Release 0.4.0-beta.3

[Aaronontheweb]

Changes

Features

• Dynamic gallery UI with client-side rendering — SPA-style folder routes, shared JS modules, and dynamic listing/detail views for skills and sub-agents (Add dynamic gallery UI with CSR and E2E tests #117)
• API versioning and native manifest HATEOAS discovery — All API endpoints versioned under /api/v1/ prefix; native manifest includes version negotiation and search links (feat: add API versioning and native manifest client support #116)
• Tolerant frontmatter metadata parsing — SKILL.md frontmatter now accepts rich YAML values (lists, nested mappings) (feat: enable Aspire dashboard and add seed data support #118)

Security

• Security hardening and trust model documentation — Auth boundary tests, path-traversal rejection, digest-mismatch verification, and new security.md spec (Harden security and compatibility for native sync (#93) #111)

Improvements

• Aspire dashboard with seed data support — Optional SeedDataService for development (feat: enable Aspire dashboard and add seed data support #118)

Internal

• E2E test infrastructure with Playwright and Aspire.Hosting.Testing (Add dynamic gallery UI with CSR and E2E tests #117)
• YamlDotNet updated from 17.1.0 to 18.1.0 (Bump YamlDotNet from 17.1.0 to 18.1.0 #113)

---

Full release notes: release_notes.md