Version Packages

packages/itil/.claude-plugin/plugin.json

@@ -497,5 +497,5 @@
     }
   },
   "name": "wr-itil",
-  "version": "2.1.8"
+  "version": "2.2.0"
 }

packages/itil/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "wr-itil",
-  "version": "2.1.8",
+  "version": "2.2.0",
   "description": "ITIL problem-management workflows for AI coding agents",
   "author": {
     "name": "Windy Road Technology",

packages/itil/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @windyroad/problem
 
+## 2.2.0
+
+### Minor Changes
+
+- 622c733: When two tickets claim the same number, the backlog reconciler now says so. It used to key its picture of the filesystem by ID, silently drop one of the two files, and then report ordinary-looking disagreement about whichever one survived — so the report named a symptom and buried its cause.
+
+  A clash is now its own row, naming both files, and the reconciler never defers it as something an in-flight rename will fix. `--fix-clashes` repairs it: the earlier claimant keeps the number, the later one moves to a free ID, and its own references follow it. Where a reference genuinely cannot be resolved — both tickets held that number — the reconciler reports it rather than guessing.
+
 ## 2.1.8
 
 ### Patch Changes

packages/itil/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@windyroad/itil",
-  "version": "2.1.8",
+  "version": "2.2.0",
   "description": "ITIL-aligned IT service management for Claude Code and Codex",
   "bin": {
     "windyroad-itil": "./bin/install.mjs"

packages/risk-scorer/.claude-plugin/plugin.json

@@ -310,5 +310,5 @@
     }
   },
   "name": "wr-risk-scorer",
-  "version": "0.18.20"
+  "version": "0.19.0"
 }

packages/risk-scorer/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "wr-risk-scorer",
-  "version": "0.18.20",
+  "version": "0.19.0",
   "description": "Pipeline risk scoring, commit/push gates, and secret leak detection",
   "author": {
     "name": "Windy Road Technology",

packages/risk-scorer/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @windyroad/risk-scorer
 
+## 0.19.0
+
+### Minor Changes
+
+- 622c733: The merge guard now stands in front of the release pull request only. Merging the changesets release PR is still routed to your release-watch script, because that merge flips the publish boundary and the watcher is what follows the pipeline afterwards. An ordinary feature or worktree branch PR merges normally.
+
+  The guard reads the pull request's head branch to tell the two apart, including for `gh pr merge` with no argument. If it cannot read the branch — no `gh`, no auth, no network — it denies, exactly as before.
+
 ## 0.18.20
 
 ### Patch Changes

packages/risk-scorer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@windyroad/risk-scorer",
-  "version": "0.18.20",
+  "version": "0.19.0",
   "description": "Pipeline risk scoring, commit/push gates, and secret leak detection",
   "scripts": {
     "prepack": "node scripts/sync-codex-skills.mjs --pack",