Release 2.1.165 (2026-07-24)

Features

• add per-repo allowed-actions override in vergil.toml (#2525) New [actions].extra-allowed-patterns list is unioned into the repo's GitHub Actions allowed-actions policy on top of the base + per-language defaults in desired_actions_permissions, so a single repo can permit a specific third-party action (e.g. dataaxiom/ghcr-cleanup-action@*) without a global pattern or a manual UI change the config audit would revert. Missing section is a no-op; non-list value errors. Refs vergil-project/vergil-tooling#2524.

CI Evidence: All gates passed — full audit bundle available. Download →