v0.4.1

Changes

• Update cgr.dev/chainguard/go:latest Docker digest to 595c4dd @renovate[bot] (#88)
• Update dependency @anthropic-ai/claude-code to v2.1.168 @renovate[bot] (#87)
• Update dataaxiom/ghcr-cleanup-action action to v1.2.2 @renovate[bot] (#86)
• feat: add shuck dependabot fix (+ cooldown in scaffold); skill/doc fixes @justanotherspy (#85)
• feat: add shuck dependabot to audit and scaffold Dependabot configs @justanotherspy (#84)
• Update dependency node to v24 @renovate[bot] (#83)
• Update dependency python to 3.14 @renovate[bot] (#82)
• Update trufflesecurity/trufflehog action to v3.95.5 @renovate[bot] (#80)
• Update dependency @anthropic-ai/claude-code to v2.1.167 @renovate[bot] (#79)
• Configure Renovate @renovate[bot] (#78)
• Always-allow shuck MCP tools + harden registry token handling @justanotherspy (#77)
• feat(target): inspect specific run attempts and PR "Checks" tab links @justanotherspy (#74)
• feat: surface check-run annotations and classify failed steps @justanotherspy (#73)
• fix(semver): compare numeric prerelease fields numerically @justanotherspy (#72)
• docs: tighten CLAUDE.md for accuracy, contribution, and dogfooding @justanotherspy (#71)
• Make the README more concise and accurate @justanotherspy (#70)
• Bake the shuck skill, MCP server, and agent guidance into the repo @justanotherspy (#69)
• Make report exit codes opt-in gating and harden plugin-validate install @justanotherspy (#68)
• Add GitHub Actions policies and full repository settings to shuck compliance @justanotherspy (#67)
• Gate release drafting on CI passing on main @justanotherspy (#64)
• Fix image referrer-tag pins, security false all-clear, and MCP TTL docs @justanotherspy (#63)
• Publish release images to GHCR behind the release approval; registry fallback for scopeless tokens @justanotherspy (#61)
• Add ruleset support to shuck compliance and sync compliance.yml @justanotherspy (#62)
• Add weekly GHCR cleanup workflow @justanotherspy (#60)
• docs: document shuck image (GHCR digest pinning) in the README @justanotherspy (#59)

Maintenance

• build(deps): bump chainguard/go from 4ad8c4b to 8333b6b in the docker group @dependabot[bot] (#75)
• build(deps): bump the github-actions group with 2 updates @dependabot[bot] (#76)
• build(deps): bump chainguard/go from 9b52ed6 to 4ad8c4b in the docker group @dependabot[bot] (#65)
• build(deps): bump the github-actions group with 2 updates @dependabot[bot] (#66)