7.2.0 (2026-08-25)

Features

• expose pull request labels in metadata JSON (297d58f)

Bug Fixes

• adjust --cleanup to close PRs (c53f184)

7.1.0 (2026-08-10)

Features

• report GraphQL error details (d498aa2)

Bug Fixes

• filter check suites to GitHub Actions (812f207)

7.0.3 (2026-08-10)

Bug Fixes

• git-node: update regex to support GitHub App installation tokens (#1156) (1baf447)

7.0.2 (2026-08-09)

Performance Improvements

• query CI metadata only for pull request head (b470600)

7.0.1 (2026-08-08)

Bug Fixes

• build: retrieve dependency packages for npm bundle (#1148) (4dcb93c)
• remove fast-tracking from code-and-learn (#1149) (8929f69)

7.0.0 (2026-08-07)

⚠ BREAKING CHANGES

• remove npm shrinkwrap, bundle package dependencies (#1135)
• ncu-ci: remove --copy flag (#1140)
• remove deprecated get-metadata entrypoint
• v8: synchronize Rust crates with major updates (#1117)
• drop support for Node.js 20 and 25 (#1072)

Features

• add confirmation steps to any write operation (#1092) (07d5ba0)
• add metadata JSON readiness output (#1113) (a22e127)
• git-node: add git node benchmark (#1114) (eb405a1)
• git-node: add git node security --apply-patches (#1050) (bf990ac)
• git-node: select security release PRs from affectedVersions (#1124) (72bf756)
• improve DX of request-cves (#1120) (f2f4ac5)
• security: add include-all report selection mode (#1111) (e4a7c7d)
• security: offer Tuesday release date choices (#1110) (1f46846)
• support affectedVersions as object (#1118) (c3b9dc6)
• v8: synchronize Rust crates with major updates (#1117) (78e1dbb)

Bug Fixes

• add announcement ref to top-level vuln json (#1119) (3017208)
• adjust changelog on security releases (9ccbe8e)
• borrow generateAmendedMessage in CherryPick (#1125) (5b3296a)
• cherry-pick the landedCommitSha for security releases (eabfbde)
• git-node: add missing exit loop condition (#1101) (2d1085f)
• git-node: fix security release preparation (e828716)
• git-node: fix SSH passphrase input when promoting a release (#1097) (10c6f35)
• git-node: prefill both patch and minor versions when requesting CVEs (#1095) (0ead0a1)
• git-node: security release preparation should not use staging (#1096) (4ad397f)
• handle affectedVersions as object for post-release (#1122) (c263c2a)
• remove the separator for dep update (#1112) (67fbf88)
• v8: set RUSTC_BOOTSTRAP=1 when using Cargo nightly features (#1127) (828f427)
• wpt: avoid test/fixtures/wpt/README.md conflicts (d9fff73)

Miscellaneous Chores

• drop support for Node.js 20 and 25 (#1072) (c564d81)
• ncu-ci: remove --copy flag (#1140) (490362f)
• remove deprecated get-metadata entrypoint (438f78d)
• remove npm shrinkwrap, bundle package dependencies (#1135) (b7939d2)

6.4.0 (2026-05-13)

Features

• check for reports without PR_URL on H1 (#1074) (20f60af)
• v8: add llvm-libc to V8 deps (#1073) (54be933)

6.3.3 (2026-04-27)

Bug Fixes

• git-node: handle multi-line trailers (#1062) (f131b09)

6.3.2 (2026-04-14)

Bug Fixes

• git-node: handle single-line commit messages (#1059) (f510b8a)

6.3.1 (2026-04-11)

Bug Fixes

• git-node: fix handling of existing trailers (#1056) (d958465)