0.2.0-rc.1

Images

Image	Digest
ghcr.io/lockdep/stackradar-server:0.2.0-rc.1	sha256:dbff62731ffd301e58913f2da0b85dce4914ef45d6e99dc852b86b6834cf5b59
ghcr.io/lockdep/stackradar-client:0.2.0-rc.1	sha256:48f78c689136429cb9ffbfa46756ec0b68de160c358b6ed032c9e5c96d706a62

Built for linux/amd64 and linux/arm64, signed with cosign (keyless). Verify with:

cosign verify \
  --certificate-identity-regexp '^https://github.com/lockdep/stackradar/.github/workflows/publish.yaml@refs/tags/v0.2.0-rc.1$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ghcr.io/lockdep/stackradar-server:0.2.0-rc.1

The attached stackradar-*-0.2.0-rc.1.cdx.json files are CycloneDX SBOMs of each image; checksums.txt lists the digests and the files' hashes.

Schema migrations

None since v0.1.0. This release rolls back by setting the previous tag.

Upgrading

• Helm: helm upgrade stackradar oci://ghcr.io/lockdep/helm-charts/stackradar -n stackradar -f my-values.yaml --set server.image.tag=0.2.0-rc.1,client.image.tag=0.2.0-rc.1 until the chart's appVersion moves to 0.2.0-rc.1.
• Docker Compose: docker compose pull && docker compose up -d, or STACKRADAR_TAG=0.2.0-rc.1 docker compose up -d to pin it.

---

What's Changed

Dependency Updates 🤖

• Bump @primer/primitives from 11.9.0 to 11.10.0 in /client by @dependabot[bot] in #39
• Bump react-icons from 5.5.0 to 5.7.0 in /client by @dependabot[bot] in #38
• Bump knip from 6.40.0 to 6.41.0 in /client by @dependabot[bot] in #37
• Bump posthog-js from 1.415.1 to 1.438.7 in /client by @dependabot[bot] in #32
• Bump semver and @types/semver in /server by @dependabot[bot] in #29
• Bump drizzle-orm from 0.45.2 to 0.45.4 in /server by @dependabot[bot] in #31
• Bump drizzle-kit from 0.31.8 to 0.31.11 in /server by @dependabot[bot] in #33
• Bump express from 5.2.1 to 5.3.0 in /server by @dependabot[bot] in #34
• Bump typescript-eslint from 8.71.0 to 8.71.1 in /server by @dependabot[bot] in #36
• Bump actions/setup-node from 4 to 7 by @dependabot[bot] in #30

Other Changes

• Document branch, commit and pull request conventions by @mariusjor in #27
• Forbid agent attribution lines in commits and pull requests by @mariusjor in #28
• Score the repository with OpenSSF Scorecard on every merge by @mariusjor in #40
• Upgrade eslint-config-next to 16.4.0 and satisfy its new hooks rules by @mariusjor in #41
• Vendor the OSV schema with the Raspberry Pi OS ecosystem by @mariusjor in #42
• Pin every workflow action by commit SHA and drop the syft curl|sh by @mariusjor in #43
• Clear the vulnerable transitive dependencies from both lockfiles by @mariusjor in #44

New Contributors

• @mariusjor made their first contribution in #27

Full Changelog: v0.1.0...v0.2.0-rc.1