v1.8.6 — Guided page discovery and immediate GitHub Actions

This release makes the accessibility audit easier to start while preserving the existing audit workflow and output.

What changed

• Discover unique, same-origin pages from one website URL and choose audit targets from an accessible checkbox list.
• Leave optional routes such as jobs, categories, tags, search, account, and legal pages unselected by default.
• Keep the manual URL-entry path for users who already know exactly which pages to audit.
• Carry the selected URLs safely into the generated configuration with stale-selection protection.
• Let one CarlasHub GitHub App install a managed workflow in each user's repository and dispatch the audit immediately.
• Explain free-plan limits, who owns GitHub Actions usage, and when a user could incur charges.
• Synchronize the README, setup guide, public builder, Marketplace metadata, and Claude/Copilot packages.
• Generate deterministic CycloneDX 1.6 SBOMs with a standards-compliant UUIDv5 serial number so release attestations can be verified.

Safety and scope

Discovery is limited to unique URLs on the exact origin supplied by the user and is capped at 20 selected pages per audit. Automated checks find many accessibility issues, but they do not establish full WCAG conformance; manual testing remains necessary.

Verification

All release archives include SHA-256 checksum files. GitHub-hosted SLSA provenance and CycloneDX SBOM attestations are available for each archive and can be verified with gh attestation verify.