Release v0.2.9

Changes since v0.2.8

fix(runner): restore acp backend MCP tools as fallback when sidecar is absent (#1607) (5b1e702)

deps(runner): bump claude-agent-sdk 0.2.87, anthropic 0.104.1 (#1603) (d45e631)

Full Changelog: v0.2.8...v0.2.9

Release	Date	PRs	Critical	Major	Per PR	Gaps
v0.2.0	2026-04-10	30	23	120	4.8	125
v0.2.9	2026-05-21	1	1	13	14.0	11

Credential sidecar authentication mechanism is undefined. (3 occurrences, impact: 9) — other
Credential bootstrap wrapper is missing for this sidecar flow (also applies to google/Dockerfile). (1 occurrences, impact: 4) — other
Document git credential HTTP endpoint in MCP server spec or clarify relation to MCP transport. (1 occurrences, impact: 3) — other
Add gitlab-mcp to the MCP Servers table. (1 occurrences, impact: 3) — other
Update legacy runner credential flow references to match sidecar isolation (1 occurrences, impact: 3) — other
Sidecar transport mode conflicts with earlier MCP transport definition (1 occurrences, impact: 3) — other
Do not fail open when required bootstrap env vars are missing. (1 occurrences, impact: 3) — other
Avoid including raw credential API response bodies in errors. (1 occurrences, impact: 3) — other
Harden sidecar URL parsing to avoid runtime crashes on malformed config. (1 occurrences, impact: 3) — runner
Don’t activate sidecar mode from a non-empty string alone. (1 occurrences, impact: 3) — runner

Credential sidecar authentication mechanism is undefined.: Enforce via convention (needs specific rule)
Credential bootstrap wrapper is missing for this sidecar flow (also applies to google/Dockerfile).: Enforce via convention (needs specific rule)
Document git credential HTTP endpoint in MCP server spec or clarify relation to MCP transport.: Enforce via convention (needs specific rule)
Add gitlab-mcp to the MCP Servers table.: Enforce via convention (needs specific rule)
Update legacy runner credential flow references to match sidecar isolation: Enforce via convention (needs specific rule)
Sidecar transport mode conflicts with earlier MCP transport definition: Enforce via convention (needs specific rule)
Do not fail open when required bootstrap env vars are missing.: Enforce via convention (needs specific rule)
Avoid including raw credential API response bodies in errors.: Enforce via convention (needs specific rule)
Harden sidecar URL parsing to avoid runtime crashes on malformed config.: Enforce via convention (needs specific rule)
Don’t activate sidecar mode from a non-empty string alone.: Enforce via convention (needs specific rule)

PreToolUse hook for credential sidecar authentication mechanism is undefined. enforcement in TypeScript code
PreToolUse hook for credential bootstrap wrapper is missing for this sidecar flow (also applies to google/dockerfile). enforcement in TypeScript code
PreToolUse hook for document git credential http endpoint in mcp server spec or clarify relation to mcp transport. enforcement in TypeScript code
PreToolUse hook for add gitlab-mcp to the mcp servers table. enforcement in TypeScript code
PreToolUse hook for update legacy runner credential flow references to match sidecar isolation enforcement in TypeScript code
PreToolUse hook for sidecar transport mode conflicts with earlier mcp transport definition enforcement in TypeScript code
PreToolUse hook for do not fail open when required bootstrap env vars are missing. enforcement in TypeScript code
PreToolUse hook for avoid including raw credential api response bodies in errors. enforcement in TypeScript code
PreToolUse hook for harden sidecar url parsing to avoid runtime crashes on malformed config. enforcement in Python code
PreToolUse hook for don’t activate sidecar mode from a non-empty string alone. enforcement in Python code