Diego Rodrigues de Sa e Souza dd12539a2c fix(api): Zod-validate POST /api/github-skills + document new gate envs + pin merge-integrity actions ...

Three latent heavy-CI reds surfaced by the VPS validation dispatch (the fast
path never runs these gates):

- t06 route-validation: POST /api/github-skills destructured request.json()
  blind — a non-array 'targets' would .map-crash. Now validateBody(zod)
  with defaults preserved (Hard Rule #7). Guard:
  tests/unit/github-skills-route-validation.test.ts (4/4).
- env-doc-sync: document OMNIROUTE_SKIP_SYSTEM_TRUST (#6310) and the
  changelog-integrity gate envs CHANGELOG_BASE_REF/ALLOW_CHANGELOG_REMOVALS
  (#6300) in .env.example + ENVIRONMENT.md.
- zizmor ratchet: the new merge-integrity job's checkout/setup-node uses were
  unpinned (+1 finding, 160 > baseline 159); pinned by SHA -> 158 (< baseline).

2026-07-05 20:04:49 -03:00

..

API_REFERENCE.md

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

CLI-TOOLS.md

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

ENVIRONMENT.md

fix(api): Zod-validate POST /api/github-skills + document new gate envs + pin merge-integrity actions

2026-07-05 20:04:49 -03:00

FEATURE_FLAGS.md

Release v3.8.40

2026-06-29 08:40:06 -03:00

FREE_TIERS.md

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

meta.json

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

PROVIDER_PLUGIN_MANIFEST.md

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

PROVIDER_REFERENCE.md

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

RELAY_BACKEND_STRATEGY.md

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00