Skip to content

feat: detect-secrets as 20th scanner (Track B)#72

Merged
theagenticguy merged 1 commit into
mainfrom
feat/v1-finalize-track-b
May 9, 2026
Merged

feat: detect-secrets as 20th scanner (Track B)#72
theagenticguy merged 1 commit into
mainfrom
feat/v1-finalize-track-b

Conversation

@bonk-ai
Copy link
Copy Markdown
Contributor

@bonk-ai bonk-ai Bot commented May 9, 2026

Track B — constraint-10 (detect-secrets as 20th scanner)

Closes the constraint-10 leg of v1-finalize per .erpaval/specs/006-v1-finalize/.
Spec: spec.md§Track B.
PR-split: pr-split-analysis.md — A → C → B → D ordering, this is leg 2 of 4.

What changes

  • DETECT_SECRETS_SPEC added to packages/scanners/src/catalog.ts between BANDIT and BIOME. Polyglot P1, Apache-2.0, pinned at v1.5.0 with a stale-since-2024 catalog comment. ALL_SPECS.length rises 19 → 20; P1_SPECS rises 11 → 12.
  • createDetectSecretsWrapper (packages/scanners/src/wrappers/detect-secrets.ts) invokes detect-secrets scan . --all-files and pipes stdout JSON through the converter. Empty SARIF + skipped on missing binary; empty SARIF on malformed stdout — tool.driver.name always preserved (E-B-2).
  • detectSecretsJsonToSarif (packages/scanners/src/converters/detect-secrets-to-sarif.ts) walks the per-file results map, maps detect-secrets type → SARIF ruleId via a 25-row table covering every v1.5.0 detector, with slug fallback for future detectors. SHA-1 hashed_secret stamped on partialFingerprints.detect_secrets_sha1 — explicitly not advertised as a cryptographic fingerprint per W-B-1. Overlapping findings (KeywordDetector + AWSKeyDetector on the same line) pass through without dedupe per W-B-2; OCH's downstream SARIF dedupe handles merge. Every emitted log validated against SarifLogSchema before return.

AC summary (Track B — 2 of 2)

AC What
B-1 DETECT_SECRETS_SPEC added to catalog (19→20); P1 stable-order updated; cli selectScanners test extended for the new polyglot P1
B-2 wrapper + JSON→SARIF converter + 13 new tests (9 converter + 4 wrapper)

Validation

  • 93 tests in @opencodehub/scanners (was 80; +13 new), all green.
  • pnpm -r exec tsc --noEmit clean.
  • bash scripts/check-banned-strings.sh PASS.
  • mise run check exits 0.
  • SARIF emissions validated against SarifLogSchema at the conversion boundary.
  • W-B-1 honored: partialFingerprints.detect_secrets_sha1 slot is plugin-defined identifier per SARIF §3.27.18, not a crypto claim.
  • W-B-2 honored: overlapping findings test asserts both pass through with the same line number.
  • E-B-2 honored: missing-binary path returns empty SARIF with tool.driver.name = "detect-secrets" preserved.

Compound lessons extracted

1 durable lesson written to .erpaval/solutions/:

  • best-practices/squash-merge-masks-pre-existing-debt.md — first action on a fresh branch from main (especially during a multi-PR finalize like A → C → B → D) is mise run check BEFORE starting work; per-commit U6 invariant inside a track-PR is not transitive across squash boundaries when biome rule sets, transitive deps, or cross-package test assertions drift between PRs.

Opportunistic fixes (pre-existing main debt)

mise run check exited non-zero on a fresh cut from main (post Track A squash) on 6 unrelated lint findings. Per the "fix problems you encounter" tenet, swept inline:

  • packages/scip-ingest/src/derive.test.ts — 4 noNonNullAssertion → assert.ok(edge) + safe ref
  • packages/embedder/src/sagemaker-embedder.parity.test.ts — noConsole + suppress noTemplateCurlyInString on the deliberate ${this.name} fixture
  • packages/search/src/{bm25,hybrid}.test.ts + packages/wiki/src/index.test.ts — drop now-unused biome-ignore lint/correctness/useYield suppressions on empty async * generators
  • packages/cli/src/commands/scan.test.ts — selectScanners assertions extended for the new polyglot P1 (cross-package coupling that scanners/catalog.test.ts alone couldn't catch)

Worktree cleanup

Pruned 14 orphan .claude/worktrees/agent-* worktrees from Track A's parallel Act subagents — recurrence of worktree-isolation-pwd-pin-and-biome-exclusion.

Out of scope (still queued for follow-on PRs)

  • Track C — debt sweep (parse-cache eviction, stringArrayField asymmetry, SageMaker rebuild-on-switch refusal, SCIP REFERENCES + TYPE_OF emission, 4 READMEs)
  • Track D — dogfood polish (semgrep.yml, osv.yml split, och-self-scan.yml, code-pack release asset, lefthook polish, mise och:self-* tasks)

🤖 Squashed via bonk-ai.

@bonk-ai bonk-ai Bot force-pushed the feat/v1-finalize-track-b branch from f6a0fe1 to ac9d628 Compare May 9, 2026 20:11
theagenticguy
theagenticguy approved these changes May 9, 2026
View reviewed changes
Copy link
Copy Markdown
Owner

@theagenticguy theagenticguy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@theagenticguy theagenticguy merged commit 0f0018a into main May 9, 2026
17 checks passed
@theagenticguy theagenticguy deleted the feat/v1-finalize-track-b branch May 9, 2026 20:17
@github-actions github-actions Bot mentioned this pull request May 9, 2026
Closed
theagenticguy pushed a commit that referenced this pull request May 10, 2026
@bonk-ai
feat: detect-secrets as 20th scanner (Track B) (#72)
8fbdd61 
## Track B — constraint-10 (detect-secrets as 20th scanner)

Closes the constraint-10 leg of v1-finalize per
`.erpaval/specs/006-v1-finalize/`.
Spec: [spec.md§Track B](.erpaval/specs/006-v1-finalize/spec.md).
PR-split:
[pr-split-analysis.md](.erpaval/specs/006-v1-finalize/pr-split-analysis.md)
— A → C → B → D ordering, this is leg 2 of 4.

### What changes

- **`DETECT_SECRETS_SPEC`** added to `packages/scanners/src/catalog.ts`
between BANDIT and BIOME. Polyglot P1, Apache-2.0, pinned at v1.5.0 with
a stale-since-2024 catalog comment. `ALL_SPECS.length` rises 19 → 20;
`P1_SPECS` rises 11 → 12.
- **`createDetectSecretsWrapper`**
(`packages/scanners/src/wrappers/detect-secrets.ts`) invokes
`detect-secrets scan . --all-files` and pipes stdout JSON through the
converter. Empty SARIF + `skipped` on missing binary; empty SARIF on
malformed stdout — `tool.driver.name` always preserved (E-B-2).
- **`detectSecretsJsonToSarif`**
(`packages/scanners/src/converters/detect-secrets-to-sarif.ts`) walks
the per-file `results` map, maps detect-secrets `type` → SARIF `ruleId`
via a 25-row table covering every v1.5.0 detector, with slug fallback
for future detectors. SHA-1 `hashed_secret` stamped on
`partialFingerprints.detect_secrets_sha1` — explicitly **not**
advertised as a cryptographic fingerprint per W-B-1. Overlapping
findings (KeywordDetector + AWSKeyDetector on the same line) pass
through without dedupe per W-B-2; OCH's downstream SARIF dedupe handles
merge. Every emitted log validated against `SarifLogSchema` before
return.

### AC summary (Track B — 2 of 2)

| AC | What |
|---|---|
| B-1 | `DETECT_SECRETS_SPEC` added to catalog (19→20); P1 stable-order
updated; cli `selectScanners` test extended for the new polyglot P1 |
| B-2 | wrapper + JSON→SARIF converter + 13 new tests (9 converter + 4
wrapper) |

### Validation

- **93 tests in `@opencodehub/scanners`** (was 80; +13 new), all green.
- `pnpm -r exec tsc --noEmit` clean.
- `bash scripts/check-banned-strings.sh` PASS.
- `mise run check` exits 0.
- SARIF emissions validated against `SarifLogSchema` at the conversion
boundary.
- W-B-1 honored: `partialFingerprints.detect_secrets_sha1` slot is
plugin-defined identifier per SARIF §3.27.18, not a crypto claim.
- W-B-2 honored: overlapping findings test asserts both pass through
with the same line number.
- E-B-2 honored: missing-binary path returns empty SARIF with
`tool.driver.name = "detect-secrets"` preserved.

### Compound lessons extracted

1 durable lesson written to `.erpaval/solutions/`:

- `best-practices/squash-merge-masks-pre-existing-debt.md` — first
action on a fresh branch from main (especially during a multi-PR
finalize like A → C → B → D) is `mise run check` BEFORE starting work;
per-commit U6 invariant inside a track-PR is not transitive across
squash boundaries when biome rule sets, transitive deps, or
cross-package test assertions drift between PRs.

### Opportunistic fixes (pre-existing main debt)

`mise run check` exited non-zero on a fresh cut from main (post Track A
squash) on 6 unrelated lint findings. Per the "fix problems you
encounter" tenet, swept inline:

- `packages/scip-ingest/src/derive.test.ts` — 4 `noNonNullAssertion` →
`assert.ok(edge)` + safe ref
- `packages/embedder/src/sagemaker-embedder.parity.test.ts` —
`noConsole` + suppress `noTemplateCurlyInString` on the deliberate
`${this.name}` fixture
- `packages/search/src/{bm25,hybrid}.test.ts` +
`packages/wiki/src/index.test.ts` — drop now-unused `biome-ignore
lint/correctness/useYield` suppressions on empty `async *` generators
- `packages/cli/src/commands/scan.test.ts` — `selectScanners` assertions
extended for the new polyglot P1 (cross-package coupling that
`scanners/catalog.test.ts` alone couldn't catch)

### Worktree cleanup

Pruned 14 orphan `.claude/worktrees/agent-*` worktrees from Track A's
parallel Act subagents — recurrence of
`worktree-isolation-pwd-pin-and-biome-exclusion`.

### Out of scope (still queued for follow-on PRs)

- Track C — debt sweep (parse-cache eviction, stringArrayField
asymmetry, SageMaker rebuild-on-switch refusal, SCIP REFERENCES +
TYPE_OF emission, 4 READMEs)
- Track D — dogfood polish (semgrep.yml, osv.yml split,
och-self-scan.yml, code-pack release asset, lefthook polish, mise
och:self-* tasks)

🤖 Squashed via
[bonk-ai](https://github.com/theagenticguy/ai-gateway/blob/main/scripts/bot-push.py).

Co-authored-by: bonk-ai[bot] <269762587+bonk-ai[bot]@users.noreply.github.com>
@github-actions github-actions Bot mentioned this pull request May 11, 2026
Merged
theagenticguy added a commit that referenced this pull request May 12, 2026
@github-actions @theagenticguy
chore: release main (#92)
0317b46 
🤖 Automated release via release-please
---


<details><summary>analysis: 0.1.1</summary>

##
[0.1.1](analysis-v0.1.0...analysis-v0.1.1)
(2026-05-12)


### Features

* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Refactoring

* consolidate repo-local dir references on META_DIR_NAME
([ce4b63d](ce4b63d))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/core-types bumped to 0.2.0
    * @opencodehub/sarif bumped to 0.1.1
    * @opencodehub/storage bumped to 0.1.1
</details>

<details><summary>cli: 0.2.0</summary>

##
[0.2.0](cli-v0.1.0...cli-v0.2.0)
(2026-05-12)


### ⚠ BREAKING CHANGES

* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))

### Features

* artifact factory + codehub init + CI UX fixes
([#38](#38))
([d6ffafa](d6ffafa))
* **cli:** add --granularity flag to analyze for hierarchical embeddings
([defa9b6](defa9b6))
* **cli:** add --strict-detectors flag + ts-morph optional dep
([329f5c3](329f5c3))
* **cli:** add exact-name resolver and disambiguation flags to context
([7f279a9](7f279a9))
* **cli:** flip query hybrid-by-default with --bm25-only +
--rerank-top-k
([3e924b5](3e924b5))
* detect-secrets as 20th scanner (Track B)
([#72](#72))
([8fbdd61](8fbdd61))
* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* **ingestion:** WASM fallback via web-tree-sitter + --wasm-only flag
([cecb401](cecb401))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))
* **mcp,cli:** join symbol summaries into query results (P04 surface)
([3d73b65](3d73b65))
* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))
([1cceb24](1cceb24))
* **scanners:** persist partialFingerprint, baselineState,
suppressedJson
([fb4585d](fb4585d))
* **search:** add filter-aware zoom retrieval across hierarchical tiers
([5ab80c4](5ab80c4))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Bug Fixes

* **cli:** accurate doctor native-binding + int8 weights checks
([fb569f9](fb569f9))
* **storage:** wire @ladybugdb/core binding, fix lbug open() guards,
upgrade pnpm v10→v11
([#93](#93))
([78d6a85](78d6a85))


### Performance

* **embeddings:** cross-node batching + worker pool
([#33](#33))
([acb59d0](acb59d0))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/analysis bumped to 0.1.1
    * @opencodehub/core-types bumped to 0.2.0
    * @opencodehub/embedder bumped to 0.1.1
    * @opencodehub/ingestion bumped to 0.2.0
    * @opencodehub/mcp bumped to 0.2.0
    * @opencodehub/sarif bumped to 0.1.1
    * @opencodehub/scanners bumped to 0.1.1
    * @opencodehub/search bumped to 0.1.1
    * @opencodehub/storage bumped to 0.1.1
</details>

<details><summary>core-types: 0.2.0</summary>

##
[0.2.0](core-types-v0.1.0...core-types-v0.2.0)
(2026-05-12)


### ⚠ BREAKING CHANGES

* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))

### Features

* **core-types:** scaffold v1.1 node-shape extensions for planned
packets
([e17a4b5](e17a4b5))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))
* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))
([1cceb24](1cceb24))
* **storage:** populate reserved complexity, coverage, deadness columns
([c81e4c3](c81e4c3))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Refactoring

* **core-types:** centralize LanguageId in core-types
([4c33fc7](4c33fc7))
</details>

<details><summary>embedder: 0.1.1</summary>

##
[0.1.1](embedder-v0.1.0...embedder-v0.1.1)
(2026-05-12)


### Features

* detect-secrets as 20th scanner (Track B)
([#72](#72))
([8fbdd61](8fbdd61))
* **embedder:** add SageMaker backend for remote embeddings
([9b5c53d](9b5c53d))
* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/core-types bumped to 0.2.0
</details>

<details><summary>ingestion: 0.2.0</summary>

##
[0.2.0](ingestion-v0.1.0...ingestion-v0.2.0)
(2026-05-12)


### ⚠ BREAKING CHANGES

* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))

### Features

* **cli:** add --strict-detectors flag + ts-morph optional dep
([329f5c3](329f5c3))
* **embedder:** add SageMaker backend for remote embeddings
([9b5c53d](9b5c53d))
* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* **ingestion:** [@doc](https://github.com/doc) captures + description
field populated
([d63dfa6](d63dfa6))
* **ingestion:** add receiver resolver + detector precision (P06)
([431f428](431f428))
* **ingestion:** add top-20 framework detection catalog and dispatcher
([02f4864](02f4864))
* **ingestion:** capture MCP tool inputSchema as canonical JSON
([9872710](9872710))
* **ingestion:** emit CodeElement stubs for external imports
([49eefe7](49eefe7))
* **ingestion:** emit file-level and community-level embeddings
([09a117f](09a117f))
* **ingestion:** FastAPI, Spring, NestJS, Rails route detectors
([62bebfb](62bebfb))
* **ingestion:** Go IMPLEMENTS method-set resolver + C++20 import
([85c60f9](85c60f9))
* **ingestion:** nested .gitignore with layered negation
([40b5286](40b5286))
* **ingestion:** populate DependencyNode license from manifest
([f947194](f947194))
* **ingestion:** provider-driven complexity + Halstead volume
([5e1379a](5e1379a))
* **ingestion:** soft-fail summarize on credential errors, thread
summaryModel
([d90eb38](d90eb38))
* **ingestion:** WASM fallback via web-tree-sitter + --wasm-only flag
([cecb401](cecb401))
* **ingestion:** wire framework catalog into profile phase
([d491401](d491401))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))
([1cceb24](1cceb24))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Bug Fixes

* **ingestion:** enumerate git submodule paths in the scan phase
([d290d04](d290d04))
* **ingestion:** skip submodule paths in the ownership blame pass
([e28f3e6](e28f3e6))
* **scip-ingest:** resolve caller/callee correctly for SCIP edges
([c15f928](c15f928))


### Performance

* **embeddings:** cross-node batching + worker pool
([#33](#33))
([acb59d0](acb59d0))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Refactoring

* consolidate repo-local dir references on META_DIR_NAME
([ce4b63d](ce4b63d))
* **core-types:** centralize LanguageId in core-types
([4c33fc7](4c33fc7))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/analysis bumped to 0.1.1
    * @opencodehub/core-types bumped to 0.2.0
    * @opencodehub/embedder bumped to 0.1.1
    * @opencodehub/storage bumped to 0.1.1
</details>

<details><summary>mcp: 0.2.0</summary>

##
[0.2.0](mcp-v0.1.0...mcp-v0.2.0)
(2026-05-12)


### ⚠ BREAKING CHANGES

* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))

### Features

* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))
* **mcp,cli:** join symbol summaries into query results (P04 surface)
([3d73b65](3d73b65))
* **mcp:** short-circuit list_findings_delta via stored baselineState
([4d9c187](4d9c187))
* **mcp:** surface structured FrameworkDetection in project_profile tool
([15fb309](15fb309))
* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))
([1cceb24](1cceb24))
* **search:** add filter-aware zoom retrieval across hierarchical tiers
([5ab80c4](5ab80c4))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Refactoring

* **mcp:** consume shared tryOpenEmbedder + embeddingsPopulated from
@opencodehub/search
([54f00de](54f00de))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/analysis bumped to 0.1.1
    * @opencodehub/core-types bumped to 0.2.0
    * @opencodehub/embedder bumped to 0.1.1
    * @opencodehub/sarif bumped to 0.1.1
    * @opencodehub/scanners bumped to 0.1.1
    * @opencodehub/search bumped to 0.1.1
    * @opencodehub/storage bumped to 0.1.1
</details>

<details><summary>sarif: 0.1.1</summary>

##
[0.1.1](sarif-v0.1.0...sarif-v0.1.1)
(2026-05-12)


### Features

* initial public release of opencodehub v0.1.1
([3f23006](3f23006))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))
</details>

<details><summary>scanners: 0.1.1</summary>

##
[0.1.1](scanners-v0.1.0...scanners-v0.1.1)
(2026-05-12)


### Features

* detect-secrets as 20th scanner (Track B)
([#72](#72))
([8fbdd61](8fbdd61))
* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/sarif bumped to 0.1.1
</details>

<details><summary>search: 0.1.1</summary>

##
[0.1.1](search-v0.1.0...search-v0.1.1)
(2026-05-12)


### Features

* detect-secrets as 20th scanner (Track B)
([#72](#72))
([8fbdd61](8fbdd61))
* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))
* **search:** add filter-aware zoom retrieval across hierarchical tiers
([5ab80c4](5ab80c4))
* **search:** extract tryOpenEmbedder + embeddingsPopulated, demote
NullEmbedder throw
([c4cc680](c4cc680))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/core-types bumped to 0.2.0
    * @opencodehub/storage bumped to 0.1.1
</details>

<details><summary>storage: 0.1.1</summary>

##
[0.1.1](storage-v0.1.0...storage-v0.1.1)
(2026-05-12)


### Features

* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* **ingestion:** emit file-level and community-level embeddings
([09a117f](09a117f))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))
* **mcp:** short-circuit list_findings_delta via stored baselineState
([4d9c187](4d9c187))
* **search:** add filter-aware zoom retrieval across hierarchical tiers
([5ab80c4](5ab80c4))
* **storage:** add granularity column to embeddings for hierarchical
retrieval
([b5bd5f8](b5bd5f8))
* **storage:** add summary fields to SearchResult and batch lookup
helper
([4944a56](4944a56))
* **storage:** persist structured FrameworkDetection in frameworks_json
([75423fe](75423fe))
* **storage:** populate reserved complexity, coverage, deadness columns
([c81e4c3](c81e4c3))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Bug Fixes

* **storage:** wire @ladybugdb/core binding, fix lbug open() guards,
upgrade pnpm v10→v11
([#93](#93))
([78d6a85](78d6a85))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/core-types bumped to 0.2.0
</details>

<details><summary>root: 0.2.0</summary>

##
[0.2.0](root-v0.1.1...root-v0.2.0)
(2026-05-12)


### ⚠ BREAKING CHANGES

* **release:** footers in the commit log.
* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))

### Features

* artifact factory + codehub init + CI UX fixes
([#38](#38))
([d6ffafa](d6ffafa))
* cleanups
([bf1536e](bf1536e))
* **cli:** add --granularity flag to analyze for hierarchical embeddings
([defa9b6](defa9b6))
* **cli:** add --strict-detectors flag + ts-morph optional dep
([329f5c3](329f5c3))
* **cli:** add exact-name resolver and disambiguation flags to context
([7f279a9](7f279a9))
* **cli:** flip query hybrid-by-default with --bm25-only +
--rerank-top-k
([3e924b5](3e924b5))
* **core-types:** scaffold v1.1 node-shape extensions for planned
packets
([e17a4b5](e17a4b5))
* detect-secrets as 20th scanner (Track B)
([#72](#72))
([8fbdd61](8fbdd61))
* **embedder:** add SageMaker backend for remote embeddings
([9b5c53d](9b5c53d))
* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* **gym:** add rust-spike trigger benchmark
([43c26d3](43c26d3))
* **ingestion:** [@doc](https://github.com/doc) captures + description
field populated
([d63dfa6](d63dfa6))
* **ingestion:** add receiver resolver + detector precision (P06)
([431f428](431f428))
* **ingestion:** add top-20 framework detection catalog and dispatcher
([02f4864](02f4864))
* **ingestion:** capture MCP tool inputSchema as canonical JSON
([9872710](9872710))
* **ingestion:** emit CodeElement stubs for external imports
([49eefe7](49eefe7))
* **ingestion:** emit file-level and community-level embeddings
([09a117f](09a117f))
* **ingestion:** FastAPI, Spring, NestJS, Rails route detectors
([62bebfb](62bebfb))
* **ingestion:** Go IMPLEMENTS method-set resolver + C++20 import
([85c60f9](85c60f9))
* **ingestion:** nested .gitignore with layered negation
([40b5286](40b5286))
* **ingestion:** populate DependencyNode license from manifest
([f947194](f947194))
* **ingestion:** provider-driven complexity + Halstead volume
([5e1379a](5e1379a))
* **ingestion:** soft-fail summarize on credential errors, thread
summaryModel
([d90eb38](d90eb38))
* **ingestion:** WASM fallback via web-tree-sitter + --wasm-only flag
([cecb401](cecb401))
* **ingestion:** wire framework catalog into profile phase
([d491401](d491401))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))
* **mcp,cli:** join symbol summaries into query results (P04 surface)
([3d73b65](3d73b65))
* **mcp:** short-circuit list_findings_delta via stored baselineState
([4d9c187](4d9c187))
* **mcp:** surface structured FrameworkDetection in project_profile tool
([15fb309](15fb309))
* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))
([1cceb24](1cceb24))
* **scanners:** persist partialFingerprint, baselineState,
suppressedJson
([fb4585d](fb4585d))
* **search:** add filter-aware zoom retrieval across hierarchical tiers
([5ab80c4](5ab80c4))
* **search:** extract tryOpenEmbedder + embeddingsPopulated, demote
NullEmbedder throw
([c4cc680](c4cc680))
* **storage:** add granularity column to embeddings for hierarchical
retrieval
([b5bd5f8](b5bd5f8))
* **storage:** add summary fields to SearchResult and batch lookup
helper
([4944a56](4944a56))
* **storage:** persist structured FrameworkDetection in frameworks_json
([75423fe](75423fe))
* **storage:** populate reserved complexity, coverage, deadness columns
([c81e4c3](c81e4c3))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))
* v1 finalize Track D — dogfood polish (6 ACs)
([#75](#75))
([e9da048](e9da048))


### Bug Fixes

* **ci:** pin gopls@v0.18.1 for Go 1.23 + add pnpm build-script
allowlist
([c78b31d](c78b31d))
* **cli:** accurate doctor native-binding + int8 weights checks
([fb569f9](fb569f9))
* **deps:** bump minimatch override to 9.0.7 (GHSA-23c5/-7r86)
([7f6e2ae](7f6e2ae))
* **deps:** pin brace-expansion/minimatch/picomatch to patched versions
([5a7d1e0](5a7d1e0))
* **deps:** refresh pnpm-lock.yaml with ts-morph optional dep from P06
([0dfee11](0dfee11))
* **docs:** rename agents/*.md to .mdx so JSX components render
([#89](#89))
([d2d8bc7](d2d8bc7))
* **gym:** update corpus test waiver ID to window.desktop after PR
[#38](#38) rename
([933b5f2](933b5f2))
* **ingestion:** enumerate git submodule paths in the scan phase
([d290d04](d290d04))
* **ingestion:** skip submodule paths in the ownership blame pass
([e28f3e6](e28f3e6))
* **repo:** replace stale lsp-oracle tsconfig reference with scip-ingest
([0ce5e29](0ce5e29))
* **scip-ingest:** resolve caller/callee correctly for SCIP edges
([c15f928](c15f928))
* **storage:** wire @ladybugdb/core binding, fix lbug open() guards,
upgrade pnpm v10→v11
([#93](#93))
([78d6a85](78d6a85))


### Performance

* **embeddings:** cross-node batching + worker pool
([#33](#33))
([acb59d0](acb59d0))


### Documentation

* add SPECS, USECASE, and OBJECTIVES docs
([f3120de](f3120de))
* **adr:** record hierarchical embeddings decision (0004)
([6d28631](6d28631))
* **adr:** update 0002 with P09 Phase 1 measurements
([92b9a1c](92b9a1c))
* clean-slate v1 — drop migration prose, milestone framing, 0.x caveats
([#90](#90))
([af88fbc](af88fbc))
* compound — durable lessons from docs site revival
([#88](#88))
([95642f0](95642f0))
* compound — durable lessons from v1 upstream bug sweep
([#77](#77))
([60eef57](60eef57))
* deep refresh + sync + new architecture pages
([3693ddd](3693ddd))
* **repo:** durable lesson — set NODE_ENV at script scope for astro in
CI
([18c159b](18c159b))
* **repo:** durable lesson — stale tsconfig project references
([ea67d7a](ea67d7a))
* **repo:** EARS 006 spec — v1 finalize (M7 + constraint-10 + debt +
dogfood)
([67198e3](67198e3))
* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))
* restore Starlight site + refresh for v1 + agent-friendly USAGE section
([#87](#87))
([d9b2b30](d9b2b30))
* **site:** add Astro Starlight docs site + GitHub Pages deploy
([#34](#34))
([5ce0191](5ce0191))
* **site:** add llms.txt + Copy-as-Markdown + Open-in-ChatGPT/Claude
([#36](#36))
([149ba4e](149ba4e))
* **site:** inject LLM-nav banner + 'See also' footer into every .md
([#37](#37))
([77190a5](77190a5))
* strip legacy stanzas + capture session lessons
([85f6881](85f6881))


### Refactoring

* consolidate repo-local dir references on META_DIR_NAME
([ce4b63d](ce4b63d))
* **core-types:** centralize LanguageId in core-types
([4c33fc7](4c33fc7))
* **mcp:** consume shared tryOpenEmbedder + embeddingsPopulated from
@opencodehub/search
([54f00de](54f00de))
* **plugin:** file-level packet skeletons for codehub-document
([40a09c8](40a09c8))


### CI

* **release:** keep 0.x semver — breaking changes bump minor, feats bump
patch
([a6ee4bf](a6ee4bf))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Laith Al-Saadoon <alsaadoonlaith@gmail.com>
Co-authored-by: Laith Al-Saadoon <9553966+theagenticguy@users.noreply.github.com>
@github-actions github-actions Bot mentioned this pull request May 12, 2026
Merged
theagenticguy added a commit that referenced this pull request May 12, 2026
@github-actions @theagenticguy
chore: release main (#95)
a204ead 
🤖 Automated release via release-please
---


<details><summary>analysis: 0.1.2</summary>

##
[0.1.2](analysis-v0.1.1...analysis-v0.1.2)
(2026-05-12)


### Features

* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Refactoring

* consolidate repo-local dir references on META_DIR_NAME
([ce4b63d](ce4b63d))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/core-types bumped to 0.3.0
    * @opencodehub/sarif bumped to 0.1.2
    * @opencodehub/storage bumped to 0.1.2
    * @opencodehub/wiki bumped to 0.1.1
</details>

<details><summary>cli: 0.2.2</summary>

##
[0.2.2](cli-v0.2.1...cli-v0.2.2)
(2026-05-12)


### Bug Fixes

* **repo:** track all 17 packages in release-please + republish
pack/cobol-proleap on fixed ingestion
([f4656d5](f4656d5))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/analysis bumped to 0.1.2
    * @opencodehub/core-types bumped to 0.3.0
    * @opencodehub/embedder bumped to 0.1.2
    * @opencodehub/ingestion bumped to 0.3.1
    * @opencodehub/mcp bumped to 0.3.0
    * @opencodehub/pack bumped to 0.1.2
    * @opencodehub/policy bumped to 0.1.1
    * @opencodehub/sarif bumped to 0.1.2
    * @opencodehub/scanners bumped to 0.1.2
    * @opencodehub/search bumped to 0.1.2
    * @opencodehub/storage bumped to 0.1.2
    * @opencodehub/wiki bumped to 0.1.1
</details>

<details><summary>cobol-proleap: 0.1.2</summary>

##
[0.1.2](cobol-proleap-v0.1.1...cobol-proleap-v0.1.2)
(2026-05-12)


### Bug Fixes

* **repo:** track all 17 packages in release-please + republish
pack/cobol-proleap on fixed ingestion
([f4656d5](f4656d5))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/core-types bumped to 0.3.0
    * @opencodehub/ingestion bumped to 0.3.1
</details>

<details><summary>core-types: 0.3.0</summary>

##
[0.3.0](core-types-v0.2.0...core-types-v0.3.0)
(2026-05-12)


### ⚠ BREAKING CHANGES

* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))

### Features

* **core-types:** scaffold v1.1 node-shape extensions for planned
packets
([e17a4b5](e17a4b5))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))
* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))
([1cceb24](1cceb24))
* **storage:** populate reserved complexity, coverage, deadness columns
([c81e4c3](c81e4c3))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Refactoring

* **core-types:** centralize LanguageId in core-types
([4c33fc7](4c33fc7))
</details>

<details><summary>embedder: 0.1.2</summary>

##
[0.1.2](embedder-v0.1.1...embedder-v0.1.2)
(2026-05-12)


### Features

* detect-secrets as 20th scanner (Track B)
([#72](#72))
([8fbdd61](8fbdd61))
* **embedder:** add SageMaker backend for remote embeddings
([9b5c53d](9b5c53d))
* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/core-types bumped to 0.3.0
</details>

<details><summary>frameworks: 0.1.1</summary>

##
[0.1.1](frameworks-v0.1.0...frameworks-v0.1.1)
(2026-05-12)


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/core-types bumped to 0.3.0
</details>

<details><summary>ingestion: 0.3.1</summary>

##
[0.3.1](ingestion-v0.3.0...ingestion-v0.3.1)
(2026-05-12)


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/analysis bumped to 0.1.2
    * @opencodehub/core-types bumped to 0.3.0
    * @opencodehub/embedder bumped to 0.1.2
    * @opencodehub/frameworks bumped to 0.1.1
    * @opencodehub/scip-ingest bumped to 0.2.0
    * @opencodehub/storage bumped to 0.1.2
    * @opencodehub/summarizer bumped to 0.1.1
</details>

<details><summary>mcp: 0.3.0</summary>

##
[0.3.0](mcp-v0.2.0...mcp-v0.3.0)
(2026-05-12)


### ⚠ BREAKING CHANGES

* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))

### Features

* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))
* **mcp,cli:** join symbol summaries into query results (P04 surface)
([3d73b65](3d73b65))
* **mcp:** short-circuit list_findings_delta via stored baselineState
([4d9c187](4d9c187))
* **mcp:** surface structured FrameworkDetection in project_profile tool
([15fb309](15fb309))
* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))
([1cceb24](1cceb24))
* **search:** add filter-aware zoom retrieval across hierarchical tiers
([5ab80c4](5ab80c4))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Refactoring

* **mcp:** consume shared tryOpenEmbedder + embeddingsPopulated from
@opencodehub/search
([54f00de](54f00de))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/analysis bumped to 0.1.2
    * @opencodehub/core-types bumped to 0.3.0
    * @opencodehub/embedder bumped to 0.1.2
    * @opencodehub/pack bumped to 0.1.2
    * @opencodehub/sarif bumped to 0.1.2
    * @opencodehub/scanners bumped to 0.1.2
    * @opencodehub/search bumped to 0.1.2
    * @opencodehub/storage bumped to 0.1.2
</details>

<details><summary>pack: 0.1.2</summary>

##
[0.1.2](pack-v0.1.1...pack-v0.1.2)
(2026-05-12)


### Features

* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))


### Bug Fixes

* **repo:** track all 17 packages in release-please + republish
pack/cobol-proleap on fixed ingestion
([f4656d5](f4656d5))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/analysis bumped to 0.1.2
    * @opencodehub/core-types bumped to 0.3.0
    * @opencodehub/ingestion bumped to 0.3.1
    * @opencodehub/sarif bumped to 0.1.2
    * @opencodehub/storage bumped to 0.1.2
</details>

<details><summary>policy: 0.1.1</summary>

##
[0.1.1](policy-v0.1.0...policy-v0.1.1)
(2026-05-12)


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))
</details>

<details><summary>sarif: 0.1.2</summary>

##
[0.1.2](sarif-v0.1.1...sarif-v0.1.2)
(2026-05-12)


### Features

* initial public release of opencodehub v0.1.1
([3f23006](3f23006))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))
</details>

<details><summary>scanners: 0.1.2</summary>

##
[0.1.2](scanners-v0.1.1...scanners-v0.1.2)
(2026-05-12)


### Features

* detect-secrets as 20th scanner (Track B)
([#72](#72))
([8fbdd61](8fbdd61))
* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/sarif bumped to 0.1.2
</details>

<details><summary>scip-ingest: 0.2.0</summary>

##
[0.2.0](scip-ingest-v0.1.0...scip-ingest-v0.2.0)
(2026-05-12)


### ⚠ BREAKING CHANGES

* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))

### Features

* detect-secrets as 20th scanner (Track B)
([#72](#72))
([8fbdd61](8fbdd61))
* replace LSP oracle with SCIP indexers (TS/Py/Go/Rust/Java)
([#32](#32))
([1cceb24](1cceb24))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Bug Fixes

* **scip-ingest:** resolve caller/callee correctly for SCIP edges
([c15f928](c15f928))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Refactoring

* consolidate repo-local dir references on META_DIR_NAME
([ce4b63d](ce4b63d))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/analysis bumped to 0.1.2
    * @opencodehub/core-types bumped to 0.3.0
</details>

<details><summary>search: 0.1.2</summary>

##
[0.1.2](search-v0.1.1...search-v0.1.2)
(2026-05-12)


### Features

* detect-secrets as 20th scanner (Track B)
([#72](#72))
([8fbdd61](8fbdd61))
* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))
* **search:** add filter-aware zoom retrieval across hierarchical tiers
([5ab80c4](5ab80c4))
* **search:** extract tryOpenEmbedder + embeddingsPopulated, demote
NullEmbedder throw
([c4cc680](c4cc680))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/core-types bumped to 0.3.0
    * @opencodehub/storage bumped to 0.1.2
</details>

<details><summary>storage: 0.1.2</summary>

##
[0.1.2](storage-v0.1.1...storage-v0.1.2)
(2026-05-12)


### Features

* **embedder:** replace Arctic Embed XS with gte-modernbert-base
([#31](#31))
([1214071](1214071))
* **ingestion:** emit file-level and community-level embeddings
([09a117f](09a117f))
* initial public release of opencodehub v0.1.1
([3f23006](3f23006))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))
* **mcp:** short-circuit list_findings_delta via stored baselineState
([4d9c187](4d9c187))
* **search:** add filter-aware zoom retrieval across hierarchical tiers
([5ab80c4](5ab80c4))
* **storage:** add granularity column to embeddings for hierarchical
retrieval
([b5bd5f8](b5bd5f8))
* **storage:** add summary fields to SearchResult and batch lookup
helper
([4944a56](4944a56))
* **storage:** persist structured FrameworkDetection in frameworks_json
([75423fe](75423fe))
* **storage:** populate reserved complexity, coverage, deadness columns
([c81e4c3](c81e4c3))
* v1 finalize Track C — debt sweep (7 ACs)
([#73](#73))
([06d2bb1](06d2bb1))


### Bug Fixes

* **storage:** wire @ladybugdb/core binding, fix lbug open() guards,
upgrade pnpm v10→v11
([#93](#93))
([78d6a85](78d6a85))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/core-types bumped to 0.3.0
</details>

<details><summary>summarizer: 0.1.1</summary>

##
[0.1.1](summarizer-v0.1.0...summarizer-v0.1.1)
(2026-05-12)


### Features

* initial public release of opencodehub v0.1.1
([3f23006](3f23006))


### Documentation

* deep refresh + sync + new architecture pages
([3693ddd](3693ddd))
* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))
</details>

<details><summary>wiki: 0.1.1</summary>

##
[0.1.1](wiki-v0.1.0...wiki-v0.1.1)
(2026-05-12)


### Features

* detect-secrets as 20th scanner (Track B)
([#72](#72))
([8fbdd61](8fbdd61))
* M7 LadybugDB default + IGraphStore abstraction hardening (Track A)
([#71](#71))
([0175113](0175113))


### Documentation

* **repo:** pre-publish npm readiness — READMEs, GOVERNANCE, CODEOWNERS,
package metadata
([dd10f72](dd10f72))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @opencodehub/core-types bumped to 0.3.0
    * @opencodehub/storage bumped to 0.1.2
    * @opencodehub/summarizer bumped to 0.1.1
</details>

<details><summary>root: 0.3.1</summary>

##
[0.3.1](root-v0.3.0...root-v0.3.1)
(2026-05-12)


### Bug Fixes

* **repo:** track all 17 packages in release-please + republish
pack/cobol-proleap on fixed ingestion
([f4656d5](f4656d5))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Laith Al-Saadoon <alsaadoonlaith@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@theagenticguy theagenticguy theagenticguy approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@theagenticguy