chore: release v0.7.2

[samtay32]

Summary

• release the reviewed Git/Terraform command-policy security hardening
• release protected local-CLI guidance, submission-ready plugin metadata, and SECURITY.md
• release the provider-neutral behavioral scenario contracts, evaluator, and Node/Windows compatibility gate
• synchronize package, lockfile, plugin, CLI fallback, and changelog versions at 0.7.2

Release scope

This PR changes only five release files. The implementation was independently reviewed and merged through PRs #23 and #24.

Behavioral evidence

The behavior surface remains sha256:901142024ce5b324d2316dca0a4f00ba1ad37ce5886b72391232298a8fd1cb26, identical to the accepted Codex collaboration-harness forward test recorded on PR #24: 9/9 scenarios passed. That evidence applies only to the named Codex collaboration harness used there; no claim is made for other harnesses or models.

Verification

• npm run release:check — 103 tests, behavioral contracts, package dry-run, and packed smoke passed
• package dry-run contains 87 intended files as ultimate-agent-stack@0.7.2
• tracked Markdown lint — 52 files passed
• git diff --check passed
• npm ultimate-agent-stack@0.7.2 is unused
• Git tag v0.7.2 is unused

Publication

After exact-head review and protected merge, the Publish npm package workflow will stage ultimate-agent-stack@0.7.2 through trusted publishing. Human GitHub environment approval and npm 2FA approval remain mandatory.

Summary by CodeRabbit

• Release
  • Updated the product version to 0.7.2.
  • Added the 0.7.2 (2026-07-28) release entry to the changelog.
  • Version reporting now consistently displays 0.7.2.

[samtay32]

@coderabbitai review

[coderabbitai]

📝 Walkthrough

Walkthrough

The release version was incremented from 0.7.1 to 0.7.2 across package and plugin metadata, the CLI fallback, and the changelog.

Changes

Release metadata

Layer / File(s)	Summary
Synchronize release version references .codex-plugin/plugin.json, package.json, bin/ultimate-agent-stack.mjs, CHANGELOG.md	Package and plugin versions, the CLI fallback version, and the changelog release header were updated to 0.7.2.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• samtay32/ultimate-agent-stack#5: Updates the same release version sources.
• samtay32/ultimate-agent-stack#12: Synchronizes package, plugin, changelog, and fallback versions.
• samtay32/ultimate-agent-stack#14: Applies a coordinated release version bump across the same files.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change: preparing and releasing version 0.7.2.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/release-v072

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[samtay32]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.