v0.4.0

Changelog

• 7e177a9: docs: add v0.3.0 install note (@KofTwentyTwo)
• cff8435: docs: plan init tui wizard (@KofTwentyTwo)
• 5a66996: docs: refine init tui plan (@KofTwentyTwo)
• fa1b86d: feat(init): persist include patterns (@KofTwentyTwo)
• 4773596: feat(init): wire tui collector (@KofTwentyTwo)
• ef70f64: merge: init include config slice (@KofTwentyTwo)
• f80ab90: feat(init): add source preview engine (@KofTwentyTwo)
• ca3479e: merge: init preview engine slice (@KofTwentyTwo)
• 1bfddf8: merge: init tui shell slice (@KofTwentyTwo)
• 44d4986: feat(init): add pane-based TUI wizard (@KofTwentyTwo)
• 4e3561e: fix(#32): include globs honor ** via shared gitignore matcher (@KofTwentyTwo)
• bafa281: refactor(#29): unify Answers->Config behind one translator (@KofTwentyTwo)
• ddcc51d: feat(#29): seed init answers from repo detection (@KofTwentyTwo)
• 45dcfd9: feat(#29): pure form state machine with live validation (@KofTwentyTwo)
• a6cc331: feat(#29): adaptive panel layout planner (@KofTwentyTwo)
• 09c8174: feat(#29): pure adaptive view rendering for init form (@KofTwentyTwo)
• 0031b00: feat(#29): single-form init wizard with adaptive live preview (@KofTwentyTwo)
• 32b44e5: docs(#29): record init redesign completion in session state (@KofTwentyTwo)
• 6051a36: docs(#35): spec audit summary + group-by report options (@KofTwentyTwo)
• c3755f7: feat(#35): add pure GroupFiles + ParseGroupBy for audit grouping (@KofTwentyTwo)
• dd4b34b: feat(#35): RenderOptions for summary + grouped views across all formats (@KofTwentyTwo)
• b28d245: feat(#35): wire --summary and --group-by audit flags + document them (@KofTwentyTwo)
• 48fd159: feat(#35): attributable policy violations (which license/rule/file) in all formats (@KofTwentyTwo)
• daef9c3: feat(#35): findings + totals/percentages + riskLevel parity across text/markdown/json (@KofTwentyTwo)
• 29c7108: feat(#35): per-group risk markers, (no-header) rename, --sort key|count (@KofTwentyTwo)
• 9638910: feat(#35): per-group license breakdown, --depth directory grouping (@KofTwentyTwo)
• 83df640: docs(#35): document audit risk/attribution/findings/sort/depth enhancements (@KofTwentyTwo)
• b43e362: fix(#35): unify (no-header) token, unknown-risk for headerless groups, full JSON under --summary (@KofTwentyTwo)
• 366ffec: feat(#35): --only filter to list problem files (missing|unknown|copyleft|violations) (@KofTwentyTwo)
• bbba9d2: docs(#35): document --only filter and JSON-always-full behavior (@KofTwentyTwo)
• ce192ca: feat(#35): exclude tool's own .license-tool.yaml from source coverage (@KofTwentyTwo)
• 2822d86: feat(#35): policy-aware group risk (@KofTwentyTwo)
• 56c3e94: docs(#35): document self-config exclusion, policy-aware risk, and decisions (@KofTwentyTwo)
• 3852c91: fix(#35): harden group risk under --only; review-driven follow-ups (@KofTwentyTwo)
• 7159bc1: docs(#35): close punch list; record review follow-ups and PR readiness (@KofTwentyTwo)
• 194fb0e: fix(#31): resolve ambiguous license aliases to unresolved instead of guessing (@KofTwentyTwo)
• 20a0cd0: fix(#34): remove the no-op --quiet/--verbose flags (@KofTwentyTwo)
• 05157dd: fix(#33): refuse to overwrite a symlinked license file (@KofTwentyTwo)
• 6497f0b: fix(#30): confine license-header detection to contiguous comment lines (@KofTwentyTwo)
• 472d78b: docs: track the six open PRs (#29/#30/#31/#33/#34/#35) and review notes (@KofTwentyTwo)
• c035b8b: Merge feature/GH-35-audit-summary-reports (#35): audit summary + group-by reporting (@KofTwentyTwo)
• e116c60: Merge feature/GH-29-init-tui-wizard (#29): init full TUI wizard (@KofTwentyTwo)
• d4c7231: Merge feature/GH-31-spdxnorm-no-guess (#31): stop guessing SPDX ids (@KofTwentyTwo)
• 5f11b5a: Merge feature/GH-34-quiet-verbose-flags (#34): remove no-op flags (@KofTwentyTwo)
• e1e4563: Merge feature/GH-33-symlink-license (#33): refuse symlinked LICENSE (@KofTwentyTwo)
• a14dee2: Merge feature/GH-30-detect-overmatch (#30): confine header detection (@KofTwentyTwo)
• 9cf0068: style: gofmt commands_test.go after merge conflict resolution (@KofTwentyTwo)
• c32a656: docs: changelog for v0.4.0; add RELEASES.md release runbook (@KofTwentyTwo)
• fe7dbf7: Release v0.4.0 (@KofTwentyTwo)

v0.3.0

Install

brew install --cask KofTwentyTwo/tap/license-tool

Added

• Added first-class header support for Perl, PowerShell, R, Makefile, TOML, and Batch files.
• Added conservative shebang-based type detection for extensionless scripts.
• Added GitHub issue templates, a pull request template, support guidance, and refreshed security-policy documentation.

Changed

• Aligned init/apply/license SPDX validation with the licenses that can actually be rendered by the bundled SPDX data.
• Validated policy required, allow, and deny entries as exact SPDX identifiers, matching the current exact-match policy engine.
• Extended dependency audit discovery to nested manifests while preserving ignore and exclude behavior.
• Made Gradle tool-tier dependency resolution report an explicit unsupported reason.
• Pinned release workflow actions and GoReleaser, and updated release packaging to publish the Homebrew cask.

Fixed

• Preserve leading Go build constraints, CSS @charset rules, and markup doctypes before inserted headers so apply does not silently change build selection, stylesheet encoding, or browser rendering mode.
• Preserve Python coding= and coding: pragmas before inserted headers.
• Centralized header sentinel and placement logic so audit and render paths agree on preserve-first rules.
• Made the license command use the same write safety gates and commit support as apply.
• Scoped apply/license commits to files touched by the license run so unrelated dirty working-tree changes are not staged.
• Made apply honor include and gitignore scope controls before writing files.
• Rendered unified diffs for dry-run apply and license runs, including JSON diff entries only when present.
• Restored CLI error output and documented exit-code behavior.
• Made check --fail-on override policy fail conditions, including repeated and comma-separated flag values.
• Honored audit/check --output controls, rendered check reports, and bound the documented --no-deps flag.
• Rejected invalid --resolve-deps values instead of silently falling back to ondisk.

v0.2.1

Changelog

• f4a111f: fix: preserve shebang universally so headers never precede #! (#5) (@KofTwentyTwo)

v0.2.0

Changelog

• 35df685: fix(release): write Homebrew formula under Formula/ (brews directory) ( <>)
• ce4edf7: ci: bump golangci-lint-action v9, goreleaser-action v7 (dependabot) ( <>)
• 0670cb0: v0.2.0: init wizard + audit findings-summary (#4) (@KofTwentyTwo)

v0.1.1

Changelog

• 566d6aa: build: set go directive to 1.24 (match deps + golangci-lint, unblock CI) ( <>)
• fe408a3: ci: bump golangci-lint-action to v8 for v2 config schema ( <>)
• 069ced4: test: pin git init -b main in gitutil tests (CI defaults to master) ( <>)
• 96b087d: docs: changelog for v0.1.1 ( <>)

v0.1.0

Changelog

• 26082c9: fix: satisfy golangci-lint (errcheck exclusions, var shadow, error naming) (James Maes jmaes@dmdbrands.com)
• fcc6717: test: 100% coverage suite, CI coverage gate, release scaffolding (James Maes jmaes@dmdbrands.com)
• 7ebffeb: feat: license-tool audit + apply with SPDX/REUSE engine and scaffolding (James Maes jmaes@dmdbrands.com)