v0.10.1

Released: June 30, 2026 · Download

🐛 Bug fixes / Improvements

Git subprocess calls resolve an absolute binary path

internal/shared/gitutil invoked git by name, letting the OS resolve the executable by searching PATH at exec time. All three call sites now resolve the absolute path once via exec.LookPath("git") before spawning the subprocess, closing a SonarQube security hotspot (go:S4036 — PATH must only be searched through a controlled API) in ChangedFilesSince, commitSHAs, and commitFiles.

Removed duplicated string literals

• The "~/.claude/" prefix, repeated across four hook-command constants in the skills installer, is now defined once as homeClaudeDirPrefix.
• The "(none)" fallback literal in check-docs.sh, repeated four times, is now defined once as NO_RESULTS.

Shell scripts use safer [[ ]] conditionals

check-docs.sh and next-version.sh switched from POSIX [ ] tests to bash’s [[ ]] construct, and the version-bump case statement in next-version.sh now has a default branch that fails loudly on an unexpected $BUMP value instead of silently falling through.

Removed a duplicate test

TestServerDaemonService_Start_SucceedsWithoutIndex had a body identical to TestServerDaemonService_Start_SpawnsAndSavesState. Since the service under test is fully mocked, it never actually exercised the “no index” scenario its name implied — removed as a no-op duplicate (SonarQube S4144).

🏗️ Architecture

No new architectural decisions in this release — all changes are implementation-level fixes with no persistent design tradeoffs.