v2.3.4

What's Changed

• ci: port CI security hardening to main by @rygel in #331
• feat: optional req/hr burn-rate badge on provider cards by @rygel in #347
• feat(db): migrate fetched_at from TEXT ISO-8601 to INTEGER Unix epoch by @rygel in #348
• fix: SQL hardening, UI polish, and code quality improvements by @rygel in #349
• refactor(ui): extract SVG icon and markdown rendering out of MainWindow by @rygel in #350
• ci(screenshots): auto-update baselines on push, compare-only on PRs by @rygel in #351
• ci(screenshots): open PR for baseline updates instead of direct push by @rygel in #352
• chore: update 9 screenshot baseline(s) from CI (windows-2025) by @rygel in #353
• fix(ci): remove --label from baseline-update PR by @rygel in #354
• fix(ci): use $LASTEXITCODE to detect unchanged baselines in PowerShell by @rygel in #355
• feat(security): add CodeQL, Semgrep, and Trivy scanning by @rygel in #356
• feat: rolling-window time-adjusted quota pace indicator by @rygel in #357
• chore: update 1 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #358
• chore(release): prepare 2.3.2-beta.1 by @rygel in #359
• fix: pace adjustment not applied to Claude Code Sonnet/Opus cards by @rygel in #360
• refactor: upfront provider metadata cleanup by @rygel in #361
• refactor: move static provider flags to ProviderDefinition by @rygel in #362
• chore: update 1 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #363
• chore(release): prepare 2.3.2-beta.2 by @rygel in #364
• refactor: single source of truth — eliminate post-fetch filtering and fallback chains by @rygel in #365
• chore: update 1 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #366
• chore(release): prepare 2.3.2-beta.3 by @rygel in #367
• fix(ci): resolve all zizmor security scanning alerts by @rygel in #368
• fix: correct inverted color threshold logic for quota-based providers by @rygel in #369
• chore: update 1 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #370
• chore(release): prepare 2.3.2-beta.4 by @rygel in #371
• fix: upgrade pace-adjustment formula to stay green when clearly under pace by @rygel in #372
• chore(release): prepare 2.3.2-beta.5 by @rygel in #373
• refactor: remove ResolveRollingWindowInfo fallback chain by @rygel in #379
• Bump Meziantou.Analyzer from 3.0.19 to 3.0.25 by @dependabot[bot] in #378
• chore: update 1 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #377
• chore(deps): bump github/codeql-action from 3.33.0 to 4.34.0 by @dependabot[bot] in #376
• chore(deps): bump actions/cache from 5.0.3 to 5.0.4 by @dependabot[bot] in #374
• chore(deps): bump codecov/codecov-action from 5.5.2 to 5.5.3 by @dependabot[bot] in #375
• chore: update 1 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #380
• chore(release): prepare 2.3.2-beta.6 by @rygel in #381
• chore: update 1 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #382
• fix: resolve zizmor template-injection alerts in publish and pr-size-check workflows by @rygel in #383
• feat(ci): add NuGet/Playwright caching and run CodeQL on push to main/develop by @rygel in #384
• feat(ci): add OSSF Scorecard and Gitleaks secret scanning by @rygel in #385
• chore(ci): update GitHub Actions to latest versions by @rygel in #386
• Refactor pace metadata flow and remove fallback heuristics by @rygel in #387
• chore(release): prepare 2.3.2-beta.7 by @rygel in #388
• Refactor Slim UI pace rendering and fix pace color path by @rygel in #389
• chore: update 1 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #390
• Fix pace-toggle reload after Settings and add regression test by @rygel in #391
• docs: align pace-aware quota documentation for beta by @rygel in #392
• Add startup guards and UI diagnostic logging by @rygel in #393
• refactor: strip to lean core + fix pace calculation by @rygel in #395
• chore: update 1 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #397
• chore(release): prepare 2.3.2-beta.8 by @rygel in #396
• chore(release): prepare 2.3.2-beta.11 by @rygel in #398
• refactor: split large UI files, extract Win32 interop, remove reflection by @rygel in #399
• chore: update 1 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #400
• refactor: convert MonitorLauncher from static to injectable instance class by @rygel in #401
• chore(release): prepare 2.3.2-beta.12 by @rygel in #402
• fix: MonitorLauncher DI resolution fails — empty UI on startup by @rygel in #403
• chore: update 1 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #404
• chore(release): prepare 2.3.2-beta.13 — hotfix for empty UI by @rygel in #405
• test: audit test suite — delete useless tests, add critical integration tests by @rygel in #406
• fix: DateTime overflow in pace calculation crashes UI rendering by @rygel in #407
• chore(release): prepare 2.3.2-beta.14 by @rygel in #408
• feat: per-window pace projection for dual quota bars by @rygel in #409
• chore: update 1 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #410
• feat: UI clarity improvements — auto-collapse, reset format, daily budget by @rygel in #412
• chore: update 2 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #413
• feat: Card Designer, UI improvements, Settings redesign by @rygel in #414
• chore: update 7 screenshot baseline(s) from CI (windows-2025) by @github-actions[bot] in #415
• chore(release): prepare 2.3.2-beta.15 by @rygel in #416
• fix: DateTime overflow in renderer crashes UI (beta.15) by @rygel in #417
• refactor: eliminate remaining duplicated logic across codebase by @rygel in #418
• chore(release): prepare 2.3.2-beta.16 by @rygel in #419
• refactor: inline Card Designer into Settings Cards tab by @rygel in #420
• chore(release): prepare 2.3.2-beta.17 by @rygel in #421
• fix: show cached provider data immediately on startup by @rygel in #422
• perf: eliminate 5 redundant health checks on startup — data in <1 second by @rygel in #423
• perf: startup optimization + consolidate remaining duplicated code by @rygel in #424
• chore(release): prepare 2.3.2-beta.18 by @rygel in #425
• fix: ConfigureAwait(false) in UI startup caused empty UI (beta.18 regression) by @rygel in #426
• test: add ConfigureAwait guardrail + re-enable dangerous analyzer rules by @rygel in #427
• fix: re-enable dange...

v2.3.4-beta.34

What's Changed

• Fix ShowUsed migration and add workflow_dispatch to Publish by @rygel in #578
• chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #579
• Bump Meziantou.Analyzer from 3.0.48 to 3.0.50 by @dependabot[bot] in #580
• Fix Copilot raw snapshot and ShowUsed migration by @rygel in #581
• refactor: consolidate auto-start settings and fix stale appcast by @rygel in #582
• fix: prevent always-on-top from leaking when disabled by @rygel in #583
• release: v2.3.4-beta.34 by @rygel in #584

Full Changelog: v2.3.4-beta.33...v2.3.4-beta.34

v2.3.4-beta.33

Beta release with all develop branch fixes including provider-id alignment, OpenRouter dollar sign fix, MiniMax 5-hour window, ShowUsed migration, and tooltip improvements.

v2.3.4-beta.31

What's Changed

• fix: remove stale privacy-mode write from debounced Settings save by @rygel in #547
• chore(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 by @dependabot[bot] in #549
• chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #550
• Bump Meziantou.Analyzer from 3.0.45 to 3.0.48 by @dependabot[bot] in #554
• chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in #553
• chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 by @dependabot[bot] in #552
• chore(deps): bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in #551
• feat: power state resilience for Monitor process by @rygel in #548
• fix: resolve SonarQube reliability and maintainability issues by @rygel in #555
• fix: resolve ~200 SonarQube medium severity issues by @rygel in #556
• fix: resolve 71 SonarQube medium maintainability issues in new code by @rygel in #557
• fix: resolve 106 remaining SonarQube LOW severity issues by @rygel in #559
• fix: resolve ~250 SonarQube LOW severity issues by @rygel in #558
• fix: resolve ~400 SonarQube maintainability and Roslyn analyzer issues by @rygel in #560
• fix: resolve 423 SonarQube MEDIUM severity issues by @rygel in #561
• fix: resolve remaining 255 SonarQube MEDIUM severity issues by @rygel in #562
• refactor: resolve 31 SonarQube HIGH severity issues by @rygel in #563
• refactor: resolve 7 remaining SonarQube HIGH severity issues by @rygel in #564
• fix: resolve 18 SonarQube LOW severity issues by @rygel in #565
• fix: prevent ShowUsed/AlwaysOnTop toggles from re-saving during programmatic sync by @rygel in #566
• refactor: centralize display name resolution to GetConfiguredDisplayName by @rygel in #567
• fix: correct GitHub Copilot quota from weekly to monthly by @rygel in #568
• fix(ci): avoid false positives in push gitleaks baseline scan by @rygel in #569
• chore(release): prepare 2.3.4-beta.31 by @rygel in #570

Full Changelog: v2.3.4-beta.30...v2.3.4-beta.31

v2.3.4-beta.30

What's Changed

• fix: load preferences before Host.StartAsync to preserve UpdateChannel by @rygel in #537
• Bump Meziantou.Analyzer from 3.0.43 to 3.0.45 by @dependabot[bot] in #540
• fix: performance and security improvements by @rygel in #541
• fix: key deletion — invalidate monitor preference cache and check delete result by @rygel in #543
• fix: preference reset, MiniMax key visibility, and filter layer elimination by @rygel in #544
• fix: privacy toggle broken in Settings and Info dialog (GC bug) by @rygel in #545
• chore: release 2.3.4-beta.30 by @rygel in #546

Full Changelog: v2.3.4-beta.27...v2.3.4-beta.30

v2.3.4-beta.29

What's Changed

• fix: suppress re-discovery of removed provider keys by @rygel in #539
• chore: release 2.3.4-beta.29 by @rygel in #542

Full Changelog: v2.3.4-beta.28...v2.3.4-beta.29

v2.3.4-beta.28

What's Changed

• fix: load preferences before Host.StartAsync to preserve UpdateChannel by @rygel in #537
• chore: release 2.3.4-beta.28 by @rygel in #538

Full Changelog: v2.3.4-beta.27...v2.3.4-beta.28

v2.3.4-beta.27

What's Changed

• fix: eliminate CA1031 error swallowing and fix editorconfig prefix by @rygel in #527
• fix: resolve CA2254 logger template violations and promote to error by @rygel in #528
• fix: forward CancellationToken in all provider HTTP calls (CA2016) by @rygel in #529
• fix: add explicit StringComparison to all string operations (CA1307) by @rygel in #530
• fix: narrow all CA1031 catch blocks in Infrastructure to specific types by @rygel in #531
• fix: narrow all CA1031 catch blocks in Monitor to specific types by @rygel in #532
• fix: narrow all CA1031 catch blocks in UI.Slim to specific types by @rygel in #533
• fix: add null parameter validation across entire solution (CA1062) by @rygel in #534
• fix: add ConfigureAwait(true) to all UI.Slim await calls (VSTHRD111) by @rygel in #535
• chore: release 2.3.4-beta.27 by @rygel in #536

Full Changelog: v2.3.4-beta.26...v2.3.4-beta.27

v2.3.4-beta.26

What's Changed

• feat: add OpenCode credits API provider (usage bar) by @rygel in #525
• chore: release 2.3.4-beta.26 by @rygel in #526

Full Changelog: v2.3.4-beta.25...v2.3.4-beta.26

v2.3.4-beta.25

What's Changed

• fix: OpenCode Zen picks bash shim instead of .cmd on Windows by @rygel in #523
• chore: release 2.3.4-beta.25 by @rygel in #524

Full Changelog: v2.3.4-beta.24...v2.3.4-beta.25