chore(main): release 9.8.0

[orchestkit-release-bot]

🤖 I have created a release beep boop

9.8.0 (2026-08-07)

Features

• dream: STEP 9 cross-repo promotion candidates (#3296) (b6e6524)

Bug Fixes

• hooks: read the permission mode key CC actually sends (#3294) (6b14358)
• pre-push: replace mapfile so the hook runs on macOS bash 3.2 (#3287) (5c98332)
• release: let release-please own the lockfile version (#3293) (e9c217d)
• repair two reported bugs and make 26 blind security tests able to fail (#3288) (1f4cf61)
• security: close the interpreter-pipe path bypass (#3292) (a64613c)
• security: close the line-continuation bypass of the command blocker (#3289) (9839bf8)
• verify: stop waiting forever on a background task that never ran (#3297) (6fd73ff)

Miscellaneous

• cc: adopt 2.1.221 and 2.1.222, bump cc-support latest_known (#3284) (a28e2b3)
• community: add code of conduct and user-facing issue templates (#3300) (e0edf17)

---

This PR was generated with Release Please. See documentation.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
orchestkit	Ready	Preview	Aug 7, 2026 1:15pm

[github-actions]

✅ CI Assessment Report

Score: 91/100 (Grade A)
Status: SUCCESS

Check	Result
Build	✅ Passed
Tests	✅ 7559/7561 passed across 306 files (2 skipped)
Lint	✅ 0 errors, 0 warnings
Security	✅ 0 critical, 0 high
Coverage	✅ 83.9% (hooks only)

📊 Coverage Details

Metric	Coverage
Lines	85.8%
Functions	88.2%
Branches	77.7%
Statements	84.1%

📊 View full report

---

Generated by OrchestKit CI Report • vitest + @vitest/coverage-v8