Skip to content

Guard 3.0.75

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Sep 20:09
v3.0.75
143917e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Guard 3.0.75 is a stable release cut from 143917e.
2 commits • 2 merged pull requests • 1 contributor since Guard 3.0.74.

Features

  • release: Generate release notes from merged pull requests (#2770)
    • Add scripts/ci/generate_release_notes.py, which builds release notes for stable and alpha releases from the first-parent commit range since the previous same-channel tag, enriches entries with PR titles and `##…
    • Wire the generator into the release-main and release-alpha jobs in publish.yml, replacing the hardcoded install-snippet release body so every new release documents the pull requests it shipped.
    • Cover the generator with tests/test_generate_release_notes.py (parsing, tag selection, summary extraction, rendering, and a real git-range test) and repoint the release-body install-snippet assertion in…

Fixes

  • scanner: Correct Sonar-flagged defects without changing detection behavior (#2769)
    • Correct a duplicated literal-home-prefix condition in the Grok protection diagnostic; the repair warning now depends on the single real legacy deny-rule form, with a regression test locking the warning output
    • Rewrite the source-search secret assignment pattern from an exponential-backtracking form into a linear one with identical match spans, so a crafted grep pattern token cannot stall guard review redaction
    • Replace lazy-dot curl/wget skill detections with unrolled skip loops that keep the same leftmost match spans used in finding descriptions

Install

Install this release:

uv tool install "hol-guard[cisco]==3.0.75"

Full changelog: v3.0.74...v3.0.75

Thanks @kantorcodes!

Contributors

kantorcodes
Assets 14
Loading