v0.2.12

SkillHub 0.2.12

The 0.2.12 release focuses on anonymous public CLI installs, security hardening, notification reliability, and CI/dependency maintenance.

🌟 Highlights

• Anonymous public CLI search and install are now supported with installability filtering, restricted-skill handling, and bearer-token hardening by @dongmucat in #523
• Security review hardening closes release/runtime, archive extraction, workflow, scanner, and validation gaps by @dongmucat in #508
• Notification delivery is more reliable for profile reviews, promotion reviewer notices, publish events, and SSE streams by @dongmucat in #530, #533, and #539

🚨 Breaking Changes

• Invalid CLI bearer tokens now fail closed instead of falling back to anonymous access. Refresh credentials or omit the invalid token before CLI search/install by @dongmucat in #523

✨ Features

• Support anonymous public search and install in the CLI by @dongmucat in #523
• Add AgentGuard as a built-in skill from the cloud manifest by @dongmucat in #526

🐛 Bug Fixes

• Treat the highlighted CLI install target as selected when pressing Enter by @SenLinLeo in #534
• Preserve SSE headers for notification streams by @dongmucat in #539
• Keep notification SSE live-push streams open and add profile review notifications by @dongmucat in #530
• Avoid publish notifications for promotion reviewers by @dongmucat in #533
• Allow super admins to review their own promotion requests by @dongmucat in #536
• Harden review/security findings across runtime secrets, release validation, archive extraction, scanner gating, and workflow permissions by @dongmucat in #508
• Filter installable CLI search results before pagination and reject anonymous restricted resolves cleanly by @dongmucat in #523

⚡ Performance

• None identified in the v0.2.11..HEAD range.

📚 Documentation

• Update CLI README/help for anonymous public search and install by @dongmucat in #523
• Remove handwritten notification OpenAPI docs and refresh profile-review related docs by @dongmucat in #530
• Refresh docs site dependencies and security authorization docs by @dongmucat in #538

🔧 Chore

• Patch Dependabot security alerts by @dongmucat in #538
• Remove unsupported Python CodeQL scanning from the security workflow by @dongmucat in #537
• Add workflow, runtime-secret, release-config, and dev-web host tests for the hardened release path by @dongmucat in #508

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

👥 New Contributors

• @SenLinLeo made their first contribution in #534

Full Changelog: v0.2.11...{{tag}}

CLI 0.1.8

SkillHub CLI 0.1.8

Installation

npm

npm install -g @astron-team/skillhub@0.1.8

From source

Download and extract the archive, then:

npm install -g .

Verify installation

skillhub version

Changes

See commit history for details.

v0.2.11

SkillHub v0.2.11

🐛 Bug Fixes

• fix(publish): accept case-insensitive SKILL.md uploads in #507 by @XiaoSeS
• feat(skill): add namespace search and bundle download in #482 by @dongmucat

✨ Features

• feat(bootstrap): sync built-in skills from cloud manifest in #498 by @dongmucat
• feat(web): preview relative markdown package links in #502 by @dongmucat

🔧 Chore

• chore(logging): include idempotency cleanup threshold in #501 by @xudong Sun

👥 Contributors

@XiaoSeS, @dongmucat, @xudong Sun

Full Changelog: v0.2.10...v0.2.11

v0.2.10

SkillHub v0.2.10

SkillHub v0.2.10 improves skill discovery and download flows, fixes deletion, audit, dependency, and public download issues, and updates CLI release maintenance.

🌟 Highlights

• Added install method tabs plus richer My Skills search, namespace filtering, and pagination.
• Added CLI/domain support for downloading skills from non-global namespaces.
• Fixed skill deletion cleanup, audit timestamp offsets, vulnerable test dependency handling, and anonymous downloads for global public skills.

🚨 Breaking Changes

⚠️ None

✨ Features

• Add install method tabs for the web UI by @dongmucat in #496
• Add keyword search, namespace filtering, and clickable pagination for My Skills by @XiaoSeS in #493
• Support non-global namespace skill download in CLI/domain flows by @XiaoSeS in #497
• Initialize built-in skills by @dongmucat in #481

🐛 Bug Fixes

• Clear skill.latest_version_id before deleting skill_version by @XiaoSeS in #495
• Resolve 8-hour timezone offset in audit log timestamps by @dongmucat in #472
• Bump vitest to 4.1 to patch GHSA-5xrq-8626-4rwp by @dongmucat in #474
• Allow anonymous downloads for global PUBLIC skills by @dongmucat in #473

⚡ Performance

• None

📚 Documentation

• None

🔧 Chore

• Revert built-in skills initialization after review by @dongmucat in #487
• Improve publish-cli script reliability by @CheneyH in #441
• Bump CLI version to 0.1.7 by @dongmucat in #470

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

👥 New Contributors

None

Full Changelog: v0.2.9...v0.2.10

CLI 0.1.7

SkillHub CLI 0.1.7

Installation

npm

npm install -g @astron-team/skillhub@0.1.7

From source

Download and extract the archive, then:

npm install -g .

Verify installation

skillhub version

Changes

See commit history for details.

v0.2.9

SkillHub v0.2.9

新增 CLI --scope 选项、发布 dry-run 模式、管理后台 userId 列；修复 OAuth2 登录和容器环境变量传递；更新依赖修复安全告警。

🌟 Highlights

• CLI install 命令新增 --scope 选项，支持按用户根目录权限安装技能
• 发布流程新增 --dry-run 验证模式，可在正式发布前预检
• 管理后台用户列表新增 userId 列，便于快速定位用户

🚨 Breaking Changes

⚠️ None

✨ Features

• feat(cli): add --scope option to install command by @dongmucat in #440
• feat(publish): add --dry-run validation endpoint and CLI option by @dongmucat in #451
• feat(admin): add userId column to user management list by @dongmucat in #453

🐛 Bug Fixes

• fix(auth): use SimpleUrlAuthenticationSuccessHandler for OAuth2 login by @myml in #266
• fix(runtime): pass auth environment variables to containers by @CaffreySun in #280

⚡ Performance

• None

📚 Documentation

• docs(protocol): adopt .agents/skills (plural) as canonical universal fallback (commit 8c8b047)

🔧 Chore

• chore: disable gemini auto review by @dongmucat in #462
• chore(deps): bump vite/postcss/picomatch/flatted/esbuild to patch Dependabot alerts by @dongmucat in #461

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

👥 New Contributors

None

Full Changelog: v0.2.8...v0.2.9

v0.2.8

SkillHub v0.2.8

Automated CLI publish pipeline, security scan bypass fix, and CLI install guide on landing page.

🌟 Highlights

• CLI automated build and publish workflow with npm publish + GitHub Release integration
• Fixed security scan bypass when admin publishes skills directly
• Added CLI install tab on landing page quick start section

🚨 Breaking Changes

None.

✨ Features

• feat(cli): add automated build and publish workflow by @cheney in #422
• feat(web): add CLI install tab on landing quick start by @dongmucat in #423

🐛 Bug Fixes

• fix(promotion): copy bundleReady and downloadReady when promoting skill to global by @dongmucat in #434
• fix(security): trigger security scan for admin-published skills by @dongmucat in #417
• fix(cli): respect configured npm registry by @dongmucat in #418
• fix(cli): sync publish version flow by @dongmucat in #416
• fix(cli): push branch and tag atomically in publish-cli.sh by @cheney in #422
• fix(cli): detect and guide recovery of unpushed release artifacts by @cheney in #422
• fix(cli): harden release pipeline per PR #422 review by @cheney in #422
• fix(cli): match 'push' anywhere in git args, not just $1 by @cheney in #422
• fix(cli): avoid publish temp file leak by @dongmucat in #416
• fix(web): make quick start tab icons exhaustive by @dongmucat in #423

⚡ Performance

None.

📚 Documentation

• Add AGENTS.md and SKILL.md to support AI tools by @DongJiang in #393

🔧 Chore

• chore(cli): bump version to 0.1.6 by @dongmucat
• chore(ci): remove temporary publish-script test workflow by @cheney
• refactor(security): use explicit SCANNING check in processScanResult by @dongmucat

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

👥 New Contributors

• @DongJiang made their first contribution in #393

Full Changelog: v0.2.7...v0.2.8

CLI 0.1.6

SkillHub CLI 0.1.6

Installation

npm

npm install -g @astron-team/skillhub@0.1.6

From source

Download and extract the archive, then:

npm install -g .

Verify installation

skillhub version

Changes

See commit history for details.

v0.2.7

SkillHub v0.2.7

Introduces the SkillHub CLI v1 with full command suite, skill version comparison, and enhanced namespace management.

🌟 Highlights

• 🛠️ SkillHub CLI v1: Full-featured command-line tool with install/publish/search/update/doctor commands and 14+ agent profiles
• 🔍 Skill Version Compare: New page with unified diff view to compare any two versions of a skill
• 👥 Namespace Management Upgrade: Edit namespace info, transfer ownership, batch pagination, and team namespace deletion

🚨 Breaking Changes

⚠️ SkillHub CLI v1 introduces a brand-new command-line tool. As the first official CLI release, users adopting it should note:

• Publish CLI to npm with @astron-team/skillhub-cli scope
• Requires authentication via skillhub login before using publish/install commands
• Local config and credentials are stored under the user home directory; see the CLI guide for details
• Server adds new /api/cli/* endpoints; older server deployments must upgrade to v0.2.7 to use CLI features

✨ Features

• Add SkillHub CLI v1 with full command suite (install/publish/search/update/doctor/login etc.) and multi-agent profile support by @dongmucat in #359
• Add skill version compare page with unified diff and syntax highlighting by @dongmucat in #390
• Add namespace edit and transfer ownership UI with pagination support by @dongmucat in #412
• Add skill upload size limits, support nested SKILL.md, and fix session handling on publish by @XiaoSeS in #364

🐛 Bug Fixes

• Support team namespace deletion by @dongmucat in #408
• Restore web compatibility with Chromium 83 (Debian 10) and scope legacy target to production build by @cheney in #414
• Disable chunked encoding for Aliyun OSS compatibility by @dongmucat in #376
• Pin pnpm 10.33 and approve esbuild build scripts in CI by @dongmucat in #413
• Add index on promotion_request.target_namespace_id to improve query performance by @dongmucat in #412
• Remove optimistic update on member add to avoid cross-page duplication by @dongmucat in #412
• Return correct exit code for CLI network failures by @dongmucat in #359

⚡ Performance

No performance-related improvements.

📚 Documentation

• Update skill publish concept diagram by @XiaoSeS in #363
• Add comprehensive CLI usage guide and beautify CLI README by @dongmucat in #359
• Add Gemini code review workflow by @dongjiang1989 in #391

🔧 Chore

• Add comprehensive CLI integration and unit test coverage by @dongmucat in #359
• Add database migration V41: index on promotion_request.target_namespace_id
• Add Chinese and English i18n for namespace edit, transfer ownership, and version compare
• Publish CLI to npm with @astron-team/skillhub-cli scope

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

👥 New Contributors

• @cheney made their first contribution in #414
• @dongjiang1989 made their first contribution in #391

Full Changelog: v0.2.6...v0.2.7

v0.2.6

SkillHub v0.2.6

Full skill subscription system, OIDC login support, and S3 IAM authentication with enhanced namespace management.

🌟 Highlights

• 🔔 Skill Subscription System: Users can subscribe to skills and receive notifications on new version publishes or version yanks
• 🔐 OIDC Login Support: Single sign-on via OpenID Connect protocol
• ☁️ S3 IAM Authentication: Support AWS IAM role-based authentication without hardcoded credentials

🚨 Breaking Changes

⚠️ No breaking changes. This release is fully backward compatible.

✨ Features

• Implement skill subscription notification system with subscribe/unsubscribe API, subscription list page, and subscribe button component by @dongmucat in #356
• Support OIDC login based on Spring Security OAuth2 Client by @dongmucat in #348
• Support IAM authentication for S3 storage, enabling EC2/ECS/EKS instance role authentication by @vzpd in #358
• Allow namespace admins to batch import members via CSV file by @dongmucat in #342
• Add "Update" button to My Skills page with auto-prefilled publish form by @dongmucat in #340

🐛 Bug Fixes

• Add pagination to namespace skill list by @dongmucat in #354
• Fix search page not displaying skill list when query keyword is empty by @dongmucat in #346

⚡ Performance

No performance-related improvements.

📚 Documentation

• Clarify intentional no-transaction design for namespace batchAddMembers
• Complete OIDC environment variable configuration example

🔧 Chore

• Regenerate OpenAPI types for subscription endpoints
• Add database migration V40: create skill_subscription table
• Add Chinese and English i18n for subscription and batch import features

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

👥 New Contributors

• @vzpd made their first contribution in #358

Full Changelog: v0.2.5...v0.2.6