v0.8.3

What's Changed

• chore(mcp): pin server.json fileSha256 to the published v0.8.2 mcpb by @cdeust in #54
• feat: team-shared graph artifact — committed zstd snapshot with bootstrap import (#55) by @cdeust in #61
• fix(manifest): bump own pins 0.8.0 → 0.8.2 + CI pin-staleness gate by @cdeust in #68
• feat(indexer): incremental changed-files-only re-indexing (#62) by @cdeust in #69
• feat(artifact): incremental fill after bootstrap — completes #55 by @cdeust in #70
• feat(coverage): coverage honesty — parse-error persistence, missed graph, crash quarantine (#57) by @cdeust in #71
• feat(tools): token-surface engineering — ids mode, tabular output, manual descriptions (#56) by @cdeust in #72
• feat(graph): temporal + runtime enrichment — FILE_CHANGES_WITH co-change + ingest_traces (#58) by @cdeust in #73
• feat(cli): host auto-config installer + fail-open hook augmentation (#59) by @cdeust in #75
• fix(test): move wall-clock ratio out of the correctness suite into a benchmark (#74) by @cdeust in #76
• feat(supply-chain): build provenance, SBOM, pinned toolchain, audit + Scorecard (#66) by @cdeust in #77
• deps: tantivy 0.22→0.26, lbug 0.15→0.18 — clears 2 of 3 RUSTSEC advisories (#78) by @cdeust in #81
• feat(mcp): prompts capability, resources interop shim, per-profile initialize instructions by @cdeust in #82
• ADR: table-driven language specs (#60) by @cdeust in #80
• feat: infrastructure-as-code indexing — Dockerfile, Kubernetes and Kustomize as graph nodes (#63) by @cdeust in #83
• feat(parser): table-driven LangSpec scaffold + spec-validation guard + Go migration at parity (#60 phase 1) by @cdeust in #85
• eval: published falsifiable head-to-head — graph tools vs Grep/Glob/Read baseline (#64) by @cdeust in #86
• feat(parser): Python migration to LangSpec at parity (#60 phase 2) by @cdeust in #89
• test: close mutation debt — get_impact survivors (#84) + eval_headtohead glue sweep (#88) by @cdeust in #90
• feat(parser): Java migration to LangSpec at parity (#60 phase 3) by @cdeust in #91
• fix(graph): close the #64-falsified recall gaps (#87) by @cdeust in #94
• feat(parser): Kotlin migration to LangSpec at parity (#60 phase 4) by @cdeust in #95
• fix(parser): extract Kotlin property_declaration names (#93) by @cdeust in #96
• feat(parser): Swift migration to LangSpec at parity (#60 phase 5) by @cdeust in #102
• refactor(parser): split spec walkers below the 500-line cap (#101) by @cdeust in #103
• docs(parser): record the walkers split in CHANGELOG + ADR-0055 (#101) by @cdeust in #104
• fix(parser): Swift conformance, protocol requirements, enum members, computed-property calls (#97 #98 #99 #100) by @cdeust in #108
• sec: harden supply chain — token permissions, CodeQL, Dependabot, binary removal by @cdeust in #111
• feat(parser): C migration to LangSpec at parity (#60 phase 6) by @cdeust in #109
• test(parser): prove the #100 call-scan assertions are not vacuous by @cdeust in #118
• feat(parser): shallow spec path + Ruby purely via spec entry (ADR-0056, closes #60) by @cdeust in #105
• ci(deps): bump the github-actions group with 6 updates by @dependabot[bot] in #114
• deps(deps): bump toml_edit from 0.22.27 to 0.25.13+spec-1.1.0 by @dependabot[bot] in #117
• deps(deps): bump tree-sitter-go from 0.23.4 to 0.25.0 by @dependabot[bot] in #115
• deps(deps): bump tree-sitter-python from 0.23.6 to 0.25.0 by @dependabot[bot] in #113
• deps: bump tree-sitter to 0.26 and pin the parse-cancel polarity by @cdeust in #119
• deps: bump sha2 to 0.11 and pin the corpus-hash format by @cdeust in #120
• fix(parser): name C functions from the declarator, not the last parameter (#106) by @cdeust in #121
• fix(parser): extract C macros and inline struct definitions (#107) by @cdeust in #122
• feat(parser): C++ migration to LangSpec at parity (#60 phase 7) by @cdeust in #125
• sec: add a real fuzzing harness for the parser (Scorecard Fuzzing) by @cdeust in #126
• feat(parser): Objective-C migration to LangSpec at parity (#60 phase 8) by @cdeust in #138
• feat(parser): TypeScript migration to LangSpec at parity (#60 phase 9) by @cdeust in #144
• fix(parser): TS type-annotation trim, abstract methods, object-literal call scanning (#140 #141 #142) by @cdeust in #145
• fix(parser): C++/ObjC extraction defects — declarator naming, shape gaps, fn-ptr members, inline-struct typedef, keyword selectors (#123 #124 #135 #127 #128) by @cdeust in #146
• feat(parser): Rust migration to LangSpec at parity (#60 phase 8) by @cdeust in #136
• fix(parser): Rust module-scoped impl QNs + trait default-body call scanning (#130 #131) by @cdeust in #149
• test: rebind rust-self bench ground truth + explicit ENOSPC diagnostics (#132 #143) by @cdeust in #150
• refactor(parser): spec directory below the §4.1 cap (#129 #133 #134 #137) by @cdeust in #152
• fix(parser): bound external-scanner memory at the parse boundary (#148) by @cdeust in #154
• feat(graph): cross-language Uses edges — return types and type construction (#92) by @cdeust in #156
• refactor: split indexer, persist, resolver, graph_store below the §4.1 cap (#153 #155) by @cdeust in #157
• docs: OpenSSF Best Practices questionnaire answers — passing + silver (.bestpractices.json) by @cdeust in #163
• docs: vulnerability_report_private is now Met — private advisories enabled by @cdeust in #164
• refactor: split main.rs below the §4.1 cap — 6537 → 388 lines (#151) by @cdeust in #165
• docs(security): name a disclosure fallback that survives a settings change (#159) by @cdeust in #167
• sec: enable secret scanning, push protection and Dependabot security updates (#162) by @cdeust in #166
• test(ci): gate line coverage at an 80% floor, and stop the badge lying (#160) by @cdeust in #168
• docs: machine-check every advertised number, and fix the four that were wrong (#161) by @cdeust in #170
• test: cover the five MCP handler modules no test executed (#169) by @cdeust in #171
• sec(release): publish provenance ON the release, sign tags, and unstick manifest.json by @cdeust in #173
• docs(security): say v0.8.3 is unsigned instead of claiming it is signed by @cdeust in #175

New Contributors

• @dependabot[bot] made their first contribution in #114

Full Changelog: v0.8.2...v0.8.3