release: prepare v0.13.0 (#1220)

Author: bug-ops

CHANGELOG.md

@@ -6,6 +6,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [0.13.0] - 2026-03-05
+
 ### Security
 
 - SEC-M22-001: fix bearer token timing side-channel in `zeph-gateway` auth middleware — both the submitted token and the expected token are now hashed with BLAKE3 (32-byte fixed-length output) before comparison via `subtle::ConstantTimeEq`, preventing length leaks and timing attacks; expected token hash is pre-computed at startup to eliminate per-request rehashing (#1173)
@@ -1688,7 +1690,8 @@ let agent = Agent::new(provider, channel, &skills_prompt, executor);
 - Agent calls channel.send_typing() before each LLM request
 - Agent::run() uses tokio::select! to race channel messages against shutdown signal
 
-[Unreleased]: https://github.com/bug-ops/zeph/compare/v0.12.6...HEAD
+[Unreleased]: https://github.com/bug-ops/zeph/compare/v0.13.0...HEAD
+[0.13.0]: https://github.com/bug-ops/zeph/compare/v0.12.6...v0.13.0
 [0.12.6]: https://github.com/bug-ops/zeph/compare/v0.12.5...v0.12.6
 [0.12.5]: https://github.com/bug-ops/zeph/compare/v0.12.4...v0.12.5
 [0.12.4]: https://github.com/bug-ops/zeph/compare/v0.12.3...v0.12.4

Cargo.lock

@@ -5,7 +5,7 @@ resolver = "3"
 [workspace.package]
 edition = "2024"
 rust-version = "1.88"
-version = "0.12.6"
+version = "0.13.0"
 authors = ["bug-ops"]
 license = "MIT"
 repository = "https://github.com/bug-ops/zeph"
@@ -112,19 +112,19 @@ url = "2.5"
 uuid = "1.21"
 wiremock = "0.6.5"
 zeroize = { version = "1", features = ["derive", "serde"] }
-zeph-a2a = { path = "crates/zeph-a2a", version = "0.12.5" }
-zeph-acp = { path = "crates/zeph-acp", version = "0.12.5" }
-zeph-channels = { path = "crates/zeph-channels", version = "0.12.5" }
-zeph-core = { path = "crates/zeph-core", version = "0.12.5" }
-zeph-gateway = { path = "crates/zeph-gateway", version = "0.12.5" }
-zeph-index = { path = "crates/zeph-index", version = "0.12.5" }
-zeph-llm = { path = "crates/zeph-llm", version = "0.12.5" }
-zeph-mcp = { path = "crates/zeph-mcp", version = "0.12.5" }
-zeph-memory = { path = "crates/zeph-memory", version = "0.12.5" }
-zeph-scheduler = { path = "crates/zeph-scheduler", version = "0.12.5" }
-zeph-skills = { path = "crates/zeph-skills", version = "0.12.5" }
-zeph-tools = { path = "crates/zeph-tools", version = "0.12.5" }
-zeph-tui = { path = "crates/zeph-tui", version = "0.12.5" }
+zeph-a2a = { path = "crates/zeph-a2a", version = "0.13.0" }
+zeph-acp = { path = "crates/zeph-acp", version = "0.13.0" }
+zeph-channels = { path = "crates/zeph-channels", version = "0.13.0" }
+zeph-core = { path = "crates/zeph-core", version = "0.13.0" }
+zeph-gateway = { path = "crates/zeph-gateway", version = "0.13.0" }
+zeph-index = { path = "crates/zeph-index", version = "0.13.0" }
+zeph-llm = { path = "crates/zeph-llm", version = "0.13.0" }
+zeph-mcp = { path = "crates/zeph-mcp", version = "0.13.0" }
+zeph-memory = { path = "crates/zeph-memory", version = "0.13.0" }
+zeph-scheduler = { path = "crates/zeph-scheduler", version = "0.13.0" }
+zeph-skills = { path = "crates/zeph-skills", version = "0.13.0" }
+zeph-tools = { path = "crates/zeph-tools", version = "0.13.0" }
+zeph-tui = { path = "crates/zeph-tui", version = "0.13.0" }
 
 [workspace.lints.rust]
 unsafe_code = "deny"

Cargo.toml

@@ -228,7 +228,7 @@ show_source_labels = false
 [acp]
 enabled = false
 agent_name = "zeph"
-agent_version = "0.12.6"
+agent_version = "0.13.0"
 max_sessions = 4
 session_idle_timeout_secs = 1800
 available_models = []

crates/zeph-core/src/config/snapshots/zeph_core__config__types__tests__config_default_snapshot.snap

@@ -1400,6 +1400,8 @@ mod tests {
     use zeph_tools::executor::{ErasedToolExecutor, ToolError, ToolOutput};
     use zeph_tools::registry::ToolDef;
 
+    use serial_test::serial;
+
     use crate::config::SubAgentConfig;
     use crate::subagent::def::MemoryScope;
 
@@ -2567,6 +2569,7 @@ mod tests {
     // ── Memory scope tests ────────────────────────────────────────────────────
 
     #[tokio::test]
+    #[serial]
     async fn spawn_with_memory_scope_project_creates_directory() {
         let tmp = tempfile::tempdir().unwrap();
         let orig_dir = std::env::current_dir().unwrap();
@@ -2614,6 +2617,7 @@ mod tests {
     }
 
     #[tokio::test]
+    #[serial]
     async fn spawn_with_config_default_memory_scope_applies_when_def_has_none() {
         let tmp = tempfile::tempdir().unwrap();
         let orig_dir = std::env::current_dir().unwrap();
@@ -2663,6 +2667,7 @@ mod tests {
     }
 
     #[tokio::test]
+    #[serial]
     async fn spawn_with_memory_blocked_by_disallowed_tools_skips_memory() {
         let tmp = tempfile::tempdir().unwrap();
         let orig_dir = std::env::current_dir().unwrap();
@@ -2715,6 +2720,7 @@ mod tests {
     }
 
     #[tokio::test]
+    #[serial]
     async fn spawn_without_memory_scope_no_directory_created() {
         let tmp = tempfile::tempdir().unwrap();
         let orig_dir = std::env::current_dir().unwrap();
@@ -2757,6 +2763,7 @@ mod tests {
     }
 
     #[test]
+    #[serial]
     fn build_prompt_injects_memory_block_after_behavioral_prompt() {
         let tmp = tempfile::tempdir().unwrap();
         let orig_dir = std::env::current_dir().unwrap();
@@ -2800,6 +2807,7 @@ mod tests {
     }
 
     #[test]
+    #[serial]
     fn build_prompt_auto_enables_read_write_edit_for_allowlist() {
         let tmp = tempfile::tempdir().unwrap();
         let orig_dir = std::env::current_dir().unwrap();
@@ -2839,6 +2847,7 @@ mod tests {
     }
 
     #[tokio::test]
+    #[serial]
     async fn spawn_with_explicit_def_memory_overrides_config_default() {
         let tmp = tempfile::tempdir().unwrap();
         let orig_dir = std::env::current_dir().unwrap();
@@ -2898,6 +2907,7 @@ mod tests {
     }
 
     #[tokio::test]
+    #[serial]
     async fn spawn_memory_blocked_by_deny_list_policy() {
         let tmp = tempfile::tempdir().unwrap();
         let orig_dir = std::env::current_dir().unwrap();

crates/zeph-core/src/subagent/manager.rs

@@ -14,7 +14,7 @@ expression: output
 │              ███████╗███████╗██║     ██║  ██║            │
 │              ╚══════╝╚══════╝╚═╝     ╚═╝  ╚═╝            │
 │                                                          │
-│                          v0.12.6                         │
+│                          v0.13.0                         │
 │                                                          │
 │                  Type a message to start.                │
 │                                                          │