PR #167 Preview (v0.4.9-pr167)

PR #167 preview build. Test using the one-line installer from the PR comment.

PR #162 Preview (v0.4.9-pr162)

PR #162 preview build. Test using the one-line installer from the PR comment.

PR #154 Preview (v0.4.9-pr154)

PR #154 preview build. Test using the one-line installer from the PR comment.

REST API Extension (0.4.9)

• chore(deps): upgrade all dependencies to latest (#143) (70c8655)
• ci: Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#111) (0d153e2)
• ci: Bump codecov/codecov-action from 6.0.0 to 7.0.0 (#126) (7392a1d)
• ci: Bump actions/checkout from 6.0.2 to 7.0.0 (#137) (20bd6b2)
• ci: Bump pnpm/action-setup from 6.0.8 to 6.0.9 (#129) (95d32ec)
• deps: upgrade all dependencies to latest (#138) (b843cec)
• chore: update registry for v0.4.8 (edcdf03)

PR #147 Preview (v0.4.9-pr147)

PR #147 preview build. Test using the one-line installer from the PR comment.

PR #138 Preview (v0.4.8-pr138)

PR #138 preview build. Test using the one-line installer from the PR comment.

PR #137 Preview (v0.4.8-pr137)

PR #137 preview build. Test using the one-line installer from the PR comment.

REST API Extension (0.4.8)

• fix: update cosign to use --bundle format (deprecated --output-signature) (#123) (de4d6f3)
• chore: update registry for v0.4.7 (04de06a)

REST API Extension (0.4.7)

• fix: add subtest to cspell word list (9194d3d)
• fix: add missing cspell words to fix spell check CI (63ed5e9)
• fix: move nolint directive inline to satisfy gofmt (e0b882e)
• fix: suppress tparallel on NoRaceCondition test with explanation (9934ebd)
• fix: add godoc to New*Command stubs, use t.Cleanup in concurrent test (eeded69)
• fix: update CI workflows for go1.26.4 and Node.js 22 (e86ae94)
• fix: bump Go to 1.26.4, upgrade x/net to v0.55.0, refresh pnpm lockfile (1765b86)
• fix: address code review findings - constants, flags, security docs, tests (1de4775)
• refactor: DI, table-driven factories, service layer extraction (8ae4795)
• ci: Bump pnpm/action-setup from 5.0.0 to 6.0.8 (b42062f)
• ci: Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (5deef3b)
• deps: Bump @types/node from 25.3.0 to 25.9.0 in /web (81ea352)
• deps: Bump astro from 5.17.3 to 6.3.4 in /web (31c83d7)
• ci: Bump actions/setup-node from 6.3.0 to 6.4.0 (3e1672d)
• ci: Bump actions/cache from 5.0.4 to 5.0.5 (73d556e)
• ci: Bump actions/github-script from 8.0.0 to 9.0.0 (445c6d3)
• fix: quality improvements, perf, a11y, and web refactoring (cc41734)
• test: strengthen assertions, add coverage, and integration tests (b47709d)
• ci: workflow improvements, version alignment, and docs fixes (0d78edc)
• chore(web): remove unused autoprefixer, postcss deps and redundant sr-only CSS (33f92d9)
• fix(ci): prevent script injection via expression interpolation in workflows (e45ef91)
• fix(deps): update Go and Node.js dependencies to latest stable versions (2aad79c)
• ci: Bump codecov/codecov-action from 5.5.2 to 6.0.0 (b7824f8)
• ci: Bump actions/setup-go from 6.3.0 to 6.4.0 (90d4003)
• ci: Bump sigstore/cosign-installer from 3.9.1 to 4.1.1 (b4e5d91)
• ci: Bump anchore/sbom-action from 0.23.1 to 0.24.0 (0d894c9)
• ci: Bump actions/cache from 5.0.3 to 5.0.4 (b884911)
• chore: update registry for v0.4.6 (7820eba)

REST API Extension (0.4.6)

• fix: reorder release steps - registry before cosign/SBOM (0c3b3c0)