v0.7.1 reuses the exact npm and PyPI artifacts from Candidate 33838498153 (Ubuntu and Windows offline checks passed). Source ZIP reflects the release tag. Live Provider certification was not run: the certification job failed during npm setup. This approved simplified release does not claim live Provider certification success. See release-manifest.json for source provenance and artifact hashes.
What's Changed
- ci(docs): use pinned npm toolchain by @Eclipseic1848 in #157
- fix(release): bind P0 waiver to candidate and final digests by @Eclipseic1848 in #158
- fix(security): reject credential header aliases by @Eclipseic1848 in #166
- fix(security): harden artifact source identity by @Eclipseic1848 in #167
- perf(runtime): append ordinary run facts incrementally by @Eclipseic1848 in #168
- fix(worker): bound Protocol v2 host idempotency state by @Eclipseic1848 in #169
- fix(ci): preserve release failure evidence by @Eclipseic1848 in #170
- fix(tui): retain input submitted while a Run is busy by @Eclipseic1848 in #171
- docs(python): align PyPI maturity classifier with stable release by @Eclipseic1848 in #172
- chore(release): prepare v0.7.1 stable publication by @Eclipseic1848 in #173
- fix(release): synchronize reviewed private API baselines by @Eclipseic1848 in #174
- fix(ci): validate audit reports without requiring known vulnerabilities by @Eclipseic1848 in #175
- fix(ci): pin npm before provider certification install by @Eclipseic1848 in #176
- fix(release): promote approved v0.7.1 offline artifacts by @Eclipseic1848 in #177
Full Changelog: v0.7.0...v0.7.1
Contributors
Eclipseic1848