release: SkillSpector 2.12.0

CHANGELOG.md

@@ -1,3 +1,75 @@
+### 2.12.0 (Unreleased)
+### Features/Bug Fixes
+* fix(security): retain incomplete coverage for runtime-selected commands and remeasure active Git clones strictly (#514)
+* fix(scan): preserve required-input failures and multiline prompt uncertainty (#563)
+* fix(analyzer): preserve Perl print literal ownership and explain referenced-artifact limitations (#615)
+* fix(references): preserve complete bounded Markdown destinations and URI semantics (#553)
+* fix(analyzer): distinguish narrowly verified passive PNG references from active opaque targets in AE1 (#597)
+* fix(yara): require a word boundary for ROP exploit-framework matches (#607)
+* fix(analyzers): report registry load failures as incomplete coverage (#591)
+* fix(supply-chain): normalize GHSA MODERATE severity to MEDIUM (#588)
+* feat(providers): expand OpenAI and Azure model budget metadata (#539)
+* fix(ast): detect bounded joined reflective execution names (#544)
+* fix(static): analyze activation intent in descriptions when legacy triggers are absent (#541)
+* fix(patterns): detect bounded literal XOR-decoded script-fetch commands (#546)
+* feat(llm): add opt-in compact prompt line numbering (#542)
+* feat(input): support GitHub tree subdirectories and slash-containing refs (#561)
+* fix(static): detect literal shell flags with scope and reassignment checks (#560)
+* test: make the Basic-auth fixture explicitly synthetic (#600)
+* fix(report): preserve occurrence columns in JSON and SARIF (#584)
+* feat(supply-chain): detect dependency source redirection with SC10 (#383)
+* fix(as3): preserve trusted selected-source identity across input materialization (#580)
+* test(references): cover missing, ambiguous, existing, and self-reference acceptance cases (#551)
+* feat(report): add sanitized LLM analysis provenance (#556)
+* fix(cli): preserve recursive failures and completeness under reporting limits (#576)
+* fix(llm): retry transient provider failures within the workflow deadline (#555)
+* feat(providers): verify OpenCode 1.18.31 for the deny-all policy (#575)
+* fix(sc8): detect shipped bytecode in Python virtual environments (#571)
+* fix(ast): detect reflective module namespace lookups (#517)
+* fix(static): keep prose pattern matches within paragraph boundaries (#491)
+* feat(tp4): analyze executable Markdown fences as skill implementation (#421)
+* fix(mcp): distinguish missing references from ambiguous installation blockers (#526)
+* docs(readme): remove third-party status badges (#582)
+* fix(security): bound local inputs and isolate Pi extension report writes (#562)
+* fix(hooks): fail closed on unmodeled payload analysis (#573)
+* perf(security): cache pure security-view predicates (#570)
+* perf(security): accelerate token-gap classification with ASCII fast paths (#569)
+* fix(input): download raw content for GitHub and GitLab blob URLs (#566)
+* fix(cli): emit recursive SARIF reports to stdout (#565)
+* fix(security): keep line breaks out of letter-spacing runs (#564)
+* feat(cli): add streamed progress, file discovery, and Gemini 3.5 Flash metadata (#7)
+* fix(providers): honor model registry overrides for CLI providers (#463)
+* test(input): inject secure-open failures on the primitive the platform uses (#503)
+* feat(analyzer): add OpenCode-native SkillSpector invocation skill and tool (#537)
+* fix(input): expand 8.3 short DOS names before the opened-handle check (#484)
+* test(build-context): write fixture content with the newlines the assertions pin (#505)
+* test(build-context): guard the second FIFO case on mkfifo availability (#502)
+* test(build-context): read the nested OMS fixture without newline translation (#518)
+* test(yara): write the non-ASCII malformed-rule fixture as UTF-8 (#504)
+* fix(security): account for excluded executables (#548)
+* feat(providers): add opencode_cli semantic-scan provider (#536)
+* fix(llm): retarget the deadline on the existing client instead of rebuilding it (#520)
+* fix: preserve Markdown context during JSON command recovery (#559)
+* fix(batch-scan): reuse validated cache for multilingual analysis (#558)
+* fix(as3): ignore current-skill self references (#506)
+* fix: classify companion CLI documentation by context (#547)
+* fix(security): enforce discovery and requested analysis completeness (#410)
+* fix(security): add bounded reconstruction for letter-spaced P3/P4 instructions with an AE6 fallback for some ambiguous reconstructions (#470)
+* feat(cli): add opt-in --fail-on-findings across single-skill, recursive, and MCP registry scans (#469)
+* fix(security): preserve exact finding identity, evidence, and occurrence locations (#409)
+* fix: report oversized-file coverage gaps as AE7 and bound their LLM input (#509)
+* fix: avoid false analysis limits in documentation (#516)
+* fix: scan JSON quote candidates in linear time (#521)
+* feat: configure the static analysis time allowance (#522)
+* fix(cli): emit recursive JSON reports to stdout (#467)
+* fix(analyzer): project manifest version for RP3 (#474)
+* fix(supply-chain): prefer exact known-package matches in SC6 (#530)
+* Fix false local references from slash-separated prose (#451)
+* test(build-context): skip symlink cases where the platform refuses symlinks (#501)
+* docs(providers): align setup guidance (#434)
+* docs(readme): add HVTrust badge (#428)
+* docs(readme): clarify research background counts (#543)
+---
 ### 2.11.2 (Thursday, September 10, 2026)
 ### Features/Bug Fixes
 * fix: prevent duplicate reference coverage from causing fatal scan-accounting errors (#507)