v1.9.4

Changelog

Features

• [feat] add Gradle CoW clone preset (#244)
• [feat] extend CoW clone presets to Rust target/ and Python .venv (#124) (#239)
• [feat] idempotent clean --merged + delete remote branch (#231) (#233)
• [feat] surface skipped nested symlinks in copy_files output (#242)
• [feat] thread cancellation context through git, hooks, and dep installs (#236)
• [feat] verify self-update integrity with checksum + guard release-asset contract (#235)

Bug Fixes

• [fix] Fix silent dependency-dir corruption in the CoW clone fallback (#240)
• [fix] harden concurrency: Collect auto-guard, --concurrency validation, filterDirtyWorktrees refactor (#238)
• [fix] isolate Unix-only process-group syscalls behind build tags (#247)
• [fix] rimba clean prunes all remotes, not just origin (#230)

Maintenance

• [chore] add -- separators to git arg lists (option-injection hardening) (#243)
• [chore] document settings.toml trust model + path-containment guard (#246)
• [chore] pin go1.26.3 toolchain, harden vuln gate (#232)

Other

• Bump github.com/mark3labs/mcp-go from 0.54.0 to 0.54.1 (#237)