Sentinel 0.2.1

Fixes

• CI security job passes again — bandit's B608 suppression directives were on the wrong lines in sentinel/db.py, failing the security gate on main. The # nosec comments now sit on the exact lines bandit flags, and explanatory text was moved off the directive lines. bandit -q -r sentinel exits 0 with no findings.

No functional changes — 0.2.0 features (PyPI/npm monitors, sentinel uptime, retention_days) are unchanged.

Sentinel 0.2.0

What's new in 0.2.0

New source types — watch software releases directly from their registries:

sentinel add pypi requests      # latest release on PyPI
sentinel add npm express        # latest release on npm

sentinel uptime — uptime statistics from the checks log, per source and overall, with --days windowing and --json output.

retention_days — new [sentinel] setting (default 90) prunes the per-attempt checks log so the database can't grow forever.

Fixes

• Critical packaging bug fixed: the wheel was missing sentinel.updaters, so pip install . crashed on every command. Packaging now uses package discovery, and CI gained a package job that builds the wheel and smoke-tests the installed CLI.
• 429 responses are now retried (with Retry-After honored, capped at 60s); exhausted GitHub rate limits are still never retried.
• Interactive add can now enable sentinel upgrade (optional install-path prompt for GitHub releases).
• Test double now mirrors the real transport's error contract.

Full changelog

See CHANGELOG.md for the complete history, including everything in 0.1.0 (GitHub/http/api monitors, watch mode, sentinel upgrade with checksum verification, JSON output, exit codes).