chore(release): v0.28.1

Patch release. Ships the #969 Codex config allow-list audit: drops three
keys that no audited upstream schema (rust-v0.129.0 .. rust-v0.134.0-alpha.3)
contains (`include_apply_patch_tool`, `js_repl_node_path`,
`js_repl_node_module_dirs`), so CDX-004 / CDX-CFG-006 now flag them as
unknown - a typo-detection improvement with no new false positives. No
rule definitions changed; rule count stays 420.

Bump 0.28.0 -> 0.28.1 across all manifests (Cargo + lock, VS Code,
JetBrains, Zed, npm, plugin) and refresh the CLAUDE.md/AGENTS.md marker.

Author: avifenesh

AGENTS.md

@@ -189,7 +189,7 @@ Format: `[CATEGORY]-[NUMBER]` (AS-004, CC-HK-001, etc.)
 
 ## Current State
 
-- v0.28.0 - Production-ready with full validation pipeline
+- v0.28.1 - Production-ready with full validation pipeline
 - 420 validation rules across 43 validators
 
 - 4200+ passing tests

CHANGELOG.md

@@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.28.1] - 2026-05-24
+
 ### Changed
 - **Codex config allow-list audited against the upstream schema** (closes #969). Audited the Codex top-level allow-list against `codex-rs/core/config.schema.json` (rust-v0.129.0 through rust-v0.134.0-alpha.3); no valid upstream key was missing, so there are no new false positives.
   - Dropped three keys that appear in no audited schema and are not `[features]` sub-keys: `include_apply_patch_tool` (also removed from the feature-key list), `js_repl_node_path`, and `js_repl_node_module_dirs`.

CLAUDE.md

@@ -189,7 +189,7 @@ Format: `[CATEGORY]-[NUMBER]` (AS-004, CC-HK-001, etc.)
 
 ## Current State
 
-- v0.28.0 - Production-ready with full validation pipeline
+- v0.28.1 - Production-ready with full validation pipeline
 - 420 validation rules across 43 validators
 
 - 4200+ passing tests

Cargo.lock

@@ -20,7 +20,7 @@ exclude = [
 ]
 
 [workspace.package]
-version = "0.28.0"
+version = "0.28.1"
 edition = "2024"
 rust-version = "1.91"
 license = "MIT OR Apache-2.0"
@@ -32,8 +32,8 @@ categories = ["development-tools", "command-line-utilities"]
 
 [workspace.dependencies]
 # Internal crates - path for local dev, version for crates.io
-agnix-rules = { path = "crates/agnix-rules", version = "0.28.0" }
-agnix-core = { path = "crates/agnix-core", version = "0.28.0" }
+agnix-rules = { path = "crates/agnix-rules", version = "0.28.1" }
+agnix-core = { path = "crates/agnix-core", version = "0.28.1" }
 
 # Core dependencies
 serde = { version = "1", features = ["derive"] }

Cargo.toml

@@ -5,7 +5,7 @@ pluginGroup = io.agnix
 pluginName = agnix
 pluginRepositoryUrl = https://github.com/agent-sh/agnix
 # SemVer format -> https://semver.org
-pluginVersion = 0.28.0
+pluginVersion = 0.28.1
 
 # Supported build number ranges and IntelliJ Platform Versions -> https://plugins.jetbrains.com/docs/intellij/build-number-ranges.html
 pluginSinceBuild = 233

editors/jetbrains/gradle.properties

@@ -2,7 +2,7 @@
   "name": "agnix",
   "displayName": "agnix - Agent Config Linter",
   "description": "Real-time validation for AI agent configuration files. Validates SKILL.md, CLAUDE.md, AGENTS.md, MCP configs, hooks, and more.",
-  "version": "0.28.0",
+  "version": "0.28.1",
   "publisher": "avifenesh",
   "repository": {
     "type": "git",

editors/vscode/package-lock.json

@@ -1,6 +1,6 @@
 id = "agnix"
 name = "Agnix"
-version = "0.28.0"
+version = "0.28.1"
 schema_version = 1
 authors = ["Avi Fenesh <avifenesh@gmail.com>"]
 description = "Linter for agent configurations (skills, hooks, memory, plugins, MCP)"

editors/vscode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agnix",
-  "version": "0.28.0",
+  "version": "0.28.1",
   "description": "Linter for AI agent configurations. Validates SKILL.md, CLAUDE.md, hooks, MCP, and more.",
   "keywords": [
     "agent",