## kentcdodds/kody — v2026.09.29…v2026.09.30

_11 commits._

### Features
- **feat: package-owned webhook HMAC (no secrets-list / double Allow) (#2724)** (3f94e20)
- **feat: read-only public package `.git` smart HTTP proxy (#2725)** (1b48a93)
- **Grant $5 starter wallet credits on every new signup (#2720)** (4fe8a99)

### Fixes
- **fix: guard legacy MCP SSE stream to always deliver JSON-RPC responses (#2723)** (624c43c)

### Backend
- **Drop leftover copy pins, helper echo, and extra test leftovers (#2728)** (091d490)
- **Capitalize the product name in document titles (#2721)** (5e0df87)
- **Test surgery: remove ~70k lines of redundant tests without dropping use-case coverage (#2707)** (edc1189)
- **Reject repoEditFiles over Cloudflare shell 10000-line diff limit (KODY-8E) (#2717)** (a187edc)
- **Bound MCP search onboarding notice with a courtesy budget (#2716)** (9d959e6)
- **Catch SecurityError on first-touch sessionStorage (KODY-8C) (#2715)** (cdb9ef4)

### Docs
- **docs: describe webhook HMAC, public git clone, and welcome credits as they are (#2727)** (bd3f392)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/kentcdodds/kody?utm_source=github-action)._