chore(main): release detect_agent 0.4.0

[github-actions]

🤖 I have created a release beep boop

0.4.0 (2026-07-24)

Features

• port upstream agents.json detection engine (#14) (1e986c5)

Documentation

• sync README with upstream detect-agent (#12) (852c73f)

---

This PR was generated with Release Please. See documentation.

[broly-code-security-scanner]

Broly Security Scan

Note

Summary

3 actionable finding(s) in this PR

• 🟡 3 medium

All actionable items are in the table below.

Severity	Scanner	Issue	Location	Dismiss	Verdict
🟡 MEDIUM	SCA	pygments@2.19.2 — 2 vulnerabilities (worst: GHSA-5239-wwwm-4pmq) → >= 2.20.0	uv.lock:1	d1	🔺 TRUE_POSITIVE · Confidence: HIGH
🟡 MEDIUM	SCA	pytest@8.4.2 — 2 vulnerabilities (worst: GHSA-6w46-j5rx-g56g) → >= 9.0.3	uv.lock:1	d2	🔺 TRUE_POSITIVE · Confidence: HIGH
🟡 MEDIUM	SCA	pytest@9.0.2 — 2 vulnerabilities (worst: GHSA-6w46-j5rx-g56g) → >= 9.0.3	uv.lock:1	d3	🔺 TRUE_POSITIVE · Confidence: HIGH

Dismiss false positives

Each dismissable row has a Dismiss key (d1, d2, …) in the table above. Reply to this comment (or post on the PR) with /broly dismiss d2: your reason to mark a false positive, or /broly undismiss d2 to reverse it. Broly records every dismissal in the section below this comment (updated in place) and suppresses the finding on the next scan.

Key	Finding
d1	🟡 MEDIUM · pygments@2.19.2 — 2 vulnerabilities (worst: GHSA-5239-wwwm-4pmq) · uv.lock:1
d2	🟡 MEDIUM · pytest@8.4.2 — 2 vulnerabilities (worst: GHSA-6w46-j5rx-g56g) · uv.lock:1
d3	🟡 MEDIUM · pytest@9.0.2 — 2 vulnerabilities (worst: GHSA-6w46-j5rx-g56g) · uv.lock:1

Note

Re-scan this PR anytime with /broly scan — useful after /broly undismiss, or to refresh findings without a new push.

Broly — SAST (zai-org/GLM-5.2) · Secrets · SCA · GH Actions (zizmor) · Containers · SBOM · Powered by Together AI

[github-actions]

🤖 Created releases:

• detect_agent-v0.4.0

🌻