v0.8.0

Added

• cds list profiles/cds list modules/cds list images now accept --remote <owner/repo>, --ref <ref>, and --local <dir>, reusing cds get's own source-repository resolution so users can discover what's available in a remote repository or existing local checkout before running cds get against it (#500).

Fixed

• cds preflight's image supply-chain check now honors a saved security.strict project default, forcing the production image policy (registry allowlist, digest pins, signature/provenance verification) regardless of the profile's inferred environment class, matching the existing behavior of cds security --verify-images (#546).

What's Changed

• Add standalone single-module profile smoke test by @RonaldHensbergen in #548
• Fix invalid mermaid code fences and add regression test by @RonaldHensbergen in #554
• fix: keydb cache-service connectionUri never includes password wh by @Mr-Neutr0n in #555
• docs: document ifNonempty conditional interpolation syntax and semantics by @ItzSaurav in #560
• chore(deps): update softprops/action-gh-release digest to efb3536 by @renovate[bot] in #562
• Add workflow to flag first-time contributor PRs by @RonaldHensbergen in #561
• Add Traefik reverse-proxy module by @RonaldHensbergen in #549
• Update traefik Docker tag to v3.7 by @renovate[bot] in #563
• Validate image.source: registry requires a tag; warn on tag: latest by @RonaldHensbergen in #552
• docs: formalize images/ independent versioning (middle ground before a repo split) by @RonaldHensbergen in #550
• chore(images): refresh signed-images fixture by @github-actions[bot] in #566
• Update apache/superset:6.1.0 Docker digest to 59cd4af by @renovate[bot] in #567
• chore(images): refresh signed-images fixture by @github-actions[bot] in #568
• Add profile composition via extends by @RonaldHensbergen in #525
• Update all dependencies by @renovate[bot] in #571
• chore(images): refresh signed-images fixture by @github-actions[bot] in #572
• Fix symlink escape and copy failure handling in cds get by @RonaldHensbergen in #569
• Improve cds get --dry-run by reporting overwrite conflicts by @RonaldHensbergen in #565
• Update hashicorp/vault Docker tag to v2.1 by @renovate[bot] in #575
• Update all dependencies by @renovate[bot] in #586
• chore(images): refresh signed-images fixture by @github-actions[bot] in #587
• Thread security.strict into cds preflight image checks by @RonaldHensbergen in #573
• fix(state): add CREATED bucket instead of falling back to UNKNOWN by @RonaldHensbergen in #585
• Add --remote/--ref/--local to cds list by @RonaldHensbergen in #574
• chore(deps): bump pip from 26.1.2 to 26.2 by @dependabot[bot] in #588
• docs(roadmap): move PyPI publishing from near-term to completed by @RonaldHensbergen in #598
• Update all dependencies by @renovate[bot] in #600
• chore(images): refresh signed-images fixture by @github-actions[bot] in #602
• Add experimental DuckDB warehouse module by @RonaldHensbergen in #596
• feat(bi/superset): adopt image.source/image.tag config by @RonaldHensbergen in #584
• chore(images): refresh signed-images fixture by @github-actions[bot] in #606
• Update dependency dagster to v1.13.21 by @renovate[bot] in #604
• chore(release): bump version to 0.8.0 by @github-actions[bot] in #605

New Contributors

• @Mr-Neutr0n made their first contribution in #555
• @ItzSaurav made their first contribution in #560

Full Changelog: v0.7.0...v0.8.0