From cf3aa87845dbd150f47d035393aa1b5e1408479a Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 4 May 2026 16:17:56 +0000
Subject: [PATCH 1/2] chore(main): release v0.37.2

---
 .github/.release-please-manifest.json | 2 +-
 CHANGELOG.md                          | 7 +++++++
 package-lock.json                     | 4 ++--
 package.json                          | 2 +-
 4 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/.github/.release-please-manifest.json b/.github/.release-please-manifest.json
index 18ec56b0..82f078dc 100644
--- a/.github/.release-please-manifest.json
+++ b/.github/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.37.1"
+  ".": "0.37.2"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3f4bcd99..0676697d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -361,6 +361,13 @@ and this project adheres to [Semantic Versioning 2.0.0](https://semver.org/spec/
     `Tip:` footer inline so users see actionable next steps even when pi's
     outer retry renders the error itself.
 
+## [0.37.2](https://github.com/salesforce/sf-pi/compare/v0.37.1...v0.37.2) (2026-05-04)
+
+
+### Bug Fixes
+
+* **security:** address CodeQL scanning alerts ([#48](https://github.com/salesforce/sf-pi/issues/48)) ([308800c](https://github.com/salesforce/sf-pi/commit/308800c5f6591a47519cab1e401b61ce9285d363))
+
 ## [0.37.1](https://github.com/salesforce/sf-pi/compare/v0.37.0...v0.37.1) (2026-05-04)
 
 
diff --git a/package-lock.json b/package-lock.json
index 1fcac882..c1919819 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "sf-pi",
-  "version": "0.37.1",
+  "version": "0.37.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "sf-pi",
-      "version": "0.37.1",
+      "version": "0.37.2",
       "license": "Apache-2.0",
       "dependencies": {
         "node-emoji": "^2.2.0",
diff --git a/package.json b/package.json
index 7fcdecd6..a40b7373 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "sf-pi",
-  "version": "0.37.1",
+  "version": "0.37.2",
   "private": true,
   "type": "module",
   "description": "Opinionated Salesforce developer extensions for the pi coding agent — Apex/LWC LSP, Agent Script authoring, Slack research, and a TUI manager.",

From c7678adc7c1e40a377184708a99ab2d439ad86bf Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 4 May 2026 16:18:13 +0000
Subject: [PATCH 2/2] chore(catalog): regenerate for release
 release-please--branches--main--components--sf-pi

---
 catalog/announcements.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/catalog/announcements.json b/catalog/announcements.json
index 2393a507..acbb8d9f 100644
--- a/catalog/announcements.json
+++ b/catalog/announcements.json
@@ -1,17 +1,17 @@
 {
   "schemaVersion": 1,
-  "revision": "release-0.37.1-2026-05-04",
-  "latestVersion": "0.37.1",
+  "revision": "release-0.37.2-2026-05-04",
+  "latestVersion": "0.37.2",
   "feedUrl": "https://jaganpro.github.io/sf-pi/announcements.json",
   "announcements": [
     {
-      "id": "release-0.37.1",
+      "id": "release-0.37.2",
       "kind": "update",
-      "title": "sf-pi v0.37.1 — sf-welcome: align splash status rows",
+      "title": "sf-pi v0.37.2 — security: address CodeQL scanning alerts",
       "publishedAt": "2026-05-04T00:00:00Z",
-      "link": "https://github.com/salesforce/sf-pi/releases/tag/v0.37.1",
+      "link": "https://github.com/salesforce/sf-pi/releases/tag/v0.37.2",
       "severity": "info",
-      "body": "sf-welcome: align splash status rows — ui: improve ascii glyph fallbacks"
+      "body": "security: address CodeQL scanning alerts"
     },
     {
       "id": "pi-0.72-required",