Skip to content

v0.8.1

Choose a tag to compare

@github-actions github-actions released this 30 Sep 03:55
· 477 commits to develop since this release

Changes since v0.8.0

Features

  • benchmark: add a self-contained HTML benchmark report ccf2b82
  • telemetry: add a self-contained HTML process-metrics report f9afa03

Security

  • storage: document the Bandit B608 false positive in list_dicts 3414d66
  • docker: harden the container image 02f23c0 (#16)

Refactoring (no behavior change)

  • declare explicit re-exports in package modules 96ef870 (#22)
  • apply reviewed Ruff fixes a21cbd5
  • cli: resolve the --path default at invocation time aae805f (#24)
  • agents: type the provider context as a read-only protocol d24bfb3
  • orchestration: make the run engine pass mypy --strict 075a454
  • add the missing annotations reported by mypy --strict df4a0e0
  • runtime: drop the type: ignore comments in the workspace diff 2e97ded (#25)

Documentation

  • cli: add help texts to every command and option faa6b29 (#14)
  • generate the CLI reference from the command tree 6e15d23
  • generate the task-file reference from the JSON Schema 3ca5e1f
  • document every exit code, including 3 and 5 9b04099 (#11)
  • add the configuration and API references a4e71da
  • add the greenfield guide with outputs from a real run fa49999
  • add the brownfield guide and the itsdangerous reproduction kit 1ee4d88
  • add the external agents guide 1db75ff
  • add the CI integration guide 802e390
  • document the harness telemetry metrics fa7f9b3
  • document where each repository health signal is observed 187ad43
  • document the benchmarks and their limits 8dd012e
  • record how the provenance of the thesis cut is established a5aeea2
  • adr: record the repository topology decision edd8375
  • add the thesis context page eae6781
  • diagrams: show the local API and dashboard as implemented 026ba0e
  • add the MkDocs Material documentation site bfb4452
  • security: add the vulnerability reporting policy 9334346
  • adopt the Contributor Covenant 2.1 code of conduct 54da8a6
  • expand the contributing guide 9e98bbb
  • security: nest the security model under the policy heading e0ee522
  • add support routes and code owners 3786bcf
  • add issue forms and the pull-request template 299a388
  • add CITATION.cff d4a75ce
  • add CLAUDE.md with the repository conventions 57fbac4
  • rewrite the README 800bbe0
  • add the Spanish README 8dfeac3
  • list Windows as unsupported and all lint jobs as blocking 576099c

Tests

  • isolate fixture repositories from the developer's Git config bce4b41 (#20)
  • evidence: build the fake GitHub token at runtime 7c291ad (#17)
  • add a runner that reproduces the thesis demonstration flows dd8168c
  • make the quickstart flow run the README commands verbatim 99280a3

Build and packaging

  • ship py.typed marker with the package ed059da (#10)
  • use python -m build instead of setup.py sdist bdist_wheel c0aa3f9 (#26)
  • add PyYAML and jsonschema type stubs to the dev extra 54edfd0
  • generate release notes from Conventional Commits 65d00cd
  • publish the real project metadata a6855f7

CI/CD

  • add security workflow 0cd9a11
  • security: upgrade pip in the dependency-audit environment 339c494
  • add build workflow 0cff9b8
  • build: count runtime dependencies without pip and the harness 9ed1e45
  • replace the original test workflow with a hardened one b5081d6 (#15)
  • add lint workflow 9d82994
  • group step-summary writes in the test job (shellcheck SC2129) 55c3202
  • add CodeQL analysis for Python, JavaScript and Actions 3ef6bc4
  • add dependency review for pull requests ebf00f5
  • add OpenSSF Scorecard analysis e1789ea
  • configure Dependabot for pip, GitHub Actions and Docker 07fdf75
  • add pull-request hygiene checks ceeaf24
  • add stale workflow c2521e7
  • add weekly link checking with lychee 80b52b8
  • add SonarQube Cloud analysis with coverage 903348e
  • add container build, scan and GHCR publication f94d3d5
  • add the release workflow with SBOM and build provenance 744c765
  • add the benchmarks workflow with a non-blocking trend history 9658538
  • lint: accept python/* YAML tags without constructing them 6574229
  • build and deploy the documentation site with its reports ec65b17
  • add the docs-smoke workflow fe9b1f0
  • make Ruff, mypy, markdownlint and hadolint blocking 141ed8f
  • move the Windows run to its own informational workflow bca3ba5
  • benchmarks: install pytest for the scenario benchmark d87784c

Style

  • apply Ruff safe fixes bf3dfb9
  • apply ruff format to src, tests and scripts 966a221
  • make every Markdown file pass markdownlint 2a13fa9

Maintenance

  • lint: treat typer.Option and typer.Argument as immutable calls 8873db1 (#23)
  • ignore the maintainer's local workspace and generated reports a5cc040
  • ignore the formatting commit in git blame 2aec842
  • remove the stale static web prototype ebebac2 (#12)
  • stop versioning generated reports and stale manifests 62f6065 (#13)
  • add pre-commit hooks 3c2a0f7
  • tidy comments in the Sonar configuration and the denylist 4613775
  • release: prepare 0.8.1 ba4fe33

Issues closed

#10, #11, #12, #13, #14, #15, #16, #17, #20, #22, #23, #24, #25, #26

Verification

sha256sum -c SHA256SUMS
gh attestation verify governed_agent_harness-0.8.1-py3-none-any.whl --repo SebasBarrera/harness-engineering