v0.55.0

What's Changed

• perf: audit against high-performance-go.md, fix 5 measured hot paths by @jeduden in #770
• perf: audit against high-performance-go.md, fix 5 measured hot paths by @jeduden in #774
• perf: audit against high-performance-go.md, fix top 5 hot-path violations by @jeduden in #775
• perf: fix top 5 hot-path issues from a high-performance-go.md audit by @jeduden in #780
• perf: fix top 5 high-performance-go.md violations found by codebase audit by @jeduden in #782
• perf: audit against high-performance-go.md, fix 5 confirmed hot paths by @jeduden in #785
• perf: fix top 5 high-performance-go.md violations by @jeduden in #786
• perf: fix top 5 high-performance-go.md violations from a 3-agent audit by @jeduden in #783
• perf: audit against high-performance-go.md, fix top 5 new hot-path issues by @jeduden in #788
• perf: fix 4 high-performance-go.md violations found by codebase audit by @jeduden in #794
• perf: consolidate #776, #779, #790, #793 with manual conflict resolution by @jeduden in #800
• chore(deps): bump markdownlint-cli2 from 0.23.1 to 0.23.2 in /docs/research/benchmarks/npm by @dependabot[bot] in #778
• fix(foreignregion): resolve MDS073 rule-ID collision with slidevstructure by @jeduden in #791
• docs(security): scope zero-egress claim and add MDS072 SSRF caveat by @jeduden in #771
• feat(init): APM coexistence — --apm flag, kind pack, and guide by @jeduden in #772
• chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #787
• docs(security): 2026-08-14 post-audit diff review — clean window by @jeduden in #795
• docs(security): 2026-07-31 post-audit diff review — no new findings by @jeduden in #781
• docs(security): 2026-08-07 post-audit diff review — zero new findings by @jeduden in #789
• docs(security): consolidate the 2026-07-31, 08-07 and 08-14 post-audit reviews by @jeduden in #801
• feat(mds072): SSRF guard and per-run egress ceiling by @jeduden in #769
• test(cmd/mdsmith): add dedicated unit tests for runCheck/runFix by @jeduden in #784
• perf: fix 5 highest-impact violations of the high-performance-go guideline by @jeduden in #802
• plan: vendor go-runewidth as a patched fork, bump tinygo to 0.41.1 by @jeduden in #804
• feat(runewidth): vendor go-runewidth as a patched fork, remove eager LUT by @jeduden in #807
• ci(tinygo): bump pinned tinygo 0.39.0 → 0.41.1 by @jeduden in #808
• perf: fix top 5 high-performance-go.md violations by @jeduden in #811
• build(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by @dependabot[bot] in #812
• refactor(githooks): split by responsibility; record 2026-08-23 arch audit by @jeduden in #815
• test(pkg/mdsmith): add dedicated unit test for readBoundedFrontMatterSource by @jeduden in #805
• feat(metrics,rules): add MET007 word-frequency metric and MDS074 over-repetition rule by @jeduden in #806
• refactor(cmd/mdsmith): move list-query subcommand logic into query.go by @jeduden in #809
• test(rules): add dedicated unit tests for occurrence and slidevstructure private helpers by @jeduden in #810
• docs(security): 2026-08-28 post-audit diff review by @jeduden in #816
• feat(schema): let filename: accept a list of globs (OR match) by @jeduden in #818
• perf: cut check allocations 21% and CPU 6% across five hot-path fixes by @jeduden in #813
• fix(security): remove proxy blind spot from MDS072 guarded HTTP client by @jeduden in #819

Full Changelog: v0.54.0...v0.55.0