v0.7.0
0.7.0 (2026-04-09)
✨ Features
- build: add hve-core release pipeline with dependency SBOM and signing artifacts (#420) (2ff839a)
- build: enforce strict warnings across all linters (#392) (b75e217)
- evaluation: add fuzz testing infrastructure and property-based tests (#416) (d97d42c)
- infrastructure: add optional ADLS Gen2 data lake storage account (#398) (3bb9012)
- settings: add HVE Core extension to workspace and devcontainer recommendations (#226) (f0735d8)
🐛 Bug Fixes
- docs: fix broken links, harden Docusaurus config, and integrate CI workflow (#430) (ea99997)
- scripts: join shellcheck version output before -match to populate $Matches (#432) (8768e76)
- scripts: map unmapped ShellCheck severity levels and harden version parsing (#434) (1e95a17)
- scripts: resolve ShellCheck SC2034 and enable source-path resolution (#443) (04438ea)
🔧 Miscellaneous
- deps-dev: bump basic-ftp from 5.2.0 to 5.2.1 (#429) (438660a)
- deps: bump cryptography from 46.0.6 to 46.0.7 (#425) (2366647)
Artifact Verification
All release artifacts include Sigstore provenance attestations. Verify with the GitHub CLI:
# Download the source archive
gh release download v0.7.0 --repo microsoft/physical-ai-toolchain --pattern 'source-v0.7.0.tar.gz'
# Verify build provenance
gh attestation verify source-v0.7.0.tar.gz --repo microsoft/physical-ai-toolchain
# Verify SBOM attestation
gh attestation verify source-v0.7.0.tar.gz --repo microsoft/physical-ai-toolchain --predicate-type https://spdx.dev/Document