scour release v0.4.7

[0.4.7] - 2026-10-08

Bug Fixes

• Honor end-of-options marker for explicit paths
• Drop bottom border on both final rules-grid cells
• Support Git Bash Windows installer

Build & CI

• Add build and test workflow
• Add release workflow
• Package five platform releases
• Auto-release on merge to main via git-cliff
• Deploy landing page to GitHub Pages

Documentation

• Add issue and pull request templates
• Document repository automation
• Document CI output behavior
• Document rule discovery commands
• Document triage and fixture regression coverage
• Document distribution workflows
• Add interactive rule demo

Features

• Add CI output and failure behavior
• Add rule catalog and discovery commands
• Add grouped triage scan command
• Add action and verified installer
• Add Scour Doctor score and doctor output format
• Scaffold Vite + React + Tailwind landing page
• Theme hook with system default and localStorage persistence
• Sticky nav with scroll-aware background and theme toggle
• Hero with install command and copy feedback
• Terminal demo timeline data with accurate severities
• Animated terminal demo with replay
• Rules grid with catalog-accurate severities
• GitHub Action section with hand-highlighted YAML
• Assemble landing page with footer
• Breathing dither shimmer in hero with masked bottom fade
• Waking severity-dot dither and floating nav
• Severity dots wake along a sweeping scan wave
• Full-page diagonal scan wave with organic band width
• Sleeker dot animation
• Hero visuals and crt

Miscellaneous

• Update .gitignore
• Migrate to pnpm

Other

• Add issue model and text output

• Load rule settings

• Add branch hygiene checks

• Run hygiene rules in scans

• Add duplicate lockfile detection

• Add dockerignore missing detection

• Add generated tracked file detection

• Run repository hygiene checks

• Update CLI diagram to reflect new scan flow

• Add cross-reference drift detection

• Avoid pcre dependency for env drift

• Implement config rule overrides

• Delete PRD.md

• Add multi-language rule coverage, secret scanning, and frequency-capped

• Extend debugger/skipped/focused-test and env-var detection to Python,
  Ruby, PHP, Go, Rust, JVM, and .NET conventions, masking strings and
  comments so matches only fire on real code

• Add hardcoded-secret, tracked-env-file, dependency-lock-drift, and
  unpinned-github-action rules, bringing the catalog to 17 rules

• Replace the weighted-v1 score model with a frequency-capped model so
  one noisy rule can no longer erase the score's visibility into other
  issues

• Default-ignore node_modules/vendor/.venv/etc. during full scans and
  update docs, site copy, and snapshots to match

• Add CI-readiness roadmap and implementation loop controller

• Fix loop session checks to count retried commands by final exit

• Permit plugin state under .omo in loop cleanliness gate

• Let review sessions rerun tests under workspace-write with redirected caches

• Apply scan filters consistently for Scour #31

• Preserve filtered lockfile context for Scour #31

• Use valid workflow fixture for Scour #31

• Sync scour.nimble with published 0.4.6 release state

Testing

• Cover hygiene scan behavior
• Cover rule discovery CLI behavior
• Add fixture repository regression harness
• Lock scan modes and rule families with snapshots
• Rebuild fixture binary once per test process