Skip to content

v1.13.1

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Sep 12:13
· 5 commits to main since this release
v1.13.1
cae57da
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fettle v1.13.1: Complete Install and Canonical Assurance

Fettle v1.13.1 makes the default installation the complete Python-backed
toolkit and hardens the final assurance decision against untrusted evidence.

What Changed

  • Plain pipx install finefettle now installs Ruff, Semgrep, pytest, mutmut,
    PyYAML, and the Playwright Python library. Existing capability extras remain
    valid; finefettle[all] additionally installs contributor tooling.
  • Release CI installs the default wheel with dependencies and verifies the
    bundled CLI, demo, resources, imports, and executable tools.
  • fettle assurance derives the subject, effective policy, and changed scope
    from the repository, then validates each evidence type at its producer-owned
    boundary.
  • The command atomically writes
    .fettle/assurance-record.evidence.json and invalidates stale output when an
    assessment or write fails.
  • Raw security review JSON is diagnostic-only and cannot satisfy a release
    policy requiring security PASS; such a policy needs an approved canonical
    security producer.

External Prerequisites

The Python package cannot install Git, agent CLIs, Playwright browser binaries,
external services, or JavaScript/TypeScript, Go, and Rust toolchains. Run
fettle doctor after installation, and run playwright install when browser
automation is required.

Upgrade

pipx upgrade finefettle
fettle doctor
Assets 5
Loading