SkillHub v0.2.11

🐛 Bug Fixes

• fix(publish): accept case-insensitive SKILL.md uploads in #507 by @XiaoSeS
• feat(skill): add namespace search and bundle download in #482 by @dongmucat

✨ Features

• feat(bootstrap): sync built-in skills from cloud manifest in #498 by @dongmucat
• feat(web): preview relative markdown package links in #502 by @dongmucat

🔧 Chore

• chore(logging): include idempotency cleanup threshold in #501 by @xudong Sun

👥 Contributors

@XiaoSeS, @dongmucat, @xudong Sun

Full Changelog: v0.2.10...v0.2.11

SkillHub v0.2.10

SkillHub v0.2.10 improves skill discovery and download flows, fixes deletion, audit, dependency, and public download issues, and updates CLI release maintenance.

🌟 Highlights

• Added install method tabs plus richer My Skills search, namespace filtering, and pagination.
• Added CLI/domain support for downloading skills from non-global namespaces.
• Fixed skill deletion cleanup, audit timestamp offsets, vulnerable test dependency handling, and anonymous downloads for global public skills.

🚨 Breaking Changes

⚠️ None

✨ Features

• Add install method tabs for the web UI by @dongmucat in #496
• Add keyword search, namespace filtering, and clickable pagination for My Skills by @XiaoSeS in #493
• Support non-global namespace skill download in CLI/domain flows by @XiaoSeS in #497
• Initialize built-in skills by @dongmucat in #481

🐛 Bug Fixes

• Clear skill.latest_version_id before deleting skill_version by @XiaoSeS in #495
• Resolve 8-hour timezone offset in audit log timestamps by @dongmucat in #472
• Bump vitest to 4.1 to patch GHSA-5xrq-8626-4rwp by @dongmucat in #474
• Allow anonymous downloads for global PUBLIC skills by @dongmucat in #473

⚡ Performance

• None

📚 Documentation

• None

🔧 Chore

• Revert built-in skills initialization after review by @dongmucat in #487
• Improve publish-cli script reliability by @CheneyH in #441
• Bump CLI version to 0.1.7 by @dongmucat in #470

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

👥 New Contributors

None

Full Changelog: v0.2.9...v0.2.10

SkillHub CLI 0.1.7

Installation

npm

npm install -g @astron-team/skillhub@0.1.7

From source

Download and extract the archive, then:

npm install -g .

Verify installation

skillhub version

Changes

See commit history for details.

SkillHub v0.2.9

新增 CLI --scope 选项、发布 dry-run 模式、管理后台 userId 列；修复 OAuth2 登录和容器环境变量传递；更新依赖修复安全告警。

🌟 Highlights

• CLI install 命令新增 --scope 选项，支持按用户根目录权限安装技能
• 发布流程新增 --dry-run 验证模式，可在正式发布前预检
• 管理后台用户列表新增 userId 列，便于快速定位用户

🚨 Breaking Changes

⚠️ None

✨ Features

• feat(cli): add --scope option to install command by @dongmucat in #440
• feat(publish): add --dry-run validation endpoint and CLI option by @dongmucat in #451
• feat(admin): add userId column to user management list by @dongmucat in #453

🐛 Bug Fixes

• fix(auth): use SimpleUrlAuthenticationSuccessHandler for OAuth2 login by @myml in #266
• fix(runtime): pass auth environment variables to containers by @CaffreySun in #280

⚡ Performance

• None

📚 Documentation

• docs(protocol): adopt .agents/skills (plural) as canonical universal fallback (commit 8c8b047)

🔧 Chore

• chore: disable gemini auto review by @dongmucat in #462
• chore(deps): bump vite/postcss/picomatch/flatted/esbuild to patch Dependabot alerts by @dongmucat in #461

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

👥 New Contributors

None

Full Changelog: v0.2.8...v0.2.9

SkillHub v0.2.8

Automated CLI publish pipeline, security scan bypass fix, and CLI install guide on landing page.

🌟 Highlights

• CLI automated build and publish workflow with npm publish + GitHub Release integration
• Fixed security scan bypass when admin publishes skills directly
• Added CLI install tab on landing page quick start section

🚨 Breaking Changes

None.

✨ Features

• feat(cli): add automated build and publish workflow by @cheney in #422
• feat(web): add CLI install tab on landing quick start by @dongmucat in #423

🐛 Bug Fixes

• fix(promotion): copy bundleReady and downloadReady when promoting skill to global by @dongmucat in #434
• fix(security): trigger security scan for admin-published skills by @dongmucat in #417
• fix(cli): respect configured npm registry by @dongmucat in #418
• fix(cli): sync publish version flow by @dongmucat in #416
• fix(cli): push branch and tag atomically in publish-cli.sh by @cheney in #422
• fix(cli): detect and guide recovery of unpushed release artifacts by @cheney in #422
• fix(cli): harden release pipeline per PR #422 review by @cheney in #422
• fix(cli): match 'push' anywhere in git args, not just $1 by @cheney in #422
• fix(cli): avoid publish temp file leak by @dongmucat in #416
• fix(web): make quick start tab icons exhaustive by @dongmucat in #423

⚡ Performance

None.

📚 Documentation

• Add AGENTS.md and SKILL.md to support AI tools by @DongJiang in #393

🔧 Chore

• chore(cli): bump version to 0.1.6 by @dongmucat
• chore(ci): remove temporary publish-script test workflow by @cheney
• refactor(security): use explicit SCANNING check in processScanResult by @dongmucat

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

👥 New Contributors

• @DongJiang made their first contribution in #393

Full Changelog: v0.2.7...v0.2.8

SkillHub CLI 0.1.6

Installation

npm

npm install -g @astron-team/skillhub@0.1.6

From source

Download and extract the archive, then:

npm install -g .

Verify installation

skillhub version

Changes

See commit history for details.

SkillHub v0.2.7

Introduces the SkillHub CLI v1 with full command suite, skill version comparison, and enhanced namespace management.

🌟 Highlights

• 🛠️ SkillHub CLI v1: Full-featured command-line tool with install/publish/search/update/doctor commands and 14+ agent profiles
• 🔍 Skill Version Compare: New page with unified diff view to compare any two versions of a skill
• 👥 Namespace Management Upgrade: Edit namespace info, transfer ownership, batch pagination, and team namespace deletion

🚨 Breaking Changes

⚠️ SkillHub CLI v1 introduces a brand-new command-line tool. As the first official CLI release, users adopting it should note:

• Publish CLI to npm with @astron-team/skillhub-cli scope
• Requires authentication via skillhub login before using publish/install commands
• Local config and credentials are stored under the user home directory; see the CLI guide for details
• Server adds new /api/cli/* endpoints; older server deployments must upgrade to v0.2.7 to use CLI features

✨ Features

• Add SkillHub CLI v1 with full command suite (install/publish/search/update/doctor/login etc.) and multi-agent profile support by @dongmucat in #359
• Add skill version compare page with unified diff and syntax highlighting by @dongmucat in #390
• Add namespace edit and transfer ownership UI with pagination support by @dongmucat in #412
• Add skill upload size limits, support nested SKILL.md, and fix session handling on publish by @XiaoSeS in #364

🐛 Bug Fixes

• Support team namespace deletion by @dongmucat in #408
• Restore web compatibility with Chromium 83 (Debian 10) and scope legacy target to production build by @cheney in #414
• Disable chunked encoding for Aliyun OSS compatibility by @dongmucat in #376
• Pin pnpm 10.33 and approve esbuild build scripts in CI by @dongmucat in #413
• Add index on promotion_request.target_namespace_id to improve query performance by @dongmucat in #412
• Remove optimistic update on member add to avoid cross-page duplication by @dongmucat in #412
• Return correct exit code for CLI network failures by @dongmucat in #359

⚡ Performance

No performance-related improvements.

📚 Documentation

• Update skill publish concept diagram by @XiaoSeS in #363
• Add comprehensive CLI usage guide and beautify CLI README by @dongmucat in #359
• Add Gemini code review workflow by @dongjiang1989 in #391

🔧 Chore

• Add comprehensive CLI integration and unit test coverage by @dongmucat in #359
• Add database migration V41: index on promotion_request.target_namespace_id
• Add Chinese and English i18n for namespace edit, transfer ownership, and version compare
• Publish CLI to npm with @astron-team/skillhub-cli scope

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

👥 New Contributors

• @cheney made their first contribution in #414
• @dongjiang1989 made their first contribution in #391

Full Changelog: v0.2.6...v0.2.7

SkillHub v0.2.6

Full skill subscription system, OIDC login support, and S3 IAM authentication with enhanced namespace management.

🌟 Highlights

• 🔔 Skill Subscription System: Users can subscribe to skills and receive notifications on new version publishes or version yanks
• 🔐 OIDC Login Support: Single sign-on via OpenID Connect protocol
• ☁️ S3 IAM Authentication: Support AWS IAM role-based authentication without hardcoded credentials

🚨 Breaking Changes

⚠️ No breaking changes. This release is fully backward compatible.

✨ Features

• Implement skill subscription notification system with subscribe/unsubscribe API, subscription list page, and subscribe button component by @dongmucat in #356
• Support OIDC login based on Spring Security OAuth2 Client by @dongmucat in #348
• Support IAM authentication for S3 storage, enabling EC2/ECS/EKS instance role authentication by @vzpd in #358
• Allow namespace admins to batch import members via CSV file by @dongmucat in #342
• Add "Update" button to My Skills page with auto-prefilled publish form by @dongmucat in #340

🐛 Bug Fixes

• Add pagination to namespace skill list by @dongmucat in #354
• Fix search page not displaying skill list when query keyword is empty by @dongmucat in #346

⚡ Performance

No performance-related improvements.

📚 Documentation

• Clarify intentional no-transaction design for namespace batchAddMembers
• Complete OIDC environment variable configuration example

🔧 Chore

• Regenerate OpenAPI types for subscription endpoints
• Add database migration V40: create skill_subscription table
• Add Chinese and English i18n for subscription and batch import features

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

👥 New Contributors

• @vzpd made their first contribution in #358

Full Changelog: v0.2.5...v0.2.6

SkillHub v0.2.5

🧪 Tests

• fix(search): harden portal query parsing in #337 by @dongmucat

🐛 Bug Fixes

• fix(storage): lazily create missing s3 buckets on upload in #336 by @dongmucat
• fix(search): restore clawhub namespace-only access in #334 by @dongmucat
• fix(env): add gitlab oauth release example config in #328 by @dongmucat
• fix(search): align portal visibility for private skills in #323 by @XiaoSeS
• fix(search): show default discovery list on empty query in #312 by @XiaoSeS
• fix(web): allow anonymous access to public skill detail in #311 by @dongmucat
• fix(auth): backfill bootstrap admin role binding in #305 by @dongmucat

✨ Features

• feat(auth): add GitLab OAuth2 provider support in #264 by @wrj97
• feat(ci): add AI-powered release notes generation in #322 by @XiaoSeS

other

• Fix runtime Postgres password drift in #321 by @wowo

👥 Contributors

@dongmucat, @wrj97, @XiaoSeS, @wowo

Full Changelog: v0.2.4...v0.2.5

What's Changed

• docs: add Maven mirror config and troubleshooting guide for China developers by @XiaoSeS in #233
• perf: optimize file tree and preview rendering performance by @XiaoSeS in #240
• docs: append new QA pairs to FAQ by @FenjuFu in #228
• fix(web): preserve nginx subpath prefix for api/runtime config by @dongmucat in #226
• fix(reviews): add pagination for dashboard review center by @dongmucat in #241
• chore: add GitHub-reward form, scripts & actions by @TechQuery in #221
• docs: add demo gif to README by @FenjuFu in #244
• fix(runtime): use Aliyun OSS for raw files when --aliyun flag is set by @XiaoSeS in #250
• Feat/namespace member display username by @Rsweater in #236
• chore: update copyright info in LICENSE to match astron-agent by @FenjuFu in #263
• [codex] add issue triage automation mvp by @wowo-zZ in #268
• fix register validation, review visibility, and search e2e coverage by @tenten-shih in #269
• fix(search): include permitted skills in clawhub explore by @dongmucat in #258
• fix(review): correct review queue totals by @dongmucat in #265
• fix(auth): stabilize oauth session after callback by @dongmucat in #245
• fix(validation): avoid token false positives in pre-publish check by @dongmucat in #253
• feat(ci): add PR batch test deployment workflow by @wowo-zZ in #275
• fix(storage): support path-style by s3 force-path-style config by @dongmucat in #251
• Add support for .cjs and .mjs JavaScript extensions by @utafrali in #285
• fix(storage): defer S3 bucket verification until first access by @wowo-zZ in #289
• feat(publish): relax pre-publish checks into warning + confirm flow by @wowo-zZ in #288
• feat(skill): add UPLOADED status for PRIVATE skill lifecycle by @XiaoSeS in #290
• fix(compat): support namespace-aware clawhub publish by @dongmucat in #291
• feat(auth): 邮箱验证码重置密码与 SMTP 配置支持 by @dongmucat in #273
• fix(docs): correct aliyun runtime command by @dongmucat in #301
• docs: add discord server link to READMEs by @FenjuFu in #296
• fix(security): harden metrics exposure and namespace/private-skill auth by @dongmucat in #246
• fix(review): allow namespace admins to review own submissions by @dongmucat in #279
• feat(access): add SUPER_ADMIN platform role support by @XiaoSeS in #304
• fix(rerelease): support precheck warning confirmation flow by @XiaoSeS in #302

New Contributors

• @TechQuery made their first contribution in #221
• @tenten-shih made their first contribution in #269
• @utafrali made their first contribution in #285

Full Changelog: v0.2.3...v0.2.4