v0.39.0

What's Changed

• docs: complete the ADR index, module map, and test table by @jorge-aquino in #40
• chore(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 by @dependabot[bot] in #41
• chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in #39
• chore(deps): bump actions/download-artifact from 5.0.0 to 8.0.1 by @dependabot[bot] in #38
• Add pinned, verified tool installs (v0.37.0) by @jorge-aquino in #42
• Add katana and gau; run tools with an empty stdin (v0.38.0) by @jorge-aquino in #43
• Content pipeline and operability polish (v0.39.0) by @jorge-aquino in #44

Full Changelog: v0.36.1...v0.39.0

v0.36.1

What's Changed

• Harden runner execution and release pipeline by @jorge-aquino in #37

Full Changelog: v0.36.0...v0.36.1

v0.36.0

What's Changed

• Phase 1a: classify failures and surface advisory policy findings by @jorge-aquino in #32
• Phase 1b: centralize sensitive-data redaction by @jorge-aquino in #33
• Phase 1c: fail closed on plaintext credential storage (BREAKING) by @jorge-aquino in #34
• Add durable, secure runner operations and guided setup by @jorge-aquino in #35
• Complete roadmap 16: target classification and local deny rules by @jorge-aquino in #36

Full Changelog: v0.28.1...v0.36.0

v0.28.1

What's Changed

• docs: lead with PyPI install now that v0.28.0 is published by @jorge-aquino in #30
• fix: reject negative --max-targets, which silently disabled the safety cap by @jorge-aquino in #31

Full Changelog: v0.28.0...v0.28.1

v0.28.0

What's Changed

• feat(pipelines): run-scoped isolation via local handoff files (v0.21.0) by @jorge-aquino in #16
• fix: v0.21.1 — imports tool list, run dir pruning, pipeline list sources by @jorge-aquino in #17
• feat(daemon): v0.22.0 — rotating log file with ISO timestamps by @jorge-aquino in #18
• feat(safety): v0.22.1 — --max-targets guardrail on pipeline and run commands by @jorge-aquino in #19
• refactor: harden observability, types, and test coverage to 95% by @jorge-aquino in #20
• chore: bump version to 0.22.2 and sync docs to current state by @jorge-aquino in #24
• chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #21
• chore(deps): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #22
• chore(deps): bump actions/attest-build-provenance from 1 to 4 by @dependabot[bot] in #23
• feat(pipeline): live TUI with per-stage status table by @jorge-aquino in #25
• refactor: code quality improvements — v0.24.0 by @jorge-aquino in #26
• Programs are Engagements — follow VardrMap's rename (v0.25.0–v0.27.0) by @jorge-aquino in #28
• chore(deps): bump actions/setup-python from 6 to 7 by @dependabot[bot] in #27
• Release v0.28.0 - docs resync plus two CLI defects by @jorge-aquino in #29

New Contributors

• @dependabot[bot] made their first contribution in #21

Full Changelog: v0.20.0...v0.28.0

v0.20.0

What's Changed

• feat: OS keychain credentials + logout by @jorge-aquino in #13
• feat: dnsx + naabu tools and deep/ports pipelines by @jorge-aquino in #14
• chore(release): v0.20.0 — secure credentials + dnsx/naabu by @jorge-aquino in #15

Full Changelog: v0.19.0...v0.20.0

v0.19.0

What's Changed

• chore: lifecycle hygiene — version truth, ruff+mypy+coverage, LICENSE (v0.18.0) by @jorge-aquino in #3
• feat(api): resilient client — retry/backoff + User-Agent by @jorge-aquino in #4
• feat: Batch A hardening — tool timeouts, HTTPS enforcement, env-var config by @jorge-aquino in #5
• feat: typed job configs + nmap consistency (run nmap, status) by @jorge-aquino in #6
• refactor: tool-handler registry for job execution (#3) by @jorge-aquino in #7
• feat: recon pipelines — chain tools in one command (flagship) by @jorge-aquino in #8
• chore: pre-feature cleanup and consistency by @jorge-aquino in #9
• feat: vardrrunner doctor — deep preflight for unattended use by @jorge-aquino in #10
• chore(release): v0.19.0 — release tooling, CI matrix, docs polish by @jorge-aquino in #11
• fix(release): correct CycloneDX SBOM command by @jorge-aquino in #12

New Contributors

• @jorge-aquino made their first contribution in #3

Full Changelog: https://github.com/jorge-aquino/VardrRunner/commits/v0.19.0