v0.49.0

What's Changed

• perf(goldmark): arena Heading/ListItem + research the parity-vs-gomarklint gap by @jeduden in #614
• docs(bench): lazy-parse research + staged plans to beat gomarklint in parity by @jeduden in #615
• refactor(arch): extract buildpathutil to break build→rules DIP violation by @jeduden in #616
• security: clear Dependabot alert #2 (critical wish SCP path traversal) + harden VS Code dev deps by @jeduden in #618
• test(index): make TestParallelBuildSpeedup tolerant of CI contention by @jeduden in #620
• docs: complete the gomarklint comparison (benchmark + linter-comparison page) by @jeduden in #613
• docs(plan/145): record mise PR rejection and blocked-upstream status by @jeduden in #612
• perf: eliminate per-line allocation copies and separator allocs in five rules by @jeduden in #619
• ci: upload security-audit SARIF to code scanning by @jeduden in #621
• Spike: block-only parse cost vs gomarklint (plan 2606141901) by @jeduden in #622
• docs: fill PGO catalog title by @LIghtJUNction in #624
• Add GitHub Actions distribution channel by @jeduden in #623
• Remove deprecated engine wrappers for checker and lint by @jeduden in #625
• Add per-function unit tests for secreview/report.go by @jeduden in #627
• Fix action.yml for GitHub Marketplace publish validation by @jeduden in #629

New Contributors

• @LIghtJUNction made their first contribution in #624

Full Changelog: v0.48.0...v0.49.0