chore(release): 0.5.0

.github/pull_request_template.md

@@ -16,7 +16,7 @@ labels: ["needs-review"]
 **Checklist sebelum submit**
 
 - [ ] `devmap doctor` lolos (tanpa error)
-- [ ] Test `pnpm test:cli` lolos (251 pass)
+- [ ] Test `pnpm test:cli` lolos (semua pass)
 - [ ] New commands diupdate di `docs/commands.md`
 - [ ] Tidak ada `console.log` di command files
 - [ ] Registry terms sesuai standar (baca `docs/guide/05-signal-registry.md`)

.github/workflows/pr-welcome.yml

@@ -20,7 +20,7 @@ jobs:
               'Terima kasih sudah buat PR. Pastikan checklist ini terpenuhi sebelum review:',
               '',
               '- [ ] `devmap doctor` lolos (tanpa error)',
-              '- [ ] Test `pnpm test:cli` lolos (251 pass)',
+              '- [ ] Test `pnpm test:cli` lolos (semua pass)',
               '- [ ] New commands diupdate di `docs/commands.md`',
               '- [ ] Tidak ada `console.log` di command files',
               '- [ ] Registry terms sesuai standar (baca `docs/guide/05-signal-registry.md`)',

CHANGELOG.md

@@ -9,6 +9,52 @@ All notable changes to DevMap are documented in this file.
 - Public benchmark results
 - Feedback-driven fixes from the `0.2.0` beta
 
+## [0.5.0] - 2026-10-17
+
+### Fixed
+
+- `scanFiles` no longer deadlocks (exit code 13, no output) on projects with
+  50 or more directories open at once, and skips dangling symlinks and
+  unreadable subdirectories instead of aborting the scan
+- CRUD resources (`orders`, `users`, ...) are no longer merged into a single
+  feature: capabilities are deduplicated by kind and name, and the feature
+  merger refuses to union distinct entities
+- Import graph: tsconfig/jsconfig aliases now work with comments and trailing
+  commas, `extends`, `baseUrl`, project `references`, workspace sub-packages
+  and SvelteKit `$lib`; exact aliases no longer capture longer specifiers
+- Import graph: duplicate and self edges removed, dynamic `import()`,
+  `import x = require()` and `import("x")` types create edges, `.jsx`/`.mts`/
+  `.cts` specifiers resolve, and `../x` above the project root no longer
+  matches root files
+- Nested `.gitignore` files are honoured, binary extensions match
+  case-insensitively, `.env` matching is by file name (`.envrc` is kept), and
+  the ignore cache is reset on every scan
+- `package.json` with a UTF-8 BOM is parsed; `@vue/cli-service` marks a Vue
+  app; npm's default `"main"` no longer turns an Express/Next app into a
+  library with an unknown framework
+- Entry points no longer list barrel `index.ts` files that the app imports;
+  only production code counts as an importer
+- `src/features/demo` and `src/docs` are analysed as source; sample and docs
+  folders are only excluded at repo or workspace level
+- Routes: `pages/index` is `/`, `export { handler as GET }` and
+  `export const { GET } = handlers` report methods, Nuxt `server/api` and
+  `server/routes`, Express mounts with middleware, and multi-level routers
+- File scope: root `test/` folders are tests, `.svelte`/`.vue`/`.astro` and
+  SvelteKit `+page`/`+layout` files are UI, not API
+- Project fingerprint no longer depends on the machine locale
+
+### Added
+
+- Import and symbol extraction for Python, Ruby, PHP, Go, C# and Java
+  (previously always empty, with bogus symbols from docstrings), plus graph
+  edges for Python imports, Ruby `require_relative` and relative PHP
+  `require`/`include`
+
+### Changed
+
+- Dependencies updated within their semver ranges (`ignore`, `p-limit`,
+  `tsx`, `@types/node`, and web tooling)
+
 ## [0.4.1] - 2026-10-03
 
 ### Added

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flaid/devmap",
-  "version": "0.4.1",
+  "version": "0.5.0",
   "description": "CLI that maps codebases into a reusable context layer for developers and AI agents.",
   "bin": {
     "devmap": "./dist/index.js"