Changelog

All notable changes to this project are documented in this file.

The format is loosely based on Keep a Changelog, and the project adheres to Semantic Versioning.

[Unreleased]

wslu/wslview catalog entry (catalog/wslu.json + scripts/install_wslu.sh), gated by a new requires_wsl catalog flag so it is only surfaced and installed under WSL. Its installer also points the xdg default browser at wslview (so links open in the Windows browser); opt out with WSLU_SET_DEFAULT_BROWSER=0.
Governance files: PR template, CHANGELOG.md. Security reporting is covered by the org-level SECURITY.md.
.github/workflows/dependency-review.yml and a dedicated security.yml (pip-audit + bandit + CycloneDX SBOM). CodeQL continues to run via GitHub's default code-scanning setup.
.pre-commit-config.yaml for local hook enforcement (flake8, black, isort, shellcheck).
README badges: CI, License.
AGENTS.md structural sections (Commands, Setup, Testing, Architecture, Development).
Per-cycle auto_update storage for multi-version tools (python@3.13 vs python@3.14).
Persistent endoflife.date cache at ~/.cache/cli-audit/endoflife.json with fallback on HTTP failure.
Binary-probe fallback in guide.sh when the post-install snapshot refresh is stale.

cmd_update_local in MERGE mode now refreshes multi-version cycle entries (python@3.14, …) instead of only the base-tool entry. Resolved false-negative "Upgrade did not succeed" messages after successful uv installs.

Upgraded 23 locked Python dev-dependencies to latest compatible versions (bandit 1.9.4, mypy 1.20.1, isort 8.0.1, rich 15.0, coverage 7.13.5, …).

See git log for commits prior to this changelog. Tagged releases: Releases page.