v0.4.0
Added
- Provider-neutral observability architecture foundations for #174:
docs/observability.md, the sharedlog-sinkcontract, the structured-event schema, and optional profilespec.observability.logShippingvalidation. publish-images.ymlnow runs a trivy HIGH/CRITICAL vulnerability gate on the locally built images before pushing or signing, so a CVE disclosed after the PR-time scan blocks publication to GitHub Container Registry and Docker Hub (#274).
Full Changelog: https://github.com/RonaldHensbergen/composable-data-stack/blob/main/CHANGELOG.md#040---2026-08-11
Installation
pip install composable-data-stack==0.4.0
Also published on PyPI via trusted publishing, with build attestations.