v1.6.5

🚀 Features

• feat(ci): add Sigstore attestation for release artifacts

🐛 Bug Fixes

• fix: skip permission-based tests when running as root in CI
• fix: stabilize TestDiscoverRepos_FindsRepos with explicit mtime ordering

📖 Documentation

• docs: update OpenSSF badge to Silver level
• docs: add security assurance case and use signed tags

Other Changes

• chore(deps): bump the go-dependencies group with 12 updates (#232)
• ci: add 80% statement coverage threshold check
• Feature/rule link to files (#226)
• test: improve coverage for tool package from 79.5% to 93.6%
• test: improve coverage for telemetry package and exclude extensions from build targets
• test: improve coverage for cmd/opencodereview package from 42% to 70%
• test: improve coverage for viewer package from 35% to 92%
• test: improve coverage for template and pathutil packages
• test: add coverage tests for agent, llm, llmloop, and scan packages
• test: add unit tests for output_helpers, config, model, stdout, and telemetry packages
• chore: remove unused cmd/testdiff debug helper
• test: expand unit test coverage for agent, llm, llmloop, and tool packages
• test: add unit tests for pure logic functions across 6 packages

Full Changelog: v1.6.4...v1.6.5