v0.1.0-rc.3

Install: curl -fsSL https://raw.githubusercontent.com/ilanh/openshell-annotate/v0.1.0-rc.3/install.sh | sh -s -- --version v0.1.0-rc.3
Container: docker pull ghcr.io/ilanh/openshell-annotate:0.1.0-rc.3
Verify: gh attestation verify <file> --repo ilanh/openshell-annotate (see docs/RELEASING.md). Checksums are in SHA256SUMS.

What's Changed

• docs: add examples/README.md for the polyglot example by @ilanh in #51
• fix(generate): emit MCP allow-all instead of an access preset by @ilanh in #56
• fix(generate): emit GraphQL operation_type only for GraphQL rules by @ilanh in #60
• fix(generate): reject L7 protocols that name neither rules nor access by @ilanh in #58
• fix(lint): check policies with the OpenShell gateway validator by @ilanh in #59
• feat(actions): shared GitHub Actions for CI/CD (setup, drift, lint, generate, diff-logs, check) by @ilanh in #62
• chore: release v0.1.0-rc.3 by @ilanh in #63

Full Changelog: v0.1.0-rc.2...v0.1.0-rc.3

v0.1.0-rc.2

Install: curl -fsSL https://raw.githubusercontent.com/ilanh/openshell-annotate/v0.1.0-rc.2/install.sh | sh -s -- --version v0.1.0-rc.2
Container: docker pull ghcr.io/ilanh/openshell-annotate:0.1.0-rc.2
Verify: gh attestation verify <file> --repo ilanh/openshell-annotate (see docs/RELEASING.md). Checksums are in SHA256SUMS.

What's Changed

• fix(providers): name the source of a missing profiles directory and hint how to fix it by @ilanh in #36
• docs(examples): add polyglot sample project by @ilanh in #41
• fix(scan): show process user/group and ignore kind= after the verb by @ilanh in #43
• fix(scan): match the not-scanned note to the language comment style by @ilanh in #44
• fix(generate): join endpoints of one host whose port lists overlap by @ilanh in #42
• docs: rustdoc for modules, functions and types in src/ by @ilanh in #46
• fix(drift): label strict unmanaged sections by section, network_middlewares is live by @ilanh in #48
• chore: release v0.1.0-rc.2 by @ilanh in #49

Full Changelog: v0.1.0-rc.1...v0.1.0-rc.2

v0.1.0-rc.1

Install: curl -fsSL https://raw.githubusercontent.com/ilanh/openshell-annotate/v0.1.0-rc.1/install.sh | sh -s -- --version v0.1.0-rc.1
Container: docker pull ghcr.io/ilanh/openshell-annotate:0.1.0-rc.1
Verify: gh attestation verify <file> --repo ilanh/openshell-annotate (see docs/RELEASING.md). Checksums are in SHA256SUMS.

What's Changed

• docs: developer guide, contributing workflow, clippy 1.95 fixes by @ilanh in #1
• feat(lint): readable multi-line output with context and category icons by @ilanh in #2
• feat: readable output for scan, diff-logs and generate by @ilanh in #3
• chore(ci): weekly upstream-compat build against OpenShell latest release and main by @ilanh in #4
• chore(ci): test against newest OpenShell prerelease by @ilanh in #5
• chore: issue templates, PR template and labels script by @ilanh in #6
• feat(scan): read @openshell comments in Ruby, Rust, Java and more; report unscanned languages by @ilanh in #21
• fix(lint): suggest one egress directive per host; fix invalid skill example by @ilanh in #22
• feat(diff-logs): report connections that are allowed and then fail as TLS trust problems by @ilanh in #24
• fix(scan): exclude patterns work with ./ paths, dead and regex patterns are reported by @ilanh in #25
• fix(diff-logs): find the repo root from subdirectories and keep probe scripts out of placement by @ilanh in #26
• fix(generate): wrap long reasons instead of truncating them by @ilanh in #27
• feat(providers): [providers] expect for dynamically looked-up credentials by @ilanh in #28
• fix(providers): relocatable profile paths in providers.sh; note prover limit for tls=skip by @ilanh in #29
• feat(generate): scaffold provider profile skeletons for unmapped credentials by @ilanh in #30
• feat(lint): stop reporting URL literals in docstrings, messages and help text by @ilanh in #31
• feat(generate): propose fs read for image directories outside the baseline (--image) by @ilanh in #32
• chore(release): tag-driven release workflow, packaging and installer by @ilanh in #33
• test: keep the golden policy independent of the crate version by @ilanh in #35
• chore: release v0.1.0-rc.1 by @ilanh in #34

New Contributors

• @ilanh made their first contribution in #1

Full Changelog: https://github.com/ilanh/openshell-annotate/commits/v0.1.0-rc.1