v0.2.1
Summary
Security hardening, bug fixes, and documentation improvements.
What's Changed
Security
- Harden validation scripts against bypass attacks (#164)
- Prevent command injection in test-hook.sh (#148)
- Use jq for safe JSON output in example hooks (#149)
- Document security scope and trust model (#165)
Fixed
- Remove deprecated mode parameter from claude-pr-review workflow (#171)
- Resolve shellcheck SC1087 errors in validate-hook-schema.sh (#168)
- Replace unofficial
ccalias with officialclaudeCLI command - Issue/PR template improvements and labels configuration fixes
- Workflow reliability and documentation improvements
Changed
- Use ERE instead of BRE in grep patterns for clarity (#159)
Documentation
- Comprehensive documentation improvements across README, CLAUDE.md, and skills
- Added prerequisites section for utility script dependencies (#157)
- Added shellcheck guidance to CONTRIBUTING.md (#160)
- Documented secure mktemp pattern and [BANG] workaround
Dependencies
- Bump anthropics/claude-code-action (#170)
- Bump EndBug/label-sync (#169)
- Update GitHub Actions to latest versions
Full Changelog: v0.2.0...v0.2.1