v1.18.0
felixgeelhaar
Felix Geelhaar
This tag was signed with the committer’s verified signature.
felixgeelhaar
Felix Geelhaar
Changelog
- a431961 chore(ci): use reusable nox-remediate workflow (#102)
- f1b7c05 chore(deps): bump astro from 6.2.1 to 6.4.8 in /docs (#93)
- ebb992d chore(deps): bump esbuild, @astrojs/starlight and astro in /docs (#101)
- 2a26e12 chore(deps): bump js-yaml from 4.1.1 to 4.3.0 in /docs (#98)
- 65f45dc chore(deps): bump vite, @astrojs/starlight and astro in /docs (#100)
- a51ce93 ci(lint): exclude FP-prone gosec rules new in golangci v2.12.2
- 60d109a ci(security): drop gosec — nox owns code-level security (#90)
- af51a00 ci(security): enable nox taint-analysis SAST
- c6c7d71 ci: add .nox.yaml — exclude entropy-rule false positives
- f922055 ci: adopt shared reusable Go CI workflow
- 3777ba9 ci: bump actions/checkout from 6.0.2 to 7.0.0 (#94)
- 57b4310 ci: bump actions/setup-go from 6.4.0 to 6.5.0 (#96)
- 81368f7 ci: nox-remediate (replaces dependabot)
- 79acf3a ci: remove dependabot (superseded by nox-remediate)
- 46324e1 ci: remove dependabot (superseded by nox-remediate)
- 1dbaee1 deps: bump go.klarlabs.de/mcp from 1.15.0 to 1.20.0 (#97)
- b6b3ea5 deps: bump golang.org/x/net from 0.54.0 to 0.55.0 (#99)
- 6272205 deps: bump golang.org/x/sys from 0.45.0 to 0.46.0 (#91)
- 2cbfdbe docs(changelog): v1.18.0 — security & correctness hardening (#110)
- 619c49b fix(ci): merge gosec excludes into existing settings block
- 460751c fix(diff): parse changed files with -z to survive core.quotePath (#104)
- fa60c26 fix(gate): close fail-open paths in coverage evaluation (#103)
- 0967654 fix(mcp): harden server trust boundary (#108)
- 76f6dfe fix(resolver): correct ** matching and fail closed on zero-match domains (#106)
- 8676394 fix(robustness): cap parser input, guard JaCoCo overflow, bound subprocess output & fix Windows path matching (#109)
- 1414e99 fix(security): enforce path containment in annotation scan and config extends (#105)
- e8314c0 fix(vcs): harden GitHub/GitLab/Bitbucket API clients (#107)
- 4dd7b88 fix: WriteString(fmt.Sprintf) -> fmt.Fprintf (QF1012)
- e0694c5 fix: publish MCP server under io.github.klarlabs-studio namespace (#83)
- e4c67dc style: adopt org golangci bar and clear new findings