v0.3.87
Immutable
release. Only release title and notes can be modified.
0.3.87 (2026-07-06)
🐛 Bug Fixes
- collect: contain local CI-config reads and skip symlinked Dockerfiles (ef9c275)
- gitlab: harden local include resolution (729e259)
♻️ Refactoring
- render: sanitize repo-derived text and bound resource use (17ed05e)
- score: resolve the score endpoint from CLI/env only (0a89351)
👷 CI/CD
- grype: install pinned grype by checksum, drop scan-action (a275cdf), closes #294
- pin runtime tool installs to immutable versions (a203b7f)
- release: pin v0.3.86 refs [skip ci] (101cd21)
- release: stop persisting credentials in the pin-refs checkout (8f0f261), closes #293
- scorecard: document the action's mutable-image gap (61c8cdd)