chore: release main

[github-actions]

🤖 I have created a release beep boop

1.9.0

1.9.0 (2026-05-22)

Features

• add Zed, Claude Code/Desktop, komorebi support and refactor choco management (3785100)
• skills: distribute via vercel-labs/skills + modify_ migrations (#72) (9d35651)
• ssh-signing: Windows commit signing via ssh-tpm-agent (#73) (4d5825f)

Bug Fixes

• add missing chezmoiignore entries and document Zed MCP target (4429c77)
• git: create global gitignore to suppress Claude Code worktree artifacts (#89) (6ebface)
• git: use cross-platform null hooks path on Windows (#68) (5032e2f)
• komorebi: stop tiling Claude Desktop folder picker dialogs (eeba5da)
• lint: exclude chezmoi modify_*.json templates from JSON linters (#76) (ab638f2)
• lint: exclude vendored rtk.ts from ts-standard (#77) (6f7dc5f)
• lint: forward GITHUB_TOKEN to zizmor for action audits (#84) (9ac5b8d)
• scripts: quote suffix expansion in choco-review (SC2295) (#75) (286fcef)
• test: align choco-review bats assertion with script (#74) (232c441)
• windows-bootstrap: unblock Windows E2E CI by propagating CI=1 to WSL (#78) (0e40f7d)
• windows: place mise-shim.exe next to choco-installed mise.exe (42529ba)
• workflows: re-enable zizmor; fix template-injection and unpinned-image findings (#88) (d43cd05)
• workflows: set persist-credentials: false on actions/checkout (#85) (74d1576)

Miscellaneous

• agents: add 'diagnose from logs, not theory' to global rules (defe9b7)
• agents: add rule for inspecting PR diffs against origin/main (146de93)
• agents: add rules for branch verification and stale git lock files (2611695)
• agents: add Windows path and mise-trust rules from retrospective (8498a62)
• agents: anchor subagent bash commands to the worktree path (e5c68eb)
• agents: apply quality audit findings to memory files (08e400d)
• agents: apply review fixes to global rules (ae8a7e8)
• agents: capture two retrospective lessons (9b034ce)
• agents: check for prior work before starting a fix (e48f44e)
• agents: forbid disabling linters/tests to make CI green (5dd632c)
• agents: gate Cursor/Codex/Claude tools to private systems (#71) (2f6a039)
• agents: generalise perf rule to one-sample-is-not-a-measurement (3d12da5)
• agents: merge clone-related rules into single authoritative-source rule (a8b43ef)
• agents: move Twilio IaC lessons to project-local memory (29a4062)
• agents: no amend or force-push after PR is open (977734e)
• agents: note mise GOBIN drift for go install fallbacks (8cb1c59)
• agents: note that git hooks need mise activation (9a48894)
• agents: pull project-specific rules out of global memory (ec0c027)
• agents: reconcile scaffolded output + Windows git exec bit (4c00709)
• agents: require delivering the value, not instructions to derive it (3c706f8)
• agents: require variance + thread-pinning for perf recommendations (f3fc372)
• agents: tighten global AGENTS.md after audit (#82) (078f788)
• agents: verify IaC exporters and browser vs shell auth (bc50ae5)
• agents: warn against chezmoi apply --source <worktree> (aa8ca93)
• ci: cancel in-flight E2E install runs when a PR is closed (#86) (6aee9a5)
• ci: full-scan MegaLinter on its own Renovate update PRs (#81) (795fea6)
• deps: update dependency @tarquinen/opencode-dcp to v3.1.12 (#58) (f85694f)
• deps: update dependency chezmoi to v2.70.3 (#60) (06e8c74)
• deps: update dependency chezmoi to v2.70.4 (#90) (b633440)
• deps: update dependency chrome-devtools-mcp to v1 (#79) (7078d53)
• deps: update dependency google/go-containerregistry to v0.21.6 (#83) (3184ea6)
• deps: update dependency macos to v26 (#69) (f21ae06)
• deps: update dependency smart-mcp-proxy/mcpproxy-go to v0.32.1 (#63) (831324d)
• deps: update dependency smart-mcp-proxy/mcpproxy-go to v0.33.1 (#92) (7724e04)
• deps: update dependency uv to v0.11.15 (#61) (09ed83e)
• deps: update dependency uv to v0.11.16 (#91) (ab48231)
• deps: update ghcr.io/chipwolf/badgesort docker digest to e0542e4 (#62) (c355a4e)
• deps: update github/codeql-action digest to 9e0d7b8 (#59) (c05bdc9)
• deps: update mcr.microsoft.com/devcontainers/universal docker tag to v6.0.4 (#80) (608f81c)
• deps: update oxsecurity/megalinter action to v9.5.0 (#70) (68afd67)
• renovate: restrict update PRs to Friday 11am-1pm window (003cab3)
• skills: scope memory skill chezmoi apply to AGENTS.md only (b6f80f1)

---

This PR was generated with Release Please. See documentation.