chore: release main

[draxios]

Caution

Merging this PR will automatically publish to PyPI and create a GitHub release.

For the full release process, see .github/RELEASING.md.

---

Everything below this line will be the GitHub release body.

---

bog-agents: 0.9.10

0.9.10 (2026-07-12)

Features

• sdk: add GoalToolsMiddleware for persistent agent-visible goals (70ffb43)
• sdk: add pluggable symlink-trust checker hook to SkillsMiddleware (6000c2f)
• sdk: complete deepagents backend rewrite (FileData v2, delete, overwrite) (836cdea)
• sdk: deepagents 0.6.12 backend type foundation + dep floors (3e0ef8b)
• sdk: deepagents drop-in core API (SystemPromptConfig, exports, profiles) (674906a)
• sdk: middleware interop surface + fix two permission-bypass vulns (7687282)
• sdk: ship built-in model profiles + bedrock caching + video read (38e7930)

Bug Fixes

• sdk: activate no-op safety/feature middleware + harden serve (bfc03f2)
• sdk: checkpointing works on fresh repos and never touches the user's git index (d5a9df0)
• sdk: data-integrity + concurrency hardening (lost edits, atomic writes, DLP, worktree) (2b28420)
• sdk: don't follow a symlinked leaf on filesystem write/delete (055bd81)
• sdk: resiliency/reliability/observability hardening across middleware and backends (0999527)

bog-agents-cli: 0.9.10

0.9.10 (2026-07-12)

Features

• cli: env-var registry + config manifest with real config command (e602887)
• cli: managed ripgrep auto-install + ${VAR} MCP header interpolation (6c4df82)
• cli: native reasoning-effort, ctrl+x external editor, /goal and /rubric (9feaeb3)
• cli: spec-compliant MCP OAuth (mcp SDK OAuthClientProvider) (c30d5ed)
• cli: theme system, skill trust store, and UX polish (8271f4b)

Bug Fixes

• cli: concurrency + lifecycle hardening (orchestrator, auto-commit race, fork lock, oauth state) (5b0a0dc)
• cli: escape untrusted markup on trust surfaces + headless HITL/cache bugs (70e4e50)
• cli: resiliency/reliability/observability hardening (TUI, auth, sessions, ops) (b3fcbd1)
• cli: SSRF guards on web/agent fetch, sign TraceFile header, fix dreamscape laws (11e589d)

bog-agents-daemon: 0.9.10

0.9.10 (2026-07-12)

Features

• cli: managed ripgrep auto-install + ${VAR} MCP header interpolation (6c4df82)
• sdk: deepagents 0.6.12 backend type foundation + dep floors (3e0ef8b)

Bug Fixes

• daemon: harden the unattended runner (triggers, token, scheduler, lint) (0c9901b)
• daemon: scheduler dispatch for event triggers + safe-by-default unattended shell (63c04b5)

---

Everything above this line will be the GitHub release body.

[draxios]

🤖 Created releases:

• bog-agents==0.9.10
• bog-agents-cli==0.9.10
• bog-agents-daemon==0.9.10

🌻