v1.0.4

[1.0.4] - 2026-06-29

• Commit Range: ➡️ c8f4f78...c8f4f78

✨ Features

• c8f4f78 — ✨ [feat] Add strict Python coverage and Codecov CI

✨ [feat] Harden the Bundlephobia helper for strict Python validation with typed query options, safer JSON boundaries, validated API URLs, deterministic npm pack parsing, and CLI output helpers.

🧪 [test] Replace the legacy unittest coverage with pytest scenarios for package scanning, Bundlephobia endpoint handling, threshold failures, npm pack parsing, audit composition, and text rendering; enforce 75 percent coverage with pytest-cov and Codecov-ready XML/JUnit outputs.

👷 [ci] Add a Python Quality workflow that runs lint, mypy, Pyright, pytest coverage, compile checks, and Codecov OIDC uploads for test results and coverage; update the release workflow to install Python dependencies before release verification.

🔧 [chore] Add strict Python, Pyright, Ruff, pytest, coverage, VS Code, skillcheck, and pinned requirements configuration so local and CI gates use the same commands.

📝 [docs] Move detailed Bundlephobia helper guidance into a reference file and link it from the skill and README to keep SKILL.md compact.

[1.0.3] - 2026-06-27

• Commit Range: ➡️ 22854e9...3061946

️ Bug Fixes

• 3061946 — 🔒️ [fix] Mark Bundlephobia API text as untrusted

Dependencies

• 45210bb — Merge PR #1

[dependabot]actions: [dependency] Update actions/dependency-review-action 5.0.0

• 22854e9 — (deps) [dependency] Update actions/dependency-review-action

️ Security

• ff7f770 — 👷 [ci] Use shared workflow callers

👷 [ci] Switches the Dependabot auto-merge caller to workflow-templates@main and replaces local security and maintenance workflows with shared reusable callers.

⬆️ [build] Updates eslint-config-nick2bad4u to the published caller override version and records any peer dependency needed for the shared ESLint config to load.

Testing

• 437fa00 — Test commit test

CI/CD

• 6659699 — Update Dependabot auto-merge workflow pin

• 3b2b121 — Add Dependabot auto-merge workflow

[1.0.2] - 2026-05-29

• Commit Range: ➡️ 7c7faf1...7c7faf1

Documentation

• 7c7faf1 — Document universal skill installs

[1.0.1] - 2026-05-29

• Commit Range: ➡️ 372df90...09cc39a

✨ Features

• 8de6f6e — ✨ [feat] (bundle-size-analysis) Introduce Bundlephobia skill for package size analysis

• Added a new Python script for querying Bundlephobia, npm pack, and local artifact sizes.

• Implemented functionality to fetch package sizes, dependencies, and export data from Bundlephobia.

• Included commands for scanning package.json files and measuring local build artifacts.

• Enhanced documentation to reflect the new skill and its capabilities.

• Updated release workflow to package the new skill correctly.

• Changed repository references from SonarCloud to Bundlephobia throughout documentation and scripts.

️ Other Changes

• 09cc39a — Use git-cliff release notes and npm publish

• 74c91c9 — Add SonarLint project binding

• 342de4d — Reduce Bundlephobia helper complexity

• 1a3c94b — Fix SonarCloud findings

• ef3b130 — Rename npm package for skill publishing

• 7e10752 — Move skill package to repository root

• 046f94c — Allow npm package publishing

• 8e4f1f1 — Use staged npm publishing for skill releases

• c834ea6 — Add npm trusted publishing release setup

• b839467 — Remove stale Sonar skill payload

• 4cfca14 — Add Codex skill metadata

• 372df90 — Initial commit

⭐ Contributors

Thanks to all the contributors for their hard work!

License

This project is licensed under the Unlicense.
This changelog was automatically generated with git-cliff.

v1.0.3

[1.0.3] - 2026-06-27

• Commit Range: ➡️ 22854e9...3061946

️ Bug Fixes

• 3061946 — 🔒️ [fix] Mark Bundlephobia API text as untrusted

Dependencies

• 45210bb — Merge PR #1

[dependabot]actions: [dependency] Update actions/dependency-review-action 5.0.0

• 22854e9 — (deps) [dependency] Update actions/dependency-review-action

️ Security

• ff7f770 — 👷 [ci] Use shared workflow callers

👷 [ci] Switches the Dependabot auto-merge caller to workflow-templates@main and replaces local security and maintenance workflows with shared reusable callers.

⬆️ [build] Updates eslint-config-nick2bad4u to the published caller override version and records any peer dependency needed for the shared ESLint config to load.

Testing

• 437fa00 — Test commit test

CI/CD

• 6659699 — Update Dependabot auto-merge workflow pin

• 3b2b121 — Add Dependabot auto-merge workflow

[1.0.2] - 2026-05-29

• Commit Range: ➡️ 7c7faf1...7c7faf1

Documentation

• 7c7faf1 — Document universal skill installs

[1.0.1] - 2026-05-29

• Commit Range: ➡️ 372df90...09cc39a

✨ Features

• 8de6f6e — ✨ [feat] (bundle-size-analysis) Introduce Bundlephobia skill for package size analysis

• Added a new Python script for querying Bundlephobia, npm pack, and local artifact sizes.

• Implemented functionality to fetch package sizes, dependencies, and export data from Bundlephobia.

• Included commands for scanning package.json files and measuring local build artifacts.

• Enhanced documentation to reflect the new skill and its capabilities.

• Updated release workflow to package the new skill correctly.

• Changed repository references from SonarCloud to Bundlephobia throughout documentation and scripts.

️ Other Changes

• 09cc39a — Use git-cliff release notes and npm publish

• 74c91c9 — Add SonarLint project binding

• 342de4d — Reduce Bundlephobia helper complexity

• 1a3c94b — Fix SonarCloud findings

• ef3b130 — Rename npm package for skill publishing

• 7e10752 — Move skill package to repository root

• 046f94c — Allow npm package publishing

• 8e4f1f1 — Use staged npm publishing for skill releases

• c834ea6 — Add npm trusted publishing release setup

• b839467 — Remove stale Sonar skill payload

• 4cfca14 — Add Codex skill metadata

• 372df90 — Initial commit

⭐ Contributors

Thanks to all the contributors for their hard work!

License

This project is licensed under the Unlicense.
This changelog was automatically generated with git-cliff.

v1.0.2

[1.0.2] - 2026-05-29

• Commit Range: ➡️ 7c7faf1...7c7faf1

Documentation

• 7c7faf1 — Document universal skill installs

[1.0.1] - 2026-05-29

• Commit Range: ➡️ 372df90...09cc39a

✨ Features

• 8de6f6e — ✨ [feat] (bundle-size-analysis) Introduce Bundlephobia skill for package size analysis

• Added a new Python script for querying Bundlephobia, npm pack, and local artifact sizes.

• Implemented functionality to fetch package sizes, dependencies, and export data from Bundlephobia.

• Included commands for scanning package.json files and measuring local build artifacts.

• Enhanced documentation to reflect the new skill and its capabilities.

• Updated release workflow to package the new skill correctly.

• Changed repository references from SonarCloud to Bundlephobia throughout documentation and scripts.

️ Other Changes

• 09cc39a — Use git-cliff release notes and npm publish

• 74c91c9 — Add SonarLint project binding

• 342de4d — Reduce Bundlephobia helper complexity

• 1a3c94b — Fix SonarCloud findings

• ef3b130 — Rename npm package for skill publishing

• 7e10752 — Move skill package to repository root

• 046f94c — Allow npm package publishing

• 8e4f1f1 — Use staged npm publishing for skill releases

• c834ea6 — Add npm trusted publishing release setup

• b839467 — Remove stale Sonar skill payload

• 4cfca14 — Add Codex skill metadata

• 372df90 — Initial commit

⭐ Contributors

Thanks to all the contributors for their hard work!

License

This project is licensed under the Unlicense.
This changelog was automatically generated with git-cliff.

v1.0.1

[1.0.1] - 2026-05-29

• Commit Range: ➡️ 372df90...09cc39a

✨ Features

• 8de6f6e — ✨ [feat] (bundle-size-analysis) Introduce Bundlephobia skill for package size analysis

• Added a new Python script for querying Bundlephobia, npm pack, and local artifact sizes.

• Implemented functionality to fetch package sizes, dependencies, and export data from Bundlephobia.

• Included commands for scanning package.json files and measuring local build artifacts.

• Enhanced documentation to reflect the new skill and its capabilities.

• Updated release workflow to package the new skill correctly.

• Changed repository references from SonarCloud to Bundlephobia throughout documentation and scripts.

️ Other Changes

• 09cc39a — Use git-cliff release notes and npm publish

• 74c91c9 — Add SonarLint project binding

• 342de4d — Reduce Bundlephobia helper complexity

• 1a3c94b — Fix SonarCloud findings

• ef3b130 — Rename npm package for skill publishing

• 7e10752 — Move skill package to repository root

• 046f94c — Allow npm package publishing

• 8e4f1f1 — Use staged npm publishing for skill releases

• c834ea6 — Add npm trusted publishing release setup

• b839467 — Remove stale Sonar skill payload

• 4cfca14 — Add Codex skill metadata

• 372df90 — Initial commit

⭐ Contributors

Thanks to all the contributors for their hard work!

License

This project is licensed under the Unlicense.
This changelog was automatically generated with git-cliff.