Merge develop into main

.github/workflows/release.yml

@@ -7,7 +7,7 @@ on:
   workflow_dispatch:
     inputs:
       tag:
-        description: "Tag to package without publishing a release"
+        description: "Optional label for a manual packaging run; tag pushes publish releases"
         required: false
 
 permissions:
@@ -51,6 +51,10 @@ jobs:
         with:
           key: release-${{ matrix.target }}
 
+      - name: Pre-release repository health check
+        shell: bash
+        run: bash scripts/pre-release-check.sh
+
       - name: Build release binary
         env:
           HYPERLIQUID_DEFAULT_BUILDER_ADDRESS: ${{ vars.HYPERLIQUID_DEFAULT_BUILDER_ADDRESS }}

CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.11.0 - 2026-05-17
+
+Highlights:
+
+- Hardened order lifecycle safety for `--on-behalf-of` across cancel, cancel-all, modify, TP/SL, TWAP, and scheduled cancel flows so acting-account selectors are carried into lookups, dry-run previews, and live `vaultAddress` submissions.
+- Added prompt-gated safety for mainnet scheduled cancel-all actions, including `--yes` bypass support for intentional automation.
+- Clarified signer versus acting-account selector semantics in public docs and machine-readable schemas.
+- Preserved Hypersdk / Alloy 1 signer compatibility while allowing app-level Alloy 2 helpers and refreshed dependency pins for `hypersdk`, `alloy`, `rand`, `rpassword`, and `sha2`.
+- Refreshed QA command matrix fixtures and bounded subscription output checks for agent-safe automation.
+- Aligned release packaging and pre-release health checks for Linux, macOS, and Windows artifacts, plus self-update asset lookup for the supported Linux/macOS tarballs.
+
 ## 0.1.0 - 2026-05-15
 
 Initial public release of `hyperliquid-cli`.