v0.2.9

0.2.9 (2026-10-06)

Bug Fixes

• ci: rename the publish key to release, which is what hyperi-ci reads (#42) (df58666)
• clear the ruff S, ruff D and vulture findings on the package source (#52) (5db7eb3)
• give the hunt runner a ClickHouse user of its own (#54) (9f39032)
• keep ruff and ty out of .worktrees (#62) (3d6428e)
• mark @generated and @config as loader-descriptive, not parsed (#51) (3212d18)
• meta: add four Beats meta and hunt schemas (#58) (462dba8)
• meta: add the ECS 9.5.0 vocabulary as a pre-shipped meta schema (fccd354)
• meta: add the missing cloud fetcher metas (#56) (75b51ac)
• meta: add winlogbeat meta and hunt schemas (#48) (6bf2d86)
• meta: declare cardinality in the cloud metas (#57) (32b9a75)
• meta: fit four schemas to the rows DFE lands (#60) (6633db4), closes #55
• point the field maps at real ECS columns (#63) (c7428dc)
• raise the Python floor to 3.14 (#32) (74adcfd)
• render: fail on an index use case nothing can render (da528f0)
• say why dfe-schemas names its own coverage source (#53) (a06aa4a), closes #52
• schema: declare a column's cardinality once, not in two places (59ad28b)
• schemas: ship the filebeat hunt schema, and validate derived schemas at all (#47) (1de4218)
• schemas: ship the generated Elastic integration schemas (#55) (672ab11)
• stop documenting @captured as a loader directive (#50) (2460a9d)
• validate: parse a derived schema's base once per run (#59) (fa2d1cb)

What's Changed

• fix(render): fail on an index use case nothing can render by @catinspace-au in #40
• fix(meta): add the ECS 9.5.0 vocabulary schema by @catinspace-au in #41
• fix(schema): declare a column's cardinality once, not in two places by @catinspace-au in #43
• fix: raise the Python floor to 3.14 by @catinspace-au in #32
• fix(schemas): ship the filebeat hunt schema, and validate derived schemas at all by @catinspace-au in #47
• fix(meta): add winlogbeat meta and hunt schemas by @catinspace-au in #48
• fix: stop documenting @captured as a loader directive by @catinspace-au in #50
• fix: mark @generated and @config as loader-descriptive, not parsed by @catinspace-au in #51
• fix(ci): rename the publish key to release, which is what hyperi-ci reads by @catinspace-au in #42
• fix: clear the ruff S, ruff D and vulture findings on the package source by @catinspace-au in #52
• fix: say why dfe-schemas names its own coverage source by @catinspace-au in #53
• fix: give the hunt runner a ClickHouse user of its own by @catinspace-au in #54
• fix(schemas): ship the generated Elastic integration schemas by @catinspace-au in #55
• fix(meta): add the missing cloud fetcher metas by @catinspace-au in #56
• fix(meta): declare cardinality in the cloud metas by @catinspace-au in #57
• fix(meta): add four Beats meta and hunt schemas by @catinspace-au in #58
• fix(validate): parse a derived schema's base once per run by @catinspace-au in #59
• fix(meta): fit four schemas to the rows DFE lands by @catinspace-au in #60
• fix: keep ruff and ty out of .worktrees by @catinspace-au in #62
• fix: point the field maps at real ECS columns by @catinspace-au in #63

Full Changelog: v0.2.8...v0.2.9