docs/releases/0.4.2.md

# codex-sdlc 0.4.2 release evidence

Date: 2026-09-11

This hotfix makes the public plugin manifest compatible with the Plugins Directory limit of three default prompts. It retains the 0.4.1 Getting Started guide, pinned npx setup fallback, and single- and multi-repository onboarding. Runtime schemas and delivery commands are unchanged.

Prepared release artifacts:

| Artifact | SHA-256 |
| --- | --- |
| `build/public-submission/0.4.2/codex-sdlc-0.4.2.tgz` | `a2ae15fafa5cbeae7ff8b84cc21f53afbcea659f1c4a0a64e93a248e8c6c228b` |
| `build/public-submission/0.4.2/codex-sdlc-plugin-0.4.2.zip` | `516b263cc4823584858c781cb83fe18f0d13124e1c2429b56c3fea7d783f21a6` |
| `build/public-submission/0.4.2/codex-sdlc-skills-0.4.2.zip` | `5e86c5ab6e35e6c565ad22f505596fd46fe5ec35e3901fab31f8bae7a8d15166` |
| `build/public-submission/0.4.2/codex-sdlc-logo-0.4.2.png` | `678361975afc99f1c5bcb5b95a0883922b025d2aab3d2ce88f911a5972ff1825` |

| Check | Result |
| --- | --- |
| TypeScript typecheck | Passed |
| Vitest suite | Passed: 7 files, 28 tests, including the three-prompt maximum |
| Runtime build | Passed |
| Exact npm tarball | Passed for `codex-sdlc@0.4.2`; 161 packaged files |
| Production and complete dependency audits | Passed: zero vulnerabilities |
| Local marketplace build | Passed |
| Source, staged, and exact archived plugin packages | Passed the plugin-creator validator |
| All six skills in source and the exact upload archive | Passed the skill-creator validator |

Native Linux and Windows qualification remains deferred by release decision. The OpenAI Plugins Directory update is packaged separately in the skills-only upload archive.