v0.13.0

What's Changed

📖 Documentation

• [docs] Update documentation for features from 2026-05-08 by @danielmeppiel in #1205
• [docs] Update documentation for features from 2026-05-09 by @danielmeppiel in #1219

🔧 Other Changes

• chore(aw): bump microsoft/apm-action v1.7.1 -> v1.7.2 by @danielmeppiel in #1183
• feat(shared/apm.md): expose target input for slim per-harness bundles by @danielmeppiel in #1184
• fix(shared/apm.md): drop || 'all' fallback so gh-aw substitutes target (#1185) by @danielmeppiel in #1186
• fix(install,test): exclude cowork from --target all + stabilize defer-start timer test by @danielmeppiel in #1191
• ci(panels): pin target=copilot for pr-review-panel and triage-panel by @danielmeppiel in #1192
• fix(triage-panel): paginate scheduled sweep oldest-first via MCP by @danielmeppiel in #1193
• fix(triage-panel): use search_issues with -label:status/triaged for sweep by @danielmeppiel in #1194
• fix(install): accept YAML list form under singular target: key (#1188) by @danielmeppiel in #1197
• [cli-consistency] Fix CLI/docs inconsistencies from 2026-05-06 consistency report by @Copilot in #1174
• [Test Improver] tests(deps): add unit tests for deps CLI helper functions by @danielmeppiel in #1155
• support virtual packages on generic git hosts (Gitea) by @ganesanviji in #587
• fix(install): wire ADO --update preflight through PAT->bearer fallback (#1212) by @danielmeppiel in #1214
• fix(cli): add missing help text to outdated command by @danielmeppiel in #1216
• fix(errors): hide agent-skills meta-target from unknown-target suggestions (#1208) by @danielmeppiel in #1215
• fix: target-agnostic local-bundle install (#1207) by @danielmeppiel in #1217
• Add gh auth token fallback before git credential fill by @awakecoding in #630
• refactor(deps): introduce HostBackend Protocol + extract stamp_plugin_version by @danielmeppiel in #1223
• fix(auth): per-URL credential disambiguation + gh-cli short-circuit regression trap by @danielmeppiel in #1226
• fix: pass scope-resolved lockfile path to MCPIntegrator.update_lockfile at --global scope by @sergio-sisternes-epam in #1236
• fix: align direct install HTTPS validation with manifest-driven credential handling by @sergio-sisternes-epam in #1242
• fix: normalise default-scheme ports (443/80/22) on DependencyReference / HostInfo by @sergio-sisternes-epam in #1237
• fix: hide experimental cowork config key and fix verbose target log by @sergio-sisternes-epam in #1241
• Reject unsupported flat-format dependencies with actionable error by @sergio-sisternes-epam in #1189
• feat(install): add GitLab marketplace host support by @slava-kudzinau in #1149
• refactor(tests): marker-driven integration discovery (PR1 of #1166) by @danielmeppiel in #1167
• refactor(tests): retire script enumeration; pytest discovers tests/integration/ by @danielmeppiel in #1247
• docs(tests): codify integration-test marker procedure as APM instructions primitive by @danielmeppiel in #1249
• ci(smoke): replace runtime-binary smoke with README-promise smoke by @danielmeppiel in #1251
• Add 'apm update' command and '--frozen' install flag (closes #1203) by @danielmeppiel in #1244
• fix(install,tests): repair 63 integration tests in merge queue by @danielmeppiel in #1257
• fix(tests): repair 2 integration tests that surfaced post-#1257 by @danielmeppiel in #1261
• fix: add threading.Lock to _fallback_port_warned dedup set by @sergio-sisternes-epam in #1238
• fix: harden _is_github_server host validation to require hostname match by @sergio-sisternes-epam in #1239
• fix: emit Cursor-native MCP schema (type: stdio) instead of Copilot schema by @sergio-sisternes-epam in #1240
• perf(ci): shard + parallelize integration tests for ~5x speedup by @danielmeppiel in #1263
• fix(deps): fetch missing SHA-pinned commits into shallow bare clones by @sergio-sisternes-epam in #1259
• fix: accept full ADO https:// URLs with sub-paths (closes #1128) by @sergio-sisternes-epam in #1254
• fix: policy inheritance preserves parent unmanaged_files when child omits block (closes #1198) by @sergio-sisternes-epam in #1253
• fix(tests): mock search_servers fallback in registry-client UUID-not-found test by @danielmeppiel in #1264
• fix: apm install no longer adopts files not produced by installed plugins (closes #1199) by @sergio-sisternes-epam in #1256
• chore(release): v0.13.0 by @danielmeppiel in #1269
• fix(tests): hermetic HOME for unit tests on Windows runner by @danielmeppiel in #1270
• fix(deps): use --git-dir for bare repos + pin fetched SHAs as refs (#1267) by @sergio-sisternes-epam in #1268
• fix(tests): set hermetic HOME at conftest import time for Windows xdist workers by @danielmeppiel in #1271
• fix(tests): override Path.home() in root conftest so Windows xdist gw2 cannot crash by @danielmeppiel in #1272
• test(integration): retry transient MCP registry outages in mcp show/search by @danielmeppiel in #1274
• fix(tests): wrap Path.expanduser() to never raise on Windows runner by @danielmeppiel in #1276

New Contributors

• @ganesanviji made their first contribution in #587
• @awakecoding made their first contribution in #630
• @slava-kudzinau made their first contribution in #1149

Full Changelog: v0.12.4...v0.13.0