From 55f05e59bf33c06219aebcad7ad707f13caba315 Mon Sep 17 00:00:00 2001
From: Sawyer Cutler <sawyer@dirtroad.dev>
Date: Thu, 27 Aug 2026 12:19:56 -0700
Subject: [PATCH 1/2] Prepare release notes for 0.3.6

---
 CHANGELOG.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 84af9446d..ece005e9b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,14 @@ parallel copies under `docs/` or `scripts/notes/`. At cut time: rename
 
 ## [Unreleased]
 
+## [0.3.6] - 2026-08-27
+
+### Fixed
+
+- The default Exa-backed `web_fetch` once again enforces HTTP(S)-only URLs and
+  per-call timeouts, returns the requested markdown, text, or HTML format, and
+  preserves the native tool's public result and error semantics.
+
 ## [0.3.5] - 2026-08-27
 
 ### MCP

From d9d0196de414239af0bacb55881101e4c0fd39a1 Mon Sep 17 00:00:00 2001
From: Sawyer Cutler <sawyer@dirtroad.dev>
Date: Thu, 27 Aug 2026 12:20:03 -0700
Subject: [PATCH 2/2] Release corbits 0.3.6

---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 52fc9cd2f..efb90ff1e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@corbits/code",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "description": "Single-process coding agent CLI built on the Interchange runtime (Bun + TypeScript)",
   "private": true,
   "license": "SEE LICENSE IN LICENSE.md",