0.36.0

New Features ✨

Local

• Add --verify, --timeout, auto-detect dev script, post-init verification by @MathurAditya724 in #998
• Inject all framework spotlight prefixes; document DSN-less capture and -f ai filter by @sergical in #1034

Other

• (alert) Add alert CRUD commands by @betegon in #579
• (auth) Add --scope/-s and --read-only flags to login and refresh by @RaeesBhatti in #1032
• (monitor) Add cron monitor check-ins (monitor run / list) by @BYK in #1069
• (proguard) Add 'proguard upload' command (chunk-upload of R8/ProGuard mappings) by @BYK in #1074
• (sourcemap) Handle inline base64 sourcemaps in inject/upload by @BYK in #1065
• Add release archive/restore, sourcemap resolve, proguard uuid by @BYK in #1058
• Add send-event and send-envelope commands with DSN auth by @BYK in #921

Bug Fixes 🐛

Init

• Skip artifact dirs in project listing by @betegon in #1081
• Mirror onboarding project creation by @betegon in #1077
• Harden install command execution by @betegon in #1045
• Handle setup service auth failures by @betegon in #1076
• Stop reporting cancelled wizard prompts by @betegon in #1075
• Avoid stale resume replays by @betegon in #1064
• Validate apply-patchset paths generically by @betegon in #1042

Issue

• Validate org/project prefix in parseWithHash slash path by @BYK in #1049
• Handle GitHub-style #SHORTID in issue identifiers by @BYK in #1048

Other

• (cache) Atomic writes to prevent torn-read deletion of valid cache entries by @BYK in #1056
• (deps) Bump @sentry/api to 0.180.0 and fix downstream type errors by @betegon in #1066
• (local) Re-emit SIGINT/SIGTERM after cleanup in verify mode by @MathurAditya724 in #1073
• (stricli) Stop advertising -H as the --help-all alias by @BYK in #1057
• (upgrade) Resolve symlinks before self-copy guard in installBinary by @sergical in #1046
• Break circular import causing KNOWN_CURL_DIRS TDZ crash by @BYK in #1072
• Address unresolved review comments from #1058 by @BYK in #1067
• Address self-review findings from #1058 by @BYK in #1063
• Consolidate Cursor BugBot PRs (#908, #947, #973, #1023, #1044) by @BYK in #1051
• Preserve TTY in dev mode by inlining tsx invocation by @BYK in #1026

Documentation 📚

• (proguard) Note SHA-1 is required for v5 UUID, not security by @BYK in #1059
• Unify BugBot audit fixes and stop AGENTS.md tree drift by @BYK in #1050

Internal Changes 🔧

• (auto-paginate) Fix over-strict cursor contract at exact page boundary by @BYK in #1060
• (docs) Bump @sentry/starlight-theme to 0.7.0 by @sentry-junior in #1016
• Remove scratch migration doc, stale lore, and harden patch check by @BYK in #1062
• Regenerate docs by @github-actions[bot] in 297934ee