v0.35.0

0.35.0 (2026-10-31)

Features

• security: scan manual runs with the default branch's config, add secret-scan-upload-sarif (6e191a8)

Bug Fixes

• perf: upload the dot-folder reports of Lighthouse and Unlighthouse (3a0e8fc)

v0.34.0

0.34.0 (2026-10-30)

Features

• perf-lighthouse: add Lighthouse CI workflow with one commit status per page (54f80a9)

v0.33.0

0.33.0 (2026-10-30)

Features

• pr-description: enhance context collection and description generation (f3c3767)

Bug Fixes

• pr-description: keep hyphens when dropping invisible characters (c87cfc9)

v0.32.1

0.32.1 (2026-10-30)

Bug Fixes

• perf-sitespeed: write the JSON the metrics extraction reads (cf6273d)

v0.32.0

0.32.0 (2026-10-28)

Features

• cleanup-ghcr: add scheduled workflow for GHCR image retention (46c33d5)

v0.31.0

0.31.0 (2026-10-27)

Features

• cd-buildkit: build with Docker Buildx on GitHub-hosted runners (44d0f71)

v0.30.0

0.30.0 (2026-10-27)

Features

• check-docs-external-links: add action to check external links in Markdown files (006ec9c)
• pr-description: add Claude Code integration for PR descriptions (3fd57dc)
• pr-description: update language descriptions and enhance pull request template guidance (b92ad7f)

v0.29.0

0.29.0 (2026-10-24)

Features

• check-commit-msg: add action to validate commit messages against Conventional Commits (4890444)

v0.28.0

0.28.0 (2026-10-24)

⚠ BREAKING CHANGES

• supply-chain: ci-terraform installs a pinned Terraform instead of the latest one, and ci-ansible pins ansible 14 (Python >= 3.12; set ansible-version on older interpreters).
• workflows: release.yml callers whose release PR edits .github/workflows/ files must set app-workflows-permission: true (the App token no longer carries every installation permission).

Features

• workflows: add rootless BuildKit deploy and scorecard scanning (088703d)

Bug Fixes

• ci: close fork skip bypass and add single CI gate check (52f9b69)
• security: stop changes from silencing their own Gitleaks findings (be7e1fc)
• supply-chain: pin third-party actions by SHA, examples by release (a74deb7)
• supply-chain: verify downloaded tools, pin tool versions (44f7bd0)
• update workflows to use self-repository syntax and remove deprecated token inputs (4387736)
• workflows: attest images, scope tokens and harden build inputs (9b9e897)
• workflows: harden security scanning and tool-install supply chain (eb9acb1)
• workflows: least-privilege tokens, no template injection, no persisted credentials (e7af922)

v0.27.0

0.27.0 (2026-10-20)

Features

• seo: add scheduled SEO crawl for broken links and page tags (c375b16)