v0.1.0

arazzo-maestro v0.1.0.

See the README
for installation and usage.

Changelog

Bug fixes

• 8e454d1: fix(docs): make the landing page responsive on mobile (#16) (@emmanuelperu)
• e915728: fix(linter): tolerate OpenAPI path-level shared parameters (#15) (@emmanuelperu)
• 40b3a02: fix(release): use cosign v4 --bundle flag for sign-blob (#25) (@emmanuelperu)

CI / Build

• 896f2da: ci(deps): bump actions/upload-pages-artifact from 3.0.1 to 5.0.0 (#10) (@dependabot[bot])
• 34b6ce0: ci(deps): bump docker/login-action from 3.7.0 to 4.2.0 (#9) (@dependabot[bot])
• 66727a3: ci(deps): bump docker/setup-buildx-action from 3.12.0 to 4.1.0 (#12) (@dependabot[bot])
• 7a61345: ci(deps): bump docker/setup-qemu-action from 3.7.0 to 4.1.0 (#13) (@dependabot[bot])
• 54a3193: ci(deps): bump github/codeql-action from 3.35.5 to 4.36.0 (#11) (@dependabot[bot])
• fc54152: ci(deps): bump golangci/golangci-lint-action (#18) (@dependabot[bot])
• c66a016: ci(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.2 (#20) (@dependabot[bot])
• 70e0fca: ci(deps): bump sigstore/cosign-installer from 3.9.1 to 4.1.2 (#19) (@dependabot[bot])
• dc2173d: ci(deps): group Dependabot minor/patch updates into one PR (#17) (@emmanuelperu)
• 72ee5fe: ci: harden Scorecard signals (Pinned-Deps, SAST, Branch-Protection, Fuzzing) (#6) (@emmanuelperu)

Documentation

• c5ea745: doc(readme): set bestpractices project ID (#7) (@emmanuelperu)

Other

• 568f1df: refactor: small idiomatic clean-ups (no output change) (#24) (@emmanuelperu)

---

Binaries are signed with cosign
via GitHub OIDC. The .sig assets are cosign bundles; to verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/emmanuelperu/arazzo-maestro/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --bundle arazzo-maestro_<version>_<os>_<arch>.tar.gz.sig \
  arazzo-maestro_<version>_<os>_<arch>.tar.gz