v0.49.0-marketplace

Marketplace release

v0.49.0

What's Changed

• perf(goldmark): arena Heading/ListItem + research the parity-vs-gomarklint gap by @jeduden in #614
• docs(bench): lazy-parse research + staged plans to beat gomarklint in parity by @jeduden in #615
• refactor(arch): extract buildpathutil to break build→rules DIP violation by @jeduden in #616
• security: clear Dependabot alert #2 (critical wish SCP path traversal) + harden VS Code dev deps by @jeduden in #618
• test(index): make TestParallelBuildSpeedup tolerant of CI contention by @jeduden in #620
• docs: complete the gomarklint comparison (benchmark + linter-comparison page) by @jeduden in #613
• docs(plan/145): record mise PR rejection and blocked-upstream status by @jeduden in #612
• perf: eliminate per-line allocation copies and separator allocs in five rules by @jeduden in #619
• ci: upload security-audit SARIF to code scanning by @jeduden in #621
• Spike: block-only parse cost vs gomarklint (plan 2606141901) by @jeduden in #622
• docs: fill PGO catalog title by @LIghtJUNction in #624
• Add GitHub Actions distribution channel by @jeduden in #623
• Remove deprecated engine wrappers for checker and lint by @jeduden in #625
• Add per-function unit tests for secreview/report.go by @jeduden in #627
• Fix action.yml for GitHub Marketplace publish validation by @jeduden in #629

New Contributors

• @LIghtJUNction made their first contribution in #624

Full Changelog: v0.48.0...v0.49.0

v0.48.0

What's Changed

• perf(catalog): record front-matter fast-scan profiling deltas by @jeduden in #610
• docs(bench): link performance page to the assets-branch benchmark write-up by @jeduden in #611

Full Changelog: v0.47.0...v0.48.0

v0.47.0

What's Changed

• perf: cut check CPU across YAML, gitignore, glob, and word-count hot paths by @jeduden in #600
• security: full-repo audit 2026-06-12 — 1 medium, 4 low, 2 info by @jeduden in #599
• security: MDS040 gate hardening and rename symlink write-through fix (S002, S007) by @jeduden in #601
• fix(hooks): add lstat guards to pre-merge-commit hook install/uninstall/status (S001) by @jeduden in #602
• feat(build): build execution UX — stream capture, diagnostics, --build-stream/explain/verify/jobs, log retention by @jeduden in #595
• feat(linkgraph): memoize Links and Images extraction on File by @jeduden in #603
• security: remove GOPATH fallback from merge-driver resolver, add shellQuote roundtrip tests (S002, S003) by @jeduden in #604
• perf(catalog): fast-path front-matter reads for flat-scalar files by @jeduden in #608
• perf: five allocation-budget fixes across hot paths by @jeduden in #606
• perf(engine): pool per-file source-read buffer to cut top allocator by @jeduden in #607
• fix(release): verify komac SHA256 and fix broken download URL by @jeduden in #605
• plan: mark 2606130836 done — PR #607 merged by @jeduden in #609

Full Changelog: v0.46.0...v0.47.0

v0.46.0

What's Changed

• Code-review round 2: pin the soft-skip contract against release.yml, harden gate surfaces, drift-proof benchmark prose by @jeduden in #593
• feat: build lifecycle hooks (before/after) — plan 104 by @jeduden in #589
• feat(release): generate PGO profile inside release pipeline by @jeduden in #594
• refactor: consolidate tinygo compat stubs into internal/oscompat by @jeduden in #588
• docs: add gomarklint to the peer-linter comparison by @jeduden in #597
• close plan 234: mark Scoop/WinGet distribution complete by @jeduden in #596
• feat(build): build execution hardening (trust gate, hermetic env, atomic write, post-conditions) by @jeduden in #590
• perf: pre-size cell slices, map[string]struct{} sets, and dead code removal by @jeduden in #598

Full Changelog: v0.45.0...v0.46.0

v0.45.0

What's Changed

• ci(release): fix the two jobs that reddened the v0.43.0 release run by @jeduden in #591
• Code-review fixes for #591: enforce the soft-skip contract, fix the vs-mado denominator, refresh stale prose by @jeduden in #592

Full Changelog: v0.43.0...v0.45.0

v0.43.0

What's Changed

• docs: recommend mise github backend over deprecated ubi by @jeduden in #583
• ci(release): smoke-test asdf install and bare mise@VER channels by @jeduden in #573
• perf: five high-performance-go fixes — map[K]struct{}, pre-sized slices, O(n) alloc removal by @jeduden in #585
• test(wasm): harden tinygo size test to match production build by @jeduden in #584
• perf: follow-up fixes from code review of #585 by @jeduden in #586
• perf: drive the release benchmark to parity-at-mado and full-config ≤3x by @jeduden in #587

Full Changelog: v0.42.0...v0.43.0

v0.42.0

What's Changed

• feat(cuelite): phase 3 — in-house row-expr evaluator, cuetemplate off cuelang (plan 239) by @jeduden in #572
• feat(cuelite): phase 4 — in-house parser, drop cuelang.org, WASM budgets (plan 240) by @jeduden in #574
• ci: bump pinned mdsmith baseline to v0.41.0 by @jeduden in #577
• docs: audience split — strip maintainer content from website-published pages by @jeduden in #579
• docs(research): cuelite vs CUE comparison and replacement learnings by @jeduden in #578
• feat(tinygo): add build-tagged seams for tinygo-incompatible OS calls (plan 247) by @jeduden in #576
• plan: mark 218 and 240 completed — tinygo merged, lint CI-green by @jeduden in #580
• Plan 2606101546: Builder execution wired into mdsmith fix by @jeduden in #571
• feat(schema): guard chmodFile with mutex injection test (plan 2606111050) by @jeduden in #581
• Plan 103: build target staleness and dependency tracking by @jeduden in #575
• chore(plan): mark plan 103 complete by @jeduden in #582

Full Changelog: v0.41.0...v0.42.0

v0.41.0

What's Changed

• Plan 205: Move extension.ts concerns to wiring.ts by @jeduden in #558
• plan/145: correct mise registry submission target by @jeduden in #561
• ci: bump pinned baseline to v0.40.0; adopt MDS069 for plan ids by @jeduden in #563
• Make the Flatpak install command copy-pastable by @jeduden in #564
• Remove Copilot auto-review hook from project settings by @jeduden in #567
• website: homepage design pass — front-matter surfaces, hero dedup, channels strip restore by @jeduden in #560
• Unbreak go install m@version and drop the consumer go floor to 1.25.0 by @jeduden in #566
• website: reserve scrollbar gutter so opening search does not shift the page by @jeduden in #570
• Plan 102: Multi-output <?build?> directive by @jeduden in #565
• perf(MDS025): five byte-native fixes cut table-format allocs from 110 to 59/op by @jeduden in #569
• feat(cuelite): phase 2 — schema and query on the façade, in-house flip (plan 238) by @jeduden in #555
• plan-102: multi-output <?build?> directive by @jeduden in #568

Full Changelog: v0.40.0...v0.41.0

v0.40.0

What's Changed

• Plan 244: Structured list projection; fix nested-item text corruption by @jeduden in #543
• Plan 242: Recover from panics in the LSP lint pipeline by @jeduden in #545
• Plan 243: Security hardening batch — 2026-06-09 audit by @jeduden in #542
• docs: surface the progressive disclosure guide on the front page by @jeduden in #548
• docs: round the doc count in the progressive disclosure guide by @jeduden in #549
• Plan 245: Table projection modes: records and rows by @jeduden in #546
• Plan 243: mdsmith extract projects the document H1 as title by @jeduden in #547
• docs(cuelite): consumer-first godoc and runnable examples for pkg.go.dev by @jeduden in #551
• lsp: answer panicked requests, surface recoveries, contain the settings goroutine by @jeduden in #552
• Plan 2606100533 + 2606100534: timestamp plan ids and the unique-frontmatter rule by @jeduden in #544
• feat(cuelite): phase 1 — surface D placeholder paths, in-house ParsePath (plan 237) by @jeduden in #539
• Plan 242: proto.md schemas declare content entries via <?content?> by @jeduden in #550
• fix(merge-driver): never write the worktree path during a merge by @jeduden in #553
• website: share one shadow across all feature artifacts by @jeduden in #554
• website: recast the homepage positioning strip as a spec-sheet band by @jeduden in #559
• Plan 241: Schema-per-file config under .mdsmith/schemas/ by @jeduden in #557
• Restructure build plans: integrate builder into fix, add hardening by @jeduden in #235
• Plan 246: Typed block projection and full-document extract by @jeduden in #556

Full Changelog: v0.39.0...v0.40.0