xshape 0.5.3

• apt_repo, not apt_package
• Package versions stop coming from Dependabot
• Dependabot merges move to the organisation's sweep
• dist attaches to the release ship creates
• Prose to present tense
• The profile is targets and names
• Retire the curl installer: apt, Homebrew, winget and cargo are the paths
• Dependabot: monthly, grouped, merged when every run on the commit is green
• Delete the Defender scan caller: the scan never predicted winget's validation
• Delete the release document: ship is the procedure
• Stop pegging the support window to a major version
• Regenerate the parameter block from ship.conf
• Use fictional vendors in the corpus examples, not client names
• Rename release.conf to ship.conf
• deb: pass dry_run through, so this can be tested without a release
• Smoke-test the packages, and take the build from the fleet
• Add release.conf, the parameter block a script can read
• Drop the release trigger from the Defender scan caller
• Validate the release install with Defender before submitting to winget