Skip to content

pubkit 0.14.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Oct 14:03
· 289 commits to main since this release
v0.14.3
75a8345
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.14.3 - 2026-10-27

Commit eb5dd58253e4; release record pub:sha2-256:gkkmdenkhcx5xyhlhsvigjobhdhcl27jttyg2hp3rqqtliakdupq.

Added

  • pubkit board grades every repository protected.json and governed.json list, public and private, A to E for quality, security and delivery, into board.json and a static index.html whose grade breakdowns open on hover or focus. Quality and Security start at SonarQube Cloud's letters and Delivery at A, each losing a letter per notch by src/pubkit/board/rules.json (or --rules FILE), never below E; the overall grade is the worst. One connector per source (lists, github, actions, sonarcloud, scorecard, live) records every call, and board.json links each fact and notch to its calls; --record and --replay keep and reuse the responses. A service declares its health URL, live-test and deploy workflows in pubkit.json's live block. The reusable workflow board.yml runs it with a read-only token and keeps board.json as an artifact for 90 days

Install:

pubkit init --kind=rust|utility|service, or pubkit sync, then pubkit lock: the lock pins the v0.14.3 wheel by its sha256
Assets 3
Loading