release: v0.9.9

[cvince]

capy 0.9.9

New

• Change a shared secret everywhere at once. In capy secrets, open a secret (ctrl+e, or Enter then e), type the new value, pick which projects and branches to change, and pick the repos to open pull requests in. Capy updates every location and opens one keep.lock pull request per repo, on its default branch, then lists the PR links.
  • The edit box shows the old value (masked) above the new value. ctrl+r reveals both.
  • Locations and repos are shown as tables. Protected branches are labelled.
  • Updates run 6 at a time and pull requests 4 at a time. ctrl+c stops after the ones already in progress and lists what was skipped.
• capy secrets set NAME is the same thing for agents. The value comes in on stdin only. --dry-run returns the plan and a plan_id, and a real run requires --confirm <plan_id>. If the name matches more than one value, it refuses and lists the options instead of guessing.
• A pull request for keep.lock after capy add, capy edit and capy remove. When a command changes keep.lock, Capy asks "Create a PR with these changes?" and then "Select base branch for PR". The PR is made through GitHub with your own gh login, so nothing is cloned or committed locally. For scripts and agents: --pr, --no-pr and --pr-base <branch>.
• Projects know their GitHub repo. Capy records each project's origin repo and where its keep.lock lives inside the repo. capy projects --json lists them, and Capy warns if a keep.lock turns up in a different repo.
• Search in every project picker. Type to filter the project lists in capy setup, capy org, capy invite, capy users, Dokploy discovery and Vercel linking.
• --dry-run for agents on capy edit NAME, capy add NAME and capy remove. It shows what would change and changes nothing. capy secrets --dry-run walks the whole edit flow without changing anything. capy help --json now says which commands support --dry-run.

Changed

• The --web browser screens are gone. Passing --web now stops with WEB_MODE_REMOVED. The browser pages that open without --web (deploy pages, the sign-in page) are unchanged. capy add no longer has --reason, --help-url or --no-open.
• The interactive editors refuse --dry-run (DRY_RUN_UNSUPPORTED) instead of saving for real.
• The capy edit value box starts empty, so you type the new value instead of editing the old one.

Fixed

• GitHub and Capy calls have time limits, so a stalled request can no longer hang the screen.
• A rate limit while unlocking keys no longer shows up as "permission denied".