v0.5.0

0.5.0 (2026-08-25)

Features

• resolve a diagram object's absolute bounds across nested parents (#20) (c4471b2)

Miscellaneous Chores

• adopt CDA Repository Standard v1 (#17) (965044c)

Continuous Integration

• verify CDA GitHub policy (#18) (ce23cc3)
• verify CI after Protect main bypass-actor removal (#19) (24a9488)

v0.4.3

0.4.3 (2026-08-19)

Bug Fixes

• parser: preserve sourceConnection when xsi:type is absent (1899389)

Documentation

• add Security section, fix dead docs link, sync translated READMEs (221b512)

v0.4.2

0.4.2 (2026-08-17)

Bug Fixes

• release: prevent publishing packages without dist (b8ab8a0)

Documentation

• add documentation website (Astro/Starlight) with generated API reference (02d3268)
• temporarily serve GitHub Pages from develop (9b44f61)

Miscellaneous Chores

• docs: retire in-repo website in favor of the CDA Developer Portal (b267e88)

Continuous Integration

• docs: install root dependencies so typedoc can resolve source imports (52d03db)

v0.4.1

0.4.1 (2026-08-17)

Bug Fixes

• release: quote format in author guard so bash parses it (2d8b516)

v0.4.0

0.4.0 (2026-08-17)

Features

• archive: expose Node archive support through dedicated subpath (af3dcca), closes #10

v0.3.1

0.3.1 (2026-08-16)

Bug Fixes

• release: generate real release notes with conventionalcommits v9 (869b205)

Miscellaneous Chores

• deps: bump actions/upload-artifact from 4.6.2 to 7.0.1 (602ab49)
• deps: bump actions/upload-artifact from 4.6.2 to 7.0.1 (#8) (ed9ba78)

Continuous Integration

• dependabot: open pull requests against develop, not main (02719b4)
• release: drop NPM_TOKEN, publish via OIDC only (22afbd6)
• release: guard against non-human release commit authors (53a149e)

v0.3.0

0.3.0 (2026-08-16)

Features

• examples: parser-focused consumption recipes for ArchiModel (a49f82b)

Bug Fixes

• badge paths in runbooks resolve relative to runbooks/ (d80e59a)

Documentation

• add new-repo playbook as internal devsecops recipe (.docs/) (86111a6)
• add Spanish version of the devsecops recipe (5efc302)
• adopt kebab-case runbook naming and add index (f9c8887)
• move devsecops recipes to .github/ (971a3e5)
• move recipes to runbooks/ (industry standard for operational procedures) (5bc6526)
• reference runbooks from CONTRIBUTING, drop runbooks index (aec66f8)
• translate devsecops recipe to English (f40d62d)
• use the standard flag language-switcher in recipes (cbd4db9)
• verb-first runbook naming (create-new-repo) (ba9bee1)

Miscellaneous Chores

• assets: move badges and flags from docs/ to .github/assets/ (06280dc)
• release: 0.3.0 [skip ci] (d1dddc8)

Continuous Integration

• release: push through the sentinel app so the main ruleset allows it (7b252bb)
• run CI on every branch push and document develop/main flow (e2a6350)

v0.2.0

0.2.0 (2026-08-16)

Changed

• Label expressions now resolve in O(1) per node — linear time on
  arbitrarily large models (previously O(n²)).
• Zip entries are verified against their CRC-32 before parsing — a
  corrupted model archive throws archimate-zip-crc-mismatch instead of
  producing garbage.

Security

• npm package publishes with SLSA provenance and registry signature via
  trusted publishing (OIDC).
• CI hardened per the OWASP NPM Security Cheat Sheet: ignore-scripts,
  prod-only audit gate, pinned third-party actions, weekly dependency
  health check.