[github-actions]

🤖 I have created a release beep boop

0.29.0 (2026-11-05)

New Features

• audit: check bundled reference containment (#754) (4ededca)
• audit: detect sensitive destinations and unsafe deserialization (#753) (d699c3e)
• audit: detect whitespace padding that hides instructions (#755) (9b58248)
• audit: identify disguised executable headers (#756) (8d0a675)
• herdr: add a Hooks tab to the skillshare panel (#780) (5d05335)
• herdr: hide disabled rows, group In sync by source, and split the panel into testable modules (#782) (c677291)
• ui: show a skill's branch and switch it from the detail page (#784) (5e90cf4)

Bug Fixes

• projects: keep registrations in machine-local state (#769) (5dd9925)

---

This PR was generated with Release Please. See documentation.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	⚠️ Failed 2026-11-05T01:21:00.894697Z We couldn’t complete this review. Comment @codex review to try again.	0f72c99	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

[runkids]

The version is right: the range has one feat (#780), so 0.x bumps minor. Before merging:

1. Rewrite the generated changelog entry in both CHANGELOG.md and website/src/pages/changelog.md to match the 0.28.4 style (bold name, em dash, user-facing description). Also drop the extra blank line under the heading.
2. Update the Latest callout in README.md and the eight translated READMEs. It still announces v0.28.4.
3. Add specs/RELEASE_NOTES_0.29.0.md.

The Herdr docs for the Hooks tab already landed with #780, so nothing else is needed there.