chore: release v0.4.0-alpha.0

[petehauge]

[0.4.0-alpha.0] — 2026-07-01

Breaking Changes

• apiops init output filenames renamed — identity setup guides and Copilot prompts are now emitted as APIOPS-PIPELINE-IDENTITY-SETUP.md / APIOPS-WORKFLOW-IDENTITY-SETUP.md and apiops-setup-pipeline-identity.prompt.md / apiops-setup-workflow-identity.prompt.md. Generated pipeline files are now named run-apiops-extractor.yml / run-apiops-publisher.yml. Users who re-run apiops init after upgrading will see the new files alongside any previously generated ones; delete the old files if you no longer want them tracked (feat(init): rename and rewrite identity setup output files #200)

Features

• Secret redaction in policy XML — apiops extract now redacts inline secrets (including literal bearer tokens in Authorization headers) from extracted policy files while preserving named-value references. apiops publish performs a pre-flight scan of all artifacts and aborts (including in dry-run mode) if any *** REDACTED *** markers remain, preventing accidental secret exposure (Handle secret redaction in policy XML  #199)
• JSON schemas and Copilot prompts for filter/override configuration — new schemas/extractor-config.schema.json and schemas/override-config.schema.json provide IDE autocompletion for configuration.extractor.yaml and configuration.{env}.yaml via the yaml-language-server $schema directive. apiops init now also lays down apiops-configure-filter.prompt.md and apiops-configure-overrides.prompt.md to conversationally guide users through building these files. Schemas are auto-generated from the TypeScript types on every build so they stay in sync (feat: add JSON schemas and Copilot prompts for filter/override configuration #183)
• Dry-run validation gate in generated publish pipelines — GitHub Actions and Azure DevOps publish templates emitted by apiops init now run apiops publish --dry-run before every real publish step. If the dry-run fails (connectivity, invalid resources, permission errors), the pipeline halts before touching APIM, preventing partial-failure states (feat: add dry-run validation step to publish pipeline templates #182)
• Identity setup guides rewritten for UI workflows — the manual identity setup guides emitted by apiops init now walk users through the Azure portal, Azure DevOps, and GitHub web UIs with step-by-step instructions and links to official docs, while the companion .prompt.md files remain the CLI/scripted path for Copilot-driven setup (feat(init): rename and rewrite identity setup output files #200)

Bug Fixes

• Removed stale mcpServerInformation.json references — follow-up to Handle MCP publish from embedded API metadata #173, which moved MCP server configuration into apiInformation.json. Documentation (docs/reference/artifact-format.md, docs/reference/resource-types.md) and the all-resource-types integration test manifest now match the post-Handle MCP publish from embedded API metadata #173 artifact layout (fix: drop stale mcpServerInformation.json references #205)

---

Once merged, .github/workflows/squad-release.yml will tag v0.4.0-alpha.0 and create the GitHub Release.