Skip to content

Release 2.1.36 (2026-07-24)

Bug fixes

  • drop secrets: inherit from cd.yml (no publish, needs no secrets) (#657) The release job passes no language to cd-release.yml, so no package-publish step runs and no secret is used; replace blanket secrets: inherit with nothing (least-privilege). Resolves the semgrep secrets-inherit finding. Ref vergil-project/.github#189.

Features

  • add terminal finishing skill for the epic lifecycle (#661) New epic-retrospective skill: the run-once finishing gate that authors retrospective.md (backward-looking record partnering spec/plan). Preflight definition-of-done gate enumerates the epic's children and aborts unless the retrospective task is the only one open — the sole terminality enforcement, no static blocked-by. Drafts via the writing-plans model; closing docs PR closes the epic. Refs vergil-project/.github#201.

CI Evidence: All gates passed — full audit bundle available. Download →