v0.40.0

Features

• release: document koc shell and the embedded profile
• shell: write an audit event per line to KOC_AUDIT_FD or KOC_AUDIT_FILE
• cli: add the embedded profile for console terminals
• shell: hand over and rotate the scope with KOC_SCOPE_FILE
• shell: add koc shell, an interactive REPL over the command tree
• kochome: confine config lookups to KOC_HOME
• pkg: add public paging and endpoint-keyed name resolution
• pkg: add openstack.Session with per-region service clients
• auth: layer OS_* over a named cloud and add osc's remaining auth options

Bug fixes

• shell: record a refused line's audit event in the session's scope
• watch: stop reading the keyboard when the watch ends
• auth: honour OS_PASSWORD under OS_CLOUD and match osc's OS_* handling

Refactoring

• say why three functions and blocks are empty
• baremetal: name repeated literals and group inspection rule create's flags
• resolve: pass byName one lookup value instead of four arguments
• cli: run each invocation on a fresh tree with per-run state
• image: move the glance calls behind pkg/openstack/image
• keyvrm: move the typed request layer to pkg/keyvrm

Documentation

• proposals: record the owner's decisions on the public API's scope
• document the public Go API, its rules and the plan for the rest

Tests

• baremetal: run the deploy template, inspection rule, port group, volume and runbook verbs through RunE
• auth: keep the developer's clouds.yaml out of the auth tests

Build & tooling

• release: list Deprecated: footers under their own release-notes heading
• supply-chain: add the importer module check and apidiff
• lint: guard the public pkg/ tree against CLI imports and process state

Full Changelog: v0.39.0...v0.40.0