[abrichr]

1.3.0 was prepared in #117 and #132 but never tagged: the 2026-08-28 release dispatch failed when the release App had no installation on this repo. Nothing since has been released, so this finishes 1.3.0 instead of starting 1.4.0.

The v1.3.0 entry now has today's date and the changes merged since 2026-09-03:

• shadow mode (feat(shadow): local, opt-in detection of repeated work #156)
• the auth-gate, extension-input, and Linux X RECORD fixes (fix: stop extension input after recording and harden CI checks #140, docs: lead the README with a quick start; fix Linux X RECORD startup and CLI setup errors #144, fix: record native input through the authentication gate #146)
• the security patches (fix(deps): patch Dependabot security alerts #147)
• README updates (docs: lead the README with a quick start; fix Linux X RECORD startup and CLI setup errors #144, docs(readme): add a status line and platform table #148)
• the readiness-deadline test fix (test(input-observer): stop charging a deliberate setup wait to a 0.2s readiness deadline #157)
• the release-health CI change (ci: name the failed release step in the release-health issue #145)
• dependency floors and action bumps (chore(deps): update CodeQL actions together to 4.38.0 #136, chore(deps): bump the codeql-action group across 1 directory with 2 updates #138, chore(deps): bump python-semantic-release/publish-action from 10.6.2 to 10.7.0 #139, chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 #141, chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 #142, chore(deps): ignore PyGObject >=3.51 in dependabot #149–chore(deps-dev): update pytest-timeout requirement from >=2.0.0 to >=2.4.0 #154)

The version in pyproject.toml is already 1.3.0. After this merges, the release workflow is dispatched from main with version=1.3.0.

Checked locally: scripts/check_changelog.py passes, and uv build, verify_distribution.py, and check_source_boundary.py --require-dist pass with no tracked-file changes.

[abrichr]

Self-review: the diff is CHANGELOG.md only. The entry is dated 2026-10-17 and lists every first-parent change since c458549. scripts/check_changelog.py and the release build checks pass locally. CI is green.