v1.8.0

What's Changed

• feat(catalog): add tokei and scc catalog entries by @CybotTM in #30
• feat: add .pre-commit-config.yaml mirroring CI checks by @CybotTM in #31
• chore(release): v1.8.0 by @CybotTM in #32

Full Changelog: v1.7.0...v1.8.0

v1.7.0

Highlights

npm distribution — the skill now ships as an npm package via @netresearch/agent-skill-coordinator, joining Composer and the Claude Code marketplace as a first-class install path. A follow-up fix ensured the catalog/ directory — the data source the skill consults for tool installation hints — is included in the npm tarball (#28).

Release pipeline maintenance

The release workflow caller was aligned with the hardened skill-repo-skill signed-tag-only model:

• Release caller granted id-token: write and attestations: write so SLSA build-provenance and cosign signatures can be emitted (#26).
• Removed the deprecated with: bump: block and the workflow_dispatch.bump input — releases now happen exclusively by pushing a locally-signed tag. The previous auto-bump path produced unsigned bot-authored tags that the reusable workflow now rejects (#27).
• Forwarded the bump input from workflow_dispatch to the reusable release workflow for the brief window before the input was deprecated (#25).

This is the first release of cli-tools cut against the hardened pipeline. The SHA256SUMS.txt shipped with this release is keyless-signed via cosign, and every archive (.zip / .tar.gz) carries a SLSA build-provenance attestation verifiable with gh attestation verify against netresearch/cli-tools-skill.

Verification

gh attestation verify cli-tools-skill-v1.7.0.zip --repo netresearch/cli-tools-skill
cosign verify-blob \
  --bundle SHA256SUMS.txt.bundle \
  --certificate-identity-regexp '^https://github\.com/netresearch/skill-repo-skill/\.github/workflows/release\.yml@' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  SHA256SUMS.txt
sha256sum --check SHA256SUMS.txt

Install

# Claude Code plugin marketplace
/plugin install cli-tools@netresearch

# Composer
composer require netresearch/cli-tools-skill

# npm (new in this release)
npm i -D @netresearch/agent-skill-coordinator github:netresearch/cli-tools-skill

Full changelog: v1.6.1...v1.7.0

v1.6.1

Highlights

• Added an eval-validate workflow so skill evals are checked in CI on every change, catching malformed assertion structures before release.
• Fixed existing eval assertions that weren't passing the new validator.

CI / infrastructure

• Repaired the auto-merge-deps reusable workflow reference so Renovate PRs can auto-merge again.
• Trimmed a trailing blank line from eval-validate.yml to satisfy YAML linting.

Full Changelog: v1.6.0...v1.6.1

v1.6.0

What's Changed

• Expand evals to 25 and improve SKILL.md by @CybotTM in #22

Full Changelog: v1.5.1...v1.6.0

v1.5.1

What's Changed

• chore(deps): bump the github-actions group with 3 updates by @dependabot[bot] in #20
• chore(deps): update netresearch/skill-repo-skill digest to bb143f5 by @renovate[bot] in #18
• chore(deps): update netresearch/skill-repo-skill digest to 5b3f983 by @renovate[bot] in #21

Full Changelog: v1.5.0...v1.5.1

v1.5.0

What's Changed

• fix: harden GitHub Actions against supply chain attacks by @CybotTM in #17
• chore(deps): bump the github-actions group with 3 updates by @dependabot[bot] in #19

New Contributors

• @dependabot[bot] made their first contribution in #19

Full Changelog: v1.4.6...v1.5.0

v1.4.6

Full Changelog: v1.4.5...v1.4.6

v1.4.5

What's Changed

• chore: Configure Renovate by @renovate[bot] in #15

New Contributors

• @renovate[bot] made their first contribution in #15

Full Changelog: v1.4.4...v1.4.5

v1.4.4

What's Changed

• chore: replace generic emails with GitHub references by @CybotTM in #10
• feat: add preferred tools reference table by @CybotTM in #11
• fix: standardize frontmatter and composer.json paths by @CybotTM in #12
• refactor: trim SKILL.md for token efficiency by @CybotTM in #13
• feat: add skill validation CI job by @CybotTM in #14

Full Changelog: v1.4.3...v1.4.4

v1.4.3

Full Changelog: v1.4.2...v1.4.3