v1.2.1

What's Changed

• fix: return infrastructure exit code for report write failures by @imneeteeshyadav98 in #213
• fix: correct WH-005 fail-open webhook wording by @imneeteeshyadav98 in #216
• docs: explain EKS exec-auth requirements for containers by @imneeteeshyadav98 in #217

Full Changelog: v1.2.0...v1.2.1

v1.2.0

What's Changed

• docs: add v1.1.0 context-aware gating demo by @imneeteeshyadav98 in #198
• docs: add v1.1.0 context-aware gating demo by @imneeteeshyadav98 in #199
• fix: gate EKS provider preconditions by upgrade context by @imneeteeshyadav98 in #200
• feat: add add-on operational impact metadata by @imneeteeshyadav98 in #201
• fix: gate add-on incompatibilities by operational impact by @imneeteeshyadav98 in #202
• feat: add explicit impact scopes to non-blocking findings by @imneeteeshyadav98 in #203
• test: document current rollback finding semantics by @imneeteeshyadav98 in #204
• fix: require disruption evidence for rollback blockers by @imneeteeshyadav98 in #205
• fix(deps): update x/text to address GO-2026-5970 by @imneeteeshyadav98 in #206
• fix: validate API evidence target for rollback by @imneeteeshyadav98 in #207
• fix: validate findings cluster identity for rollback by @imneeteeshyadav98 in #208
• fix: validate findings freshness for rollback by @imneeteeshyadav98 in #209
• fix: validate rollback findings input document by @imneeteeshyadav98 in #210
• fix: preserve blocker exit code for hard rollback ineligibility by @imneeteeshyadav98 in #211
• docs: update release history and rollback status for v1.2.0 by @imneeteeshyadav98 in #212

Full Changelog: v1.1.0...v1.2.0

v1.1.0

What's Changed

• demo: add v1.0.0 launch video pipeline by @imneeteeshyadav98 in #186
• security: resolve open Dependabot alerts (vite/vitest/esbuild dev too… by @imneeteeshyadav98 in #187
• fix: redact cluster name in public launch media by @imneeteeshyadav98 in #188
• demo: add standalone LinkedIn v1 launch teaser pipeline by @imneeteeshyadav98 in #190
• docs: add v1.0.0 launch demo to README by @imneeteeshyadav98 in #189
• Demo/linkedin v2 title legibility by @imneeteeshyadav98 in #191
• docs: add five-minute KubePreflight testing guide by @imneeteeshyadav98 in #193
• fix: downgrade deprecated master label finding to warning by @imneeteeshyadav98 in #195
• feat: make upgrade gating context-aware by @imneeteeshyadav98 in #196

Full Changelog: v1.0.0...v1.1.0

v1.0.0-rc.3

What's Changed

• fix: five bugs found by the real SEC-TRUST-002 live EKS execution by @imneeteeshyadav98 in #180
• fix: resolve Console v1 accessibility audit findings by @imneeteeshyadav98 in #181

Full Changelog: v1.0.0-rc.2...v1.0.0-rc.3

v1.0.0

What's Changed

• Docs/add real cluster demo gif by @imneeteeshyadav98 in #136
• Docs/add live eks demo by @imneeteeshyadav98 in #137
• feat: add --redact-sensitive-identifiers flag (SEC-ARTIFACT-001) by @imneeteeshyadav98 in #138
• fix: extend redaction to compare output, migrate live-eks demo to nat… by @imneeteeshyadav98 in #139
• test: lock redaction release verification by @imneeteeshyadav98 in #140
• fix: redact API compatibility summary resources by @imneeteeshyadav98 in #141
• feat: add version command and build provenance (REL-TRUST-001) by @imneeteeshyadav98 in #142
• fix: inject release provenance via ldflags, add v-prefixed GHCR alias… by @imneeteeshyadav98 in #143
• test: add standalone-account-ID redaction and exhaustive leak gate (S… by @imneeteeshyadav98 in #145
• ci: verify published release artifacts, not the repo build (REL-TRUST… by @imneeteeshyadav98 in #146
• security: add GitHub-native security baseline by @imneeteeshyadav98 in #147
• security: add container scanning and scorecard hardening by @imneeteeshyadav98 in #153
• fix: use valid Trivy action release reference by @imneeteeshyadav98 in #155
• fix: upgrade Trivy action to a safe version, add regression guard by @imneeteeshyadav98 in #156
• fix: resolve shellcheck findings actionlint now surfaces in CI by @imneeteeshyadav98 in #158
• fix: scope Scorecard publishing permissions by @imneeteeshyadav98 in #159
• fix: publish the v-prefixed GHCR alias correctly by @imneeteeshyadav98 in #160
• ci: add published installation matrix (KP-V1-INSTALL-001) by @imneeteeshyadav98 in #161
• fix: publish this module under its real GitHub import path by @imneeteeshyadav98 in #162
• chore: pin validate-published-action.yml to v0.17.0-install-matrix by @imneeteeshyadav98 in #163
• fix: cross-platform install-matrix verifier bugs found by v0.17.0's r… by @imneeteeshyadav98 in #164
• fix: continue-on-error on scan Action smoke step in validate-publishe… by @imneeteeshyadav98 in #165
• feat: add false-positive exemption governance by @imneeteeshyadav98 in #166
• feat: add false-positive exemption governance (KP-QUALITY-001A) by @imneeteeshyadav98 in #167
• refactor: govern existing false-positive exemptions by @imneeteeshyadav98 in #168
• refactor: migrate existing exemptions to governance registry (KP-QUALITY-001B) by @imneeteeshyadav98 in #169
• test: add exemption spoofing regression suite by @imneeteeshyadav98 in #170
• test: add exemption spoofing and near-match regressions (KP-QUALITY-001C) by @imneeteeshyadav98 in #171
• ci: enforce false-positive exemption governance by @imneeteeshyadav98 in #172
• ci: enforce false-positive exemption governance (KP-QUALITY-001D) by @imneeteeshyadav98 in #173
• docs: finalize false-positive governance (KP-QUALITY-001E) by @imneeteeshyadav98 in #174
• feat: define v1 compatibility contract by @imneeteeshyadav98 in #175
• perf: complete v1 performance and scale hardening (KP-PERF-001) by @imneeteeshyadav98 in #176
• test: add live EKS released-artifact smoke (SEC-TRUST-002) by @imneeteeshyadav98 in #177
• test: accept release version metadata in live EKS smoke by @imneeteeshyadav98 in #178
• fix: rollback plan/assess double-prefix --assessment-out with --output-dir by @imneeteeshyadav98 in #179
• fix: five bugs found by the real SEC-TRUST-002 live EKS execution by @imneeteeshyadav98 in #180
• fix: resolve Console v1 accessibility audit findings by @imneeteeshyadav98 in #181
• chore: pin validate-published-action.yml to v1.0.0-rc.3 by @imneeteeshyadav98 in #182
• chore: pin validate-published-action.yml to v1.0.0 by @imneeteeshyadav98 in #184
• docs: prepare README for v1.0.0 by @imneeteeshyadav98 in #185

Full Changelog: v0.14.0...v1.0.0

v1.0.0-rc.2

What's Changed

• test: accept release version metadata in live EKS smoke by @imneeteeshyadav98 in #178
• fix: rollback plan/assess double-prefix --assessment-out with --output-dir by @imneeteeshyadav98 in #179

Full Changelog: v1.0.0-rc.1...v1.0.0-rc.2

v1.0.0-rc.1

What's Changed

• fix: continue-on-error on scan Action smoke step in validate-publishe… by @imneeteeshyadav98 in #165
• feat: add false-positive exemption governance by @imneeteeshyadav98 in #166
• feat: add false-positive exemption governance (KP-QUALITY-001A) by @imneeteeshyadav98 in #167
• refactor: govern existing false-positive exemptions by @imneeteeshyadav98 in #168
• refactor: migrate existing exemptions to governance registry (KP-QUALITY-001B) by @imneeteeshyadav98 in #169
• test: add exemption spoofing regression suite by @imneeteeshyadav98 in #170
• test: add exemption spoofing and near-match regressions (KP-QUALITY-001C) by @imneeteeshyadav98 in #171
• ci: enforce false-positive exemption governance by @imneeteeshyadav98 in #172
• ci: enforce false-positive exemption governance (KP-QUALITY-001D) by @imneeteeshyadav98 in #173
• docs: finalize false-positive governance (KP-QUALITY-001E) by @imneeteeshyadav98 in #174
• feat: define v1 compatibility contract by @imneeteeshyadav98 in #175
• perf: complete v1 performance and scale hardening (KP-PERF-001) by @imneeteeshyadav98 in #176
• test: add live EKS released-artifact smoke (SEC-TRUST-002) by @imneeteeshyadav98 in #177

Full Changelog: v0.17.1-install-matrix...v1.0.0-rc.1

v0.17.1-install-matrix

What's Changed

• fix: cross-platform install-matrix verifier bugs found by v0.17.0's r… by @imneeteeshyadav98 in #164

Full Changelog: v0.17.0-install-matrix...v0.17.1-install-matrix

v0.17.0-install-matrix

What's Changed

• ci: add published installation matrix (KP-V1-INSTALL-001) by @imneeteeshyadav98 in #161
• fix: publish this module under its real GitHub import path by @imneeteeshyadav98 in #162
• chore: pin validate-published-action.yml to v0.17.0-install-matrix by @imneeteeshyadav98 in #163

Full Changelog: v0.16.2-security-trust...v0.17.0-install-matrix

v0.16.2-security-trust

What's Changed

• fix: publish the v-prefixed GHCR alias correctly by @imneeteeshyadav98 in #160

Full Changelog: v0.16.1-security-trust...v0.16.2-security-trust