Skip to content

v0.1.4

Choose a tag to compare

View all tags
@0disoft 0disoft released this 10 Jul 13:04
v0.1.4
bfe8b82

Highlights

  • Adds config-only opt-in artifact discovery with bounded model-file patterns and safe default excludes.
  • Adds stricter provider-token and key-aware redaction plus artifact hashing and glob-budget hardening.
  • Adds target-root config discovery and installed CLI version reporting.
  • Adds the partial SPDX 3.0.1 AI Profile preview exporter with explicit unsupported-field notes and deterministic output.
  • Keeps the CycloneDX JSON 1.7 and GitHub Action contracts backward compatible.

Validation

  • Python 3.12 compile, Ruff, 93 unit and contract tests, wheel verification, GitHub Action wrapper smoke, and CLI fixture smoke passed locally.
  • Hosted CI passed for the release commit.

Rollback

The immutable v0.1.4 tag will not be moved or deleted. Consumers can pin the prior v0.1.2 action tag or ai-bom-generator==0.1.2 while a corrective patch is prepared.

Assets 2
Loading