f6110879f9
security(typescript): remove phantom package reference in dependency security guide
...
Replaced unclaimed @my-org/internal-lib example with real, claimed
scope (@microsoft) and explicit example disclaimer. Added guidance
to never reference unclaimed package names in documentation.
Reported by Noam at Blue Bear Security.
Bumps version to 3.0.1.
2026-06-05 10:34:46 +02:00
e875e0ce1c
chore: update version to 3.0.0 for all developer kit components
2026-05-10 18:27:28 +02:00
4b934b34a9
chore: update version to 2.8.2 for all marketplace and plugin components
2026-05-04 13:05:30 +02:00
558dde9862
chore(global): updated versions v2.8.1
2026-04-20 09:38:16 +02:00
7a41a7e11d
refactor(specs): edit ralph loop skill, use same approch of codex plugin
2026-04-20 09:05:08 +02:00
19b60555e4
chore(checkpoint): iteration 1 - kimi completed task unknown
2026-04-10 18:39:36 +02:00
1c11b997d8
docs(specs): updated docs and minor fix on skill
2026-04-10 17:46:47 +02:00
1763f9721e
chore(checkpoint): iteration 1 - claude completed task 003
2026-04-10 15:55:17 +02:00
941d1b1bc4
docs(ai): udapted docs
2026-04-09 14:47:28 +02:00
7b57224f65
refactor(global): added new hook for checking task frontmatter
2026-04-07 13:24:18 +02:00
a59c814983
fix(specs): errors on hooks configuration
2026-04-05 11:50:15 +02:00
1364345cbb
fix(specs): added command python for handler codex loop
2026-04-03 15:23:27 +02:00
612f418f84
fix(global): fix make command
2026-04-02 15:43:29 +02:00
963b24cb98
chore(global): updated versions v2.8.0
2026-04-02 11:25:19 +02:00
131260d8d6
style(global): merge with develop
2026-03-24 10:34:25 +01:00
0fd446d40c
chore(release): bump plugin versions to 2.7.2
2026-03-24 09:42:27 +01:00
a02e282548
refactor(global): optimized skills lenght e tokens consumation
2026-03-24 09:27:51 +01:00
2528036513
chore: prepare release v2.7.1
2026-03-23 11:50:31 +01:00
8e5960c701
refactor(global): fixed documentation path
2026-03-18 17:27:57 +01:00
82e0ba7c6c
chore(release): bump plugin versions to 2.6.3 and update CHANGELOG
2026-03-18 09:23:52 +01:00
68f3ca57c4
fix(developer-kit-ai): added sessions mandatory on the skills
2026-03-16 16:15:11 +01:00
3b4f7c111e
Merge pull request #155 from fernandezbaptiste/improve-prompt-engineering-skill
...
improve prompt-engineering skill structure
2026-03-16 13:37:40 +01:00
5e3a828118
chore: bump version to 2.6.2
2026-03-16 12:59:36 +01:00
85f8ffcbfc
fix(global): documentation links
2026-03-16 12:14:21 +01:00
91dc3c4308
fix(global): markdown errors on skills and reference files
2026-03-16 11:58:24 +01:00
690e194b2e
improve prompt-engineering skill structure
...
- rewrite description with concrete action verbs + natural trigger terms
- replace placeholder template with concrete sentiment classification example
- remove duplicate sections + trim explanatory content already known to LLMs
- add explicit validation checkpoints + failure-mode diagnosis table
- consolidate quality assurance into concise quality gates
2026-03-15 11:33:22 +00:00
810297c13b
chore: bump version to 2.6.1
2026-03-14 12:54:57 +01:00
afaffc55a6
docs(global): new version 2.6.0
2026-03-13 20:08:21 +01:00
4bf1eae434
fix: plugin version
2026-03-07 13:13:28 +01:00
a416fb592c
feat(plugins): add AWS SAM bootstrap skill and docs to provide SAM bootstrapping; update plugin manifests and docs
2026-03-04 17:22:12 +01:00
d9ef797165
chore(plugins): remove unsupported 'rules' fields; add developer-kit-tools to marketplace
2026-03-01 09:30:28 +01:00
e29f2011d6
chore(release): bump plugin versions to 2.4.0 and update CHANGELOG
2026-02-28 18:23:04 +01:00
3187e79d5e
fix: resolve all 14 MCP-Scan security failures (W007, W011, W012)
...
W007 - Insecure credential handling:
- RAG: Replace hardcoded apiKey/password with env var references
W012 - External URL/code execution risks:
- CloudFormation (auto-scaling, bedrock, lambda): Replace hardcoded S3
- ECS deploy GH Actions: Pin trivy-action and snyk/actions to specific versions
- S3 SDK: Pin LocalStack Docker image to 3.8.1
- MCP server patterns: Pin npm @modelcontextprotocol packages to 0.6.2
- Testing strategies: Pin ollama (0.5.4) and qdrant (v1.13.2) Docker images
W011 - Third-party content exposure:
- RAG: Add content validation/filtering security warnings
- Bedrock: Add web data source and nested template security constraints
- Messaging: Add SQS/SNS input validation warning
- MCP patterns: Add external server and content validation warnings
- Qdrant: Add document ingestion sanitization warnings
- Spring AI MCP: Add external URL content validation warning
- TS Lambda: Add event data validation warnings
- Next.js: Replace hardcoded fetch URLs with env vars, add data fetching warning
- shadcn-ui: Add registry security warnings and validation notes
2026-02-28 15:00:22 +01:00
5e9206b46f
style: new version v2.3.0
2026-02-25 21:42:16 +01:00
c6d4db160b
fix(skills): remove invalid frontmatter fields from SKILL.md
2026-02-23 22:10:33 +01:00
148b330fc1
style: change release number, v2.2.0
2026-02-20 15:41:49 +01:00
fe2de535b2
fix: version on plugin.json
2026-02-20 15:08:24 +01:00
a336d67495
fix: updated structure of all commands
2026-02-09 09:54:13 +01:00
d4d771e57f
fix: order section on commands
2026-02-08 17:58:27 +01:00
147afce5d6
chore: added validator script, added format for commands, agents and skills
2026-02-08 17:05:58 +01:00
1a732c73ec
chore: fix formatter on skills and commands
2026-02-07 19:43:04 +01:00
3fc9e61046
chore: fix formatter on skills and commands
2026-02-07 19:08:06 +01:00
654d94da19
refactor: refactor agents, skills and commands in multi plugins structure by language
2026-02-07 17:24:40 +01:00
Giuseppe