chore: release v2.0.0

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to develop, this PR will be updated.

Releases

layne@2.0.0

Major Changes

• #90 c891508 Thanks @julio-rocketchat! - Replace Pi Agent with Spectre and add Dep Doctor scanner.

  • Spectre replaces Pi Agent as the multi-provider LLM malicious-intent scanner. It makes a single direct LLM call per file (no agent session) and supports Anthropic, OpenAI, Google, Mistral, and Amazon Bedrock via @mariozechner/pi-ai. Configurable file cap, diff line cap, min severity, skip paths/extensions, and concurrency.
  • Dep Doctor is a new dependency health scanner that fires when a lockfile changes. It detects newly-added packages with known CVEs (via OSV-Scanner), abandoned packages, and deprecated packages. Supports npm, PyPI, and Go lockfiles.
  • PR comments now use GitHub alert blocks ([!CAUTION] / [!WARNING]) with a severity-sorted findings table linking directly to the affected file and line. The {{findings}} and {{severitySummary}} template variables are now available for custom templates.
  • Dockerfile now installs osv-scanner alongside trufflehog and semgrep.

Minor Changes

• #59 53cdffc Thanks @julio-rocketchat! - Adds a new feature that allows Pi Agent to lazy fetch repo files

• #62 c3fa184 Thanks @julio-rocketchat! - Ensure that Pi Agent retries once if the run returns buggy results

Patch Changes

• #61 f92ecc6 Thanks @julio-rocketchat! - Ensures that custom prompts can be used with Pi Agent