v0.3.0

Changelog

Features

• 452e6bb: feat(diff): add airom diff — the semantic delta between two AIBOMs (@bhatt-neel-dev)
• ef9c3ea: feat(diff): show what is dead or dangerous about the AI a PR adds (@Roro1727)

Bug fixes

• 2fd1ed4: fix(diff): refuse to gate a delta the code did not cause (@Roro1727)
• e9f119d: fix(lexer): classify Python docstrings apart from strings (@Roro1727)
• cf03d9f: fix(rules): stop bedrock and pgvector matching shapes far broader than models (@Roro1727)
• df81b12: fix: four false-positive classes surfaced by a home-directory scan (@Roro1727)

Others

• 66fdbf0: style: gofumpt the diff tests (@Roro1727)

---

Verify the checksums signature (keyless cosign):

cosign verify-blob \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp 'https://github.com/airomhq/airom' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  checksums.txt