chore(main): release 1.29.0

[github-actions]

🤖 I have created a release beep boop

1.29.0 (2026-08-25)

Features

• codex: promote Terra runner defaults (#2904) (cbd8673)
• consumers: register stranske/Orchestrator, protect its agent rules, fix routing-label drift (e704e16)
• deps: preserve agent repairs through promoted dependency PRs (#2853) (090a222)
• fleet: issue-format guard synced to every consumer repo (#2956) (7084d97)
• issue-format: fail issues whose cited paths exist in no repo tree (#2990) (e63314d)
• langsmith: add observable pause and freshness protocol (5489120)
• langsmith: add observable pause and freshness protocol (bf7cd4f)
• maint-87: add the missing caller for docs_drift_fix_agent (1313499)
• maint-87: add the missing caller for docs_drift_fix_agent (5de68c8)
• maint: batch canonical dev-tool updates (#2902) (4445fd7)
• model-policy: exempt un-harvestable categories from the 10-case floor (#2873) (a84a558)
• model-promotion: teach model_family a github-models publisher rule (#2855) (4464b6b)
• record typed completion evidence for shadow sync (#3056) (508dedf)
• renovate: bound fleet maintenance intake (#2893) (18f25a9)
• renovate: stop consumer Renovate from editing Maint 68-owned files (#2892) (22f2393)
• runtime: report consumer sync shadow state (#3074) (5befd18)
• sync: deliver managed .gitignore block via maint-68 consumer sync (#3151) (803bc8b)
• sync: deliver the managed .gitignore block to consumer repos (#3148) (3e9528c)
• sync: gate fleet fan-out on consumer canaries (#2886) (40dd4e8)
• sync: lease generated delivery attempts (#2895) (d1e5020)
• sync: onboard iamkayleb/bukay and repoint consumer templates at this fork (6393963)
• sync: publish maintenance efficiency SLOs (#2896) (9c49bc6)
• sync: publish trusted delivery seal action (#3108) (632eb20)
• sync: reconcile generated delivery handoffs (#2898) (f425c5c)

Bug Fixes

• accept newer PyYAML prereleases safely (#2953) (e46735e)
• actions: allowlist credentials in PR-triggered workflows (0367e18)
• agents: address corrected sync review debt (#3033) (8e716a4)
• agents: address sync review debt (#3005) (4b20bd3)
• agents: address sync review debt (#3022) (5b8018c)
• agents: address sync review debt (#3024) (659e0d8)
• agents: align formatter and deliberate-break parsing (#3014) (9a1d71e)
• agents: cap issue-format optimizer retries (#2998) (2d664ed)
• agents: classify conventional local PR branches (#3008) (7a1347e)
• agents: exempt closed issues from the format guard (#2997) (e442592)
• agents: fail closed format guard revalidation (fdc561a)
• agents: harden format guard review findings (#2995) (b9c8ac4)
• agents: make the optimizer recursion guard actually correlate runs (#2993) (54d8b9e)
• agents: preserve format guard recovery (#2985) (d4478ef)
• agents: preserve formatter refinement diagnostics (#3012) (d396cd0)
• agents: release failed format leases safely (#3001) (97df654)
• agents: skip closed issue bridge events (#2982) (6b1b9ba)
• agents: stop the format guard inverting its own label checks (#2994) (d49a908)
• agents: surface formatter errors in sync consumers (#3019) (e6b4733)
• allow Maint 71 delivery reconciliation (#3131) (6e9f703)
• auth: keep health failure gate runtime-safe (#3073) (d20cec7)
• auth: reject unusable Codex secret updates (#3071) (75d4bf1)
• benchmark: qualify unknown-category errors (c8e1cbc)
• benchmark: qualify unknown-category errors (bb0585b)
• benchmark: reject non-integer category floors (22fe516)
• branch-protection: assert the reviewed policy instead of an aspirational one (#2888) (2321dbe)
• branch-protection: stop requiring a conditionally-posted status context (#2872) (3bf9a1a)
• ci: avoid brittle script interpolation allowlist (d98af5e)
• clarify issue format guard label message (#2971) (9180ebd)
• close the review findings that landed after their PRs merged (#2890) (6b845c2)
• consumers: vendor config into consumer LLM workflows (a87536c)
• defer PyYAML repair until needed (c684142)
• defer PyYAML repair until needed (019b17b)
• deps: align canonical coverage 7.15.4 pins (#2966) (963b1f0)
• deps: align canonical ruff 0.16.2 pins (#2975) (fce14d4)
• deps: align mypy 2.3.1 pins (#3092) (655780b)
• deps: align Ruff 0.16.4 source pins (#3140) (bfcd3c6)
• deps: promote Renovate verifier CLI repair (#3030) (9e933c3)
• deps: route promotion PR source context (#2857) (8497346)
• deps: update non-major updates (#2845) (097dd9d)
• deps: update Ruff to 0.16.3 (#3081) (770c226)
• distinguish tamper timeouts and pytest launchers (092cc89)
• distinguish tamper timeouts and pytest launchers (290a99d)
• docs: preserve consumer repair boundaries (1aedb2f)
• docs: separate root and consumer retry guides (ddcb6ad)
• docs: support consumer drift planning (13b51ab)
• docs: support consumer drift planning (f5f96ee)
• enforce ready-for-review automation PRs (83023d3)
• enforce ready-for-review automation PRs (0f733c8)
• externalize Maint 71 merge script (#2965) (3c41b10)
• gate: accept python t compatibility flag (562bb34)
• gate: accept PyYAML post releases (a403abb)
• gate: admit minimal nested uv pytest (e04f5b8)
• gate: align PyYAML runtime checks (cb0bc5a)
• gate: align PyYAML runtime checks (3b3c951)
• gate: attribute base setup failures accurately (a78adc1)
• gate: attribute base setup failures accurately (b00f873)
• gate: avoid local dependency mutation (bd20e7c)
• gate: avoid repairing site-disabled Python (6966daa)
• gate: bind repairs to active interpreter (57d8acf)
• gate: dedupe in-flight issue formatting (#2981) (b284230)
• gate: detect pytest-prefixed import failures (038d110)
• gate: distinguish yaml test failures (e35a421)
• gate: distinguish YAML test failures (0bffde5)
• gate: fetch classifier base once (3857adf)
• gate: fetch classifier base once (0962d16)
• gate: force reinstall broken PyYAML (5f87a7d)
• gate: handle tamper OS failures (54ce915)
• gate: handle tamper OS failures (3ebffdd)
• gate: handle uv pytest module mode (9cde407)
• gate: harden issue format routing (#2979) (ae3e198)
• gate: harden runtime review fallbacks (1c42c38)
• gate: harden runtime review fallbacks (84879ce)
• gate: harden runtime review fallbacks (#2928) (1c42c38)
• gate: inspect interactive probe errors (75b02aa)
• gate: install PyYAML only on demand (7fe8bc6)
• gate: install PyYAML only on demand (59a4cf8)
• gate: isolate flagged runtime dependency checks (15fcd38)
• gate: mirror and distinguish command launch errors (cc6ce7a)
• gate: mirror error-attribution repair to consumers (c19a139)
• gate: narrow PyYAML retry detection (767bdc7)
• gate: normalize pytest runtime before comparison (d72163d)
• gate: normalize wrapped commands in Actions (c9d39ec)
• gate: omit interactive -i from PyYAML probes (7565dfe)
• gate: parse compact python option groups (dd6e805)
• gate: parse compact python selectors (428b5fa)
• gate: parse python selector boundaries (c91ae65)
• gate: preserve issue format guard setup failures (bb2342d)
• gate: preserve issue format guard setup failures (712791f)
• gate: preserve pytest interpreter flags (5f94457)
• gate: preserve uv run options in probe (2ea1ba3)
• gate: probe nested uv python pytest (f565934)
• gate: probe pytest launcher interpreter (70d5f22)
• gate: probe wrapper yaml runtime (a024c6f)
• gate: recognize flagged managed pytest (96d6c19)
• gate: recognize flagged managed pytest (4682650)
• gate: reject non-python pytest shims (0fc7c72)
• gate: reject unknown python long options (9b55d39)
• gate: reject unmanaged YAML tracebacks (66b6106)
• gate: reject wrapper-owned dependency repair (2efd2e2)
• gate: require import context for yaml repair (be0c08b)
• gate: require yaml probe success sentinel (0d34a5e)
• gate: resolve general pytest launchers (1dfb886)
• gate: satisfy consumer mypy (b56d9d6)
• gate: serialize archive command failures (76033f4)
• gate: serialize archive command failures (1bfdeba)
• gate: stop at compact python selectors (a362635)
• gate: stop at python program selector (a2c82d4)
• gate: stop at python stdin selector (250c01b)
• gate: support attached pytest module selectors (152501e)
• gate: surface issue format validator errors (#2973) (f372eb2)
• gate: validate python hash policy (0a4692d)
• harden auto-pilot stall handoffs (#2826) (31339e1)
• harden dependency repair promotion trust (#2867) (085c707)
• harden issue-format guard review follow-ups (#2963) (da4ba1d)
• harden probes and verifier content (#2951) (65dd1de)
• harden release and verifier automation (#2955) (ecda8dd)
• harden synced issue format guard (#2969) (202f75f)
• honor paused issue automation and align format validator (#2960) (ebc3f8c)
• issue-format: accept tilde provenance fences (#3064) (a246288)
• issue-format: address final sync review findings (dc0d12d)
• issue-format: close validation gaps (4ee9e1b)
• issue-format: close validation gaps (1054a6f)
• issue-format: handle nested fences and format retry (#3036) (0581e62)
• issue-format: preserve Markdown fence semantics (ed5b03a)
• issue-format: recheck eligibility in optimizer (8fe2a8e)
• issue-format: validate consumer path context (9a03648)
• issues: enforce formatter acceptance validation (#2999) (6e7289a)
• issues: harden formatter contract handling (#3004) (102f1fb)
• keepalive: complete authority challenges (#3066) (a4bbb67)
• keepalive: default recovery to followups hub (ea1354a)
• keepalive: default recovery to followups hub (743bbe1)
• keepalive: preserve trusted PAT fallback (f617f83)
• keepalive: preserve trusted running writer (#3100) (52425ef)
• keepalive: trust only automation state comments (#3077) (590ae80)
• keepalive: use app token in failure reporter (#3105) (c4291b0)
• labels: one inventory for routing labels, and document them (#3164) (abed7c4)
• labels: restore document documentation alias (#3162) (8774b59)
• labels: sync core labels with a cross-repo token and fail the job on write errors (#3011) (d77080c)
• langchain: complete label and review contracts (#3160) (e3ca998)
• langsmith: close observability security findings (5f19772)
• langsmith: harden observability sentinel (b8710da)
• langsmith: publish dashboard without branch writes (f2d534b)
• langsmith: publish dashboard without branch writes (f53f225)
• langsmith: route dashboard input through env (20c7477)
• langsmith: validate pause health metadata (4e54ac2)
• llm-config: propagate the advanced selections to the consumer template (#2874) (3d57222)
• maint-87: address docs drift review findings (6266d3c)
• maint-87: address generated review findings (#3146) (bdb7f2e)
• maint-87: close post-push review gaps (e5cad91)
• maint: close #2882 verifier CONCERNS gaps (#2903) (1e303fc)
• meta: suppress issue links for dependency promotions (#2862) (f2d406b)
• mirror deferred runtime repair template (c7c1072)
• model LangSmith fleet evidence states (#3098) (b5b40e5)
• port auto-label campaign guards to consumers (#2851) (9959061)
• preserve consumer Ruff selections with 0.16 (#2840) (fdd8007)
• preserve CRLF for Windows command files (#2859) (1ad4624)
• reconcile explicit admin deliveries (#3132) (f7afdbd)
• recover legacy draft automation PRs (b8634c0)
• remove checker packaging dependency (fa35a93)
• remove checker packaging dependency (0b61c07)
• request Actions capability for auto-pilot create-pr dispatches (#2870) (b232bb1)
• request Actions capability for auto-pilot handoff (#2869) (81e5821)
• require signed consumer sync commits (#3052) (633d14a)
• restore agent rail startup recovery (#2957) (7258187)
• retain ignored llm registry tier parameter (#2837) (885905e)
• retain upgraded LLM provider pins (#2838) (cb78bf2)
• reusables: vendor the helper layer from this fork, not upstream (e0c0aa0)
• runners: preserve local action through post cleanup (dbb47fd)
• runners: prevent checkout credential persistence (7bd614b)
• security: pass belt-dispatcher workflow_dispatch inputs via env instead of script interpolation (#3127) (33a0ad6)
• separate launcher probe typing (718539e)
• separate launcher probe typing (669d1da)
• sync managed pre-commit tool pins (#3050) (eec4180)
• sync: address canary review findings (#3070) (bae175a)
• sync: address generated review findings (38cf00e)
• sync: address generated review findings (561bbce)
• sync: address generated review findings (561019a)
• sync: address generated review findings (9f153da)
• sync: address generated review follow-ups (33e634e)
• sync: address generated review follow-ups (4d0a2d4)
• sync: anchor delivery seal outside PR checkout (#3107) (de3246a)
• sync: bind canary handoff to exact plan (#3118) (3e4d09e)
• sync: bind full promotion to canary source (#3124) (9ec471f)
• sync: bind review window to head publication (9ba09a8)
• sync: carry delivery contract with path classifier (#3117) (8b3ef5f)
• sync: clarify generated validation contracts (802706a)
• sync: clarify generated validation contracts (cf04387)
• sync: classify covered consumer drift (#2885) (79db012)
• sync: classify Trend preset data as python (04c9a37)
• sync: classify Trend preset data as Python (b7ed9ff)
• sync: close #2881 verifier CONCERNS gaps (#2900) (df80ffd)
• sync: close delivery review regressions (#3054) (61ade7f)
• sync: converge delivery in stable reviewed PRs (#3049) (5e4e627)
• sync: count timestamped reviewer statuses (#3078) (e15e03c)
• sync: discover required checks from rulesets (a361501)
• sync: discover required checks from rulesets (ac0376c)
• sync: enforce canary promotion boundary (f2671b6)
• sync: enforce canary promotion boundary (2712b02)
• sync: enforce exact-head review window (46a5d77)
• sync: gate every candidate merge path (fd61d71)
• sync: grant app token PR read access (bcf5fd1)
• sync: harden candidate branch inputs (a36357f)
• sync: harden consumer review fallbacks (258f761)
• sync: honor consumer merge methods (090646e)
• sync: honor consumer merge methods (20748fb)
• sync: honor upstream AGENTS source sections (#3143) (0eacef4)
• sync: isolate delivery scope and measure convergence (#3086) (4a0bf77)
• sync: isolate existing PR lookup from owner PAT quota (272afa1)
• sync: isolate existing PR lookup from owner PAT quota (610d98e)
• sync: keep delivery holds out of autofix (75d7a6d)
• sync: keep delivery holds out of autofix (a5450f8)
• sync: keep label docs consumer-specific (e09fbb4)
• sync: keep retired Trend packages removed (#3144) (d7824f3)
• sync: make canary evidence durable before merge (480393f)
• sync: make delivery and consumer gates truthful (#3084) (017688f)
• sync: make docs drift checks consumer-safe (#3142) (593951e)
• sync: make generated delivery lifecycle self-resuming (#3096) (3ddc9ee)
• sync: narrow Maint 71 merge-method fallback classifier (6f7c9a2)
• sync: persist canary evidence before merge (3585d8a)
• sync: persist generated autofix hold (66e9de1)
• sync: persist generated autofix hold (2ca99cc)
• sync: persist Maint 71 delivery handoffs (#2899) (5b7a926)
• sync: pin bootstrap delivery contract source (68abfc5)
• sync: pin bootstrap delivery contract source (139cdce)
• sync: preserve bootstrap bytes in consumer template (#3103) (105cb4a)
• sync: preserve bootstrap contract bytes (#3091) (fe7ca61)
• sync: preserve CRLF for consumer command launchers (5874c5e)
• sync: preserve CRLF for consumer command launchers (a593776)
• sync: recover terminal keepalive stops (#3072) (60a0826)
• sync: release candidates past actionable deliveries (#3111) (eede091)
• sync: repair broken PyYAML runtime installs (c86c08e)
• sync: repair broken PyYAML runtime installs (65fdd93)
• sync: repair generated review and dependency drift (#2908) (e92136d)
• sync: restore delivery and keepalive writer auth (#3109) (ed985d6)
• sync: retire consumer orchestration fallbacks (59ba349)
• sync: retire consumer orchestration fallbacks (5b95f22)
• sync: safely refresh matching leased deliveries (#2901) (376c3d7)
• sync: seal fleet delivery before merging (#3120) (c2e1007)
• sync: terminate exact-tree no-change deliveries (#3126) (5bbdf0f)
• sync: trust base seal contract and visible issue body (#3061) (f2e01a6)
• sync: unblock trusted delivery bootstrap (#3079) (ed57289)
• sync: update behind generated branches before merge (#3047) (d944013)
• sync: use canonical required-check fallback (5b52677)
• tasks: preserve slash-separated subjective prose (#3038) (73a3ab1)
• verifier: narrow response coercion errors (82a3684)
• verifier: narrow response coercion errors (5d56c56)
• verifier: normalize structured provider content (#2887) (2e3e5b3)
• verifier: preserve ordinary coercion fallback (3c22c3e)
• verifier: preserve split-block whitespace (76c9383)
• verifier: repair #2904 review residue (21d6459)
• verifier: vendor the LLM model registry into .workflows-lib (#2850) (fa2253e)
• workflows: complete #3016 interpolation triage follow-up (#3023) (afc2463)
• workflows: isolate free-text workflow inputs (#3020) (59e3312), closes #3016

Performance Improvements

• verifier: avoid copying response blocks (7f413be)

---

This PR was generated with Release Please. See documentation.