v1.9.5

Changelog

Features

• [feat] consent gate before executing committed shell commands (#253) (#263)
• [feat] consolidate .rimba/*.local.toml gitignore entries under a single glob (#264)
• [feat] honor global --json flag in log (#260)
• [feat] merge auto-cleanup deletes the merged remote branch (#277) (#305)

Bug Fixes

• [fix] Avoid ambiguous bare task resolution (#291)
• [fix] Bound git status queries with a per-item timeout (#288) (#302)
• [fix] Close goroutine leak in update hint + add exec cobra-level test seam (#301)
• [fix] Force stable locale for git commands (#261)
• [fix] Handle same-name worktree rename (#262)
• [fix] Pin updater download URLs to trusted GitHub hosts (#281) (#296)
• [fix] Thread context through the git package (#283) (#299)
• [fix] Windows self-update: atomic binary replace (rename-aside) (#248)
• [fix] clean --force force-removes dirty merged/stale worktrees (#258)
• [fix] copy_files cannot escape worktree via symlinked dst component (#259)
• [fix] eliminate select race in checkUpdateHint (#301 regression) + test isolation (#303)
• [fix] prune stale remote-tracking refs during rimba clean --merged (#265)

Maintenance

• [chore] Sign release checksums and emit an SBOM (#297)
• [chore] bump golang.org/x/text from v0.14.0 to v0.38.0 (#295)
• [chore] fix stale swapBinary comment in updater.go (#249)

Other

• [perf] Fix IsSquashMerged object leak: replace commit-tree with patch-id (#300) (#304)