Immutable
release. Only release title and notes can be modified.
0.7.0 (2026-07-13)
Features
- bench: add a grid comparator that refuses cross-box ms comparisons (8ae637f)
- bench: time vs-arch cells as settled min-of-15 with box provenance (ec139bb)
- security: add Dependabot version updates with a 7-day cooldown (888df37)
- security: enforce a 7-day dependency cooldown and pin the uv version (3f44dda)
- security: run the OpenSSF Scorecard weekly with published results (f240780)
- security: scan the lockfile against OSV on pull requests and weekly (c032d0b)
Bug Fixes
- bench: sample the load average before timing and read the real CPU model (3f1c6e2)
- ci: close the pedantic-tier zizmor findings (f5178da)
- ci: correct the action pins and tighten the Scorecard workflow (d5e7599)
- ci: drop persisted checkout credentials, disable the release cache, and add the malware check (315c21f)
- ci: drop the persisted checkout credential in the mutation workflow (9b208f3)
- ci: grant the release checkout permission per job, not per workflow (6b56907)
- ci: serialize mutation gate runs with a concurrency group (1d55492)
- deps: bump mistune to 3.3.3 for the parse_link_text DoS advisory (bba53b8)
- mutation: generate mutants directly instead of relying on a stats-phase crash (a2d5e10)
- mutation: scope the ephemeral numba cache to njit-kernel mutants and warm the shared cache (c431241)