Skip to content

v0.4.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Jul 02:36
Immutable release. Only release title and notes can be modified.
v0.4.0
e5e02b7

0.4.0 (2026-07-06)

Features

  • binding: add inline $schema binding scope and fix workspace-scope paths (712887c)
  • config: make render and remote-fetch timeouts user-configurable (3d7b797)
  • maturity: compute the maturity score from repo facts, not judgement (d6e31ff)
  • maturity: fold in the live OpenSSF Scorecard grade as an optional cached check (a76083a)
  • preview: built-in pure-JS fallback renderer when Python is unavailable (9bfbbe0)
  • reliability: fall back to stale cached schema when remote is unreachable (326170e)

Bug Fixes

  • ci: retry the draft-release check for a GitHub propagation race (1d3ffe2)
  • maturity: make maturity:check deterministic across Node versions (c7a8251)
  • security: harden the OpenSSF fetch against CodeQL taint findings (3b82db3)
  • security: sanitise OSSF response fields with a charset allowlist (2e65105)
Assets 4
Loading