v0.4.1

What's Changed

• chore(ci): bump actions/checkout from 4 to 7 by @dependabot[bot] in #47
• chore(ci): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #46
• chore(ci): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #45
• chore(deps): bump mypy from 1.18.2 to 2.3.1 by @dependabot[bot] in #34
• chore(ci): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #30
• chore(deps): bump the python-minor-patch group across 4 directories with 6 updates by @dependabot[bot] in #48
• feat: BYO engine-adapter packages & deterministic python-node containers by @carolsimone in #50
• chore(release): bump runtime 0.4.1 + contract 0.7.3 (release-prep) by @carolsimone in #51

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

• fix: release.yml's github-release job never checked out the repo by @carolsimone in #41
• feat: python-csv node kind (contract-only CSV loader + validation header check) by @carolsimone in #42
• Bump contract and runtime to 0.7.2 / 0.4.0 for the python-csv release by @carolsimone in #44

Full Changelog: v0.3.1...v0.4.0

v0.3.1

Added

• Apache License 2.0, CODE_OF_CONDUCT.md, DCO with CI-enforced sign-off,
  CONTRIBUTING.md, SECURITY.md, and a gitleaks + Trivy security-scanning
  pipeline, ahead of open-sourcing this repository.
• .github/workflows/release.yml: creates a GitHub Release for a version tag
  once that tag's PyPI publish and both engine images finish successfully —
  the one place documenting "this tag = these packages + these images",
  since PyPI's release history says nothing about the ghcr.io images.

Changed

• continuo-engine-contract 0.7.0 → 0.7.1: the published wheel now embeds
  LICENSE/NOTICE and declares license metadata, which the 0.7.0 wheel
  omitted. Every exact pin on it — root pyproject.toml and both adapters'
  — updated to match.