chore(main): pre-release 3.3.70

[hve-core-release-please]

Pre-Release 3.3.70

✨ Features

• replace hve-core-specific references with portable discovery-based language (feat(agents): replace hve-core-specific references with portable discovery-based language #1335)
• introduce owasp-cicd (feat(skill): introduce owasp-cicd #1246)
• add secure-by-design knowledge skill (feat(skills): add secure-by-design knowledge skill #1223)
• introduce owasp-infrastructure (feat(skill): introduce owasp-infrastructure #1244)
• introduce owasp-mcp (feat(skill): introduce owasp-mcp #1207)
• add OutputPath parameter to Invoke-LinkLanguageCheck.ps1 (feat(1004): add OutputPath parameter to Invoke-LinkLanguageCheck.ps1 #1229)
• add -OutputPath parameter to Validate-SkillStructure.ps1 (feat: add -OutputPath parameter to Validate-SkillStructure.ps1 #1225)
• add maintainer-only skip-review label guard (feat(workflows): add maintainer-only skip-review label guard #1293)
• add extension collections overview and integrate into getting started flow (feat(docs): add extension collections overview and integrate into getting started flow #950)
• add agentic workflows for automated issue triage, implementation, PR review, dependency review, and doc-staleness detection (feat(workflows): add agentic workflows for automated issue triage, implementation, PR review, dependency review, and doc-staleness detection #1219)
• consolidate package-lock.json version sync into Update-VersionFiles.ps1 (feat(scripts): consolidate package-lock.json version sync into Update-VersionFiles.ps1 #1240)
• add standards code review agent and full review orchestrator (feat(agents): add standards code review agent and full review orchestrator #1174)
• standardize pytest-mock as Python mocking framework (feat(skills): standardize pytest-mock as Python mocking framework #1170)
• add Jira backlog workflows and Jira/GitLab skills (feat(integrations): add Jira backlog workflows and Jira/GitLab skills #978)
• add centralized version bump script and supply-chain attestation (feat(build): add centralized version bump script and supply-chain attestation #1183)

🐛 Bug Fixes

• add synchronize trigger to PR Review workflow (fix(ci): add synchronize trigger to PR Review workflow #1323)
• standardize timestamp in Validate-SkillStructure.ps1 to use Get-StandardTimestamp (fix(scripts): standardize timestamp in Validate-SkillStructure.ps1 to use Get-StandardTimestamp #1280)
• add parallel subagent dispatch and structured JSON contracts to code-review-full (fix(agents): add parallel subagent dispatch and structured JSON contracts to code-review-full #1304)
• standardize timestamp in SecurityHelpers.psm1 to use Get-StandardTimestamp (fix(scripts): standardize timestamp in SecurityHelpers.psm1 to use Get-StandardTimestamp #1284)
• standardize timestamps in Test-DependencyPinning.ps1 and SecurityClasses.psm1 (fix(scripts): standardize timestamps in Test-DependencyPinning.ps1 and SecurityClasses.psm1 #1282)
• derive collection artifact counts from YAML at build time (fix(docs): derive collection artifact counts from YAML at build time #1275)
• standardize timestamp in FrontmatterValidation.psm1 to use Get-StandardTimestamp (fix(scripts): standardize timestamp in FrontmatterValidation.psm1 to use Get-StandardTimestamp #1285)
• standardize timestamp in Markdown-Link-Check.ps1 to use Get-StandardTimestamp (fix(scripts): standardize timestamp in Markdown-Link-Check.ps1 to use Get-StandardTimestamp #1283)
• escape hyphens in Mermaid diagram on Collections page (fix(docs): escape hyphens in Mermaid diagram on Collections page #1262)
• add summary timestamp to PSScriptAnalyzer output (fix(linting): add summary timestamp to PSScriptAnalyzer output #1211)
• fix plugin compatibility and robustness for coding-standards code review agents (fix(agents): fix plugin compatibility and robustness for coding-standards code review agents #1289)
• standardize timestamp in Test-CopyrightHeaders.ps1 to use Get-StandardTimestamp (fix(scripts): standardize timestamp in Test-CopyrightHeaders.ps1 to use Get-StandardTimestamp #1278)
• standardize timestamp in Invoke-YamlLint.ps1 to use Get-StandardTimestamp (fix(scripts): standardize timestamp in Invoke-YamlLint.ps1 to use Get-StandardTimestamp #1270)
• standardize timestamp in Invoke-LinkLanguageCheck.ps1 to use Get-StandardTimestamp (fix(scripts): standardize timestamp in Invoke-LinkLanguageCheck.ps1 to use Get-StandardTimestamp #1264)
• fix dependency-review path filters and sparse-checkout cone mode (fix(workflows): fix dependency-review path filters and sparse-checkout cone mode #1259)
• replace invalid bare tool names with official tool identifiers (fix(agents): replace invalid bare tool names with official tool identifiers #1198)
• fix broken links and remove orphaned reference in code review docs (fix(docs): fix broken links and remove orphaned reference in code review docs #1257)
• exclude Python env dirs from skill validation warnings (fix(scripts): exclude Python env dirs from skill validation warnings #1255)
• pin happy-dom and serialize-javascript to resolve Dependabot vulnerabilities (fix(build): pin happy-dom and serialize-javascript to resolve Dependabot vulnerabilities #1253)
• remove Mermaid diagram and add missing collection cards (fix(docs): remove Mermaid diagram and add missing collection cards #1247)
• disable MCP servers by default to prevent token limit errors (fix: disable MCP servers by default to prevent token limit errors #1144)
• sync package-lock.json after pre-release version bump (fix(workflows): sync package-lock.json after pre-release version bump #1236)
• separate mermaid node declarations and add dynamic diagram generation with tests (fix(docs): separate mermaid node declarations and add dynamic diagram generation with tests #1215)
• replace anchor links in meeting-analyst with bold text references (fix(agents): replace anchor links in meeting-analyst with bold text references #1201)
• remove recursive symlinks in jira and gitlab skill directories (fix(skills): remove recursive symlinks in jira and gitlab skill directories #1233)
• validate-installation scripts now check .github/skills directory (fix: installer skill scripts validate-installation should check for .github/skills directory #1010) (fix: validate-installation scripts now check .github/skills directory (#1010) #1206)
• resolve npm audit vulnerabilities via dependency overrides (fix(build): resolve npm audit vulnerabilities via dependency overrides #1200)
• add post-release triggers to scorecard workflow (fix(workflows): add post-release triggers to scorecard workflow #1186)
• add missing .md extensions to relative links in agent documentation (fix(docs): add missing .md extensions to relative links in agent documentation #1180)

📚 Documentation

• CLI getting-started: clarify plugin install commands as alternatives (-all vs base) (docs(docs): CLI getting-started: clarify plugin install commands as alternatives (-all vs base) #1251)

♻️ Refactoring

• align agent and prompt folder names to collection identifier (refactor(coding-standards): align agent and prompt folder names to collection identifier #1210)

🔧 Maintenance

• bump basic-ftp from 5.2.0 to 5.2.1 (chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1 #1324)
• update github/gh-aw-actions requirement to 536ea1bad8c6715d098a9dc1afea8d403733acfe in the github-actions group across 1 directory (chore(deps): update github/gh-aw-actions requirement to 536ea1bad8c6715d098a9dc1afea8d403733acfe in the github-actions group across 1 directory #1298)
• update security instruction attributions and compliance (chore(licensing): update security instruction attributions and compliance #1294)
• bump the npm-dependencies group with 2 updates (chore(deps-dev): bump the npm-dependencies group with 2 updates #1297)
• pre-release 3.3.41 (chore(main): pre-release 3.3.41 #1252)
• streamline RAI Planner phase structure and documentation (chore(rai-planning): streamline RAI Planner phase structure and documentation #1273)
• bump happy-dom from 20.8.8 to 20.8.9 in /docs/docusaurus (chore(deps-dev): bump happy-dom from 20.8.8 to 20.8.9 in /docs/docusaurus #1237)
• pre-release 3.3.27 (chore(main): pre-release 3.3.27 #1191)
• bump pygments from 2.19.2 to 2.20.0 in /.github/skills/gitlab/gitlab (chore(deps): bump pygments from 2.19.2 to 2.20.0 in /.github/skills/gitlab/gitlab #1234)
• bump path-to-regexp from 0.1.12 to 0.1.13 in /docs/docusaurus (chore(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /docs/docusaurus #1226)
• bump the github-actions group with 4 updates (chore(deps): bump the github-actions group with 4 updates #1231)
• add missing folders and alphabetize location lists (chore(settings): add missing folders and alphabetize location lists #1193)
• bump brace-expansion (chore(deps): bump brace-expansion #1224)
• bump handlebars from 4.7.8 to 4.7.9 in /docs/docusaurus (chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 in /docs/docusaurus #1217)
• bump brace-expansion from 5.0.3 to 5.0.5 in /docs/docusaurus (chore(deps): bump brace-expansion from 5.0.3 to 5.0.5 in /docs/docusaurus #1213)
• pre-release 3.3.10 (chore(main): pre-release 3.3.10 #1187)
• bump markdownlint-cli2 from 0.21.0 to 0.22.0 in the npm-dependencies group (chore(deps-dev): bump markdownlint-cli2 from 0.21.0 to 0.22.0 in the npm-dependencies group #1175)
• bump the github-actions group with 3 updates (chore(deps): bump the github-actions group with 3 updates #1176)
• pre-release 3.3.1 (chore(main): pre-release 3.3.1 #1165)

---

Managed automatically by pre-release workflow.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/hve-core	3.3.70	Unknown	Unknown

Scanned Files

• package.json

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.65%. Comparing base (ef520df) to head (f83b43b).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1274      +/-   ##
==========================================
- Coverage   87.66%   87.65%   -0.02%     
==========================================
  Files          61       61              
  Lines        9328     9328              
==========================================
- Hits         8177     8176       -1     
- Misses       1151     1152       +1     

Flag	Coverage Δ
pester	85.22% <ø> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.