v0.6.0
First published release. Resolves the full-repo orchestrator self-audit backlog (#97) and hardens the release/supply-chain surface.
Added
- Per-locale root layouts (route groups
(en)/(de)) so/deserves<html lang="de">; a German Open Graph image and per-route Twitter/OG metadata. scripts/bump-version.mjs+RELEASING.md: single-source the release tag pinned in the orchestrator andllms.txt; aCHECKSUMS.txtverification gate (sha256sum -c) in CI.- Escape-to-close + focus-return on the mobile menu; reduced-motion handling for smooth scrolling.
Changed
- English copy/metadata now say "GitHub issues in German or English"; audit count derived from
AUDIT_COUNT. - CI hardening: GitHub Actions pinned to commit SHAs,
concurrency+timeout-minuteson every workflow,promptsNode sourced from.nvmrc; Dependabot grouping/labels;engines.nodealigned to>=22; vitest 4 (0 vulnerabilities); HSTS response header. - Fixed the
check-prompts.mjslegacy-severity guard and added a self-test.
Full changelog: https://github.com/marcelrapold/auditor/blob/main/CHANGELOG.md