Skip to content

v0.5.0 — sentinel pruning, governance-rules.yaml, action pinning

Choose a tag to compare

View all tags
@AJ-EthereaLogic-ai AJ-EthereaLogic-ai released this 08 May 00:49
· 45 commits to main since this release
v0.5.0
4c00013
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The first release after v0.4.0 stabilization. Adds four template features, one security-relevant CI hardening, drops one no-op variable, and bumps polish across docs and tests.

Features

  • Sentinel-based pyproject.toml pruning (#81). The template ships a single valid-TOML pyproject.toml; the post-gen hook strips variant-tagged content (typechecker, SBOM dev-deps) so editors and TOML language servers can parse the source on disk.
  • Language-mismatched QUICKSTART pruning (#80). The QUICKSTART for the unselected language path no longer ships in the rendered tree.
  • governance-rules.yaml drives the governance gates (#79). The five-layer governance stack is now data-driven from a single YAML file rather than scattered checks.
  • Data-driven hook regression tests (#76). The pre-tool-use hook test suite reads its scenarios from a JSON spec, keeping the Python and Node test runners in lockstep.

Security / correctness

  • Every third-party GitHub Action in the rendered project's workflows is now SHA-pinned (IMP-006, #87). check-action-pins is strict by default; the SLSA generator stays tag-pinned per upstream policy and is allow-listed.
  • Rendered README dev-tool list is now language-conditional (#84). Previously hardcoded ruff, ty, pytest even for TypeScript-only renders.
  • make validate honestly runs lint, typecheck, and test.

Removals (technically breaking; functionally backward-compatible)

  • include_databricks variable removed (#88). It was a documented no-op placeholder; will return when actual Databricks scaffolding is designed. Copier silently ignores the dropped variable in existing answers files, so copier update from v0.4.x is safe.

Other

  • Template repo wired to Codecov for its own coverage signal (#82).
  • New language toolchain comparison matrix in the README (#83).
  • Post-gen hook pruning matrix is now exercised in CI (#77).
  • Roadmap reconciled; §9 closed as won't-do (#78); items #69–#74 filed as the actionable register (#75).
  • Sprint and dashboard tracking added (#68).

Upgrade

For copier-rendered projects:

copier update --trust --skip-answered --vcs-ref v0.5.0

For cookiecutter-rendered projects, no in-place upgrade flow ships; re-render and merge per docs/UPDATING.md.

Full diff: v0.4.0...v0.5.0

Assets 2
Loading