v2.0.0

What's Changed

• feat(security): harden the v2 tooling contract by @faustbrian in #95
• fix(ci): verify changed compatibility consumers by @faustbrian in #98
• fix(compatibility): separate current consumer selection by @faustbrian in #99
• chore(consumers): select published security majors by @faustbrian in #100
• chore(consumer): adopt six published v2 modules by @faustbrian in #101
• docs(security): record verified tooling scanner results by @faustbrian in #102
• chore(consumer): adopt published settings v2 by @faustbrian in #104
• fix(security): bound source and scanner preflight by @faustbrian in #103
• chore(compatibility): retain sequencer v1 with v2 by @faustbrian in #105
• chore(compatibility): retain idempotency v1 with v2 by @faustbrian in #106
• chore(compatibility): retain rate limit v1 with v2 by @faustbrian in #107
• chore(compatibility): retain barcode v1 with v2 by @faustbrian in #108
• chore(compatibility): select geo and localized v1.1.2 by @faustbrian in #109
• chore: adopt Hedge v1.0.2 in maintained consumer by @faustbrian in #110
• chore(consumers): adopt current security releases by @faustbrian in #111
• chore(compatibility): select service v1.1.1 in maintained consumer by @faustbrian in #112
• chore(compatibility): select adaptive throttle v1.0.1 by @faustbrian in #113
• chore(compatibility): add authorization v3 consumer by @faustbrian in #114
• chore(compatibility): select analysis v1.2.0 by @faustbrian in #115
• chore: maintain published Migrations v2 consumer by @faustbrian in #116
• docs(catalog): use the migrations ledger name by @faustbrian in #117
• fix(mutation): preserve reviewed equivalent results by @faustbrian in #118
• fix: adopt published arithmetic patches in consumer by @faustbrian in #119
• chore(deps): bump anchore/sbom-action from 0.24.0 to 0.24.2 by @dependabot[bot] in #93
• chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in #94
• chore(deps): bump github/codeql-action/analyze from 4.38.0 to 4.38.2 by @dependabot[bot] in #96
• test(compatibility): adopt public Queue v2 by @faustbrian in #120
• docs(release): reconcile tooling v2 release notes by @faustbrian in #121
• test(archive): cover validation limits and read failures by @faustbrian in #122
• fix(catalog): correct versioned adoption guidance by @faustbrian in #123
• test(cli): cover archive validation outcomes by @faustbrian in #124
• refactor(security): retain one preflight scan owner by @faustbrian in #125
• test(gates): cover bounded output notifications by @faustbrian in #126
• chore(consumer): adopt prompts safe-error patch by @faustbrian in #127
• test: cover inventory and document root guards by @faustbrian in #128
• chore(consumer): adopt Service v1.1.2 by @faustbrian in #129
• test(security): assert nested JSON rejection by @faustbrian in #130
• test: characterize owner policy contracts by @faustbrian in #131
• refactor: isolate security admission owners by @faustbrian in #132
• chore: adopt published queue patches by @faustbrian in #133
• test: characterize security document decoding by @faustbrian in #134
• chore: adopt opening hours v2 consumer by @faustbrian in #135
• fix(coverage): show uncovered production blocks by @faustbrian in #136
• test(security): cover bounded snapshot failures by @faustbrian in #137
• fix: expose bounded coverage diagnostics by @faustbrian in #140
• test: characterize workflow refusal before effects by @faustbrian in #141
• test: cover descriptor and output callback contracts by @faustbrian in #142
• test: cover source traversal failure propagation by @faustbrian in #143
• fix(deps): bump faustbrian/go-library-tools/.github/actions/setup-golib from 37d4eea to 562f083 by @dependabot[bot] in #139
• fix(deps): bump faustbrian/go-library-tools/.github/actions/setup-bootstrap-proxy from 37d4eea to 7e4cd29 by @dependabot[bot] in #138
• test: verify workflow descriptor ownership by @faustbrian in #144
• fix: resolve verifier targets from source paths by @faustbrian in #145
• test: adopt schema registry v2 consumers by @faustbrian in #146
• test(gates): characterize security orchestration by @faustbrian in #147
• test(gates): exercise snapshot admission failures by @faustbrian in #148
• test(gitleaks): cover snapshot copy lifecycle by @faustbrian in #149
• test(gitleaks): cover root admission refusal by @faustbrian in #150
• refactor: remove dominated snapshot checks by @faustbrian in #151
• fix: reuse validated workflow documents by @faustbrian in #152
• test: cover source and mutation admission limits by @faustbrian in #153
• test: reject nonregular workflow descriptors by @faustbrian in #154
• fix: separate API build and compatibility versions by @faustbrian in #155
• refactor: simplify parser-owned workflow aliases by @faustbrian in #156
• fix(gates): refuse nonregular suppression sources by @faustbrian in #157
• fix(gates): preserve private filesystem failure ownership by @faustbrian in #158
• refactor(inventory): isolate complete manifest owners by @faustbrian in #159
• chore: adopt four v2 consumer modules by @faustbrian in #160
• chore: adopt Event v2 consumer modules by @faustbrian in #161
• chore(consumer): adopt three published v3 modules by @faustbrian in #162
• test(mutation): cover review selection outcomes by @faustbrian in #163
• test: adopt published Money v2 composition by @faustbrian in #164
• chore: adopt published Log v2 consumer by @faustbrian in #165
• test: adopt published OpenRPC v2 composition by @faustbrian in #166
• chore: adopt idempotency patch in consumer by @faustbrian in #167
• fix(input): admit regular files before opening by @faustbrian in #168
• test(mutation): cover bounded report diagnostics by @faustbrian in #169
• refactor(mutation): centralize reviewed-report admission by @faustbrian in #170
• refactor(cli): centralize validation publication by @faustbrian in #171
• fix: harden evidence and fixture boundaries by @faustbrian in #172
• test: cover callback admission before publication by @faustbrian in #173
• fix: preserve bounded terminal error contracts by @faustbrian in #174
• test: characterize mutation owner terminal states by @faustbrian in #175
• fix: bound mutation source admission by @faustbrian in #176
• test: preserve source enumeration errors by @faustbrian in #177
• test: cover nonpositive source entry limits by @faustbrian in #178
• fix: preserve bounded source file reads by @faustbrian in #179
• fix: enforce mutation source admission boundaries by @faustbrian in #180
• test: adopt published Workflow v2 consumer by @faustbrian in #181
• test: adopt the public Workflow v2 adapter by @faustbrian in #182
• test(compatibility): adopt published Calendar v2 by @faustbrian in #183
• test(mutation): cover inventory and read admission by @faustbrian in #184
• fix(mutation): validate source directory ancestors by @faustbrian in #185
• test(repositoryfile): cover admission cleanup by @faustbrian in #186
• fix(docs): bound Markdown admission by @faustbrian in #187
• test(docs): cover acquisition failure cleanup by @faustbrian in #188
• refactor(docs): isolate validation operations by @faustbrian in #189
• fix(coverage): report every incomplete package by @faustbrian in #190
• fix(securitydocs): resolve schemas independently of cwd by @faustbrian in #191
• refactor(securitydocs): isolate validation operations by @faustbrian in #192
• fix(security): classify bounded scanner results by @faustbrian in #193
• chore: select Secret Envelope v2 in public consumer by @faustbrian in #194
• test: adopt Config v2 public consumers by @faustbrian in #195
• fix: scan Go-selected package directories by @faustbrian in #196
• fix: recognize historical public tool identities by @faustbrian in #197
• fix(consumer): adopt published tenant scope by @faustbrian in #198
• fix: classify private gosec failures safely by @faustbrian in #199
• test: maintain public Temporal v2 composition by @faustbrian in #200
• test: maintain the public Opening v3 consumer by @faustbrian in #201
• fix(security): expand sanitized finding locations by @faustbrian in #202
• fix(secrets): scope the public trie fixture allowance by @faustbrian in #203
• test: adopt published MPT v2 composition by @faustbrian in #204
• fix: update embedded TOML dependency by @faustbrian in #205
• test: compose published JSONAPI v2 by @faustbrian in #206
• test: compose published query and tabular majors by @faustbrian in #207
• test: compose published Localized v4 by @faustbrian in #208
• test: compose published Capability v2 by @faustbrian in #209
• fix: recognize exact public Authentication metadata by @faustbrian in #210
• feat: support explicit development tooling setup by @faustbrian in #211
• feat: enable development tooling in reusable CI by @faustbrian in #212
• fix: support public dependency authority in CI by @faustbrian in #213
• fix(ci): restore temporary directory before cleanup by @faustbrian in #214
• feat(coverage): collect explicit package evidence by @faustbrian in #215
• fix: accept bounded tar record padding by @faustbrian in #216
• chore: select root coverage evidence by @faustbrian in #217
• test: cover archive declaration and padding bounds by @faustbrian in #218
• test: protect cumulative archive declaration budget by @faustbrian in #219
• fix(ci): scope bootstrap documentation assurance by @faustbrian in #220
• fix(compatibility): retain released successor majors by @faustbrian in #221
• chore(mutation): bind CLI archive equivalence by @faustbrian in #222
• test: cover malformed secrets command arguments by @faustbrian in #223
• test(cohesion): cover catalog and schema generation by @faustbrian in #224
• test: cover nested coverage policy modules by @faustbrian in #225
• test: cover bounded coverage diagnostics by @faustbrian in #226
• test: cover bounded documentation selection by @faustbrian in #227
• test: compose published localized v5 consumers by @faustbrian in #228
• test: cover exact workflow quota boundaries by @faustbrian in #229
• test: cover local action admission boundaries by @faustbrian in #230
• test: distinguish workflow execution policy scopes by @faustbrian in #231
• test: cover report metadata admission limits by @faustbrian in #232
• test: cover discovery and report admission bounds by @faustbrian in #233
• test: cover cumulative source snapshot budgets by @faustbrian in #234
• test: protect runner admission edges by @faustbrian in #235
• chore: record bounded gate mutation equivalents by @faustbrian in #236
• test: bound termination regression fixtures by @faustbrian in #237
• test: adopt public queue-control authentication by @faustbrian in #238
• docs: consolidate pending v2 release notes by @faustbrian in #239
• fix: recognize public apidiff default assignments by @faustbrian in #240
• test(workflows): verify finite traversal boundaries by @faustbrian in #241
• fix(mutation): isolate the unit-first failure phase by @faustbrian in #242
• chore(mutation): refresh reviewed source bindings by @faustbrian in #243
• fix(mutation): keep verifier caches removable by @faustbrian in #244
• fix: retain bounded failed mutation diagnostics by @faustbrian in #245
• test: compose public postgres and state machine v2 by @faustbrian in #246
• fix: validate pinned matrix images by @faustbrian in #247
• fix: recognize retired public tool identities by @faustbrian in #248
• test(consumer): adopt public WSDL v2 by @faustbrian in #249
• test: consume public OpenAPI v2 contracts by @faustbrian in #250
• test: diagnose the retained native CLI mutation by @faustbrian in #251
• test: adopt current Outbox consumer composition by @faustbrian in #252
• test(mutation): match diagnostic cache separation by @faustbrian in #253
• fix(consumer): select patched Excelize revision by @faustbrian in #254
• test: advance patched Excelize consumer by @faustbrian in #255
• feat: bound mutation worker admission by @faustbrian in #259
• chore: preserve qualified mutation evidence by @faustbrian in #260
• chore: record narrow mutation equivalences by @faustbrian in #261
• chore(deps): update release SBOM scanner by @dependabot[bot] in #256
• fix(ci): preserve patched Go tooling gates by @dependabot[bot] in #257
• chore(ci): align shared tooling setup actions by @dependabot[bot] in #258
• test(gates): require finite scanner traversal by @faustbrian in #262
• test: bound security qualification preflight by @faustbrian in #263
• test(inventory): cover admission and generation by @faustbrian in #264
• test(mutation): cover survivor contract boundaries by @faustbrian in #265
• test(repositoryfile): bound changed-identity fixtures by @faustbrian in #266
• test(securitydocs): cover validation boundaries by @faustbrian in #267
• fix(services): retain safe startup diagnostics by @faustbrian in #268
• test(gates): check scalar events before recursion by @faustbrian in #269
• chore(ci): qualify current mutation evidence by @faustbrian in #270
• docs(release): document v2 adoption limits by @faustbrian in #271
• test(gates): bound hosted scalar preflight by @faustbrian in #272
• docs(security): record qualified release source by @faustbrian in #273

Full Changelog: v1.8.5...v2.0.0