v1.5.18 — family alignment + tooling normalization

Family alignment + tooling normalization.

• Migrated dev deps to [dependency-groups] (PEP 735) for uniform uv sync --group dev across the family
• Added tests/eval/regression/test_release_blockers.py — 5 regression evals catching the v1.5.x release blockers (missing mcp_server in wheel, unimported runtime names, Typer app load failure, module import errors)
• Family version bump to v1.5.18

See RELEASE_NOTES.md for details.

v1.5.17 — Family alignment

v1.5.17 (2026-05-01)

Family alignment — no source changes in this skill.

This release tracks vmware-pilot v1.5.17 (new investigate_alert template + review_workflow MCP tool + parallel_group step type) and vmware-policy v1.5.17 (L5 pattern matcher integrated into @vmware_tool). Both work with the existing skill MCP surface unchanged.

• align: Family version bump to v1.5.17.

v1.5.16 — Enterprise Harness Engineering alignment

v1.5.16 (2026-04-30)

Enterprise Harness Engineering alignment — adapted from the Linkloud × addxai framework articles (part 1, part 2).

• docs: New references/investigation-protocol.md — causal-chain root cause analysis protocol with 4 completeness criteria (falsifiability/sufficiency/necessity/mechanism) and up-to-3-rounds deepening loop. Common Workflows now point to it before any diagnostic remediation.
• docs: "Automation Level Reference" section in references/capabilities.md — every operation tagged L1-L5 per the EHE framework.
• docs: Common Workflows in SKILL.md rewritten from step-by-step API call lists into judgment-encoded expert decision logic — pre-flight checks, decision rules, safety gates surfaced explicitly (deploy lab env, batch clone, vMotion).
• align: Family version bump to v1.5.16.

v1.5.15 — single-command MCP entry point

v1.5.15 — UX improvements from real user feedback

• New top-level CLI subcommand vmware-aiops mcp starts the MCP server. Single command after uv tool install — no more uvx --from, no PyPI re-resolve, works behind corporate TLS proxies.
• Default verify_ssl: true on new targets (was false). Self-signed cert environments must opt in explicitly with verify_ssl: false in config.yaml.
• Docs and examples/mcp-configs/*.json switched to single-command form.
• Legacy vmware-aiops-mcp console script kept for backward compatibility.

Migration: Existing users — your old MCP client config still works. New recommended form:

{ "command": "vmware-aiops", "args": ["mcp"], "env": { "VMWARE_VMWARE_AIOPS_CONFIG": "~/.vmware-... /config.yaml" } }

v1.5.14 — @yjs-2026 follow-up fixes

Code review follow-up fixes. See RELEASE_NOTES.md.

v1.5.13 — Code review bug fixes

Bug fixes from code review 2026-04-20. See RELEASE_NOTES.md for details.

v1.5.12 — Bug fixes from @yjs-2026

Bug Fixes (code review by @yjs-2026)

• fix: _count_children guard childSnapshotList against None
• fix: migrate_vm early return when vm.runtime.host is None
• fix(security): _upload_disk SSL verification respects target config

v1.5.11 - Family version alignment

Align with VMware skill family v1.5.11 (AVI 22.x Controller fixes from @timwangbc).

v1.5.10 — Security: python-multipart DoS fix

Security: bump python-multipart 0.0.22→0.0.26 (Medium severity DoS via large multipart data). Family version realignment.

v1.5.8 - Security fixes + CLI split

Security: command injection guard via shlex.quote in guest_exec; tar-bomb protection in OVA extraction (per-member 2GiB / aggregate 20GiB limits + symlink/device guards); guest file transfer SSL now honours target.verify_ssl. Refactor: cli.py split into 12-file cli/ package (behaviour identical).