v0.8.0

[0.8.0] - 2026-07-07

Added

• feat: sign vaults with ed25519 so tampering by a repo-writer is detectable
• feat: add scriptable rotation listing

Fixed

• fix and reorganize README command reference
• fix: report not authorized instead of tamper warning for non-recipient keys

Other

• build(deps): bump rust-lang/crates-io-auth-action from 1.0.4 to 1.0.5
• build(deps): bump napi from 3.9.2 to 3.9.3
• build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0
• serialize VHS demo publish with a concurrency group
• build(deps): bump napi from 3.9.3 to 3.9.4
• build(deps): bump napi-derive from 3.5.6 to 3.5.7
• build(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1
• gate full VHS rendering on tags, keep dress rehearsal on PRs
• build(deps): bump actions/setup-python from 6.2.0 to 6.3.0
• build(deps): bump napi-derive from 3.5.7 to 3.5.9
• build(deps): bump github/codeql-action/upload-sarif
• build(deps): bump clap_complete from 4.6.5 to 4.6.7
• build(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3
• build(deps): bump napi from 3.9.4 to 3.10.3
• build(deps): bump rand from 0.10.1 to 0.10.2
• build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0
• build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3
• build(deps): bump codeql-action/init to 4.36.3 to match analyze
• ci: group codeql-action updates so init and analyze bump together
• build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0
• build(deps): bump astral-sh/ruff-action from 4.0.0 to 4.1.0
• ci: reuse the rehearsal release binary and cache the vhs image
• chore: release v0.8.0
• build(deps): bump crossbeam-epoch to 0.9.20 to clear a security advisory