docs(#462): reconcile CHANGELOG [Unreleased] + add the release-checklist reconcile step

[debugmcpdev]

Closes #462.

Rebuilt [Unreleased] from git log v0.24.2..HEAD --no-merges (47 commits):

• Duplicate ### Fixed block merged (and a duplicated python attach has no path-mapping lever — localRoot/remoteRoot/pathMappings silently dropped #450 bullet removed); the section now has single Added/Changed/Fixed/Security headers.
• ~15 missing merged changes added: doctor (Feature: mcp-debugger doctor — environment self-check command + consolidated diagnostics guide #423), availability unification (doctor: share the per-language availability loop with list_supported_languages, and move presentation knowledge into adapters #435), canary matrix (CI: scheduled canary install-and-debug matrix across install channels and platforms #425), kind smoke (CI: kind smoke job for the Kubernetes recipe (examples/kubernetes attach cycle) #451), skill docs pointer (Point the debugging skill + in-band instructions at docs/kubernetes.md attach presets #452), Docker Rust formatters (Docker: Rust type summaries unavailable (no rustc in image) — &str/String render as raw LLDB internals #441), startup perf batch (fix(proxy): thread-anchor guard on threads responses + honest tool:response success #407–perf(startup): scope orphan reapers to server commands, share one process scan, add opt-out #411), logger detach (fix(http): detach per-session loggers from the shared file transport on stop() #412), bounded-accumulation hardening (hardening(dap): bound DapFrameDecoder frames and make accumulation linear #413/hardening(proxy): bound the remaining unbounded worker collections #414), js-debug orphan reaping (js-debug vsDebugServer.cjs children accumulate as orphans and hold locks on the vendor tree #431) + flake fix (Flake: Windows randomized unit sweep failed on seed 1038859894 (unhandled rejections around proxy-manager.start.test.ts) #420), CI summary gate (fix(ci): make Test Summary fail when any needed job did not succeed #427), reproducible vendor outputs (fix(build): drop wall-clock timestamps from shipped vendor outputs #428), attestation (feat(release): attest the Docker image and PyPI launcher #430), mem-bench (perf(reaper): bound /proc scan concurrency at startup #395), ROADMAP (docs: publish ROADMAP.md (path to 1.0) #429).
• This cycle's sweep included: build-npx-tarball.cjs skips prepare-pack — dist-tarball ships workspace:* and cannot be npm install'ed #463 (tarball, thanks @abhijeetnardele24-hash), redefine_classes re-plants by line only — statement-anchored breakpoints should re-resolve by content after a hot-swap #464, Java attach anchors to a frameless thread — session reports paused but is uninspectable, and the suggested recovery isn't possible with existing tools #465, Breakpoint-binding failures are under-surfaced: start_debugging hides unbound breakpoints, and known-never-bind function breakpoints are still accepted #467, get_local_variables anchors to stackFrames[0] — returns empty on a syscall pause after already fetching the user frame's locals #468, Ruby logpoints silently become pausing breakpoints; list_breakpoints then reports verified:true with the logMessage intact #469, Ruby/rdbg: dropped initialize response frame turns a transient framing hiccup into a hard 30s launch failure #470, Verified JS breakpoints keep the raw provisional message 'breakpoint.provisionalBreakpoint' (untranslated key + contradicts verified:true) #471 (thanks @MsfPablo), No packageManager pin: contributors on a different pnpm major regenerate pnpm-lock.yaml incompatibly (drops security overrides) #478.
• Deliberately omitted: dependency bumps and pure test-coverage PRs (test(codelldb-common): hermetic source-map-derive tests — no g++, no skips #415–test(shared): cover the LLDB policy wrappers' own members - cpp 36%->100%, rust 71%->100% #418).

Also adds the release-checklist reconcile step the issue asked for (docs/release-checklist.md, Manual section): verify [Unreleased] against git log v<prev>..HEAD before tagging, so the gap cannot silently recur.

Note for sequencing: this PR describes the full queue (#482/#483/#485/#479) as landed — merge it last.

🤖 Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!