v2.3.0

What's Changed

• feat(cli): add --digest-file to export a detached manifest digest sidecar by @burakeyler in #148
• Build(deps): bump sigstore/cosign-installer from 3.8.1 to 4.1.2 by @dependabot[bot] in #153
• Build(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 by @dependabot[bot] in #149
• fix(ci): pin all pip installs by hash in release workflow by @ikaruscareer in #154
• fix(ci): pin all transitive build deps by hash by @ikaruscareer in #157
• feat(adapters): add OpenClaw and Copilot config adapters by @YaoSong808 in #159
• docs: credit community contributors for PRs 148 and 159 by @ikaruscareer in #160
• Add multi-framework scan automation script by @Karthik9849309055 in #161
• docs(roadmap): re-baseline around five outcomes by @ikaruscareer in #163
• feat(ce23): plugin SDK and rule ecosystem (WS1-WS7) by @ikaruscareer in #164
• docs(release): align public surfaces with v2.2.1 by @ikaruscareer in #165
• release: v2.3.0 (CE 2.3 Plugin SDK and Rule Ecosystem) by @ikaruscareer in #168
• fix(ci): pin full transitive closure in requirements-test.txt by @ikaruscareer in #169
• fix(ci): pin py3.11-only transitive build deps by @ikaruscareer in #170
• fix(ci): pin cosign-installer to v3.10.1 (cosign v2.6.1) by @ikaruscareer in #171

New Contributors

• @burakeyler made their first contribution in #148
• @YaoSong808 made their first contribution in #159
• @Karthik9849309055 made their first contribution in #161

Full Changelog: v2.2.1...v2.3.0