v0.5.0

What's Changed

Security

• chore: allow exact disposable privilege/TLS warning fixture values in secret scanning by @codegiveness in #59
• ci: publish verified SLSA provenance bundle with GitHub Releases by @codegiveness in #55
• docs: record measured 2026-10-10 Scorecard findings and Best Practices passing level by @codegiveness in #61
• fix: refuse a database lock when the login can execute server-file functions by @codegiveness in #45
• feat: warn about privileged logins and unverified remote TLS by @codegiveness in #47

Features

• feat: return statement positions and safe PostgreSQL diagnostics in SQL errors by @codegiveness in #48
• feat: bound parameters for execute_sql and explain_query by @codegiveness in #54
• perf: send transaction setup in the same batch as the first statement by @codegiveness in #50
• test: cover MCP cancellation and assert SARIF rejection reasons by @codegiveness in #57

Fixes

• fix: accept connection-string database locks larger than 32 names by @codegiveness in #49
• fix: make tool descriptions, instructions and errors follow the access mode and database lock by @codegiveness in #46
• fix: adapt get_top_queries to pg_stat_statements version and document PostgreSQL 13+ support by @codegiveness in #60

Documentation

• docs: add git and GitHub workflow with issue forms and PR template by @codegiveness in #31
• docs: describe ruleset-based protection of main in git workflow by @codegiveness in #52
• docs: lead the README with what the server does and add community files by @codegiveness in #62
• fix: align --help, range errors and docs on configuration, Docker and upgrade history by @codegiveness in #51

Dependencies

• build(deps): bump dotnet/runtime from ff17a18 to b89586d by @dependabot[bot] in #18
• build(deps): bump dotnet/sdk from 35d4030 to e70cdb7 by @dependabot[bot] in #19
• build(deps): bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in #53

Other changes

• docs+fix: feature badge table, hash-pinned npm CLI and npm 12 version lookup by @codegiveness in #28
• ci: upload candidate CodeQL SARIF for same-repository PRs (Scorecard SAST) by @codegiveness in #29
• docs: propose answers for all OpenSSF Best Practices passing criteria by @codegiveness in #30
• refactor: share one process runner and repository-root finder across tools by @codegiveness in #58
• ci: stop release re-runs from replacing published assets and NuGet versions by @codegiveness in #56
• feat: per-platform npm packages so installs download one runtime (#44) by @codegiveness in #63
• chore: release 0.5.0 by @codegiveness in #64

New Contributors

• @dependabot[bot] made their first contribution in #18

Full Changelog: v0.4.0...v0.5.0