v1.10.0

Changelog

Features

• [feat] Accept fix as an alias for bugfix (#361)
• [feat] Auto-detect copy_files on rimba init (#363)
• [feat] Expand MCP parity — rename, merge-plan, log, archive, restore (#396)
• [feat] Honor --json in state-changing commands (#276) (#401)
• [feat] Make branch prefixes and aliases configurable (#364)
• [feat] Make default_source internal-only (#390)

Bug Fixes

• [fix] Add option terminators to remaining git rev-walk call sites (#379)
• [fix] Auto-recover stale index.lock after externally-killed sweep (#383) (#391)
• [fix] Distinguish absent vs malformed config; correct LoadDir doc (#398) (#400)
• [fix] Gate MCP list --archived behind requireConfig (#385) (#394)
• [fix] Harden git wrapper: separators, stream split, idempotency, cancellation, clean perf (#373)
• [fix] Reap subprocess tree on cancel; fail-safe unchecked worktrees (#397) (#403)
• [fix] Recover prunable worktrees and prevent stale index.lock on killed removals (#382)
• [fix] Refuse orphaned/duplicate BEGIN RIMBA markers in agent-file cleanup (#384) (#392)
• [fix] Repair orphaned worktree before removal so clean/remove fully clear it (#407)
• [fix] Retarget rimba duplicate --as / (#377) (#381)
• [fix] Separate gh subprocess stdout/stderr to prevent JSON corruption (#402)
• [fix] Surface cancelled dependency installs instead of dropping them (#406)
• [fix] Validate --as input in duplicate command (#370) (#375)
• [fix] Validate NewTask input in rename command (#371) (#378)
• [fix] Validate config in MCP server path (#365) (#376)
• [fix] Validate task name as safe git ref in add (#369)

Maintenance

• [chore] Add forced-bump flags to release script (#362)

Other

• Bump github.com/pelletier/go-toml/v2 from 2.4.2 to 2.4.3 (#358)
• Bump ruby/setup-ruby from 1.314.0 to 1.316.0 (#359)

v1.9.7

Changelog

Features

• [feat] Add --push flag to rimba rename (#350)
• [feat] Support changing branch type (prefix) in rimba rename (#341)

Bug Fixes

• [fix] Add Jekyll default layout so docs pages render with the theme (#327)
• [fix] Block option injection in git worktree add + add subprocess deadline (#330) (#345)
• [fix] Gate MCP clean/remove/status tools behind requireConfig (#267) (#356)
• [fix] Give each status --detail per-item op its own timeout budget (#351)
• [fix] Protect fresh worktrees from clean --merged (#335) (#336)
• [fix] Protect worktree operands with separator (#256)
• [fix] Refuse orphaned BEGIN hook markers instead of silently truncating (#332) (#354)
• [fix] Report fail-fast-aborted executor targets as Cancelled, not Err (#353)
• [fix] Serialize gitignore updates (#290)
• [fix] Stop feature cards breaking from nested heading anchors (#328)
• [fix] Thread ctx through clone chain so cp -R fallback is cancellable (#357)

Maintenance

• [chore] Surface mcp__rimba__* MCP tools in generated agent files (#352)
• [chore] Trigger Pages deploy on release tag + manual only, not every push to main (#344)

Other

• Bump actions/cache from 5 to 6 (#347)
• Bump actions/checkout from 6 to 7 (#337)
• Bump github.com/mark3labs/mcp-go from 0.54.1 to 0.55.0 (#338)
• Bump github.com/mark3labs/mcp-go from 0.55.0 to 0.55.1 (#346)
• Bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.0 (#340)
• Bump github.com/pelletier/go-toml/v2 from 2.4.0 to 2.4.2 (#348)
• Bump ruby/setup-ruby from 1.313.0 to 1.314.0 (#339)

v1.9.6

Changelog

Features

• [feat] MCP add tool: pr/branch parity with the CLI (#312)
• [feat] Support rimba --version as alias for rimba version (#324)

Bug Fixes

• [fix] Adopt cosign new bundle format for goreleaser signing (#326)
• [fix] Hoist docs brand palette so the dark stylesheet compiles (#323)
• [fix] MCP global registration targets ~/.claude.json so Claude Code reads it (#309)
• [fix] add: recovery hint when ListWorktrees fails post-create (#278) (#310)

Maintenance

• [chore] Add rimba context rules for Cline, Windsurf, and Gemini AI agents (#306)
• [chore] Apply errhint.WithFix in internal/mcp/ tool handlers (#271) (#311)
• [chore] Set up GitHub Pages docs site with just-the-docs (#313)

Other

• Bump actions/configure-pages from 5 to 6 (#316)
• Bump actions/deploy-pages from 4 to 5 (#317)
• Bump actions/upload-pages-artifact from 3 to 5 (#315)
• Bump sigstore/cosign-installer from 3.10.1 to 4.1.2 (#314)

v1.9.5

Changelog

Features

• [feat] consent gate before executing committed shell commands (#253) (#263)
• [feat] consolidate .rimba/*.local.toml gitignore entries under a single glob (#264)
• [feat] honor global --json flag in log (#260)
• [feat] merge auto-cleanup deletes the merged remote branch (#277) (#305)

Bug Fixes

• [fix] Avoid ambiguous bare task resolution (#291)
• [fix] Bound git status queries with a per-item timeout (#288) (#302)
• [fix] Close goroutine leak in update hint + add exec cobra-level test seam (#301)
• [fix] Force stable locale for git commands (#261)
• [fix] Handle same-name worktree rename (#262)
• [fix] Pin updater download URLs to trusted GitHub hosts (#281) (#296)
• [fix] Thread context through the git package (#283) (#299)
• [fix] Windows self-update: atomic binary replace (rename-aside) (#248)
• [fix] clean --force force-removes dirty merged/stale worktrees (#258)
• [fix] copy_files cannot escape worktree via symlinked dst component (#259)
• [fix] eliminate select race in checkUpdateHint (#301 regression) + test isolation (#303)
• [fix] prune stale remote-tracking refs during rimba clean --merged (#265)

Maintenance

• [chore] Sign release checksums and emit an SBOM (#297)
• [chore] bump golang.org/x/text from v0.14.0 to v0.38.0 (#295)
• [chore] fix stale swapBinary comment in updater.go (#249)

Other

• [perf] Fix IsSquashMerged object leak: replace commit-tree with patch-id (#300) (#304)

v1.9.4

Changelog

Features

• [feat] add Gradle CoW clone preset (#244)
• [feat] extend CoW clone presets to Rust target/ and Python .venv (#124) (#239)
• [feat] idempotent clean --merged + delete remote branch (#231) (#233)
• [feat] surface skipped nested symlinks in copy_files output (#242)
• [feat] thread cancellation context through git, hooks, and dep installs (#236)
• [feat] verify self-update integrity with checksum + guard release-asset contract (#235)

Bug Fixes

• [fix] Fix silent dependency-dir corruption in the CoW clone fallback (#240)
• [fix] harden concurrency: Collect auto-guard, --concurrency validation, filterDirtyWorktrees refactor (#238)
• [fix] isolate Unix-only process-group syscalls behind build tags (#247)
• [fix] rimba clean prunes all remotes, not just origin (#230)

Maintenance

• [chore] add -- separators to git arg lists (option-injection hardening) (#243)
• [chore] document settings.toml trust model + path-containment guard (#246)
• [chore] pin go1.26.3 toolchain, harden vuln gate (#232)

Other

• Bump github.com/mark3labs/mcp-go from 0.54.0 to 0.54.1 (#237)

v1.9.3

Changelog

Features

• [feat] Prune stale remote-tracking refs during rimba clean (#216)
• [feat] hooks installer: replace make hooks with scripts/setup.sh (preflight, --force, symlinks) (#202)

Bug Fixes

• [fix] promote flow: surface stash apply/drop errors instead of masking them (#213)
• [fix] unify partial-failure recovery and auto-abort failed merges (#214)

Maintenance

• [chore] Audit hardening: security + reliability fixes (#212)
• [chore] Extract update orchestration into internal/updater.Runner (#204)
• [chore] gitignore: ignore macOS .DS_Store (#218)

Other

• Bump actions/cache from 4 to 5 (#205)

v1.9.2

Changelog

Features

• [feat] Scripting affordances: --dry-run on destructive cmds and --skip-deps/--skip-hooks on rename (#197)
• [feat] add branch: task shape for worktree promotion (#198)

Maintenance

• [chore] Apply errhint.WithFix to remaining bare fmt.Errorf sites (#196)
• [chore] Bump github.com/mark3labs/mcp-go from 0.47.1 to 0.52.0 (#185)
• [chore] Bump github.com/pelletier/go-toml/v2 from 2.3.0 to 2.3.1 (#186)
• [chore] Ignore .claude/scheduled_tasks.lock (#199)
• [chore] Ignore vendor/ directory (#191)

Other

• Bump github.com/mark3labs/mcp-go from 0.52.0 to 0.54.0 (#192)

v1.9.1

Changelog

Bug Fixes

• [fix] Atomicity and collision handling in rename and duplicate (#171) (#187)
• [fix] Normalize / in duplicate, rename, restore (#182)
• [fix] Route diagnostic warnings to stderr; surface IsDirty errors (#189)
• [fix] Tokenize open shortcuts with shlex and return typed exit error (#169) (#188)

Maintenance

• [chore] Add CODE_OF_CONDUCT.md and SECURITY.md (#183)
• [chore] Add Dependabot for gomod and GitHub Actions (#184)
• [chore] Add GitHub issue templates (#167)
• [chore] Surface issue-link line in PR template as a named section (#168)

v1.9.0

Changelog

Features

• [feat] 3-tier agent file installation (user/team/local) replacing --agent-files (#134)
• [feat] Add --debug persistent flag for runtime diagnostics (#113)
• [feat] Add --detail flag to rimba status for disk usage and velocity (#129)
• [feat] Add --full PR/CI columns to rimba list (#131)
• [feat] Add action hints to rimba status output (#114)
• [feat] Add errhint.WithFix helper and apply to user-facing errors (#118)
• [feat] Add internal/gh package for CLI detection and auth (#130)
• [feat] Create worktree from GitHub PR (rimba add pr:) (#138)
• [feat] Hint to refresh agent files after rimba update (#135) (#137)
• [feat] Install dependency modules in parallel (#112)
• [feat] Register rimba MCP server in agent configs during init -g (#136)
• [feat] Validate config invariants early via Config.Validate() (#117)

Bug Fixes

• [fix] Use PureTaskFromBranch for monorepo-aware task display (#128)

Refactoring

• [refactor] Apply errhint.WithFix consistently to all user-facing errors (#148) (#161)
• [refactor] De-duplicate mcpreg register/unregister and JSON/TOML paths (#144) (#157)
• [refactor] Delete deprecated agentfile shims and collapse installBlock (#152)
• [refactor] Extract operations.ListWorktrees use case shared by cmd and MCP (#133)
• [refactor] Extract validateTypeFilter/typeFilterCompletion + move listArchivedBranches (#147) (#160)
• [refactor] Form template method for cleanMerged/cleanStale pipelines (#145) (#158)
• [refactor] Introduce PostCreateOptions and split add RunE (#141) (#154)
• [refactor] Introduce initMode type and split RunE into dispatchers (#142) (#155)
• [refactor] Introduce resolver.TaskAndType helper to de-duplicate display sites (#153)
• [refactor] Move status dashboard orchestration into operations.StatusDashboard (#143) (#156)
• [refactor] Split agentfile.go into specs/install/block/status (#146) (#159)
• [refactor] Split long cmd/list, clean, exec into helpers (#115)
• [refactor] Test-hygiene: dedupe helpers, parameterize repeated cases, split init_test.go (#149) (#162)

v1.8.1

Changelog

Features

• [feat] Add debug timing for dependency installation (#107)

Refactoring

• [refactor] Redesign CLI banner with cleaner block letter font (#109)
• [refactor] Restructure version output with OS and arch info (#111)
• [refactor] Unify ProgressFunc into shared progress package (#108)