Skip to content

Releases: zw008/VMware-Pilot

v1.5.12 — Rollback persistence fix from @yjs-2026

17 Apr 10:03

Choose a tag to compare

Bug Fix (code review by @yjs-2026)

  • fix: rollback() persists workflow state after each step to prevent inconsistency on crash

v1.5.11 - Family version alignment

16 Apr 23:44

Choose a tag to compare

Align with VMware skill family v1.5.11 (AVI 22.x Controller fixes from @timwangbc).

v1.5.10 — Security: python-multipart DoS fix

16 Apr 03:05

Choose a tag to compare

Security: bump python-multipart 0.0.22→0.0.26 (Medium severity DoS via large multipart data). Family version realignment.

v1.5.8 - Family version alignment

15 Apr 01:48

Choose a tag to compare

Align with VMware skill family v1.5.8 (NSX broken imports fix, AVI FastMCP migration + confirmed gates, Aria confirmed gates, AIops security fixes + cli split).

v1.5.7 - Fix cross-step param references in workflows

15 Apr 01:20

Choose a tag to compare

Workflow executor now resolves from_step_N / from_step_N.field placeholders against completed steps' results. Fixes plan_and_approve template failing at vm_apply_plan with invalid plan_id.

v1.5.6 - Family version alignment

14 Apr 23:53

Choose a tag to compare

Align with VMware skill family v1.5.6 (AVI critical bugfixes + packaging hotfix in AVI/AIops/Monitor/Storage).

v1.5.5 - Family version alignment

14 Apr 23:40

Choose a tag to compare

Align with VMware skill family v1.5.5.

v1.5.4 — Security patch

14 Apr 08:43

Choose a tag to compare

v1.5.4 (2026-04-14)

  • Security: bump pytest 9.0.2→9.0.3 (CVE-2025-71176, insecure tmpdir handling)
  • Align with VMware skill family v1.5.4

v1.5.0 — Anthropic best practices + Broadcom attestation

12 Apr 04:55

Choose a tag to compare

What's Changed

Anthropic Best Practices Integration

  • All MCP tool descriptions now start with [READ] or [WRITE] prefix
  • SKILL.md MCP Tools header shows read/write split counts
  • Description frontmatter includes "Do NOT use when..." negative routing
  • Broadcom author attestation in README, pyproject.toml

Security Fixes

  • Author identity: Wei Zhou, VMware by Broadcom (wei-wz.zhou@broadcom.com)
  • Resolves Snyk E005 brand impersonation warnings

See RELEASE_NOTES.md for repo-specific changes.

v1.4.9 — CVE fix + routing fixes

11 Apr 13:18

Choose a tag to compare

  • Security: bump cryptography 46.0.6→46.0.7 (CVE-2026-39892, buffer overflow)
  • Fix: require explicit VMware context in pilot workflow routing triggers
  • Fix: clarify vmware-policy compatibility field
  • Version aligned with VMware skill family
  • See RELEASE_NOTES.md for full history