·
24 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
What's new
- Added deterministic low, medium, and high risk levels to supported configuration findings.
- Added a concise risk rationale so reviewers can prioritize authorization, identity, routing, API access, event delivery, and lifecycle changes.
- Added risk counts to the GitHub Action summary and the
highest_riskoutput for automation. - Added risk labels to Git-range CLI output.
Existing rule IDs, exit codes, redaction guarantees, and severity: "review" behaviour remain compatible.
Verification
The release passed the Node 20/22/24 CI matrix, cross-platform Action fixture matrix, CodeQL, dependency review, coverage, npm audit, package smoke, and Action bundle checks.
Full Changelog: v0.4.2...v0.5.0