chore(release): bump to v0.4.9

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to `codeforerunner` are documented here.
 The format is loosely based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/);
 this project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.9] — 2026-06-09
+
+### Added
+
+- **Refresh Gate** — the `/forerunner-refresh` skill form now presents the staleness check report and asks once (multi-select, all options pre-selected) which `STALE`/`MISSING` docs to regenerate, instead of rewriting everything unprompted. `UNVERIFIABLE` docs are reported but never offered. Pass `auto` (or run in a harness that can't ask) to skip the gate and update the full stale set. The batch prompt form stays non-interactive for CI/AFK use. Summary output gains a "declined" category. Glossary term added to `CONTEXT.md`. (#102, `skills/forerunner-refresh/SKILL.md`, `src/codeforerunner/prompts/tasks/refresh.md`)
+
 ## [0.4.8] — 2026-06-02
 
 ### Added

README.md

@@ -2,7 +2,7 @@
 
 # codeForerunner
 
-[![Socket Badge](https://badge.socket.dev/npm/package/codeforerunner/0.4.8)](https://socket.dev/npm/package/codeforerunner)
+[![Socket Badge](https://badge.socket.dev/npm/package/codeforerunner/0.4.9)](https://socket.dev/npm/package/codeforerunner)
 
 Model-agnostic repository documentation tooling. Ships a prompt pack for codebase analysis and doc generation, a thin Python CLI, an MCP server, drift-detection rules that keep docs honest — and native slash-command skills for Claude Code, Codex, Gemini CLI, and other agent CLIs.
 
@@ -122,7 +122,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6.0.2
-      - uses: derek-palmer/codeforerunner@v0.4.8
+      - uses: derek-palmer/codeforerunner@v0.4.9
         with:
           fail-on-drift: "true"   # set "false" to warn-only
 ```

install.ps1

@@ -13,9 +13,9 @@ param([Parameter(ValueFromRemainingArguments=$true)][string[]]$Args)
 $ErrorActionPreference = "Stop"
 
 # Security: pinned to a specific version so one-liners don't execute unreviewed code.
-$NpmPkg  = "codeforerunner@0.4.8"
+$NpmPkg  = "codeforerunner@0.4.9"
 $Repo    = "derek-palmer/codeforerunner"
-$RepoTag = "v0.4.8"
+$RepoTag = "v0.4.9"
 $ScriptDir = Split-Path -Parent $MyInvocation.MyCommand.Path
 $LocalJs = Join-Path $ScriptDir "bin\install.js"
 

install.sh

@@ -16,9 +16,9 @@ set -euo pipefail
 
 # Security: pinned to a specific version so curl|bash one-liners don't silently
 # execute whatever the npm registry or GitHub currently serves as "latest".
-NPM_PKG="codeforerunner@0.4.8"
+NPM_PKG="codeforerunner@0.4.9"
 REPO="derek-palmer/codeforerunner"
-REPO_TAG="v0.4.8"
+REPO_TAG="v0.4.9"
 
 # Locate bin/install.js relative to this script (works even when piped through bash)
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]:-install.sh}")" 2>/dev/null && pwd || echo "")"

package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeforerunner",
-  "version": "0.4.8",
+  "version": "0.4.9",
   "description": "Model-agnostic repository documentation tooling — installs /forerunner-* slash commands into 30+ agent CLIs",
   "main": "./bin/install.js",
   "bin": {

plugins/codex/marketplace.json

@@ -4,14 +4,14 @@
     "id": "codeforerunner",
     "name": "codeforerunner",
     "description": "Model-agnostic repo documentation prompts as an installable Codex plugin.",
-    "version": "0.4.8",
+    "version": "0.4.9",
     "homepage": "https://github.com/derek-palmer/codeforerunner"
   },
   "plugins": [
     {
       "id": "codeforerunner",
       "name": "codeforerunner",
-      "version": "0.4.8",
+      "version": "0.4.9",
       "description": "Prompt-first repository documentation skill.",
       "source": {
         "kind": "git",

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "codeforerunner"
-version = "0.4.8"
+version = "0.4.9"
 description = "Model-agnostic repository documentation tooling (prompt-first; thin CLI)."
 readme = "README.md"
 requires-python = ">=3.11"