v4.2.9

What's Changed

• fix(resolve): honour published Genero variants when selecting a version (GIS-574) by @4js-mikefolcher in #93
• fix(outdated): read the lock's webcomponents array (GIS-582) by @4js-mikefolcher in #95
• fix(signing): verify before fetching, and re-verify what is on disk (GIS-580) by @4js-mikefolcher in #94
• fix(signing): distinguish key-window failures in audit, and pin the GIS-576 window behaviour by @4js-mikefolcher in #96
• fix(install): replay the version the lock names, not just the name (GIS-586) by @4js-mikefolcher in #97
• fix(webcomponent): let a widget move between versions, and stop the drift (GIS-579) by @4js-mikefolcher in #98
• fix(search): grade compatibility from the builds that exist (GIS-575) by @4js-mikefolcher in #100
• fix(cli): accept -V for the tool version, the Genero convention (GIS-591) by @4js-mikefolcher in #102

Full Changelog: v4.2.8...v4.2.9

v4.2.8

What's Changed

• feat(signing): pin the production GI package-signing root (root-prod-1) by @4js-mikefolcher in #92

Full Changelog: v4.2.7...v4.2.8

v4.2.7

What's Changed

• fix(cli): remove false-success + install --global project-file leak (GIS-564, GIS-565) by @4js-mikefolcher in #85
• feat(run): run the current project's own bin commands (GIS-566) by @4js-mikefolcher in #86
• fix(bin,install): resolve bin scripts under the package root; name new projects after their directory (GIS-569, GIS-568) by @4js-mikefolcher in #87
• feat(remove): uninstall a package from the global store with remove --global (GIS-567) by @4js-mikefolcher in #88
• fix(pack): derive shipped bin paths from the archive so importRoot-inside-root resolves (GIS-570) by @4js-mikefolcher in #89
• fix(cli): $HOME is not a project, so global commands work there (GIS-571) by @4js-mikefolcher in #90

Full Changelog: v4.2.6...v4.2.7

v4.2.6

What's Changed

• fix(build): static, pure-Go binaries so linux-amd64 runs on RHEL 8 (GIS-541) by @4js-mikefolcher in #84

Full Changelog: v4.2.5...v4.2.6

v4.2.5

What's Changed

• fix(env): emit --gwa/FGLIMAGEPATH only for real webcomponents (GIS-248) by @4js-mikefolcher in #79
• docs(help): accuracy fixes from co-worker review (GIS-538) by @4js-mikefolcher in #81
• fix(audit): accept the space form for --severity (GIS-540) by @4js-mikefolcher in #80
• feat(env): emit GSTWCDIR from env --gst for web-component projects (GIS-536) by @4js-mikefolcher in #82
• feat(registry): helpful error on a priority clash in registry add (GIS-537) by @4js-mikefolcher in #83

Full Changelog: v4.2.4...v4.2.5

v4.2.4

What's Changed

• feat(bump): update lockfile root version alongside fglpkg.json (GIS-492) by @4js-mikefolcher in #78

Full Changelog: v4.2.3...v4.2.4

v4.2.3

What's Changed

• Bump up version to v4.2.3 by @4js-mikefolcher in #77

Full Changelog: v4.2.2...v4.2.3

v4.2.2

What's Changed

• feat(lockfile): rename fglpkg.lock → fglpkg-lock.json with one-shot migration (GIS-289) by @4js-mikefolcher in #76

Full Changelog: v4.2.1...v4.2.2

v4.2.1

What's Changed

• GIS-435: surface cross-owner slug collisions instead of swallowing the 409 by @4js-mikefolcher in #74
• GIS-274: wire publish --force into the GI publish path (client) by @4js-mikefolcher in #75

Full Changelog: v4.2.0...v4.2.1

v4.2.0

What's Changed

• Global store: relocatable package root (GIS-367) + list --global dependency forest by @4js-mikefolcher in #67
• GIS-368: formalize local/global config precedence with routing/policy split by @4js-mikefolcher in #68
• GIS-276: empty-package guard (block/warn on an asset-less publish) by @4js-mikefolcher in #70
• GIS-283: actionable error when a locked dependency is gone from the registry by @4js-mikefolcher in #71
• GIS-369: harden fglpkg audit — CVSS severity, retry, honest coverage by @4js-mikefolcher in #73

Full Changelog: v4.1.0...v4.2.0