Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor

[unbraind]

What changes

• @unbrained/pm-cli 2026.9.10 → 2026.9.12 (exact)
• pm-ops 2026.9.9 → 2026.9.11, resolved in the lockfile

CI runs this repository's pinned pm binary, so the pin decides what the gates exercise. 2026.9.11 and 2026.9.12 fix the multi-writer merge cases agents hit when working on branches in parallel: same-id items created on two branches, and merge receipt isolation. History digests are now algorithm-named.

Verification

npm run release:check exits 0 on the new pins with PM_FLEET_ROOT set to the fleet root: 301 of 301 tests pass. Steps run: typecheck, build, docstring, privacy, coverage, audit:prod, pack:dry-run, changelog:check, verify:release-publish-attestation.

pm items

• pm-github-u95z: this certification

Summary by Sourcery

Certify the repository with the latest pm CLI and pm-ops auditor versions.

Enhancements:

• Certify the repository against the updated pm CLI 2026.9.12 and pm-ops 2026.9.11 releases.

Build:

• Update the pinned pm CLI dependency and resolve the pm-ops dependency in the lockfile.

Chores:

• Record the certification work in the project changelog and pm tracking history.

---

Summary by cubic

Advances the pinned @unbrained/pm-cli from 2026.9.10 to 2026.9.12 (exact) and pm-ops from 2026.9.9 to 2026.9.11 in the lockfile, so every CI gate now exercises the newer pm binary and picks up the multi-writer merge fixes for parallel branch work.

• Two branches creating the same item id now merge into one document, and merge receipt discovery no longer reaches into unrelated workspaces.
• History digests are now named by their algorithm.
• npm run release:check exits 0 on the new pins with 301 of 301 tests passing; no migration steps required.

^{Written for commit dc9c7a9. Summary will update on new commits.}

[sourcery-ai]

Sorry @unbraind, you've used your own review budget of 250,000 diff characters for the last 7 days.

You can request another review in 1 day and 15 hours by commenting @sourcery-ai review. Upgrade to get a review now.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 94edb22d-8691-4536-b203-5196ca596003

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Updates the repository’s pinned PM CLI to 2026.9.12 and pm-ops auditor to 2026.9.11, refreshes the lockfile, and documents the certification in PM tracking and the unreleased changelog. The release check reportedly passes all 301 tests, validating the multi-writer merge and receipt-isolation fixes exercised by CI.

File-Level Changes

Change	Details	Files
Certify newer PM tooling versions and refresh the resolved dependency graph.	Pin the repository to the exact pm CLI 2026.9.12 release. Upgrade the pm-ops auditor range to ^2026.9.11 and update its lockfile resolution. Exercise the updated pinned tooling through the documented 301-test release check.	package.json package-lock.json
Record the certification work in project tracking and release documentation.	Add the new certification chore and its PM history record. Update the prior chore and history entries. Add an Unreleased changelog entry linking both certification chores.	.agents/pm/chores/pm-github-5ow3.toon .agents/pm/chores/pm-github-u95z.toon .agents/pm/history/pm-github-5ow3.jsonl .agents/pm/history/pm-github-u95z.jsonl CHANGELOG.md

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[greptile-apps]

Greptile Summary

This PR advances the repository’s certified development tooling and records the corresponding PM lifecycle history.

• Exactly pins @unbrained/pm-cli 2026.9.12 and resolves pm-ops 2026.9.11.
• Updates transitive dependencies associated with the CLI release.
• Adds and closes the certification item, closes its superseded predecessor, and updates their histories.
• Regenerates the Unreleased changelog entries for both closed items.

Confidence Score: 5/5

The PR appears safe to merge, with no actionable correctness, security, or repository-rule issues identified.

The dependency graph remains compatible with supported runtimes and is lockfile-constrained in CI, while the tracking and changelog updates are covered by existing validation gates.

Important Files Changed

Filename	Overview
package.json	Advances the exact pm CLI pin and the pm-ops compatibility range.
package-lock.json	Resolves the certified CLI and auditor versions with their updated transitive dependency graph.
.agents/pm/chores/pm-github-u95z.toon	Records the completed certification and its reported release-gate result.
.agents/pm/history/pm-github-u95z.jsonl	Adds the lifecycle history for creating, claiming, updating, and closing the certification item.
CHANGELOG.md	Adds generated Unreleased entries for the new certification and superseded chore.

_{Reviews (1): Last reviewed commit: "Certify pm CLI 2026.9.12 and the pm-ops ..." | Re-trigger Greptile}

[unbraind]

Review round for dc9c7a9. Every check on this head is complete and none failed, no review thread is unresolved, and every bot comment has been read and voted on.

• @coderabbitai: auto-review is skipped on repositories with fewer than 10 stars. The plan allows about one explicit review per hour across the org, and this session spent those on the hosted-runtime and pm-web PRs, so no review ran here. That is not counted as approval.
• @greptile-apps: the summary was read. 0 inline finding(s), each answered in its thread and resolved only after a fix or an explained refusal.
• @sourcery-ai: the weekly 250k-diff review budget is exhausted, so no review ran. The reviewer's guide summary is correct; the missing review is not counted as approval.

[coderabbitai]

Tip

For best results, initiate chat on the files or code changes.

@unbraind Acknowledged. The reported status for dc9c7a9 is clear. No CodeRabbit review ran for this pull request. This is not an approval.

You are interacting with an AI system.