You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Forward compatibility for 0.35.0 bare-key run-report metadata via documented
migration and known-defect fixture
(tests/fixtures/releases/v0_35/known_defects/run_report_bare_metadata.json)
SecretValue is no longer a dataclass (blocks dataclasses.asdict plaintext
leaks)
Schema history rejects list-of-lists, nested cells, and JSON-string row
payloads
Authoring serialization rejects DSN keys and URL userinfo in definition
values
Safe I/O: empty approved_roots fail closed; symlink_policy=reject denies
any symlink component; invalid profile safe_io no longer silently dropped;
lock/append files use 0o600
Production outbound requires default_deny and non-empty allowed_hosts
Profile warns when name looks like production without security_mode=production
Planner fails closed (PMPLAN301) without a real implementation; plan graphs
are frozen after build
Contract validation requires schema fingerprint match for shared published ODCS ids; mixed typed/untyped ports fail
closed
FailureAction.CONTINUE soft-skips report PARTIAL (never pure SUCCEEDED)
Spark sinks no longer coerce Delta for overwrite_partition / bare pyspark provider
LazyFrame record counts report unknown (None) instead of a false zero
OPS examples, FastAPI OpenAPI version, and Medallantic ROADMAP release header
aligned to 0.36.0
Package READMEs, optional-API metadata, planning status, and Beta maturity
language aligned to 0.36; release-artifact docs no longer predict an SBOM
outcome before the tag workflow runs
Documentation checks now reject stale current_minor / current-boundary
markers, contradictory package maturity text, and premature release-asset
claims
Log redaction covers auth/jwt/bearer keys and JWT-shaped tokens