v1.36.3

1.36.3 (2026-09-29)

Maintenance

• track the JavaScript Dependabot ecosystem as bun by default (#648) (6aa9712)

v1.36.2

1.36.2 (2026-09-29)

Bug Fixes

• cloudflare: resolve cf bins by walking up node_modules/.bin (#662) (e82bbe0)

v1.36.1

1.36.1 (2026-09-29)

Bug Fixes

• cloudflare: build a preview Build Output before cf previews deploy (#660) (d897380)

v1.36.0

1.36.0 (2026-09-29)

Features

• cloudflare: add a cf deploy mode to cloudflare-deploy.yml (#658) (31ef8ca)

v1.35.0

1.35.0 (2026-09-29)

Features

• fold the Turbo impact check into the cloudflare deploy job (#655) (b72f5f2)
• scope CodeQL analysis to changed languages and Rust shards on pull requests (#654) (d5ce743)
• skip the security detector entirely while OpenCode Security is disabled (#653) (9e4271e)

Maintenance

• raise the packed artifact budget to 286 kB (#657) (4512af7)

v1.34.0

1.34.0 (2026-09-29)

Features

• billing-paused-dependabot (#651) (eda05b5)

v1.33.3

1.33.3 (2026-09-29)

Bug Fixes

• ci: launch wrangler under Node in the cloudflare deploy step (#649) (e797934)

v1.33.2

1.33.2 (2026-09-26)

Bug Fixes

• release: queue version PR merges on branch policy (#646) (ca492c8)

v1.33.1

1.33.1 (2026-09-25)

Bug Fixes

• security: stop a clean pip-audit result from failing the audit gate (#643) (7260291)

Maintenance

• perf: recalibrate the packed artifact budget (#645) (64b6504)

v1.33.0

1.33.0 (2026-09-22)

Features

• cloudflare-deploy: accept optional TURBO_TOKEN secret for remote-cached deploy builds (#640) (091bfd1)