Skip to content

v0.2.0

Choose a tag to compare

View all tags
@0disoft 0disoft released this 11 Jul 07:16
v0.2.0
b114eb4

Highlights

  • Parse explicitly declared uv.lock and requirements files into CycloneDX and SPDX dependency components.
  • Add bounded reads, warning-backed partial parsing, and ML ecosystem compatibility fixtures.
  • Make the GitHub Action prepare pinned Python 3.12 and uv 0.11.28 without caller-side runtime setup.
  • Bind post-release verification to the external smoke run's exact workflow commit and immutable Action ref.

Runtime boundaries

Dependency collection remains config-driven and offline. The Action may download only its pinned toolchain and locked project dependencies, keeps runtime state under RUNNER_TEMP, and does not resolve or mutate the caller project.

Rollback

Immutable tag v0.2.0 will not be retargeted. If a defect is found, keep exact users pinned and publish a corrected patch release before advancing mutable v0 again.

Assets 2
Loading