chore(release): 0.3.0

CHANGELOG.md

@@ -7,9 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+## [0.3.0] - 2026-07-14
+
+### Changed
+
+- Migrated to the renamed pi packages: `@earendil-works/pi-coding-agent`, `@earendil-works/pi-tui`, and `@earendil-works/pi-ai` (formerly `@mariozechner/*`). Peer dependencies now require the `@earendil-works` scope, and `@sinclair/typebox` is no longer a peer dependency (`Type` comes from `@earendil-works/pi-ai`).
+
+### Fixed
+
+- `PI_PERPLEXITY_COOKIE` / `PI_PERPLEXITY_COOKIES` now accept a bare `__Secure-next-auth.session-token` value, matching what `/perplexity-login --browser` accepts.
+
 ### CI
 
 - Restrict npm publishing to tags whose commit is already on `main`.
+- Disable checkout credential persistence and pin actions to commit SHAs.
+- Add Dependabot configuration for npm and GitHub Actions dependencies.
+
+### Documentation
+
+- Add `SECURITY.md` with private vulnerability reporting instructions.
 
 ## [0.2.5] - 2026-07-14
 

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pi-perplexity",
-  "version": "0.2.5",
+  "version": "0.3.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pi-perplexity",
-      "version": "0.2.5",
+      "version": "0.3.0",
       "license": "MIT",
       "devDependencies": {
         "@earendil-works/pi-ai": "*",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-perplexity",
-  "version": "0.2.5",
+  "version": "0.3.0",
   "description": "Perplexity web search for pi — uses your Pro/Max subscription, no API credits needed",
   "keywords": [
     "pi-package",