (#803) (a2f18e3)
• prompts: add ADO discovery and work item prompts with agent routing (#790) (7e74523)
• prompts: add security review prompts (#1118) (ad30967)
• scripts: add dynamic Python skill discovery for lint/test (#957) (0a90f57)
• scripts: add Get-StandardTimestamp utility to CIHelpers module (#1126) (b273a4b)
• scripts: add Python copyright header validation (#905) (67df902)
• scripts: add Python skill support to Validate-SkillStructure (#903) (68479d9)
• scripts: add workflow npm command scanning to dependency pinning (#837) (6b5ae06)
• security: add basic security reviewer agent with owasp skills (#1008) (cb1fd05)
• security: add sigstore attestation bundles and fix component-detection action (#1148) (f79c272)
• skills: add Atheris fuzz harness with CI workflow integration (#1102) (d337e1d)
• skills: add PowerPoint automation skill with YAML-driven deck generation (#868) (00465cd)
• skills: convert hve-core-installer agent to self-contained skill (#846) (1d821fb)
• skills: enhance pr-reference skill with flexible filtering and base branch detection (#1095) (26a32ea)
• workflows: add devcontainer infrastructure change log workflow (#899) (8aca446)
• workflows: add milestone auto-close on stable and pre-release publishes (#834) (79362b1)
• workflows: add ms.date documentation freshness checking (#969) (3ed441c)
• workflows: add Python linting CI workflow with Ruff (#951) (f89f0eb)
• workflows: add Python testing CI workflow with pytest and Codecov (#934) (5e8306f)
• workflows: add uv and Python package sync to copilot-setup-steps (#921) (45d517d)

🐛 Bug Fixes

• build: override Linguist vendored flag for Python skill files (#1155) (0eee5b6)
• build: override serialize-javascript to >=7.0.3 for RCE fix (#876) (e49039a)
• build: resolve Pinned-Dependencies alerts for vsce npm commands in extension workflows (#782) (89dad9d)
• build: update undici and yauzl overrides for security audit (#1030) (2c2f92f)
• docs: add CLI Plugins to install.md navigation surfaces (#902) (79d6595)
• docs: add sidebar ordering for Design Thinking documentation (#832) (551fddc), closes #830
• docs: graduate design-thinking to preview and correct stale collection references (#831) (5110e35)
• docs: include project-planning in UX Designer install guidance (#908) (e7aa9bc)
• docs: remediate writing-style convention violations (#865) (68b04bc)
• docs: remove draft content announcement banner (#825) (b45de80)
• docs: remove unbounded path-to-regexp override breaking SSG (#1153) (d810018)
• docs: use actual clone paths instead of folder display names in multi-root workspace settings (#984) (5dbab82)
• instructions: replace black with ruff in uv-projects (#898) (b0c06d9)
• scripts: cover .github/ skill files in copyright header validation (#1055) (#1098) (27fbd33)
• scripts: eliminate phantom git changes from plugin generation (#1035) (e49a1b5)
• scripts: enable JSON log output for lint:version-consistency (#1033) (52b0885)
• security: calculate compliance score from total scanned dependencies (#930) (c112c3d)
• skills: add AST validation and namespace restriction for content-extra.py (#1027) (c50c7a3)
• skills: add depth limits to recursive PowerPoint processing functions (#1028) (bf08994)
• skills: harden XML parsing and blob writes in powerpoint extract (#1053) (89d24b1)
• skills: resolve ruff lint and format violations in powerpoint skill (#1048) (17bbe7a)
• workflows: add uv.lock dependencies submission have fork-skip condition (#1109) (dec56ac)
• workflows: automate weekly SHA staleness check with issue creation (#975) (1ea4caa)
• workflows: close Codecov integration gaps for Pester and pytest flags (#1106) (cca29b7)
• workflows: propagate uv sync errors in copilot-setup-steps (#961) (df88d7c)
• workflows: resolve release-please skip cascade and Python project discovery (#1043) (79993e2)
• workflows: scan only commit subjects for breaking change detection (#1157) (a38a657)

📚 Documentation

• clarify HVE Core Extension vs Installer messaging across documentation (#965) (0fceb8f)
• docs: add ADO integration user documentation (#935) (ec89302)
• docs: add Project Planning agent documentation (#936) (3a3a0fd)
• onboarding: overhaul marketplace onboarding and documentation site (#982) (4309e10)

♻️ Refactoring

• build: merge code-review collection into coding-standards (#863) (8027e7b)
• workflows: rename release pipeline workflows and add marketplace automation triggers (#829) (b6397f4)

🔧 Maintenance

• build: add clean:logs npm script (#1122) (f85fe02), closes #988
• build: add JSON reporter for cspell (#1123) (6d59f67)
• ci: add multi-arch support to copilot-setup-steps binary downloads (#955) (8d0c706)
• deps-dev: bump cspell from 9.6.4 to 9.7.0 in the npm-dependencies group (#839) (3fa16ff)
• deps: bump actions/dependency-review-action from 4.8.3 to 4.9.0 in the github-actions group across 1 directory (#942) (1a9b858)
• deps: bump cairosvg from 2.8.2 to 2.9.0 in /.github/skills/experimental/powerpoint (#1025) (f4deda7)
• deps: bump dompurify from 3.3.1 to 3.3.2 in /docs/docusaurus (#924) (d2060d6)
• deps: bump svgo from 3.3.2 to 3.3.3 in /docs/docusaurus (#880) (6dc2406)
• deps: bump the github-actions group across 1 directory with 4 updates (#1100) (2290dc0)
• deps: bump the github-actions group with 6 updates (#840) (f57bc01)
• docs: correct New-MsDateReport table rendering and refresh stale docs (#1114) (c2b806f)
• settings: remove orphaned Checkov config and stale gitignore entries (#870) (98fcd74)

3.0.2 (2026-02-21)

🐛 Bug Fixes

• agents: add commit message presentation to RPI agent review completion (#721) (a063996)
• agents: standardize name frontmatter to human-readable format (#716) (f3e05d8)
• extension: preserve artifact directory structure in collection packaging (#725) (4fa94e0)
• instructions: pull request template body case-insensitive (#719) (4cc2a5c)
• instructions: reorder branch freshness gate before diff generation (#723) (23b457c)

3.0.1 (2026-02-20)

🐛 Bug Fixes

• scripts: add marketplace manifest validation and standardize source format (#711) (c5ac616)

3.0.0 (2026-02-20)

⚠ BREAKING CHANGES

• skills: migrate PR reference generation to self-contained skill (#669)
• restructure RPI collection to HVE Core naming convention (#668)

✨ Features

• agents: add agile-coach agent (#562) (de8d86c)
• agents: add DT coach agent with tiered instruction loading (#656) (206d3a7)
• agents: add product manager advisor and UX/UI designer agents (#627) (539eb8a)
• agents: add system architecture reviewer for design trade-offs and ADR creation (#626) (de5cfd6)
• build: pin devcontainer image and align tool parity (#704) (6258b1c)
• design-thinking: add manufacturing industry context template (#682) (ce864bf)
• instructions: add DT coaching state protocol for session persistence (#654) (5a5be4e)
• instructions: add dt-coaching-identity ambient instruction (#642) (6209a0d)
• instructions: add dt-method-01-deep for advanced scope conversation techniques (#673) (cc92ef9)
• instructions: add dt-method-03-deep for advanced input synthesis techniques (#676) (0079a4f)
• instructions: add dt-method-09-deep instructions for Method 9 advanced coaching (#703) (150b2a6)
• instructions: add dt-method-sequencing ambient instruction (#650) (e465b2f)
• instructions: add dt-quality-constraints and design-thinking collection (#645) (17002bd)
• instructions: add DT-to-RPI handoff contract specification (#679) (87f9962)
• instructions: add energy industry context template (#687) (41088d8)
• instructions: add healthcare industry context template (#686) (b2d5281)
• instructions: add Method 1 Scope Conversations coaching knowledge (#651) (93e2d48)
• instructions: add Method 2 Design Research coaching knowledge (#652) (30f7f3b)
• instructions: add Method 3 Input Synthesis coaching knowledge (#653) (1efdb7d)
• instructions: add Method 7 High-Fidelity Prototypes coaching instruction (#666) (9233eab)
• instructions: add pull request instructions for PR generation workflow (#706) (73d23eb)
• instructions: create DT curriculum content (9 modules) (#690) (9f7378f), closes #617
• instructions: create dt-method-02-deep.instructions.md (#700) (4d4d0ca)
• instructions: create dt-method-06-lofi-prototypes.instructions.md (#684) (4d5f757)
• instructions: create dt-method-07-deep.instructions.md (#678) (d3ec70d)
• instructions: Create dt-method-08-deep.instructions.md (#683) (d9e1115)
• instructions: create dt-method-08-testing.instructions.md (#681) (3008ad8)
• instructions: create dt-method-09-iteration.instructions.md (#685) (9d7f4f5)
• instructions: create dt-rpi-research-context.instructions.md (#689) (34c7b89)
• instructions: create manufacturing reference learning scenario (#692) (1bd3994)
• instructions: Design Thinking Method 4 brainstorming instruction file (#664) (06f90b0)
• prompts: add DT start-project prompt for coaching initialization (#657) (ce583d5)
• prompts: add dt-resume-coaching prompt for session recovery (#665) (11b93cb)
• prompts: create dt-handoff-problem-space.prompt.md (#688) (277963d)
• scripts: add collection-level maturity field with validation, gating, and notices (#697) (7b1c8e8)
• scripts: add per-violation CI annotations and colorized console output (#637) (bd7d512)
• skills: edit SKILL frontmatter schema, add CI validation, and documentation (#625) (0138a78)
• skills: mandate unit testing and document language support (#636) (9263617)
• skills: migrate PR reference generation to self-contained skill (#669) (cf8805f)

🐛 Bug Fixes

• collections: migrate artifacts into collection-based subdirectories (#658) (dfa5261)
• instructions: optimize Phase 1 DT token budgets and close #564/#565 gaps (#675) (4f42f00)
• scripts: add CI annotations and step summary to copyright header check (#638) (5fa6328)
• scripts: add grouped link-lang console diagnostics and failure summary (#661) (4d6871f)
• scripts: add per-violation Write-Host and Write-CIAnnotation output to Test-DependencyPinning (#640) (9d3b71d)
• scripts: align agent frontmatter schema with VS Code spec (#469) (254d445)
• scripts: optimize PSScriptAnalyzer linting performance in WSL2 (#667) (f120b93)
• scripts: stabilize YAML display key ordering in collection manifest (#701) (73c0d2c)
• scripts: use text stubs for plugin links when symlinks unavailable (#695) (d7650a3)
• skills: fix powershell test coverage in pr-reference skill (#699) (408e6b7)

📚 Documentation

• dt: add Method 5 Concepts and Method 6 Lo-Fi Prototypes instructions (#693) (cfdcf11)
• hve-guide: add role-based guides and project lifecycle documentation (#663) (17a85da)

♻️ Refactoring

• restructure RPI collection to HVE Core naming convention (#668) (120dde0)
• scripts: consolidate duplicate logging into shared SecurityHelpers module (#655) (627a877)
• scripts: use shared SecurityHelpers and CIHelpers modules in security scripts (#705) (3a0baa7)

🔧 Maintenance

• deps-dev: bump markdownlint-cli2 from 0.20.0 to 0.21.0 in the npm-dependencies group (#609) (1486dd7)

2.3.10 (2026-02-17)

🐛 Bug Fixes

• agents: add subagent support with dedicated subagent files and simplified prompts (#639) (c080b0a)
• Markdown table in Codespace is not rendered correctly (#619) (5bcea1d)

📚 Documentation

• ai-artifacts: align contribution guide with plugin and collection workflow (#622) (21820be)

2.3.9 (2026-02-14)

🐛 Bug Fixes

• plugins: merge git collection into rpi and distribute to all plugins (#549) (9509a87)

2.3.8 (2026-02-14)

🐛 Bug Fixes

• workflows: use draft-first release flow to avoid immutability errors (#554) (c8eee58)

2.3.7 (2026-02-13)

🐛 Bug Fixes

• workflows: delete and recreate draft release to publish (#552) (e3d6fca)

2.3.6 (2026-02-13)

🐛 Bug Fixes

• workflows: delete and recreate immutable release as draft (#550) (75217da)

2.3.5 (2026-02-13)

🐛 Bug Fixes

• workflows: replace draft release config with post-creation draft conversion (#545) (2311d04)

2.3.4 (2026-02-13)

🐛 Bug Fixes

• workflows: package pre-release VSIX artifacts correctly (#544) (f5f6887)

2.3.3 (2026-02-13)

🐛 Bug Fixes

• workflows: add manual tag creation for draft releases until release-please-action updates (#538) (4a6ef2c)

2.3.2 (2026-02-13)

🐛 Bug Fixes

• settings: ensure draft flag is set for release configuration (#536) (9e98c68)

2.3.1 (2026-02-13)

🐛 Bug Fixes

• build: remove draft flag that prevents release tag creation (#533) (c8de0aa)
• workflows: correct JSON output formatting in plugin discovery step (#531) (910fb8b)

2.3.0 (2026-02-13)

✨ Features

• agents: add GitHub backlog management pipeline (#448) (2b4d123)
• docs: define inactivity closure policies for issues and PRs (#452) (5e710fd)
• extension: implement collection-based plugin distribution system (#439) (3156d98)
• instructions: replace EVEN/ODD hardcoding with runtime milestone discovery protocol (#486) (ae95eb2)
• plugin: support Copilot CLI plugin generation from collection manifests (#496) (e6cee85)
• scripts: enhance on-create.sh to install actionlint and PowerShell modules (#500) (67585f5)

🐛 Bug Fixes

• docs: replace broken relative link with inline code reference (#465) (8133b36)
• instructions: prevent local-only paths from leaking into GitHub issues (#489) (497d2fe)
• workflows: prevent release-please infinite loop on main branch (#470) (134bdd6)
• workflows: remove release-please skip guard that prevents tag creation (#511) (5e53271)

📚 Documentation

• agents: add GitHub Backlog Manager documentation and agent catalog (#503) (5e818ce)
• align CONTRIBUTING.md with docs/contributing/ guides (#445) (73ef6aa)

♻️ Refactoring

• scripts: refactor dev-tools and lib scripts to use CIHelpers module (#482) (fdf9145)
• scripts: standardize PowerShell entry point guard pattern (#477) (6b84a8e)

🔧 Maintenance

• config: standardize action mappings in artifact-retention.yml (#487) (7927db2)
• deps-dev: bump cspell from 9.6.2 to 9.6.4 in the npm-dependencies group (#461) (c788095)
• deps: bump actions/setup-python from 5.1.1 to 6.2.0 in the github-actions group (#462) (69ef3c9)
• security: add SBOM artifact retention policy (#479) (8031557), closes #453

2.2.0 (2026-02-06)

✨ Features

• add incident response prompt template (#386) (0adb35c)
• add Skills and VS Code Extension categories to issue/PR templates (#410) (108e160)
• hve-core-guidance-instructions: update guidance artifacts and MCP config (#402) (25b34de)
• security: add action version consistency validation (#423) (f3bb787)
• workflows: add copyright header validation CI workflow (#429) (c53de22)

🐛 Bug Fixes

• docs: add missing Copilot footers, consolidate validation exclusions (#419) (e40f960)
• scripts: include CIHelpers module + packaging script testability (#420) (da26edf)

♻️ Refactoring

• migrate inline CI code to CIHelpers module (#393) (adf6a5f)

🔧 Maintenance

• templates: align issue templates with conventional commit format (#427) (2d28702)

2.1.0 (2026-02-04)

✨ Features

• add PowerShell script to validate copyright headers (#370) (92fce72)
• docs: Replace deprecated chat.modeFilesLocations with chat.agentFilesLocations (#413) (67fb2ab)
• scripts: add CIHelpers module for CI platform abstraction (#348) (23e7a7e)
• scripts: add SecurityHelpers and CIHelpers modules (#354) (b93d990)
• workflow: add copilot-setup-steps.yml for Coding Agent environment (#398) (085a38b)

🐛 Bug Fixes

• build: increase release-please search depths to prevent 250-commit window issue (#342) (4bb857d)
• build: patch @isaacs/brace-expansion critical vulnerability (#404) (292ef51)
• ci: disable errexit during spell check exit code capture (#356) (ed6ed46)
• ci: exclude extension/README.md from frontmatter validation (#362) (e0d7378)
• exclude test fixtures from markdown link checker (#345) (58147f9)
• extension: resolve path resolution issues in Windows/WSL environments (#407) (8529725)
• linting: use Write-Error instead of Write-Host for error output (#377) (2ca766b)
• scripts: apply CI output escaping to infrastructure scripts (#369) (251021e)
• scripts: apply CI output escaping to linting scripts (#367) (fdd75ed)
• scripts: apply CI output escaping to security scripts (#368) (1237c9a)
• scripts: ensure reliable array count operations in linting and security scripts (#395) (de43e73)
• scripts: standardize PowerShell requirements header block (#385) (6e26282)

📚 Documentation

• add doc-ops agent to CUSTOM-AGENTS reference (#358) (15f7185)
• add memory agent to CUSTOM-AGENTS.md (#359) (d92c4e1)
• add missing agents to extension README (#357) (d58541c)
• add task-reviewer agent to CUSTOM-AGENTS.md (#363) (0efb722)
• contributing: add copyright header guidelines (#382) (881a567)
• scripts: update README.md with missing directory sections (#355) (ac2966f)

♻️ Refactoring

• scripts: align linting and tests with CIHelpers (#401) (3587e6a)
• scripts: extract Invoke-PackageExtension for testability (#343) (858a1be)
• scripts: extract orchestration function for Prepare-Extension testability (#344) (9fd4bd1)
• scripts: replace raw GITHUB_OUTPUT with Set-CIOutput in Package-Extension (#391) (74a30bb)
• security: move DependencyViolation and ComplianceReport to shared module (#378) (1dd31ad)

🔧 Maintenance

• add copyright headers to PowerShell scripts (#381) (d19c9b3)
• add copyright headers to shell scripts (#380) (284b456)
• deps-dev: bump cspell from 9.6.1 to 9.6.2 in the npm-dependencies group (#387) (23c2b9f)
• workflows: simplify Copilot setup steps workflow triggers (#414) (492a7b1)

2.0.1 (2026-01-28)

🐛 Bug Fixes

• build: use draft releases for VSIX upload (#338) (f1d3ac6)
• docs: quote YAML frontmatter values in BRD template (#339) (ca988f2)

2.0.0 (2026-01-28)

⚠ BREAKING CHANGES

• agents: add Task Reviewer and expand RPI to 4-phase workflow (#277)

✨ Features

• agents: add hve-core-installer agent to extension package (#297) (c0e48c6)
• agents: add Task Reviewer and expand RPI to 4-phase workflow (#277) (ae76cab)
• build: add code coverage reporting to Pester workflow (#230) (a34822a)
• docs: add GOVERNANCE.md for OSSF Silver Badge compliance (#235) (b0e752c)
• docs: add ROADMAP.md for OSSF Silver badge compliance (#238) (4a41c16)
• mcp: add MCP server configuration guidance and installer enhancements (#225) (0bce418)
• scripts: add YAML linting with actionlint (#234) (d9301f9)
• security: add OpenSSF Scorecard workflow and badge (#271) (7c6d788)
• skills: add video-to-gif conversion skill with FFmpeg two-pass optimization (#247) (8d65c42)
• tests: add Pester tests for LintingHelpers and Validate-MarkdownFrontmatter (#197, #198) (#205) (51ae563)

🐛 Bug Fixes

• build: detect table formatting changes via git diff (#261) (985eee0)
• build: disable MD024 lint rule in CHANGELOG for release-please (#220) (971df94)
• build: quote shell variables and group redirects in workflow files (#299) (3372509)
• build: resolve scorecard badge and workflow security issues (#301) (aeaed13)
• extension: remove frontmatter from README and exclude from markdown linting (#223) (4272529)
• instructions: quote applyTo glob pattern for YAML compatibility (#216) (085199c)
• scripts: add FooterExcludePaths parameter to frontmatter validation (#334) (64db98d)
• scripts: add GHSA word and logs/ exclusion to cspell config (#214) (5c99b3f)
• scripts: correct type assertions in Invoke-YamlLint.Tests.ps1 (#332) (af7050d)
• scripts: eliminate false positives in dependency pinning npm pattern (#273) (ccbdfa3)
• security: add artifact attestation for signed releases (#257) (c52d6e2)
• standardize markdown footers and complete frontmatter (#217) (b4e7556)

📚 Documentation

• add OpenSSF Best Practices Passing badge to README (#239) (91bc529)
• architecture: add architecture documentation and value proposition (#252) (0e4b02f)
• contributing: add testing requirements for OSSF compliance (#254) (4db1a18)
• docs: add enterprise status badges to README header (#270) (ccb68a4)
• security: add security assurance case and threat model for OSSF Silver (#259) (a390e26)

♻️ Refactoring

• application: wrap execution with try blocks, ensure proper … (#296) (35c4417)
• scripts: extract frontmatter validation to testable module (#293) (4e8707e)
• scripts: extract pure functions for Pester testability (#221) (d40e742)

🔧 Maintenance

• deps-dev: bump cspell from 9.4.0 to 9.6.0 in the npm-dependencies group (#208) (855914b)
• deps-dev: bump cspell from 9.6.0 to 9.6.1 in the npm-dependencies group (#294) (1e45ad6)
• deps: bump actions/setup-node from 6.1.0 to 6.2.0 in the github-actions group (#209) (c4c69e2)
• deps: bump the github-actions group with 4 updates (#295) (d8337b8)
• remove step-security/harden-runner from workflows (#246) (c5708d8)

1.1.0 (2026-01-19)

✨ Features

• .devcontainer: add development container configuration (#24) (45debf5)
• .github: add github metadata and mcp configuration (#23) (1cb898d)
• agent: Add automated installation via hve-core-installer agent (#82) (a2716d5)
• agents: add brd-builder.agent.md for building BRDs (#122) (bfdc9f3)
• agents: redesign installer with Codespaces support and method documentation (#123) (6329fc0)
• ai: Establish AI-Assisted Development Framework (#48) (f5199a4)
• build: implement automated release management with release-please (#86) (90150e2)
• chatmodes: add architecture diagram builder agent (#145) (db24637)
• config: add development tools configuration files (#19) (9f97522)
• config: add npm package configuration and dependencies (#20) (fcba198)
• copilot: add GitHub Copilot instruction files (#22) (4927284)
• copilot: add specialized chat modes for development workflows (#21) (ae8495f)
• docs: add comprehensive AI artifact contribution documentation (#76) (d81cf96)
• docs: add getting started guide for project configuration (#57) (3b864fa)
• docs: add repository foundation and documentation files (#18) (ad7efb6), closes #2
• docs: add RPI workflow documentation and restructure docs folder (#102) (c3af708)
• extension: hve core vs code extension (#149) (041a1fd)
• extension: implement pre-release versioning with agent maturity filtering (#179) (fb38233)
• instructions: add authoring standards for prompt engineering artifacts (#177) (5de3af9)
• instructions: add extension quick install and enhance installer agent (#176) (48e3d58)
• instructions: add VS Code variant prompt and gitignore recommendation to installer (#185) (b400493)
• instructions: add writing style guide for markdown content (#151) (02df6a8)
• instructions: consolidate C# guidelines and update prompt agent fields (#158) (65342d4)
• instructions: provide guidance on using safe commands to reduce interactive prompting (#117) (1268580)
• linting: add linting and validation scripts (#26) (66be136)
• prompt-builder: enhance prompt engineering instructions and validation protocols (#155) (bc5004f)
• prompts: add ADR placement planning and update template paths (#69) (380885f)
• prompts: add git workflow prompts from edge-ai (#84) (56d66b6)
• prompts: add github-add-issue prompt and github-issue-manager chatmode with delegation pattern (#55) (d0e1789)
• prompts: add PR template discovery and integration to pull-request prompt (#141) (b8a4c7a)
• prompts: add task research initiation prompt and rpi agent(#124) (5113e3b)
• release: implement release management strategy (#161) (6164c3b)
• Risk Register Prompt (#146) (843982c)
• scripts: enhanced JSON Schema validation for markdown frontmatter (#59) (aba152c)
• security: add checksum validation infrastructure (#106) (07528fb)
• security: add security scanning scripts (#25) (82de5a1)
• workflows: add CodeQL security analysis to PR validation (#132) (e5b6e8f)
• workflows: add orchestration workflows and documentation (#29) (de442e0)
• workflows: add security reusable workflows (#28) (2c74399)
• workflows: add validation reusable workflows (#27) (f52352d)

🐛 Bug Fixes

• build: add token parameter to release-please action (#166) (c9189ec)
• build: disable MD012 lint rule in CHANGELOG for release-please compatibility (#173) (54502d8), closes #172
• build: pin npm commands for OpenSSF Scorecard compliance (#181) (c29db54)
• build: remediate GHSA-g9mf-h72j-4rw9 undici vulnerability (#188) (634bf36)
• build: seed CHANGELOG.md with version entry for release-please frontmatter preservation (#170) (2b299ac)
• build: use GitHub App token for release-please (#167) (070e042)
• build: use hashtable splatting for named parameters (#164) (02a965f)
• devcontainer: remove unused Python requirements check (#78) (f17a872), closes #77
• docs: fix broken links and update validation for .vscode/README.md (#118) (160ae7a)
• docs: improve language consistency in Automated Installation section (#139) (a932918)
• docs: replace install button anchor with VS Code protocol handler (#111) (41a265e)
• docs: update install badges to use aka.ms redirect URLs (#114) (868f655)
• linting: use cross-platform path separators in gitignore pattern matching (#121) (3f0aa1b)
• scripts: accepts the token (YYYY-MM-dd) in frontmatter validation (#133) (2648215)
• tools: correct Method 5 path resolution in hve-core-installer (#129) (57ef20d)

📚 Documentation

• add comprehensive RPI workflow documentation (#153) (cbaa4a9)
• enhance README with contributing, responsible AI, and legal sections (#52) (a424adc)

♻️ Refactoring

• instructions: consolidate and enhance AI artifact guidelines (#206) (54dd959)
• migrate chatmodes to agents architecture (#210) (712b0b7)

🔧 Maintenance

• build: clean up workflow permissions for Scorecard compliance (#183) (64686e7)
• deps-dev: bump cspell in the npm-dependencies group (#61) (38650eb)
• deps-dev: bump glob from 10.4.5 to 10.5.0 (#74) (b3ca9fd)
• deps-dev: bump markdownlint-cli2 from 0.19.1 to 0.20.0 in the npm-dependencies group (#134) (ebfbe84)
• deps-dev: bump the npm-dependencies group across 1 directory with 2 updates (#109) (936ab84)
• deps-dev: bump the npm-dependencies group with 2 updates (#30) (cf99cbf)
• deps: bump actions/upload-artifact from 5.0.0 to 6.0.0 in the github-actions group (#142) (91eac8a)
• deps: bump js-yaml, markdown-link-check and markdownlint-cli2 (#75) (af03d0e)
• deps: bump the github-actions group with 2 updates (#108) (3e56313)
• deps: bump the github-actions group with 2 updates (#135) (4538a03)
• deps: bump the github-actions group with 2 updates (#62) (d1e0c09)
• deps: bump the github-actions group with 3 updates (#87) (ed550f4)
• deps: bump the github-actions group with 6 updates (#162) (ec5bb12)
• devcontainer: enhance gitleaks installation with checksum verification (#100) (5a8507d)
• devcontainer: refactor setup scripts for improved dependency management (#94) (f5f50d1), closes #98
• security: configure GitHub branch protection for OpenSSF compliance (#191) (90aab1a)

0.0.0 (Initial)

• Initial placeholder for release-please compatibility