Skip to content

v0.7.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 11 May 04:12
· 55 commits to main since this release
v0.7.2
65f4da8

Changed (CI / repo hygiene only — no SDK behaviour change)

  • Dependabot now opens grouped weekly PRs for npm + GitHub Actions
    updates. @types/*, lint/format tooling, vitest/msw, and the
    @opentelemetry/* family ship as batched sweeps. Major-version
    bumps to peer-dep ecosystems (express, hono, ioredis, pg) are
    ignored — those need an explicit decision about widening the
    supported range.
  • CodeQL static-analysis workflow added (.github/workflows/codeql.yml)
    with the security-extended query suite. Runs on push, PR, and
    a weekly Monday schedule. Findings appear in the Security tab.
  • pnpm audit --prod --audit-level=moderate runs on every CI build
    (continue-on-error initially, so advisories surface in the run
    log without blocking PRs).
  • PR template + three issue templates (bug, feature, compliance
    drift) shipped. .github/CODEOWNERS pins compliance-relevant
    files and the release pipeline.

No npm-published artefact changes from 0.7.1.

Assets 2
Loading