What's Changed

• Bump esbuild and vite (#41) by @pelikhan in #295
• Inject 'permissions: {}' in strict mode for deny-all permissions by @Copilot in #284
• Upload squid access logs and show summary in logs command by @pelikhan in #296
• Update GitHub MCP Server by @dsyme in #297
• Don't give GH_TOKEN to claude_env by @dsyme in #299
• Add GitHub Actions workflow for automated formatting, linting, building, and committing by @Copilot in #304
• Safe discussions, pull request reviews and better errors by @pelikhan in #301
• don't run add-reaction on PRs of forked repos by @pelikhan in #305
• missing-tool safe output by @pelikhan in #307
• Expand "defaults" in network permission lists by @dsyme in #308
• add forks filtering support by @pelikhan in #309
• safe output as security report by @pelikhan in #310
• Break network allow list into packs by @dsyme in #311
• Claude: If any "Bash" command is allowed, implicitly allow KillBash and BashOutput by @dsyme in #312
• support for custom engine to enable testing without llms by @pelikhan in #313
• Cleanup some code, AgenticEngine --> CodingAgentEngine by @dsyme in #315
• Use simpler engine interface by @dsyme in #321
• fixing some safe outputs by @pelikhan in #329
• Fix missing safe outputs in GITHUB_AW_SAFE_OUTPUTS_CONFIG by @Copilot in #333
• Fix GitHub Action failures: handle disabled discussions and fix PR review comment API parameters by @Copilot in #339
• Update inline JavaScript files to use core.error and core.warning for proper GitHub Actions integration by @Copilot in #436
• missing tool javascript cleanup by @Copilot in #441
• Custom engine ai inference improvements by @pelikhan in #455
• Fix missing-tool JavaScript JSON parsing to handle agent-output.json schema correctly by @Copilot in #458
• Add create-branch.yml GitHub Actions workflow by @Copilot in #462
• Neutral tools by @dsyme in #465
• missing tool logs support by @pelikhan in #461
• Move some tool neutral logic out of claude backend by @dsyme in #471

Full Changelog: v0.3.3...v0.5.0