v0.5.0

Important

Replacement artifacts published 2026-08-11. The original Intel macOS
archive was signed and notarized but malformed, and aborted under Rosetta on
macOS 26. The replacement is built with Apple's native toolchain and verified
on both architectures. If you installed v0.5.0 before this replacement, run
brew update && brew reinstall oliver-kriska/scribe/scribe or download it
again from this release.

Changelog

• bcc5c66 chore(deps): Bump github.com/mattn/go-sqlite3 from 1.14.48 to 1.14.49
• fe8da98 chore(deps): Bump github/codeql-action/upload-sarif
• 58cdf8c chore(deps): Bump ossf/scorecard-action from 2.4.3 to 2.4.4
• 324b740 chore(deps): bump codeql-action init+analyze to v4.37.4 together
• 7955f54 chore(deps): bump kong to v1.16.1 and syft to v1.51.0
• 917d16b chore(release): include signing fix in v0.5.0
• 112edcb chore(release): v0.5.0 — pull adapters and safer onboarding
• 077ec58 docs(setup): drop the redundant --yes from every init --check recipe
• fe079ca feat(pull): add Pinboard pull-adapter framework with scope + tag filters
• 7037b4d feat(pull): add public_only filter to skip private bookmarks
• 977e060 feat(pull): add tags_mode any|all knob (review feedback)
• 9551181 feat(site): align every freshness stamp on one date
• 9afa6f8 feat(site): sync Amp handshake and signed macOS claims — evergreen, no version pins
• c590a67 fix(pull): stop the token leak, queue injection, redirect leak, and lost checkpoints
• a588f19 fix(release): ignore setup-zig cache
• 6625bdb fix(release): keep checksum signing on cosign 2
• 7fb4f4c fix(release): sign macOS artifacts with native Apple tools
• 7b80390 fix(site-sync): audit setup.md for version pins too
• 0708acc fix: make onboarding checks safe across platforms