v0.5.0

arazzo-maestro v0.5.0.

See the README
for installation and usage.

Changelog

Features

• 5eaddc7: feat(expr): JSON-pointer sub-access on $inputs and $steps references (#90) (@emmanuelperu)
• 5316c79: feat(parser): components and reusable object references (#52) (#85) (@emmanuelperu)
• a38e681: feat(parser): criterion context/type and richer inputs (#51, #57) (#89) (@emmanuelperu)
• bd33e91: feat(parser): workflow-level defaults and dependsOn (#50) (#86) (@emmanuelperu)
• b20f77e: feat(step): resolve operationPath and honestly degrade workflowId steps (#53, #54) (#84) (@emmanuelperu)
• 5ccfb02: feat(testgen): request body content type and replacements (#66, #55) (#80) (@emmanuelperu)
• b3226ad: feat(testgen): runtime-expression spec compliance (#56, #49) + shared expr parser (#78) (@emmanuelperu)

Bug fixes

• b309a04: fix(testgen): review follow-ups (post-replacement scan, +json types, RFC 6901 indices) (#81) (@emmanuelperu)
• aa646b0: fix: round-4 review follow-ups (testgen, lint, render) + versioned Microcks mock infra (#93) (@emmanuelperu)

CI / Build

• 62f25f9: ci(deps): bump actions/setup-go in the actions-minor-patch group (#83) (@dependabot[bot])
• 32486fd: ci(deps): bump the actions-minor-patch group with 4 updates (#92) (@dependabot[bot])
• cd71c3e: ci(deps): bump the actions-minor-patch group with 9 updates (#88) (@dependabot[bot])

Documentation

• 6d742fc: docs(pages): showcase mermaid export and landscape on the landing page (#79) (@emmanuelperu)

Other

• 1e87489: deps(deps): bump github.com/pb33f/libopenapi (#82) (@dependabot[bot])
• 93329db: deps(deps): bump github.com/pb33f/libopenapi (#87) (@dependabot[bot])
• 88e5a19: deps(deps): bump github.com/pb33f/libopenapi (#91) (@dependabot[bot])

---

Binaries are signed with cosign
via GitHub OIDC. The .sig assets are cosign bundles; to verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/emmanuelperu/arazzo-maestro/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --bundle arazzo-maestro_<version>_<os>_<arch>.tar.gz.sig \
  arazzo-maestro_<version>_<os>_<arch>.tar.gz

v0.4.0

arazzo-maestro v0.4.0.

See the README
for installation and usage.

Changelog

Features

• cc13ae1: feat(renderer): add an opt-in landscape layout, keep portrait default (#73) (@emmanuelperu)
• 31287af: feat(renderer): link the footer to the arazzo-maestro repository (#72) (@emmanuelperu)
• 59a6399: feat(view): add --format mermaid output (#76) (@emmanuelperu)

CI / Build

• 0713142: ci(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#74) (@dependabot[bot])
• d858217: ci(deps): bump the actions-minor-patch group with 2 updates (#68) (@dependabot[bot])

Documentation

• e7ae4cf: docs: sync for mermaid + slim the README (#77) (@emmanuelperu)

Other

• dd6e5d0: deps(deps): bump github.com/pb33f/libopenapi (#67) (@dependabot[bot])
• b799aa1: deps(deps): bump github.com/pb33f/libopenapi (#69) (@dependabot[bot])

---

Binaries are signed with cosign
via GitHub OIDC. The .sig assets are cosign bundles; to verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/emmanuelperu/arazzo-maestro/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --bundle arazzo-maestro_<version>_<os>_<arch>.tar.gz.sig \
  arazzo-maestro_<version>_<os>_<arch>.tar.gz

v0.3.0

arazzo-maestro v0.3.0.

See the README
for installation and usage.

Changelog

Features

• a99305b: feat(linter): validate action transition targets and criteria (#42) (@emmanuelperu)
• af6c08d: feat(testgen): support the spec's embedded {$expr} form, align renderer highlighting (#44) (@emmanuelperu)

Bug fixes

• c8c402c: fix(cli): report the module version for go-install builds (#65) (@emmanuelperu)
• 223bbc1: fix(lint): accept Arazzo 1.1 structural features in the patched schema (#60) (@emmanuelperu)
• f9a79f0: fix(model): retryAfter is decimal seconds, retryLimit defaults to one retry (#61) (@emmanuelperu)
• 123fa5f: fix(release): version-agnostic notes header, bundle-based verify command (#35) (@emmanuelperu)
• 13bda56: fix(testgen): emit cookie and querystring parameters (#62) (@emmanuelperu)
• 7491891: fix(testgen): unrepresentable JSONPath keys degrade to comments, full gjson escaping (#39) (@emmanuelperu)
• 8c0bc86: fix: render bare retry loops, quote and unescape JSON Pointer segments (#36) (@emmanuelperu)

Documentation

• 5a7f412: docs: authenticated example showing where test data comes from (#46) (@emmanuelperu)
• 6693fc1: docs: field-by-field spec-compliance matrix, honest coverage claims (#59) (@emmanuelperu)
• ca2f74b: docs: sync the compliance matrix after the three audit fixes (#64) (@emmanuelperu)

Other

• 1f5b550: refactor: centralise source resolution and loading in oasresolver (#43) (@emmanuelperu)

---

Binaries are signed with cosign
via GitHub OIDC. The .sig assets are cosign bundles; to verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/emmanuelperu/arazzo-maestro/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --bundle arazzo-maestro_<version>_<os>_<arch>.tar.gz.sig \
  arazzo-maestro_<version>_<os>_<arch>.tar.gz

v0.2.0

arazzo-maestro v0.2.0.

See the README
for installation and usage.

Changelog

Features

• 480dad2: feat(oasresolver): adopt libopenapi for OpenAPI source parsing (#27) (#28) (@emmanuelperu)
• c36095c: feat: generate k6 performance tests from a workflow (#22) (@emmanuelperu)

Bug fixes

• d2bf739: fix(testgen): substitute runtime expressions inside request bodies (#32) (@emmanuelperu)

Other

• 304f848: Feat/hurl gen 21 (#29) (@emmanuelperu)

---

Binaries are signed with cosign
via GitHub OIDC. The .sig assets are cosign bundles; to verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/emmanuelperu/arazzo-maestro/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --bundle arazzo-maestro_<version>_<os>_<arch>.tar.gz.sig \
  arazzo-maestro_<version>_<os>_<arch>.tar.gz

v0.1.0

arazzo-maestro v0.1.0.

See the README
for installation and usage.

Changelog

Bug fixes

• 8e454d1: fix(docs): make the landing page responsive on mobile (#16) (@emmanuelperu)
• e915728: fix(linter): tolerate OpenAPI path-level shared parameters (#15) (@emmanuelperu)
• 40b3a02: fix(release): use cosign v4 --bundle flag for sign-blob (#25) (@emmanuelperu)

CI / Build

• 896f2da: ci(deps): bump actions/upload-pages-artifact from 3.0.1 to 5.0.0 (#10) (@dependabot[bot])
• 34b6ce0: ci(deps): bump docker/login-action from 3.7.0 to 4.2.0 (#9) (@dependabot[bot])
• 66727a3: ci(deps): bump docker/setup-buildx-action from 3.12.0 to 4.1.0 (#12) (@dependabot[bot])
• 7a61345: ci(deps): bump docker/setup-qemu-action from 3.7.0 to 4.1.0 (#13) (@dependabot[bot])
• 54a3193: ci(deps): bump github/codeql-action from 3.35.5 to 4.36.0 (#11) (@dependabot[bot])
• fc54152: ci(deps): bump golangci/golangci-lint-action (#18) (@dependabot[bot])
• c66a016: ci(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.2 (#20) (@dependabot[bot])
• 70e0fca: ci(deps): bump sigstore/cosign-installer from 3.9.1 to 4.1.2 (#19) (@dependabot[bot])
• dc2173d: ci(deps): group Dependabot minor/patch updates into one PR (#17) (@emmanuelperu)
• 72ee5fe: ci: harden Scorecard signals (Pinned-Deps, SAST, Branch-Protection, Fuzzing) (#6) (@emmanuelperu)

Documentation

• c5ea745: doc(readme): set bestpractices project ID (#7) (@emmanuelperu)

Other

• 568f1df: refactor: small idiomatic clean-ups (no output change) (#24) (@emmanuelperu)

---

Binaries are signed with cosign
via GitHub OIDC. The .sig assets are cosign bundles; to verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/emmanuelperu/arazzo-maestro/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --bundle arazzo-maestro_<version>_<os>_<arch>.tar.gz.sig \
  arazzo-maestro_<version>_<os>_<arch>.tar.gz

v0.0.1

First public release of arazzo-maestro.

See the README
for installation and usage.

Changelog

Features

• 090f166: feat(theme): create a theme for pb33f.io style (Emmanuel Peru 6033260+emmanuelperu@users.noreply.github.com)

CI / Build

• fdb0798: ci(deps): bump actions/checkout from 4 to 6 (#4) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 795208f: ci(deps): bump actions/deploy-pages from 4 to 5 (#1) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 9e1aad5: ci(deps): bump actions/setup-go from 5 to 6 (#3) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 04581f5: ci(deps): bump golangci/golangci-lint-action from 7 to 9 (#5) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 0da0729: ci(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#2) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• befae8c: ci: add release workflow triggered on v* tags (Emmanuel Peru 6033260+emmanuelperu@users.noreply.github.com)
• 8436a13: ci: bump golangci-lint-action to @v7 for v2.x support (Emmanuel Peru 6033260+emmanuelperu@users.noreply.github.com)
• 545f071: ci: fix govulncheck and golangci-lint v2 failures (Emmanuel Peru 6033260+emmanuelperu@users.noreply.github.com)
• 55911e0: ci: pin golangci-lint to v2.12.2 (Emmanuel Peru 6033260+emmanuelperu@users.noreply.github.com)
• fc6cc0a: ci: refresh outdated comment after golangci-lint-action @v7→@v9 (Emmanuel Peru 6033260+emmanuelperu@users.noreply.github.com)
• 9c91aad: make: render every built-in theme in 'make dist' (Emmanuel Peru 6033260+emmanuelperu@users.noreply.github.com)

Documentation

• b66bf67: doc(readme): add screenshots of workflows (Emmanuel Peru 6033260+emmanuelperu@users.noreply.github.com)

Other

• 3962bff: go.mod: use the canonical github.com/emmanuelperu/arazzo-maestro path (Emmanuel Peru 6033260+emmanuelperu@users.noreply.github.com)
• 5ead9ee: release: add goreleaser config + workflow for v0.0.1 (Emmanuel Peru 6033260+emmanuelperu@users.noreply.github.com)

---

Binaries are signed with cosign
via GitHub OIDC. To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/emmanuelperu/arazzo-maestro/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --signature arazzo-maestro_<version>_<os>_<arch>.tar.gz.sig \
  arazzo-maestro_<version>_<os>_<arch>.tar.gz